last executing test programs: 6.775234015s ago: executing program 3 (id=934): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x1c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params]}, 0x1c}}, 0x0) 6.596488348s ago: executing program 3 (id=935): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.98879739s ago: executing program 3 (id=936): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x3dba, 0x81, 0x0, 0x5}]}) syz_open_dev$swradio(&(0x7f0000002300), 0x1, 0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000100)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='ext4\x00', 0x800000, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000580)={0x4, 0xb, 0x1, "8940aa244d9e0ddf4bae49023188b828468153df7b3e2ef4d9cc9a02ebafa89b", 0x56555959}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='addr=127.0.0.1,soft,timeo']) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) io_uring_enter(r7, 0x242e, 0x1007dcf, 0x84, &(0x7f0000000140)={[0x401]}, 0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r7}) 4.95067432s ago: executing program 2 (id=937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000000500)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440), 0x1000a) sendfile(r4, r5, &(0x7f0000000080)=0x11, 0x7fff) 4.824583893s ago: executing program 0 (id=938): mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:04.0/resource\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) syz_io_uring_setup(0x38c0, &(0x7f00000005c0)={0x0, 0x800fffb, 0x3000, 0xffffffff, 0xc7, 0x0, r0}, 0x0, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 4.017652524s ago: executing program 2 (id=939): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20048850) 3.997209884s ago: executing program 0 (id=940): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) 3.718310148s ago: executing program 2 (id=941): socket$packet(0x11, 0x3, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28012, r0, 0x23719000) 3.717529208s ago: executing program 0 (id=942): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 3.612321719s ago: executing program 1 (id=943): mmap$IORING_OFF_SQ_RING(0x110c230000, 0xdcab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(0x0, 0x10000, 0x5b) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) listen(r2, 0xd) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.499321021s ago: executing program 0 (id=944): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, 0x0, 0x0, 0x8015) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.365737713s ago: executing program 1 (id=945): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r3, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x9e, &(0x7f0000000b40)={{0x12, 0x1, 0x201, 0x48, 0xcf, 0xb, 0x10, 0x19d2, 0x1297, 0x8215, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c, 0x2, 0x8, 0x5, 0x20, 0x9, "", [{{0x9, 0x4, 0x79, 0x8, 0x0, 0xc7, 0x49, 0x55, 0x7d}}, {{0x9, 0x4, 0x51, 0x80, 0xa, 0xdb, 0x75, 0x72, 0x66, [], [{{0x9, 0x5, 0x0, 0x8, 0x10, 0xfc, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x1, 0x4, 0x68}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x4, 0x9, 0x7}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0xd7, 0x10, 0x4}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x2, 0x2, 0x9}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x1, 0xf, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x21, 0x1}]}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x1, 0x6, 0xc, [@generic={0x2, 0x3}]}}, {{0x9, 0x5, 0x3, 0xab86983d5e27b31e, 0x40, 0x4, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xf1, 0x8}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x0, 0x1a, 0x25}}]}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001400)={0xa, 0x6, 0x0, 0x3, 0x23, 0xf9, 0xff, 0x3}, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x44004) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x700}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r3, 0x0, 0x20008011) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) 3.262656335s ago: executing program 0 (id=946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f00000006c0)="9bfa8418b805c071b3f09fb3cc104472d9ee93a7456ad6ae24c334a300ad63957c536761cf91c8cb83650bdc8d61f4f8398caad288736fb9dd54a1ee49299c8b8200644d99585ea82a3f0504fc15ca09b7"}) 2.988625768s ago: executing program 0 (id=947): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r1) r5 = fcntl$dupfd(r0, 0x406, r3) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902"], 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) 2.672556053s ago: executing program 2 (id=948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000000500)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440), 0x1000a) sendfile(r4, r5, &(0x7f0000000080)=0x11, 0x7fff) 2.16784653s ago: executing program 1 (id=949): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20048850) 2.119217511s ago: executing program 2 (id=950): set_mempolicy(0x2, &(0x7f0000000040)=0x6, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.961683693s ago: executing program 1 (id=951): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) 1.961581793s ago: executing program 2 (id=952): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28012, r1, 0x23719000) select(0x0, 0x0, 0x0, 0x0, 0x0) 1.545225418s ago: executing program 3 (id=953): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268", 0x5}], 0x2}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 1.412724381s ago: executing program 1 (id=954): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, 0x0, 0x0, 0x8015) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.347211041s ago: executing program 3 (id=955): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 61.50612ms ago: executing program 3 (id=956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003800), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) 0s ago: executing program 1 (id=957): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405', 0xb) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) close(r3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. [ 82.517043][ T5766] cgroup: Unknown subsys name 'net' [ 82.655047][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.349406][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.075820][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.083667][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.097296][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.105011][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.112989][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.121645][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.130259][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.137866][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.145658][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.155172][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.163332][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.182700][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.188047][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.196947][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.201419][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.212489][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.222165][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.240232][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.247877][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.255484][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.263488][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.276795][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.285295][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.292841][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.767718][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 86.843365][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 86.923978][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 86.984688][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.994764][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.002684][ T5777] bridge_slave_0: entered allmulticast mode [ 87.011213][ T5777] bridge_slave_0: entered promiscuous mode [ 87.046661][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 87.069292][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.077133][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.084376][ T5777] bridge_slave_1: entered allmulticast mode [ 87.093385][ T5777] bridge_slave_1: entered promiscuous mode [ 87.176176][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.200357][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.216602][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.223802][ T5778] bridge_slave_0: entered allmulticast mode [ 87.238183][ T5778] bridge_slave_0: entered promiscuous mode [ 87.248047][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.255239][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.262963][ T5778] bridge_slave_1: entered allmulticast mode [ 87.271384][ T5778] bridge_slave_1: entered promiscuous mode [ 87.297701][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.405979][ T5777] team0: Port device team_slave_0 added [ 87.448989][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.465912][ T5777] team0: Port device team_slave_1 added [ 87.508483][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.515761][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.530797][ T5781] bridge_slave_0: entered allmulticast mode [ 87.541117][ T5781] bridge_slave_0: entered promiscuous mode [ 87.552853][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.562692][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.570357][ T5781] bridge_slave_1: entered allmulticast mode [ 87.578531][ T5781] bridge_slave_1: entered promiscuous mode [ 87.588708][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.627960][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.635176][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.644282][ T5779] bridge_slave_0: entered allmulticast mode [ 87.652281][ T5779] bridge_slave_0: entered promiscuous mode [ 87.687646][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.694653][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.721531][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.735698][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.755956][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.789680][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.801762][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.809335][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.817947][ T5779] bridge_slave_1: entered allmulticast mode [ 87.825468][ T5779] bridge_slave_1: entered promiscuous mode [ 87.868153][ T5778] team0: Port device team_slave_0 added [ 87.899116][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.911359][ T5778] team0: Port device team_slave_1 added [ 87.935733][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.948567][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.997289][ T5777] hsr_slave_0: entered promiscuous mode [ 88.003803][ T5777] hsr_slave_1: entered promiscuous mode [ 88.013791][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.044426][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.051654][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.077895][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.123807][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.130939][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.157103][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.185045][ T5779] team0: Port device team_slave_0 added [ 88.194540][ T5781] team0: Port device team_slave_0 added [ 88.203971][ T5781] team0: Port device team_slave_1 added [ 88.243725][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.249367][ T5793] Bluetooth: hci0: command tx timeout [ 88.250891][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.282859][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.296330][ T5779] team0: Port device team_slave_1 added [ 88.311426][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.319038][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.329350][ T5793] Bluetooth: hci1: command tx timeout [ 88.351253][ T5793] Bluetooth: hci2: command tx timeout [ 88.356959][ T5793] Bluetooth: hci3: command tx timeout [ 88.363432][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.440364][ T5778] hsr_slave_0: entered promiscuous mode [ 88.447215][ T5778] hsr_slave_1: entered promiscuous mode [ 88.453450][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.462034][ T5778] Cannot create hsr debugfs directory [ 88.469677][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.476828][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.507417][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.520609][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.527880][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.553847][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.685466][ T5779] hsr_slave_0: entered promiscuous mode [ 88.692746][ T5779] hsr_slave_1: entered promiscuous mode [ 88.699426][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.707666][ T5779] Cannot create hsr debugfs directory [ 88.718620][ T5781] hsr_slave_0: entered promiscuous mode [ 88.728396][ T5781] hsr_slave_1: entered promiscuous mode [ 88.734628][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.742437][ T5781] Cannot create hsr debugfs directory [ 89.029339][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.068504][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.089005][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.132613][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.245272][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.267997][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.281367][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.292100][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.401965][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.428746][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.443504][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.461471][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.536896][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.547968][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.570290][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.583609][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.612003][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.661347][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.692819][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.700365][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.760457][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.771509][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.778817][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.874303][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.916353][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.954116][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.961338][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.973107][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.980303][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.993892][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.023356][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.053661][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.060913][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.090156][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.105085][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.112322][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.155929][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.163292][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.197322][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.204529][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.331406][ T5793] Bluetooth: hci0: command tx timeout [ 90.402155][ T5779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.412744][ T5793] Bluetooth: hci3: command tx timeout [ 90.418074][ T5089] Bluetooth: hci1: command tx timeout [ 90.426933][ T5793] Bluetooth: hci2: command tx timeout [ 90.457005][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.591547][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.767756][ T5777] veth0_vlan: entered promiscuous mode [ 90.799802][ T5777] veth1_vlan: entered promiscuous mode [ 90.924848][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.949111][ T5777] veth0_macvtap: entered promiscuous mode [ 90.987561][ T5777] veth1_macvtap: entered promiscuous mode [ 91.016264][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.031905][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.067470][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.084166][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.112056][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.121531][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.133177][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.143080][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.217432][ T5778] veth0_vlan: entered promiscuous mode [ 91.262208][ T5778] veth1_vlan: entered promiscuous mode [ 91.293743][ T5779] veth0_vlan: entered promiscuous mode [ 91.361007][ T5779] veth1_vlan: entered promiscuous mode [ 91.367770][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.375814][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.403781][ T5781] veth0_vlan: entered promiscuous mode [ 91.462130][ T5781] veth1_vlan: entered promiscuous mode [ 91.488378][ T5778] veth0_macvtap: entered promiscuous mode [ 91.500130][ T5778] veth1_macvtap: entered promiscuous mode [ 91.509661][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.537028][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.566150][ T5779] veth0_macvtap: entered promiscuous mode [ 91.601627][ T5779] veth1_macvtap: entered promiscuous mode [ 91.611065][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.623295][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.635131][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.646494][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.660692][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.675422][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.703430][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.712528][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.721350][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.730225][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.750709][ T5781] veth0_macvtap: entered promiscuous mode [ 91.783293][ T5781] veth1_macvtap: entered promiscuous mode [ 91.823505][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.848097][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.863159][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.874607][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.894392][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.955258][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.978995][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.007609][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.026810][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.038750][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.051559][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.066128][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.075801][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.088694][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.102874][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.114789][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.124885][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.139936][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.150750][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.166081][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.182829][ T9] cfg80211: failed to load regulatory.db [ 92.204818][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.293225][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.331446][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.349094][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.349120][ T5852] syz.2.7[5852]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.360410][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.379968][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.392880][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.404763][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.413413][ T5793] Bluetooth: hci0: command tx timeout [ 92.442534][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.450671][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.471085][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.482446][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.493504][ T5089] Bluetooth: hci1: command tx timeout [ 92.499069][ T5785] Bluetooth: hci3: command tx timeout [ 92.504625][ T5793] Bluetooth: hci2: command tx timeout [ 92.510744][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.519630][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.592908][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.614886][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.782594][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.804717][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.939398][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.952030][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.971848][ T5860] binder: 5859:5860 ioctl 4018620d 0 returned -22 [ 93.084233][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.175895][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.600555][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.610281][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.640606][ T5862] /dev/sg0: Can't lookup blockdev [ 93.746797][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 94.429646][ T28] audit: type=1800 audit(1790243975.051:2): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12" name="file0" dev="overlay" ino=32 res=0 errno=0 [ 94.460026][ T5823] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.497948][ T5793] Bluetooth: hci0: command tx timeout [ 94.577081][ T5793] Bluetooth: hci2: command tx timeout [ 94.582562][ T5793] Bluetooth: hci3: command tx timeout [ 94.625818][ T5886] vlan2: entered promiscuous mode [ 94.631710][ T5886] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 94.664104][ T5823] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.680138][ T5823] usb 3-1: config 0 interface 0 has no altsetting 0 [ 94.702877][ T5823] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 94.736045][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.769777][ T5888] binder: 5887:5888 ioctl 4018620d 0 returned -22 [ 94.778498][ T5823] usb 3-1: config 0 descriptor?? [ 95.210772][ T5894] /dev/sg0: Can't lookup blockdev [ 95.234051][ T5876] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.311775][ T5876] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.440549][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 95.544236][ T5876] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.635749][ T5876] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.694257][ T5876] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 95.761218][ T5876] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 95.887836][ T5876] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.907111][ T5876] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.935732][ T5895] bridge0: port 3(wlan1) entered blocking state [ 95.967731][ T5876] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.976129][ T5895] bridge0: port 3(wlan1) entered disabled state [ 96.021206][ T5876] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.031040][ T5895] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 96.038474][ T5876] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.062104][ T5876] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.209650][ T5895] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 96.285062][ T5895] bridge0: port 3(wlan1) entered blocking state [ 96.291811][ T5895] bridge0: port 3(wlan1) entered forwarding state [ 96.357445][ T1096] bridge0: port 3(wlan1) entered disabled state [ 96.373501][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 96.381998][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 96.390222][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 96.397329][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 96.405855][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 96.413596][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 96.420485][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 96.426156][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.457112][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 96.464100][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 96.517483][ T5907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'. [ 96.626218][ T5904] bridge0: port 3(syz_tun) entered blocking state [ 96.661464][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 96.834422][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.007484][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.036170][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.043694][ T5904] bridge0: port 3(syz_tun) entered disabled state [ 97.071911][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.093907][ T5904] syz_tun: entered allmulticast mode [ 97.101523][ T5904] syz_tun: entered promiscuous mode [ 97.109194][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.110318][ T5904] bridge0: port 3(syz_tun) entered blocking state [ 97.122759][ T5904] bridge0: port 3(syz_tun) entered forwarding state [ 97.135620][ T5909] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.153105][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.160063][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.172768][ T5907] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 97.179005][ T28] audit: type=1800 audit(1790243977.791:3): pid=5907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.20" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 97.182381][ T5907] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 97.231291][ T5907] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 97.365218][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.373751][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.381772][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.388565][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.395351][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.402719][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.411009][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.417913][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.424696][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.433180][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.440019][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.461358][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.473415][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.500956][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.516989][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.529319][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.546380][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.553634][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.577698][ T5823] lua 0003:1E7D:2C2E.0001: unknown main item tag 0x0 [ 97.628249][ T5823] lua 0003:1E7D:2C2E.0001: hidraw0: USB HID v0.20 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 97.666572][ T5823] usb 3-1: USB disconnect, device number 2 [ 97.687440][ T5793] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.889128][ T5916] fido_id[5916]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 97.937115][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.086938][ T5793] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.417926][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.486724][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.619843][ T9] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 98.640791][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.669273][ T9] usb 2-1: Product: syz [ 98.684234][ T9] usb 2-1: Manufacturer: syz [ 98.694718][ T9] usb 2-1: SerialNumber: syz [ 98.714430][ T9] usb 2-1: config 0 descriptor?? [ 98.744013][ T9] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 98.751429][ T9] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 98.765073][ T9] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 99.019097][ T27] usb 2-1: USB disconnect, device number 2 [ 99.075263][ T5931] binder: 5928:5931 ioctl c0306201 0 returned -14 [ 99.405199][ T5935] batman_adv: batadv0: Adding interface: dummy0 [ 99.414222][ T5935] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.441747][ T5935] batman_adv: batadv0: Interface activated: dummy0 [ 99.463918][ T5935] batadv0: mtu less than device minimum [ 99.481119][ T5935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.493395][ T5935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.506030][ T5935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.518673][ T5935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.530612][ T5935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.543210][ T5935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.555632][ T5935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.568291][ T5935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.580655][ T5935] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.766602][ T5793] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.008338][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.166951][ T5793] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.236586][ T5823] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.456629][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 100.470007][ T5823] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.523053][ T5823] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.561961][ T5823] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.583065][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.586975][ T5953] Zero length message leads to an empty skb [ 100.599885][ T5823] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 100.627745][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.683035][ T5823] usb 4-1: config 0 descriptor?? [ 100.921786][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.984918][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.002541][ T5823] usbhid 4-1:0.0: can't add hid device: -71 [ 101.019698][ T5823] usbhid: probe of 4-1:0.0 failed with error -71 [ 101.204525][ T5823] usb 4-1: USB disconnect, device number 2 [ 101.929178][ T5793] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.976590][ T5823] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.086534][ T5793] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.211765][ T5823] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.238217][ T5823] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.258128][ T5793] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.294957][ T5823] usb 4-1: config 0 interface 0 has no altsetting 0 [ 102.477029][ T5823] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 102.494111][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.506237][ T5823] usb 4-1: config 0 descriptor?? [ 102.593739][ T5962] warning: `syz.2.40' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.380622][ T5823] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0002/input/input5 [ 103.497287][ T5823] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 103.581086][ T5823] usb 4-1: USB disconnect, device number 3 [ 103.651000][ T5969] batman_adv: batadv0: Adding interface: dummy0 [ 103.659497][ T5793] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 103.693133][ T5969] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.719284][ T56] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.756063][ T5969] batman_adv: batadv0: Interface activated: dummy0 [ 103.769220][ T5968] fido_id[5968]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 103.913751][ T56] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.924881][ T56] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.946660][ T56] usb 3-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 103.955962][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.145934][ T27] IPVS: starting estimator thread 0... [ 104.256683][ T5975] IPVS: using max 18 ests per chain, 43200 per kthread [ 104.326277][ T5977] binder: 5976:5977 ioctl c0306201 0 returned -14 [ 104.466466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.596475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 106.438295][ T56] rtsx_usb: probe of 3-1:1.0 failed with error -110 [ 106.580398][ T56] usb 3-1: USB disconnect, device number 3 [ 107.106680][ T5994] net_ratelimit: 31 callbacks suppressed [ 107.106693][ T5994] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 108.275200][ T5998] loop3: detected capacity change from 0 to 32768 [ 109.896702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.337794][ T5998] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 111.389427][ T5998] XFS (loop3): AIL initialisation failed: error -12 [ 111.464905][ T5998] XFS (loop3): log mount failed [ 113.059261][ T6025] ======================================================= [ 113.059261][ T6025] WARNING: The mand mount option has been deprecated and [ 113.059261][ T6025] and is ignored by this kernel. Remove the mand [ 113.059261][ T6025] option from the mount to silence this warning. [ 113.059261][ T6025] ======================================================= [ 114.175793][ T6033] binder: 6031:6033 ioctl c0306201 0 returned -14 [ 114.228041][ T6032] mmap: syz.0.61 (6032) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.260290][ T6032] loop0: detected capacity change from 0 to 128 [ 114.448690][ T6036] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 114.956714][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.186551][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 115.196259][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 115.209980][ T6045] /dev/sg0: Can't lookup blockdev [ 115.235071][ T9] usb 1-1: config 0 has no interface number 0 [ 115.265258][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 115.306553][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 115.349089][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.386934][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 115.439285][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.848305][ T9] usb 1-1: config 0 descriptor?? [ 116.388080][ T9] ldusb 1-1:0.55: Interrupt in endpoint not found [ 116.447557][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 116.683547][ T27] usb 1-1: USB disconnect, device number 2 [ 118.598058][ T5793] Bluetooth: hci2: unexpected event for opcode 0x041c [ 119.907967][ T6072] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 121.471792][ T6087] jffs2: notice: (6087) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.648045][ T5793] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 122.657290][ T5793] Bluetooth: hci2: Injecting HCI hardware error event [ 122.665393][ T5089] Bluetooth: hci2: hardware error 0x00 [ 124.736852][ T5089] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 125.544799][ T6113] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 127.996428][ C0] sched: RT throttling activated [ 129.305010][ T6131] binder: 6124:6131 ioctl c0306201 0 returned -14 [ 130.424112][ T6143] XFS (nbd3): Invalid device [./loop0], error=-2 [ 131.324897][ T6150] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 132.026880][ T5783] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.088497][ T6165] process 'syz.3.97' launched './file1' with NULL argv: empty string added [ 132.428541][ T5783] usb 2-1: Using ep0 maxpacket: 16 [ 132.457386][ T5783] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 132.516578][ T5783] usb 2-1: config 0 has no interface number 0 [ 132.546480][ T5783] usb 2-1: config 0 interface 255 has no altsetting 0 [ 132.581423][ T5783] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 132.626792][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.635578][ T5783] usb 2-1: Product: syz [ 132.706593][ T5783] usb 2-1: Manufacturer: syz [ 132.732365][ T5783] usb 2-1: SerialNumber: syz [ 132.767976][ T5783] usb 2-1: config 0 descriptor?? [ 132.788190][ T5783] ums-onetouch 2-1:0.255: USB Mass Storage device detected [ 132.896116][ T6176] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 133.803318][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 133.818098][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.735819][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.744260][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.808232][ T5783] usb 2-1: USB disconnect, device number 3 [ 134.898877][ T6178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.736893][ T6185] XFS (nbd2): Invalid device [./loop0], error=-2 [ 136.517821][ T6200] /dev/sg0: Can't lookup blockdev [ 136.606681][ T5824] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 136.673944][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 136.797777][ T5824] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 136.813459][ T5824] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 136.822874][ T5824] usb 1-1: Product: syz [ 136.835646][ T5824] usb 1-1: Manufacturer: syz [ 136.841773][ T5824] usb 1-1: SerialNumber: syz [ 136.882159][ T5824] usb 1-1: config 0 descriptor?? [ 137.146957][ T5824] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 137.314452][ T6202] loop1: detected capacity change from 0 to 512 [ 137.356015][ T5824] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 137.370664][ T5824] peak_usb 1-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 137.444417][ T6202] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.112: iget: bad i_size value: 38620345925642 [ 137.459587][ T5824] peak_usb: probe of 1-1:0.0 failed with error -71 [ 137.481509][ T5824] usb 1-1: USB disconnect, device number 3 [ 137.555206][ T6202] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.112: couldn't read orphan inode 15 (err -117) [ 137.599016][ T6202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.158352][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.937915][ T6229] loop3: detected capacity change from 0 to 1024 [ 139.954811][ T6229] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.030453][ T6229] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.119: lblock 2 mapped to illegal pblock 2 (length 1) [ 140.052457][ T6229] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 140.061440][ T6229] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.119: lblock 0 mapped to illegal pblock 48 (length 1) [ 140.078604][ T6229] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 140.089024][ T6229] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.119: Failed to acquire dquot type 0 [ 140.101374][ T6229] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 140.130046][ T6229] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.119: mark_inode_dirty error [ 140.144356][ T6229] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 140.161888][ T6229] EXT4-fs (loop3): 1 orphan inode deleted [ 140.185461][ T60] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.217088][ T6229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.244361][ T60] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 140.290955][ T60] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 0 [ 140.641524][ T6236] loop0: detected capacity change from 0 to 32768 [ 140.713938][ T6236] ialloc: diAlloc returned -5! [ 140.897712][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.913999][ T5781] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 140.939783][ T5781] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 140.964294][ T5781] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 141.086615][ T8] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 141.196290][ T6247] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 141.294485][ T8] usb 1-1: config 8 has an invalid interface number: 188 but max is 0 [ 141.324303][ T8] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 141.391572][ T8] usb 1-1: config 8 has no interface number 0 [ 141.415826][ T8] usb 1-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 141.443694][ T8] usb 1-1: config 8 interface 188 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.460848][ T8] usb 1-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.485502][ T8] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 141.495432][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.508092][ T8] usb 1-1: Product: syz [ 141.512949][ T8] usb 1-1: Manufacturer: syz [ 141.525463][ T8] usb 1-1: SerialNumber: syz [ 141.966569][ T28] audit: type=1326 audit(1790244022.561:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.1.131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f277ed9e159 code=0x0 [ 142.091515][ T6254] loop3: detected capacity change from 0 to 8192 [ 142.744146][ T8] vmk80xx 1-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 142.759442][ T8] usb 1-1: USB disconnect, device number 4 [ 142.828970][ T6254] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.772452][ T6291] loop0: detected capacity change from 0 to 512 [ 143.814753][ T28] audit: type=1326 audit(1790244024.411:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.3.143" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x0 [ 144.217702][ T6296] xt_hashlimit: size too large, truncated to 1048576 [ 144.395263][ T6291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.577330][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'. [ 144.587498][ T6291] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.921022][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.833415][ T6320] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 145.840356][ T6320] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 145.849508][ T6320] vhci_hcd vhci_hcd.0: Device attached [ 146.148531][ T6321] vhci_hcd: connection closed [ 146.160773][ T60] vhci_hcd: stop threads [ 146.246639][ T5783] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 146.307708][ T60] vhci_hcd: release socket [ 146.313179][ T60] vhci_hcd: disconnect device [ 146.324451][ T5783] usb 39-1: enqueue for inactive port 0 [ 146.406911][ T5783] vhci_hcd: vhci_device speed not set [ 146.838608][ T28] audit: type=1326 audit(1790244027.461:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.154" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c02f9e159 code=0x0 [ 148.933521][ T6343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.157'. [ 151.034115][ T5786] udevd[5786]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 151.683147][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'. [ 151.995806][ T28] audit: type=1326 audit(1790244032.611:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.2.164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87e039e159 code=0x0 [ 154.927923][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.011992][ T6385] loop1: detected capacity change from 0 to 128 [ 155.030519][ T6385] EXT4-fs (loop1): Test dummy encryption mode enabled [ 155.077985][ T6385] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.120165][ T6385] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.139223][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.180722][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 155.239398][ T9] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 155.263749][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.297945][ T9] usb 1-1: Product: syz [ 155.310219][ T9] usb 1-1: Manufacturer: syz [ 155.331320][ T9] usb 1-1: SerialNumber: syz [ 155.591822][ T9] usb 1-1: 0:2 : does not exist [ 155.630768][ T6385] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 155.681897][ T9] usb 1-1: USB disconnect, device number 5 [ 155.728697][ T5786] udevd[5786]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 155.748597][ T5786] udevd[5786]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 155.787153][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.254517][ T6444] loop2: detected capacity change from 0 to 512 [ 160.264358][ T6444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.273519][ T6444] ext4: Unknown parameter 'fsname' [ 161.156986][ T6425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.667711][ T6467] loop2: detected capacity change from 0 to 4096 [ 163.252037][ T6493] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 164.595576][ T6489] loop2: detected capacity change from 0 to 32768 [ 164.629057][ T6489] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.203 (6489) [ 164.775026][ T28] audit: type=1326 audit(1790244045.391:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.3.213" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x0 [ 165.546978][ T6489] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.576760][ T6489] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 165.585536][ T6489] BTRFS info (device loop2): using free space tree [ 165.774560][ T6537] /dev/sg0: Can't lookup blockdev [ 165.807236][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 165.993762][ T6489] BTRFS info (device loop2): enabling ssd optimizations [ 166.003931][ T6489] BTRFS info (device loop2): auto enabling async discard [ 166.843633][ T5777] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.197916][ T6561] nvmet: adding nsid 1 to subsystem testsubsys [ 167.256885][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 167.344741][ T28] audit: type=1326 audit(1790244047.961:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.3.224" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x0 [ 168.168780][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.186839][ T8] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 168.219195][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.237324][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 168.339116][ T6571] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 168.484395][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 168.514503][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.527855][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.535926][ T8] usb 2-1: Product: syz [ 168.549776][ T8] usb 2-1: Manufacturer: syz [ 169.502102][ T3479] wlan1: Trigger new scan to find an IBSS to join [ 169.525367][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 169.531471][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 169.542038][ T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 169.555661][ T8] cdc_wdm 2-1:1.0: Unknown control protocol [ 169.623862][ T6582] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6582] [ 169.656716][ T6582] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 169.929558][ T8] usb 2-1: USB disconnect, device number 4 [ 171.394209][ T6602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.233'. [ 172.110217][ T28] audit: type=1326 audit(1790244052.691:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.3.235" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x0 [ 172.996710][ T5855] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 173.030011][ T6617] loop0: detected capacity change from 0 to 32768 [ 173.042807][ T6617] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.242 (6617) [ 173.070917][ T6617] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 173.081610][ T6617] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 173.090457][ T6617] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 173.100385][ T6617] BTRFS info (device loop0): use zstd compression, level 3 [ 173.107778][ T6617] BTRFS info (device loop0): force clearing of disk cache [ 173.114954][ T6617] BTRFS info (device loop0): enabling disk space caching [ 173.122149][ T6617] BTRFS info (device loop0): disk space caching is enabled [ 173.132403][ T80] wlan1: Trigger new scan to find an IBSS to join [ 173.199486][ T6617] BTRFS info (device loop0): enabling ssd optimizations [ 173.206800][ T6617] BTRFS info (device loop0): auto enabling async discard [ 173.216000][ T6617] BTRFS info (device loop0): rebuilding free space tree [ 173.225031][ T5855] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 173.254301][ T5855] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.290869][ T6617] BTRFS info (device loop0): disabling free space tree [ 173.298018][ T6617] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 173.308099][ T6617] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.316042][ T5855] usb 2-1: config 0 interface 0 has no altsetting 0 [ 173.346214][ T5855] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 173.396602][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.417838][ T5855] usb 2-1: config 0 descriptor?? [ 173.434352][ T6616] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 174.076021][ T5855] kye 0003:0458:501A.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 174.158383][ T5855] kye 0003:0458:501A.0003: item fetching failed at offset 21/40 [ 174.378028][ T34] wlan1: Creating new IBSS network, BSSID 76:b9:d3:f3:6a:2d [ 174.426354][ T5855] kye 0003:0458:501A.0003: parse failed [ 174.432171][ T5855] kye: probe of 0003:0458:501A.0003 failed with error -22 [ 174.453671][ T5855] usb 2-1: USB disconnect, device number 5 [ 174.481011][ T5778] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 175.296032][ T5786] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop0 scanned by udevd (5786) [ 175.427310][ T6651] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 177.480132][ T28] audit: type=1326 audit(1790244057.961:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.3.249" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x0 [ 177.600017][ T6668] loop2: detected capacity change from 0 to 128 [ 177.712128][ T6668] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 179.016771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 180.202088][ T28] audit: type=1326 audit(1790244060.801:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 180.721805][ T28] audit: type=1326 audit(1790244060.801:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 180.770029][ T28] audit: type=1326 audit(1790244060.801:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f277ed5e98e code=0x7ffc0000 [ 181.446688][ T28] audit: type=1326 audit(1790244060.801:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 181.496972][ T28] audit: type=1326 audit(1790244060.801:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 181.521312][ T28] audit: type=1326 audit(1790244060.801:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 181.545571][ T28] audit: type=1326 audit(1790244060.801:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 181.625733][ T28] audit: type=1326 audit(1790244060.801:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 181.667724][ T28] audit: type=1326 audit(1790244060.801:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.1.255" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 182.414480][ T6700] jffs2: notice: (6700) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 183.506895][ T6699] /dev/sg0: Can't lookup blockdev [ 183.597777][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 183.694493][ T6708] loop2: detected capacity change from 0 to 512 [ 183.850703][ T6708] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 183.867978][ T6708] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 183.910703][ T6708] EXT4-fs (loop2): 1 truncate cleaned up [ 183.926256][ T6708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.394542][ T6718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.268'. [ 185.345182][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.576717][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 185.651579][ T6731] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 185.775789][ T6735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.971086][ T6745] binder: 6741:6745 ioctl c0306201 0 returned -14 [ 186.397734][ T6751] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 187.314124][ T6762] loop2: detected capacity change from 0 to 64 [ 187.937332][ T6776] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: f8:d6:23:99:19:44 [ 188.019954][ T6778] syz.1.291: attempt to access beyond end of device [ 188.019954][ T6778] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 188.129517][ T6778] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 188.155368][ T6778] device-mapper: ioctl: error adding target to table [ 189.564702][ T6803] loop0: detected capacity change from 0 to 8192 [ 189.620948][ T6803] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.768785][ T6823] binder: 6817:6823 ioctl c0306201 0 returned -14 [ 191.052167][ T6826] overlayfs: overlapping lowerdir path [ 191.072469][ T6826] overlayfs: overlapping lowerdir path [ 191.754116][ T6828] Bluetooth: MGMT ver 1.22 [ 192.921489][ T6840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.981941][ T6842] loop2: detected capacity change from 0 to 64 [ 193.525614][ T6852] overlayfs: failed to clone lowerpath [ 193.580605][ T6853] overlayfs: failed to clone lowerpath [ 194.662518][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.684079][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.307300][ T6890] fuse: Bad value for 'fd' [ 201.709539][ T6919] sctp: failed to load transform for md5: -2 [ 202.056711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 204.242993][ T6941] FAULT_INJECTION: forcing a failure. [ 204.242993][ T6941] name failslab, interval 1, probability 0, space 0, times 1 [ 204.255905][ T6941] CPU: 0 PID: 6941 Comm: syz.2.349 Not tainted syzkaller #0 [ 204.263249][ T6941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.273355][ T6941] Call Trace: [ 204.276670][ T6941] [ 204.279637][ T6941] dump_stack_lvl+0x18c/0x250 [ 204.284374][ T6941] ? show_regs_print_info+0x20/0x20 [ 204.289612][ T6941] ? load_image+0x420/0x420 [ 204.294167][ T6941] should_fail_ex+0x394/0x4c0 [ 204.298885][ T6941] should_failslab+0x9/0x20 [ 204.303421][ T6941] slab_pre_alloc_hook+0x59/0x300 [ 204.308518][ T6941] ? proc_thread_self_get_link+0xfc/0x190 [ 204.314281][ T6941] __kmem_cache_alloc_node+0x53/0x250 [ 204.319715][ T6941] ? proc_thread_self_get_link+0xfc/0x190 [ 204.325476][ T6941] kmalloc_trace+0x2a/0xe0 [ 204.329942][ T6941] proc_thread_self_get_link+0xfc/0x190 [ 204.335527][ T6941] ? proc_setup_thread_self+0x2c0/0x2c0 [ 204.341106][ T6941] pick_link+0x6a8/0xdd0 [ 204.345401][ T6941] step_into+0xc18/0xee0 [ 204.349684][ T6941] ? set_root+0x3a0/0x3a0 [ 204.354054][ T6941] ? lookup_fast+0x14a/0x4c0 [ 204.358679][ T6941] ? security_inode_permission+0xb0/0xf0 [ 204.364365][ T6941] link_path_walk+0x748/0xe40 [ 204.369089][ T6941] ? handle_lookup_down+0x130/0x130 [ 204.374327][ T6941] path_lookupat+0x83/0x420 [ 204.378864][ T6941] filename_lookup+0x22d/0x580 [ 204.383668][ T6941] ? hashlen_string+0x110/0x110 [ 204.388566][ T6941] ? strncpy_from_user+0x1a1/0x2f0 [ 204.393741][ T6941] ? getname_flags+0x20a/0x500 [ 204.398539][ T6941] user_path_at_empty+0x42/0x60 [ 204.403446][ T6941] __se_sys_quotactl+0x144/0x980 [ 204.408425][ T6941] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 204.414452][ T6941] ? __x64_sys_quotactl+0xb0/0xb0 [ 204.419521][ T6941] ? lockdep_hardirqs_on+0x98/0x150 [ 204.424753][ T6941] do_syscall_64+0x55/0xb0 [ 204.429205][ T6941] ? clear_bhb_loop+0x40/0x90 [ 204.433918][ T6941] ? clear_bhb_loop+0x40/0x90 [ 204.438630][ T6941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.444573][ T6941] RIP: 0033:0x7f87e039e159 [ 204.449033][ T6941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.468675][ T6941] RSP: 002b:00007f87e1297028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 204.477130][ T6941] RAX: ffffffffffffffda RBX: 00007f87e0625fa0 RCX: 00007f87e039e159 [ 204.485135][ T6941] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffff80000200 [ 204.493142][ T6941] RBP: 00007f87e043506b R08: 0000000000000000 R09: 0000000000000000 [ 204.501166][ T6941] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 204.509167][ T6941] R13: 00007f87e0626038 R14: 00007f87e0625fa0 R15: 00007fff4faa1de8 [ 204.517192][ T6941] [ 204.530201][ T80] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 205.075867][ T6953] loop1: detected capacity change from 0 to 8192 [ 205.109358][ T6953] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.399857][ T6961] loop1: detected capacity change from 0 to 4096 [ 205.456246][ T5823] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 205.497321][ T6961] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 205.504294][ T6961] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 205.516550][ T5824] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 205.552284][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 205.552300][ T28] audit: type=1800 audit(1790244086.171:29): pid=6961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 205.580884][ T6961] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 205.636486][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 205.644789][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 205.667923][ T5823] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 205.701799][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.710786][ T5823] usb 3-1: Product: syz [ 205.715707][ T5823] usb 3-1: Manufacturer: syz [ 205.721266][ T5824] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.731910][ T5824] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 205.745328][ T5823] usb 3-1: SerialNumber: syz [ 205.756141][ T5823] usb 3-1: config 0 descriptor?? [ 205.763396][ T80] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 205.778880][ T5824] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 205.799911][ T5779] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 205.827090][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.835337][ T5779] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 205.857818][ T5824] usb 1-1: Product: syz [ 205.862109][ T5824] usb 1-1: Manufacturer: syz [ 205.876554][ T5779] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 205.885129][ T5823] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 205.910107][ T5824] usb 1-1: SerialNumber: syz [ 205.927936][ T2933] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 206.444505][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.464643][ T5824] usb 1-1: unit 4 not found! [ 206.533323][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.689037][ T5824] usb 1-1: USB disconnect, device number 6 [ 206.894315][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.980168][ T80] usb 3-1: Failed to submit usb control message: -110 [ 207.015226][ T80] usb 3-1: unable to send the bmi data to the device: -110 [ 207.042711][ T80] usb 3-1: unable to get target info from device [ 207.060887][ T80] usb 3-1: could not get target info (-110) [ 207.080570][ T80] usb 3-1: could not probe fw (-110) [ 207.254459][ T6989] loop1: detected capacity change from 0 to 1024 [ 207.266567][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 207.287439][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 207.334733][ T6987] loop0: detected capacity change from 0 to 8192 [ 207.399373][ T6987] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.046888][ T8] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 208.387299][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 208.418317][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.442740][ T9] usb 3-1: USB disconnect, device number 4 [ 208.472539][ T8] usb 2-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.559182][ T8] usb 2-1: config 1 interface 0 has no altsetting 0 [ 208.629577][ T8] usb 2-1: string descriptor 0 read error: -22 [ 208.635981][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.684924][ T28] audit: type=1800 audit(1790244089.301:30): pid=7004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.375" name="ipv4_address" dev="configfs" ino=10098 res=0 errno=0 [ 208.696691][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.752505][ T8] usb 2-1: bad CDC descriptors [ 208.776796][ T28] audit: type=1800 audit(1790244089.331:31): pid=7004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.375" name="ipv4_port" dev="configfs" ino=10099 res=0 errno=0 [ 208.832591][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 208.852412][ T28] audit: type=1800 audit(1790244089.341:32): pid=7004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.375" name="num" dev="configfs" ino=10100 res=0 errno=0 [ 208.964106][ T9] usb 2-1: USB disconnect, device number 6 [ 209.609019][ T7021] loop0: detected capacity change from 0 to 8192 [ 209.643584][ T7021] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.823150][ T7027] loop1: detected capacity change from 0 to 64 [ 209.937830][ T7027] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 209.961439][ T7027] hfs: get root inode failed [ 212.068330][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 213.221770][ T7051] loop1: detected capacity change from 0 to 40427 [ 213.241491][ T7051] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 213.281538][ T7051] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 213.342350][ T7051] F2FS-fs (loop1): Found nat_bits in checkpoint [ 213.499966][ T7051] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 213.516845][ T7051] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 213.698838][ T7050] syz.1.390: attempt to access beyond end of device [ 213.698838][ T7050] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 215.011692][ T7096] i8042 aux 00:02: in use; can't configure [ 215.330146][ T80] kworker/u4:5: attempt to access beyond end of device [ 215.330146][ T80] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 217.228899][ T7104] loop0: detected capacity change from 0 to 512 [ 217.249832][ T7104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.262591][ T7104] ext4: Unknown parameter 'fsname' [ 217.319538][ T5786] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 217.978901][ T7111] loop0: detected capacity change from 0 to 8 [ 218.054026][ T7111] SQUASHFS error: Failed to read block 0x7f8f: -5 [ 218.066553][ T7111] SQUASHFS error: Unable to read metadata cache entry [7f8f] [ 218.074031][ T7111] SQUASHFS error: Unable to read inode 0x7f00011f [ 218.256722][ T28] audit: type=1326 audit(1790244098.871:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.414" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x0 [ 219.176496][ T973] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 219.424306][ T973] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 219.433864][ T973] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 219.446986][ T973] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 219.460355][ T973] usb 1-1: config 1 has no interface number 0 [ 219.468807][ T973] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 219.483813][ T973] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 219.501903][ T973] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 219.515780][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.542990][ T973] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 219.744962][ T973] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 219.816079][ T7133] loop1: detected capacity change from 0 to 8192 [ 219.851665][ T7133] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.249268][ T5822] usb 1-1: USB disconnect, device number 7 [ 220.294206][ T5822] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 221.276628][ T28] audit: type=1326 audit(1790244101.871:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.3.423" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x0 [ 222.014968][ T28] audit: type=1326 audit(1790244102.631:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 222.090744][ T28] audit: type=1326 audit(1790244102.661:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 223.026479][ T28] audit: type=1326 audit(1790244102.661:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 223.146618][ T28] audit: type=1326 audit(1790244102.661:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 223.250102][ T28] audit: type=1326 audit(1790244102.661:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 223.275337][ T28] audit: type=1326 audit(1790244102.661:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 223.299713][ T28] audit: type=1326 audit(1790244102.661:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 223.394584][ T7166] XFS (nbd1): Invalid device [./loop0], error=-2 [ 223.601331][ T28] audit: type=1326 audit(1790244102.671:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 223.736692][ T28] audit: type=1326 audit(1790244102.681:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.3.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 225.577671][ T5824] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 226.257924][ T5824] usb 1-1: too many configurations: 70, using maximum allowed: 8 [ 226.273731][ T5824] usb 1-1: config index 0 descriptor too short (expected 65505, got 72) [ 226.293269][ T5824] usb 1-1: config index 1 descriptor too short (expected 65505, got 72) [ 226.311272][ T7190] loop1: detected capacity change from 0 to 2048 [ 226.322834][ T5824] usb 1-1: config index 2 descriptor too short (expected 65505, got 72) [ 226.342866][ T5824] usb 1-1: config index 3 descriptor too short (expected 65505, got 72) [ 226.362713][ T5824] usb 1-1: config index 4 descriptor too short (expected 65505, got 72) [ 226.385894][ T5824] usb 1-1: config index 5 descriptor too short (expected 65505, got 72) [ 226.409922][ T5824] usb 1-1: config index 6 descriptor too short (expected 65505, got 72) [ 226.425562][ T5824] usb 1-1: config index 7 descriptor too short (expected 65505, got 72) [ 226.446852][ T5824] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 226.451666][ T7190] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 226.468443][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.492034][ T5824] usb 1-1: Product: syz [ 226.504818][ T5824] usb 1-1: Manufacturer: syz [ 226.523734][ T5824] usb 1-1: SerialNumber: syz [ 226.524762][ T7190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.651386][ T7197] sctp: [Deprecated]: syz.3.438 (pid 7197) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.651386][ T7197] Use struct sctp_sack_info instead [ 226.685083][ T2135] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 227.163206][ T7201] loop1: detected capacity change from 0 to 4096 [ 227.353825][ T7201] ntfs3: loop1: ino=b, mi_enum_attr [ 227.401067][ T7201] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 227.493341][ T7201] ntfs3: loop1: Failed to load $Extend (-22). [ 227.528861][ T8] usb 1-1: USB disconnect, device number 8 [ 227.621508][ T7201] ntfs3: loop1: Failed to initialize $Extend. [ 227.825055][ T7201] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 227.932047][ T7201] ntfs3: loop1: ino=1b, mi_enum_attr [ 227.977772][ T7201] ntfs3: loop1: ino=1b, mi_enum_attr [ 228.015716][ T7201] ntfs3: loop1: ino=1b, mi_enum_attr [ 228.257524][ T2135] usb 1-1: Service connection timeout for: 256 [ 228.300433][ T2135] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 228.560527][ T2135] ath9k_htc: Failed to initialize the device [ 229.091509][ T8] usb 1-1: ath9k_htc: USB layer deinitialized [ 229.204290][ T7213] loop0: detected capacity change from 0 to 512 [ 229.230230][ T7213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.259083][ T7217] autofs4:pid:7217:autofs_fill_super: called with bogus options [ 229.278117][ T7213] ext4: Unknown parameter 'fsname' [ 231.244249][ T7237] loop0: detected capacity change from 0 to 64 [ 232.643606][ T7253] ceph: No mds server is up or the cluster is laggy [ 234.645865][ T7271] loop0: detected capacity change from 0 to 64 [ 234.683885][ T7271] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 234.706939][ T7271] hfs: get root inode failed [ 234.734447][ T7271] trusted_key: encrypted_key: insufficient parameters specified [ 235.595338][ T1096] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 236.173640][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'. [ 236.333352][ T7293] loop0: detected capacity change from 0 to 512 [ 236.360020][ T7293] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.408666][ T7293] ext4: Unknown parameter 'fsname' [ 239.350636][ T7314] loop1: detected capacity change from 0 to 64 [ 239.417379][ T7314] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 239.446519][ T7314] hfs: get root inode failed [ 239.552846][ T7314] trusted_key: encrypted_key: insufficient parameters specified [ 239.855664][ T7325] overlayfs: upper fs does not support file handles, falling back to index=off. [ 240.057336][ T7329] netlink: 108 bytes leftover after parsing attributes in process `syz.1.479'. [ 240.311593][ T7333] loop0: detected capacity change from 0 to 512 [ 240.337698][ T7333] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.344435][ T7333] ext4: Unknown parameter 'fsname' [ 241.949875][ T7353] trusted_key: encrypted_key: insufficient parameters specified [ 242.153947][ T28] audit: type=1326 audit(1790244122.731:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.0.487" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c02f9e159 code=0x0 [ 245.433401][ T7378] loop1: detected capacity change from 0 to 512 [ 245.488214][ T7378] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.565332][ T7378] ext4: Unknown parameter 'fsname' [ 246.597344][ T5786] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 248.106481][ T28] audit: type=1326 audit(1790244128.021:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.2.500" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87e039e159 code=0x0 [ 252.536856][ T28] audit: type=1326 audit(1790244133.091:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.1.512" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f277ed9e159 code=0x0 [ 253.130821][ T7456] autofs4:pid:7456:autofs_fill_super: called with bogus options [ 253.650770][ T7459] /dev/sg0: Can't lookup blockdev [ 255.521281][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 256.018161][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.024972][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.282477][ T28] audit: type=1326 audit(1790244136.901:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.3.524" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x0 [ 257.204450][ T7495] loop0: detected capacity change from 0 to 128 [ 259.892245][ T7522] loop1: detected capacity change from 0 to 512 [ 259.922641][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 259.937809][ T7522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.992968][ T7522] ext4: Unknown parameter 'fsname' [ 262.076409][ T28] audit: type=1326 audit(1790244141.671:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.3.534" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x0 [ 263.640939][ T7543] loop0: detected capacity change from 0 to 256 [ 265.014829][ T7561] FAULT_INJECTION: forcing a failure. [ 265.014829][ T7561] name fail_futex, interval 1, probability 0, space 0, times 1 [ 265.028216][ T7561] CPU: 1 PID: 7561 Comm: syz.1.545 Not tainted syzkaller #0 [ 265.035591][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 265.045729][ T7561] Call Trace: [ 265.049064][ T7561] [ 265.052044][ T7561] dump_stack_lvl+0x18c/0x250 [ 265.056806][ T7561] ? show_regs_print_info+0x20/0x20 [ 265.062080][ T7561] ? load_image+0x420/0x420 [ 265.066639][ T7561] ? mark_lock+0x94/0x320 [ 265.071034][ T7561] ? __lock_acquire+0x1336/0x7d80 [ 265.076121][ T7561] should_fail_ex+0x394/0x4c0 [ 265.080880][ T7561] get_futex_key+0x136/0x1030 [ 265.085623][ T7561] ? futex_setup_timer+0xc0/0xc0 [ 265.090617][ T7561] ? verify_lock_unused+0x140/0x140 [ 265.095915][ T7561] futex_wake+0x127/0x4f0 [ 265.100317][ T7561] ? __fget_files+0x28/0x460 [ 265.104982][ T7561] ? futex_wake_mark+0x150/0x150 [ 265.110034][ T7561] do_futex+0x35d/0x3e0 [ 265.114292][ T7561] ? __ia32_sys_get_robust_list+0x110/0x110 [ 265.120245][ T7561] ? __lock_acquire+0x7d80/0x7d80 [ 265.125342][ T7561] __se_sys_futex+0x3a9/0x440 [ 265.130100][ T7561] ? __x64_sys_futex+0xf0/0xf0 [ 265.134927][ T7561] ? __x64_sys_futex+0x21/0xf0 [ 265.139762][ T7561] do_syscall_64+0x55/0xb0 [ 265.144240][ T7561] ? clear_bhb_loop+0x40/0x90 [ 265.148996][ T7561] ? clear_bhb_loop+0x40/0x90 [ 265.153748][ T7561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.159722][ T7561] RIP: 0033:0x7f277ed9e159 [ 265.164191][ T7561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.183865][ T7561] RSP: 002b:00007f277fc1f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 265.192346][ T7561] RAX: ffffffffffffffda RBX: 00007f277f025fa8 RCX: 00007f277ed9e159 [ 265.200372][ T7561] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f277f025fac [ 265.208397][ T7561] RBP: 00007f277f025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 265.216434][ T7561] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 265.224468][ T7561] R13: 00007f277f026038 R14: 00007ffd8d40c380 R15: 00007ffd8d40c468 [ 265.232515][ T7561] [ 265.315670][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 265.826604][ T28] audit: type=1326 audit(1790244146.231:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.3.547" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x0 [ 267.409732][ T3479] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 267.738043][ T7597] capability: warning: `syz.1.553' uses deprecated v2 capabilities in a way that may be insecure [ 267.772316][ T7597] syz_tun: entered allmulticast mode [ 268.200037][ T7605] CIFS: Attempting to mount //127.0.0.1/share [ 268.212675][ T7605] CIFS: VFS: Error connecting to socket. Aborting operation. [ 268.220356][ T7605] CIFS: VFS: cifs_mount failed w/return code = -111 [ 268.511366][ T28] audit: type=1326 audit(1790244149.131:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz.0.558" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c02f9e159 code=0x0 [ 272.076656][ T28] audit: type=1326 audit(1790244152.541:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.3.571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x0 [ 272.590780][ T28] audit: type=1326 audit(1790244153.211:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.572" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e039e159 code=0x7ffc0000 [ 272.694648][ T28] audit: type=1326 audit(1790244153.241:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.572" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e039e159 code=0x7ffc0000 [ 272.791980][ T28] audit: type=1326 audit(1790244153.241:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.572" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e039e159 code=0x7ffc0000 [ 272.882218][ T28] audit: type=1326 audit(1790244153.241:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.572" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e039e159 code=0x7ffc0000 [ 272.967991][ T28] audit: type=1326 audit(1790244153.241:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.572" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e039e159 code=0x7ffc0000 [ 273.086545][ T28] audit: type=1326 audit(1790244153.241:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.572" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f87e039e159 code=0x7ffc0000 [ 273.186542][ T28] audit: type=1326 audit(1790244153.241:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.572" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e039e159 code=0x7ffc0000 [ 273.272334][ T28] audit: type=1326 audit(1790244153.241:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7650 comm="syz.2.572" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e039e159 code=0x7ffc0000 [ 274.124265][ T7681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.582'. [ 275.402993][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 275.403033][ T28] audit: type=1326 audit(1790244155.981:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.2.581" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87e039e159 code=0x0 [ 275.525899][ T7681] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 275.552485][ T7681] block (null): Could not allocate knbd recv work queue. [ 275.759330][ T7681] nbd: failed to add new device [ 275.917558][ T28] audit: type=1326 audit(1790244156.541:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.1.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 276.077957][ T28] audit: type=1326 audit(1790244156.541:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.1.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 276.191291][ T28] audit: type=1326 audit(1790244156.571:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.1.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 276.233042][ T7698] loop0: detected capacity change from 0 to 256 [ 276.275684][ T7698] exfat: Deprecated parameter 'utf8' [ 276.345490][ T28] audit: type=1326 audit(1790244156.571:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.1.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 276.374447][ T28] audit: type=1326 audit(1790244156.571:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.1.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 276.420568][ T28] audit: type=1326 audit(1790244156.591:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.1.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 276.589863][ T28] audit: type=1326 audit(1790244156.591:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.1.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 276.623023][ T7698] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 276.698081][ T28] audit: type=1326 audit(1790244156.591:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.1.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 276.722384][ T28] audit: type=1326 audit(1790244156.591:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.1.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f277ed9e159 code=0x7ffc0000 [ 277.819407][ T7717] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 282.241017][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 282.241055][ T28] audit: type=1326 audit(1790244162.861:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.2.605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87e039e159 code=0x0 [ 283.017309][ T7774] netlink: 92 bytes leftover after parsing attributes in process `syz.3.611'. [ 286.182933][ T28] audit: type=1326 audit(1790244166.771:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7794 comm="syz.3.619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x0 [ 287.210719][ T7813] autofs4:pid:7813:autofs_fill_super: called with bogus options [ 287.729906][ T56] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 287.936267][ T7827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.628'. [ 287.956517][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 287.979289][ T56] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.045949][ T56] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 288.105731][ T56] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 288.166005][ T56] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 288.235263][ T56] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.301049][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 288.329791][ T56] usb 1-1: SerialNumber: syz [ 288.421047][ T7817] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 288.456654][ T7817] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 288.502052][ T56] hub 1-1:1.0: bad descriptor, ignoring hub [ 288.532390][ T56] hub: probe of 1-1:1.0 failed with error -5 [ 288.582278][ T7833] xt_hashlimit: size too large, truncated to 1048576 [ 288.802998][ T7817] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 288.850196][ T7817] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 290.221932][ T56] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 290.313687][ T56] usb 1-1: USB disconnect, device number 9 [ 290.362635][ T56] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 293.814239][ T7885] futex_wake_op: syz.0.645 tries to shift op by 144; fix this program [ 298.828368][ T2933] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 299.184717][ T7955] FAULT_INJECTION: forcing a failure. [ 299.184717][ T7955] name failslab, interval 1, probability 0, space 0, times 0 [ 299.216953][ T7955] CPU: 0 PID: 7955 Comm: syz.0.670 Not tainted syzkaller #0 [ 299.224348][ T7955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 299.234472][ T7955] Call Trace: [ 299.237817][ T7955] [ 299.240807][ T7955] dump_stack_lvl+0x18c/0x250 [ 299.245560][ T7955] ? show_regs_print_info+0x20/0x20 [ 299.250829][ T7955] ? load_image+0x420/0x420 [ 299.255396][ T7955] ? __might_sleep+0xe0/0xe0 [ 299.260055][ T7955] ? __lock_acquire+0x7d80/0x7d80 [ 299.265184][ T7955] should_fail_ex+0x394/0x4c0 [ 299.269934][ T7955] should_failslab+0x9/0x20 [ 299.274515][ T7955] slab_pre_alloc_hook+0x59/0x300 [ 299.279624][ T7955] ? x509_get_sig_params+0x1d5/0x860 [ 299.284985][ T7955] ? x509_get_sig_params+0x1d5/0x860 [ 299.290339][ T7955] __kmem_cache_alloc_node+0x53/0x250 [ 299.295823][ T7955] ? x509_get_sig_params+0x1d5/0x860 [ 299.301181][ T7955] __kmalloc+0xa7/0x240 [ 299.305451][ T7955] x509_get_sig_params+0x1d5/0x860 [ 299.310650][ T7955] ? __asan_memcpy+0x40/0x70 [ 299.315313][ T7955] x509_cert_parse+0x4af/0x7b0 [ 299.320155][ T7955] x509_key_preparse+0x64/0x6c0 [ 299.325097][ T7955] ? down_read+0x1ac/0x2e0 [ 299.329628][ T7955] asymmetric_key_preparse+0xa9/0x140 [ 299.335073][ T7955] __key_create_or_update+0x3a6/0xa60 [ 299.340536][ T7955] ? key_create_or_update+0x60/0x60 [ 299.345801][ T7955] ? bpf_lsm_key_permission+0x9/0x10 [ 299.351166][ T7955] ? lookup_user_key+0xb66/0x1140 [ 299.356266][ T7955] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 299.362325][ T7955] key_create_or_update+0x42/0x60 [ 299.367425][ T7955] __se_sys_add_key+0x34f/0x410 [ 299.372361][ T7955] ? __x64_sys_add_key+0xc0/0xc0 [ 299.377375][ T7955] ? lockdep_hardirqs_on+0x98/0x150 [ 299.382632][ T7955] ? __x64_sys_add_key+0x20/0xc0 [ 299.387668][ T7955] do_syscall_64+0x55/0xb0 [ 299.392148][ T7955] ? clear_bhb_loop+0x40/0x90 [ 299.396889][ T7955] ? clear_bhb_loop+0x40/0x90 [ 299.401633][ T7955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.407634][ T7955] RIP: 0033:0x7f4c02f9e159 [ 299.412114][ T7955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.431908][ T7955] RSP: 002b:00007f4c03f2d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 299.440416][ T7955] RAX: ffffffffffffffda RBX: 00007f4c03225fa0 RCX: 00007f4c02f9e159 [ 299.448456][ T7955] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 299.456490][ T7955] RBP: 00007f4c0303506b R08: ffffffffffffffff R09: 0000000000000000 [ 299.464523][ T7955] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 299.472564][ T7955] R13: 00007f4c03226038 R14: 00007f4c03225fa0 R15: 00007ffdfd705aa8 [ 299.480627][ T7955] [ 299.528441][ T7960] fuse: Unknown parameter 'ÿÿÿÿ0xffffffffffffffff' [ 299.746138][ T7968] x_tables: duplicate underflow at hook 1 [ 301.117731][ T7989] loop1: detected capacity change from 0 to 128 [ 301.197023][ T7989] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.232625][ T7989] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 301.358128][ T7989] EXT4-fs error (device loop1): ext4_validate_block_bitmap:421: comm syz.1.685: bg 0: bad block bitmap checksum [ 301.551882][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.841611][ T8002] FAULT_INJECTION: forcing a failure. [ 301.841611][ T8002] name failslab, interval 1, probability 0, space 0, times 0 [ 302.126679][ T8002] CPU: 1 PID: 8002 Comm: syz.0.688 Not tainted syzkaller #0 [ 302.134123][ T8002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 302.144238][ T8002] Call Trace: [ 302.147568][ T8002] [ 302.150553][ T8002] dump_stack_lvl+0x18c/0x250 [ 302.155300][ T8002] ? show_regs_print_info+0x20/0x20 [ 302.160564][ T8002] ? load_image+0x420/0x420 [ 302.165124][ T8002] ? __lock_acquire+0x7d80/0x7d80 [ 302.170219][ T8002] ? __asan_memset+0x22/0x40 [ 302.174882][ T8002] should_fail_ex+0x394/0x4c0 [ 302.179641][ T8002] should_failslab+0x9/0x20 [ 302.184279][ T8002] slab_pre_alloc_hook+0x59/0x300 [ 302.189391][ T8002] kmem_cache_alloc+0x5a/0x2c0 [ 302.194223][ T8002] ? security_inode_alloc+0x34/0x110 [ 302.199598][ T8002] security_inode_alloc+0x34/0x110 [ 302.204782][ T8002] inode_init_always+0x914/0xc90 [ 302.209788][ T8002] new_inode_pseudo+0x95/0x1d0 [ 302.214612][ T8002] __ns_get_path+0x249/0x5f0 [ 302.219263][ T8002] ns_get_path+0x54/0x90 [ 302.223566][ T8002] proc_ns_get_link+0x16c/0x2d0 [ 302.228475][ T8002] ? proc_ns_instantiate+0xf0/0xf0 [ 302.233655][ T8002] ? bpf_lsm_inode_follow_link+0x9/0x10 [ 302.239265][ T8002] ? security_inode_follow_link+0xb7/0x100 [ 302.245150][ T8002] ? proc_ns_instantiate+0xf0/0xf0 [ 302.250322][ T8002] pick_link+0x666/0xdd0 [ 302.254753][ T8002] step_into+0xc18/0xee0 [ 302.259079][ T8002] ? rcu_read_lock_any_held+0xb4/0x140 [ 302.264642][ T8002] ? rcu_read_lock_bh_held+0x100/0x100 [ 302.270177][ T8002] ? set_root+0x3a0/0x3a0 [ 302.274591][ T8002] ? d_splice_alias+0x114/0x330 [ 302.279520][ T8002] path_openat+0x1656/0x3270 [ 302.284194][ T8002] ? do_filp_open+0x430/0x430 [ 302.288944][ T8002] do_filp_open+0x1f2/0x430 [ 302.293510][ T8002] ? vfs_tmpfile+0x620/0x620 [ 302.298178][ T8002] ? _raw_spin_unlock+0x28/0x40 [ 302.303079][ T8002] ? alloc_fd+0x590/0x640 [ 302.307486][ T8002] do_sys_openat2+0x134/0x1d0 [ 302.312229][ T8002] ? do_sys_open+0xe0/0xe0 [ 302.316707][ T8002] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 302.322756][ T8002] ? lock_chain_count+0x20/0x20 [ 302.327674][ T8002] __x64_sys_openat+0x139/0x160 [ 302.332594][ T8002] do_syscall_64+0x55/0xb0 [ 302.337102][ T8002] ? clear_bhb_loop+0x40/0x90 [ 302.341846][ T8002] ? clear_bhb_loop+0x40/0x90 [ 302.346606][ T8002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.352553][ T8002] RIP: 0033:0x7f4c02f5e98e [ 302.357019][ T8002] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 302.376684][ T8002] RSP: 002b:00007f4c03f2cec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 302.385193][ T8002] RAX: ffffffffffffffda RBX: 00007f4c03f2d6c0 RCX: 00007f4c02f5e98e [ 302.393219][ T8002] RDX: 0000000000000002 RSI: 00007f4c03f2cf90 RDI: ffffffffffffff9c [ 302.401241][ T8002] RBP: 00007f4c0303506b R08: 0000000000000000 R09: 0000000000000000 [ 302.409261][ T8002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.417298][ T8002] R13: 00007f4c03226038 R14: 00007f4c03225fa0 R15: 00007ffdfd705aa8 [ 302.425336][ T8002] [ 304.517486][ T8019] loop0: detected capacity change from 0 to 64 [ 304.595035][ T8019] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 304.620677][ T8019] hfs: get root inode failed [ 307.920676][ T8051] loop0: detected capacity change from 0 to 2048 [ 308.039393][ T8051] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 309.184557][ T8060] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.310832][ T28] audit: type=1800 audit(1790244189.921:83): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.704" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 313.841173][ T8101] smc: net device team0 applied user defined pnetid SYZ2 [ 314.613132][ T8101] smc: removing net device team0 with user defined pnetid SYZ2 [ 314.790714][ T8107] netlink: 108 bytes leftover after parsing attributes in process `syz.3.722'. [ 314.836207][ T8101] team0 (unregistering): Port device team_slave_0 removed [ 315.007958][ T8101] team0 (unregistering): Port device team_slave_1 removed [ 316.857494][ T8132] netlink: 52 bytes leftover after parsing attributes in process `syz.0.727'. [ 318.087045][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.093456][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.168314][ T8136] netlink: 108 bytes leftover after parsing attributes in process `syz.1.731'. [ 323.550971][ T8174] netlink: 108 bytes leftover after parsing attributes in process `syz.0.743'. [ 323.815107][ T8180] Invalid ELF header magic: != ELF [ 323.924608][ T28] audit: type=1326 audit(1790244204.541:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c02f9e159 code=0x7ffc0000 [ 324.046625][ T56] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 324.070832][ T28] audit: type=1326 audit(1790244204.541:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c02f9e159 code=0x7ffc0000 [ 324.166767][ T28] audit: type=1326 audit(1790244204.571:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4c02f5e98e code=0x7ffc0000 [ 324.225915][ T28] audit: type=1326 audit(1790244204.571:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c02f9e159 code=0x7ffc0000 [ 324.282047][ T28] audit: type=1326 audit(1790244204.571:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c02f9e159 code=0x7ffc0000 [ 324.308413][ T56] usb 2-1: Using ep0 maxpacket: 16 [ 324.327167][ T56] usb 2-1: config 32 has an invalid interface number: 64 but max is 0 [ 324.335621][ T28] audit: type=1326 audit(1790244204.571:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4c02f9e159 code=0x7ffc0000 [ 324.349785][ T56] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 324.396455][ T28] audit: type=1326 audit(1790244204.571:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c02f9e159 code=0x7ffc0000 [ 324.408621][ T56] usb 2-1: config 32 has no interface number 0 [ 324.433728][ T56] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 324.444285][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.466643][ T28] audit: type=1326 audit(1790244204.571:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f4c02f9e159 code=0x7ffc0000 [ 324.538224][ T28] audit: type=1326 audit(1790244204.571:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c02f9e159 code=0x7ffc0000 [ 324.602578][ T28] audit: type=1326 audit(1790244204.571:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.0.747" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c02f9e159 code=0x7ffc0000 [ 324.700888][ T8176] loop1: detected capacity change from 0 to 256 [ 324.718475][ T8176] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 324.812256][ T56] usb 2-1: string descriptor 0 read error: -71 [ 324.839330][ T8191] fuse: Unknown parameter 'ÿÿÿÿ0xffffffffffffffff' [ 324.846531][ T56] usb 2-1: Found UVC 0.00 device (0bd3:0569) [ 324.876443][ T56] usb 2-1: No valid video chain found. [ 324.893663][ T56] usb 2-1: USB disconnect, device number 7 [ 325.132381][ T8187] loop0: detected capacity change from 0 to 40427 [ 325.173876][ T8187] F2FS-fs (loop0): heap/no_heap options were deprecated [ 325.186001][ T8187] F2FS-fs (loop0): build fault injection attr: rate: 19, type: 0x7ffff [ 325.750988][ T8207] loop0: detected capacity change from 0 to 64 [ 327.906597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 328.510330][ T8221] fuse: Unknown parameter 'ÿÿÿÿ0x0000000000000003' [ 328.671398][ T8224] file system registered [ 329.627579][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 329.627595][ T28] audit: type=1326 audit(1790244210.251:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.3.765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 329.715536][ T28] audit: type=1326 audit(1790244210.251:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.3.765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 329.786708][ T28] audit: type=1326 audit(1790244210.251:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.3.765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 329.851187][ T28] audit: type=1326 audit(1790244210.251:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.3.765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 329.906437][ T28] audit: type=1326 audit(1790244210.251:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.3.765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 329.990466][ T28] audit: type=1326 audit(1790244210.301:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.3.765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 330.059369][ T28] audit: type=1326 audit(1790244210.301:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.3.765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 330.106563][ T28] audit: type=1326 audit(1790244210.301:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.3.765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 330.156792][ T28] audit: type=1326 audit(1790244210.301:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.3.765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 330.188225][ T1096] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 330.239418][ T28] audit: type=1326 audit(1790244210.301:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.3.765" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a4b9e159 code=0x7ffc0000 [ 332.667712][ T8256] fuse: Unknown parameter 'ÿÿÿÿ0x0000000000000003' [ 335.693524][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 335.693540][ T28] audit: type=1800 audit(1790244216.311:188): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.786" name="ipv4_address" dev="configfs" ino=14453 res=0 errno=0 [ 335.758608][ T28] audit: type=1800 audit(1790244216.371:189): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.786" name="ipv4_port" dev="configfs" ino=14454 res=0 errno=0 [ 335.869885][ T28] audit: type=1800 audit(1790244216.381:190): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.786" name="num" dev="configfs" ino=14455 res=0 errno=0 [ 335.915890][ T28] audit: type=1800 audit(1790244216.411:191): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.786" name="local" dev="configfs" ino=14456 res=0 errno=0 [ 335.936829][ T28] audit: type=1800 audit(1790244216.441:192): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.786" name="ipv4_address" dev="configfs" ino=14459 res=0 errno=0 [ 335.981165][ T28] audit: type=1800 audit(1790244216.441:193): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.786" name="ipv4_port" dev="configfs" ino=14460 res=0 errno=0 [ 338.378232][ T8305] loop1: detected capacity change from 0 to 32768 [ 338.539360][ T8305] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 338.848078][ T5779] ocfs2: Unmounting device (7,1) on (node local) [ 340.184814][ T8339] /dev/sg0: Can't lookup blockdev [ 342.856580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 344.500364][ T5855] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 344.869037][ T5855] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 346.088271][ T8399] ceph: No mds server is up or the cluster is laggy [ 346.097924][ T2135] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 347.227529][ T8414] loop0: detected capacity change from 0 to 512 [ 347.245939][ T8414] EXT4-fs: Ignoring removed oldalloc option [ 347.498439][ T8414] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 347.899616][ T8414] EXT4-fs (loop0): 1 truncate cleaned up [ 348.298380][ T8414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.531877][ T8425] syz.3.829 (8425) used greatest stack depth: 17608 bytes left [ 348.565704][ T8423] syz.3.829 (8423) used greatest stack depth: 17576 bytes left [ 352.229748][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.794934][ T8455] loop0: detected capacity change from 0 to 1024 [ 352.888654][ T8455] syz.0.838: attempt to access beyond end of device [ 352.888654][ T8455] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 352.934477][ T8455] Buffer I/O error on dev loop0, logical block 2889, async page read [ 352.962054][ T8455] syz.0.838: attempt to access beyond end of device [ 352.962054][ T8455] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 353.016643][ T8455] Buffer I/O error on dev loop0, logical block 2889, async page read [ 353.039543][ T28] audit: type=1800 audit(1790244233.661:194): pid=8455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.838" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 354.372387][ T8462] ceph: No mds server is up or the cluster is laggy [ 354.443647][ T2135] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 355.910541][ T8488] loop1: detected capacity change from 0 to 512 [ 356.024270][ T8488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 356.073489][ T8488] EXT4-fs error (device loop1): ext4_quota_enable:7144: comm syz.1.848: inode #1073741824: comm syz.1.848: iget: illegal inode # [ 356.118257][ T8488] EXT4-fs (loop1): Remounting filesystem read-only [ 356.490681][ T8488] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-117, ino=1073741824). Please run e2fsck to fix. [ 356.925728][ T8488] EXT4-fs (loop1): mount failed [ 357.760414][ T8506] loop0: detected capacity change from 0 to 2048 [ 357.802974][ T8506] UDF-fs: bad mount option "00000000000000000000" or missing value [ 358.042044][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 358.052290][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 358.874817][ T8534] ALSA: mixer_oss: invalid OSS volume 'Ø' šòMU¹û«A' [ 359.206283][ T8541] loop1: detected capacity change from 0 to 256 [ 359.245200][ T8541] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 361.679585][ T8527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.843069][ T3479] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 364.829201][ T8577] netlink: 'syz.0.881': attribute type 10 has an invalid length. [ 364.873649][ T8577] batman_adv: batadv0: Interface deactivated: dummy0 [ 364.917844][ T8577] batman_adv: batadv0: Removing interface: dummy0 [ 364.967778][ T8582] netlink: 'syz.0.881': attribute type 10 has an invalid length. [ 366.306580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 366.958126][ T8603] loop0: detected capacity change from 0 to 256 [ 367.056967][ T8603] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 368.573344][ T8615] loop0: detected capacity change from 0 to 32768 [ 368.595284][ T8615] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.895 (8615) [ 368.645889][ T8615] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 368.686796][ T8615] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 368.704425][ T8615] BTRFS info (device loop0): setting nodatasum [ 368.715024][ T8615] BTRFS info (device loop0): force zlib compression, level 3 [ 368.723274][ T8615] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 368.730707][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 368.733927][ T8615] BTRFS info (device loop0): use lzo compression, level 0 [ 368.759313][ T8615] BTRFS info (device loop0): turning on flush-on-commit [ 368.771648][ T8615] BTRFS info (device loop0): enabling auto defrag [ 368.782336][ T8615] BTRFS info (device loop0): max_inline at 4096 [ 368.791487][ T8615] BTRFS info (device loop0): using free space tree [ 368.817137][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 368.827671][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 368.986670][ T8615] BTRFS info (device loop0): enabling ssd optimizations [ 369.130824][ T5778] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 369.461744][ T8617] loop1: detected capacity change from 0 to 32768 [ 369.521627][ T8617] (syz.1.896,8617,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 369.579221][ T8617] (syz.1.896,8617,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 369.632723][ T8617] JBD2: Ignoring recovery information on journal [ 369.717718][ T8617] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 370.734573][ T5779] ocfs2: Unmounting device (7,1) on (node local) [ 371.036618][ T8668] netlink: 'syz.3.909': attribute type 10 has an invalid length. [ 371.108569][ T8668] team0: Port device dummy0 added [ 371.129876][ T8669] netlink: 'syz.3.909': attribute type 10 has an invalid length. [ 371.322923][ T8669] team0: Port device dummy0 removed [ 371.423065][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 371.770923][ T8688] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 373.350709][ T8708] netlink: 'syz.0.922': attribute type 10 has an invalid length. [ 373.556765][ T8711] loop1: detected capacity change from 0 to 64 [ 376.727106][ T2135] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 376.898684][ T8732] netlink: 'syz.3.933': attribute type 10 has an invalid length. [ 377.135316][ T8736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.932'. [ 377.746473][ T2135] usb 2-1: Using ep0 maxpacket: 32 [ 377.791365][ T2135] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.941738][ T2135] usb 2-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 378.696606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 378.797180][ T2135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.817546][ T2135] usb 2-1: Product: syz [ 378.821828][ T2135] usb 2-1: Manufacturer: syz [ 378.829954][ T2135] usb 2-1: SerialNumber: syz [ 378.894310][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.900903][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.102089][ T2135] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input7 [ 379.204761][ T5129] bcm5974 2-1:1.0: could not read from device [ 379.281713][ T5129] bcm5974 2-1:1.0: could not read from device [ 379.302846][ T2135] usb 2-1: USB disconnect, device number 8 [ 379.363311][ T5129] bcm5974 2-1:1.0: could not read from device [ 380.153772][ T8762] netlink: 'syz.0.942': attribute type 10 has an invalid length. [ 380.931354][ T8779] syz.0.947 uses obsolete (PF_INET,SOCK_PACKET) [ 381.688107][ T8778] nfs4: Bad value for 'timeo' [ 381.697918][ T5823] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 381.723889][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 381.843679][ T8789] FAULT_INJECTION: forcing a failure. [ 381.843679][ T8789] name failslab, interval 1, probability 0, space 0, times 0 [ 381.860840][ T8789] CPU: 1 PID: 8789 Comm: syz.1.951 Not tainted syzkaller #0 [ 381.868237][ T8789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 381.878384][ T8789] Call Trace: [ 381.881727][ T8789] [ 381.884711][ T8789] dump_stack_lvl+0x18c/0x250 [ 381.889475][ T8789] ? show_regs_print_info+0x20/0x20 [ 381.894751][ T8789] ? load_image+0x420/0x420 [ 381.899332][ T8789] ? __might_sleep+0xe0/0xe0 [ 381.904051][ T8789] ? __lock_acquire+0x7d80/0x7d80 [ 381.909152][ T8789] should_fail_ex+0x394/0x4c0 [ 381.913915][ T8789] should_failslab+0x9/0x20 [ 381.918495][ T8789] slab_pre_alloc_hook+0x59/0x300 [ 381.923598][ T8789] ? snd_pcm_open+0x3f0/0x600 [ 381.928351][ T8789] __kmem_cache_alloc_node+0x53/0x250 [ 381.933802][ T8789] ? snd_pcm_open+0x3f0/0x600 [ 381.938534][ T8789] kmalloc_trace+0x2a/0xe0 [ 381.943011][ T8789] snd_pcm_open+0x3f0/0x600 [ 381.947568][ T8789] ? snd_pcm_mmap_control_fault+0x270/0x270 [ 381.953508][ T8789] ? do_task_dead+0xd0/0xd0 [ 381.958064][ T8789] snd_pcm_capture_open+0x72/0xe0 [ 381.963140][ T8789] chrdev_open+0x58c/0x600 [ 381.967631][ T8789] ? cd_forget+0x160/0x160 [ 381.972113][ T8789] ? fsnotify_perm+0x3ed/0x5e0 [ 381.976935][ T8789] do_dentry_open+0x880/0x14b0 [ 381.981756][ T8789] ? cd_forget+0x160/0x160 [ 381.986318][ T8789] path_openat+0x284f/0x3270 [ 381.990970][ T8789] ? do_sys_openat2+0xda/0x1d0 [ 381.995781][ T8789] ? __x64_sys_openat+0x139/0x160 [ 382.000856][ T8789] ? verify_lock_unused+0x140/0x140 [ 382.006101][ T8789] ? do_filp_open+0x430/0x430 [ 382.010867][ T8789] do_filp_open+0x1f2/0x430 [ 382.015443][ T8789] ? vfs_tmpfile+0x620/0x620 [ 382.020096][ T8789] ? _raw_spin_unlock+0x28/0x40 [ 382.024998][ T8789] ? alloc_fd+0x590/0x640 [ 382.029381][ T8789] do_sys_openat2+0x134/0x1d0 [ 382.034224][ T8789] ? do_sys_open+0xe0/0xe0 [ 382.038728][ T8789] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 382.044757][ T8789] ? lock_chain_count+0x20/0x20 [ 382.049662][ T8789] ? lock_chain_count+0x20/0x20 [ 382.054558][ T8789] __x64_sys_openat+0x139/0x160 [ 382.059469][ T8789] do_syscall_64+0x55/0xb0 [ 382.063942][ T8789] ? clear_bhb_loop+0x40/0x90 [ 382.068700][ T8789] ? clear_bhb_loop+0x40/0x90 [ 382.073489][ T8789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.079457][ T8789] RIP: 0033:0x7f277ed5e98e [ 382.084010][ T8789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 382.103769][ T8789] RSP: 002b:00007f277fc1eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 382.112260][ T8789] RAX: ffffffffffffffda RBX: 00007f277fc1f6c0 RCX: 00007f277ed5e98e [ 382.120289][ T8789] RDX: 0000000000000002 RSI: 00007f277fc1ec00 RDI: ffffffffffffff9c [ 382.128344][ T8789] RBP: 00007f277fc1ec00 R08: 0000000000000000 R09: 0000000000000000 [ 382.136366][ T8789] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 382.144379][ T8789] R13: 00007f277f026038 R14: 00007f277f025fa0 R15: 00007ffd8d40c468 [ 382.152437][ T8789] [ 382.236585][ T5823] usb 1-1: Using ep0 maxpacket: 32 [ 382.253112][ T5823] usb 1-1: config 0 has no interfaces? [ 382.278772][ T5823] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 382.302038][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.310827][ T5823] usb 1-1: Product: syz [ 382.315066][ T5823] usb 1-1: Manufacturer: syz [ 382.326963][ T5823] usb 1-1: SerialNumber: syz [ 382.347624][ T5823] usb 1-1: config 0 descriptor?? [ 383.735124][ T973] usb 1-1: USB disconnect, device number 10 [ 383.910773][ T8803] [ 383.913198][ T8803] ====================================================== [ 383.920265][ T8803] WARNING: possible circular locking dependency detected [ 383.927378][ T8803] syzkaller #0 Not tainted [ 383.931835][ T8803] ------------------------------------------------------ [ 383.938908][ T8803] syz.1.957/8803 is trying to acquire lock: [ 383.944865][ T8803] ffff88802016c160 (&sb->s_type->i_mutex_key#24){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 383.956456][ T8803] [ 383.956456][ T8803] but task is already holding lock: [ 383.963876][ T8803] ffffffff8de55e88 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf9/0x550 [ 383.973233][ T8803] [ 383.973233][ T8803] which lock already depends on the new lock. [ 383.973233][ T8803] [ 383.983719][ T8803] [ 383.983719][ T8803] the existing dependency chain (in reverse order) is: [ 383.992775][ T8803] [ 383.992775][ T8803] -> #3 (tpg_instances_lock){+.+.}-{3:3}: [ 384.000848][ T8803] __mutex_lock+0x135/0xc80 [ 384.007010][ T8803] tcm_alloc_inst+0x65/0x190 [ 384.012275][ T8803] usb_get_function_instance+0xdd/0x2e0 [ 384.018489][ T8803] function_make+0x11c/0x350 [ 384.023704][ T8803] configfs_mkdir+0x515/0x9e0 [ 384.029067][ T8803] vfs_mkdir+0x2a5/0x470 [ 384.033881][ T8803] do_mkdirat+0x1dc/0x450 [ 384.038954][ T8803] __x64_sys_mkdirat+0x89/0xa0 [ 384.044285][ T8803] do_syscall_64+0x55/0xb0 [ 384.049362][ T8803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.055839][ T8803] [ 384.055839][ T8803] -> #2 (func_lock){+.+.}-{3:3}: [ 384.063069][ T8803] __mutex_lock+0x135/0xc80 [ 384.068244][ T8803] usb_get_function_instance+0x2e/0x2e0 [ 384.074362][ T8803] function_make+0x11c/0x350 [ 384.079525][ T8803] configfs_mkdir+0x515/0x9e0 [ 384.084767][ T8803] vfs_mkdir+0x2a5/0x470 [ 384.089568][ T8803] do_mkdirat+0x1dc/0x450 [ 384.094464][ T8803] __x64_sys_mkdirat+0x89/0xa0 [ 384.099810][ T8803] do_syscall_64+0x55/0xb0 [ 384.104793][ T8803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.111251][ T8803] [ 384.111251][ T8803] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 384.119560][ T8803] __mutex_lock+0x135/0xc80 [ 384.124654][ T8803] configfs_rmdir+0x63c/0x980 [ 384.129896][ T8803] vfs_rmdir+0x352/0x4b0 [ 384.135396][ T8803] do_rmdir+0x29f/0x590 [ 384.140110][ T8803] __x64_sys_unlinkat+0xc4/0xe0 [ 384.145564][ T8803] do_syscall_64+0x55/0xb0 [ 384.150568][ T8803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.157027][ T8803] [ 384.157027][ T8803] -> #0 (&sb->s_type->i_mutex_key#24){++++}-{3:3}: [ 384.165793][ T8803] __lock_acquire+0x37ef/0x7d80 [ 384.171220][ T8803] lock_acquire+0x19e/0x420 [ 384.176323][ T8803] down_write+0x97/0x200 [ 384.181136][ T8803] configfs_depend_item_unlocked+0x157/0x430 [ 384.187682][ T8803] usbg_make_tpg+0x1e1/0x550 [ 384.192864][ T8803] target_fabric_make_tpg+0xa4/0x6d0 [ 384.198732][ T8803] configfs_mkdir+0x515/0x9e0 [ 384.204061][ T8803] vfs_mkdir+0x2a5/0x470 [ 384.208868][ T8803] do_mkdirat+0x1dc/0x450 [ 384.213929][ T8803] __x64_sys_mkdirat+0x89/0xa0 [ 384.219342][ T8803] do_syscall_64+0x55/0xb0 [ 384.224414][ T8803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.230998][ T8803] [ 384.230998][ T8803] other info that might help us debug this: [ 384.230998][ T8803] [ 384.241301][ T8803] Chain exists of: [ 384.241301][ T8803] &sb->s_type->i_mutex_key#24 --> func_lock --> tpg_instances_lock [ 384.241301][ T8803] [ 384.255179][ T8803] Possible unsafe locking scenario: [ 384.255179][ T8803] [ 384.262664][ T8803] CPU0 CPU1 [ 384.268056][ T8803] ---- ---- [ 384.273474][ T8803] lock(tpg_instances_lock); [ 384.278272][ T8803] lock(func_lock); [ 384.284717][ T8803] lock(tpg_instances_lock); [ 384.292120][ T8803] lock(&sb->s_type->i_mutex_key#24); [ 384.297622][ T8803] [ 384.297622][ T8803] *** DEADLOCK *** [ 384.297622][ T8803] [ 384.305890][ T8803] 4 locks held by syz.1.957/8803: [ 384.310980][ T8803] #0: ffff888018b28418 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 384.320309][ T8803] #1: ffff888050d91fc0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 384.331166][ T8803] #2: ffffffff8db2bdb0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 384.340968][ T8803] #3: ffffffff8de55e88 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf9/0x550 [ 384.351091][ T8803] [ 384.351091][ T8803] stack backtrace: [ 384.357023][ T8803] CPU: 1 PID: 8803 Comm: syz.1.957 Not tainted syzkaller #0 [ 384.364698][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 384.374796][ T8803] Call Trace: [ 384.378154][ T8803] [ 384.381123][ T8803] dump_stack_lvl+0x18c/0x250 [ 384.385853][ T8803] ? load_image+0x420/0x420 [ 384.390401][ T8803] ? show_regs_print_info+0x20/0x20 [ 384.395670][ T8803] ? print_circular_bug+0x12b/0x1a0 [ 384.400908][ T8803] check_noncircular+0x2fc/0x400 [ 384.405895][ T8803] ? look_up_lock_class+0x75/0x140 [ 384.411060][ T8803] ? print_deadlock_bug+0x5d0/0x5d0 [ 384.416302][ T8803] ? lockdep_lock+0xf5/0x230 [ 384.421141][ T8803] ? __lock_acquire+0x357f/0x7d80 [ 384.426207][ T8803] ? _find_first_zero_bit+0xd6/0x100 [ 384.431540][ T8803] __lock_acquire+0x37ef/0x7d80 [ 384.436446][ T8803] ? is_bpf_text_address+0x28f/0x2a0 [ 384.441786][ T8803] ? verify_lock_unused+0x140/0x140 [ 384.447122][ T8803] lock_acquire+0x19e/0x420 [ 384.451667][ T8803] ? configfs_depend_item_unlocked+0x157/0x430 [ 384.457857][ T8803] ? trace_raw_output_contention_end+0xd0/0xd0 [ 384.464078][ T8803] ? __might_sleep+0xe0/0xe0 [ 384.468792][ T8803] ? rcu_is_watching+0x15/0xb0 [ 384.473784][ T8803] ? read_lock_is_recursive+0x20/0x20 [ 384.479234][ T8803] ? trace_contention_end+0x39/0xe0 [ 384.484481][ T8803] ? __mutex_lock+0x30d/0xc80 [ 384.489199][ T8803] ? do_syscall_64+0x55/0xb0 [ 384.493833][ T8803] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.499952][ T8803] down_write+0x97/0x200 [ 384.504232][ T8803] ? configfs_depend_item_unlocked+0x157/0x430 [ 384.510458][ T8803] ? down_read_killable+0x340/0x340 [ 384.515702][ T8803] configfs_depend_item_unlocked+0x157/0x430 [ 384.521730][ T8803] usbg_make_tpg+0x1e1/0x550 [ 384.526383][ T8803] ? snprintf+0xe9/0x140 [ 384.530683][ T8803] ? configfs_mkdir+0x4b9/0x9e0 [ 384.535579][ T8803] ? usbg_drop_tport+0x20/0x20 [ 384.540481][ T8803] ? vscnprintf+0x80/0x80 [ 384.544860][ T8803] target_fabric_make_tpg+0xa4/0x6d0 [ 384.550186][ T8803] ? target_fabric_release_wwn+0xb0/0xb0 [ 384.555871][ T8803] configfs_mkdir+0x515/0x9e0 [ 384.560670][ T8803] vfs_mkdir+0x2a5/0x470 [ 384.564985][ T8803] do_mkdirat+0x1dc/0x450 [ 384.569357][ T8803] ? vfs_mkdir+0x470/0x470 [ 384.573806][ T8803] __x64_sys_mkdirat+0x89/0xa0 [ 384.578601][ T8803] do_syscall_64+0x55/0xb0 [ 384.583057][ T8803] ? clear_bhb_loop+0x40/0x90 [ 384.587776][ T8803] ? clear_bhb_loop+0x40/0x90 [ 384.592501][ T8803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.598433][ T8803] RIP: 0033:0x7f277ed9e159 [ 384.602910][ T8803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.622558][ T8803] RSP: 002b:00007f277fc1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 384.631033][ T8803] RAX: ffffffffffffffda RBX: 00007f277f025fa0 RCX: 00007f277ed9e159 [ 384.639101][ T8803] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 384.647152][ T8803] RBP: 00007f277ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 384.655167][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.663176][ T8803] R13: 00007f277f026038 R14: 00007f277f025fa0 R15: 00007ffd8d40c468 [ 384.671190][ T8803]