last executing test programs: 2.636364055s ago: executing program 0 (id=1331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 2.262828614s ago: executing program 1 (id=1344): sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000340)={0x0, 0x1, 0x5, 0xffffffffffffffff}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000001c40), 0x1ff, 0x20200) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) 2.243516866s ago: executing program 4 (id=1345): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$cgroup_pid(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000500)={0x0, 0x0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.198037379s ago: executing program 1 (id=1347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.197208469s ago: executing program 4 (id=1348): pipe2$watch_queue(0x0, 0x80) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(0x0, 0x0, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r6 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r5, r6, r5}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0), 0x121003, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.038713091s ago: executing program 2 (id=1350): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000000301010300000000000000000a00000067b53a37c48b1e547b9e29e116383eacecdeda25b6447cc58da71147186a9d1cf39c9d2cefa2404b4845"], 0x14}, 0x1, 0x0, 0x0, 0xc014}, 0x0) 1.680021689s ago: executing program 0 (id=1352): r0 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x23, 0x3}}) 1.67011773s ago: executing program 0 (id=1353): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x80000) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000001040)=""/4096) 1.657251021s ago: executing program 2 (id=1355): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f0000000240)="008e25ea5cba", 0x6, 0x8001, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}, 0x5}, 0x1c) 1.600040325s ago: executing program 0 (id=1356): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2083) 1.569022448s ago: executing program 1 (id=1357): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) r3 = dup(r1) write$9p(r3, 0x0, 0x0) 1.551955229s ago: executing program 2 (id=1358): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$cgroup_pid(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000500)={0x0, 0x0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.459892416s ago: executing program 2 (id=1359): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001100010027bd", @ANYRES32=0x0, @ANYBLOB="c00000000014060014"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 1.234692134s ago: executing program 4 (id=1360): syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x800, 0x0, 0x0, 0x9}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) 1.234527304s ago: executing program 1 (id=1361): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b010203010902240001fe00c0000904eb02027f9c1f000905", @ANYRES64], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1.177713848s ago: executing program 4 (id=1362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 1.124019653s ago: executing program 2 (id=1363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0xc, 0x9, 0x4, 0x6, 0x1000, 0x5, 0x2, 0xe}, &(0x7f00000001c0)=0x20) 1.123791562s ago: executing program 0 (id=1364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 1.119074243s ago: executing program 0 (id=1365): syz_usb_connect(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b010203010902240001fe00c0000904"], 0x0) 1.093771315s ago: executing program 4 (id=1366): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 671.693397ms ago: executing program 3 (id=1368): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x151, &(0x7f0000000140)={0x0, 0x8206, 0x400, 0x43, 0x26}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x20, 0x80, 0x12345}) io_uring_enter(r0, 0x3516, 0xf00, 0x0, 0x0, 0xfffffdcf) 668.353358ms ago: executing program 3 (id=1369): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$cgroup_pid(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000500)={0x0, 0x0}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 648.172719ms ago: executing program 3 (id=1370): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) r3 = dup(r2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) 605.118403ms ago: executing program 3 (id=1371): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000001c0)=[@acquire, @decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) 604.104083ms ago: executing program 1 (id=1372): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000400)="d2ff03076003008cb89e08f086dd05536a601e52894858cf5fc7f65492b74365131466624be7053f", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 543.905178ms ago: executing program 3 (id=1373): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r0}, "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"}) write$FUSE_WRITE(r2, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 543.659848ms ago: executing program 1 (id=1374): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x38}}, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000580)={0x1, 0xa, 0x4, &(0x7f0000000280)={0x3, "ba33b4f76c1147f98e3897d903a0e7002c833a00ddff0000000001ff00"}}) 498.782741ms ago: executing program 4 (id=1375): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x25c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PMK={0xc, 0xfe, "cfb1206d1c18d9cd"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x7}], @beacon=[@NL80211_ATTR_BEACON_TAIL={0x2e, 0xf, [@mesh_chsw={0x76, 0x6, {0x1, 0x10, 0x7, 0xfffe}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x5}}, @peer_mgmt={0x75, 0x14, {0x0, 0x5, @void, @void, @val="6002de9ac42d5b0804d16167b17c2bd5"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x60, 0x7f, [@ssid={0x0, 0x6, @default_ap_ssid}, @fast_bss_trans={0x37, 0x52, {0x0, 0x0, "e6cc79ef5a078dd7775c9944d147acfc", "5a41c1f55d59024848684cfddfeddbd7800595b64f2b20850d8b10d0fae1f588", "3dcf30d20dfdd6f0c1741d9fd76371298872523040052c2e18d6ad11d2e16ceb"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x7, 0x7f, [@challenge={0x10, 0x1, 0x18}]}, @NL80211_ATTR_IE={0x176, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x3}, 0x5, 0xf9, @device_a, 0x800, 0xff, 0x2}}, @gcr_ga={0xbd, 0x6}, @measure_req={0x26, 0xe3, {0x0, 0x6, 0x9, "5472a47530a6f7bfc26e30c75a0bf86c1f66c1dc3dcdaca1e688f2fd54ce53ac1f68ff93026eac6bdd939a4d00ff7cbf220babfd05faaedafe7a81feb8b65edeae9021e9933881bf36e062988133626111422cfba1d3bed3726bab2a7ad509537386094d3fddcb838eff75f51cb942204bd24b53017c68d18a2e3698b31790fa29b00e7205efc7f8a15e4fada5e228145c3ccd9cd168f74fc39ac40d5d3b2487e6e20e58ca1d242e6d9dce9c99612c76b07bbfa511c07ec22cc2ce79f70ff10669105b9765b116126971f974d46f61ab54e508c0f339eb5f54d1be396f05e28e"}}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @tim={0x5, 0x3, {0xa, 0x91, 0xfd}}, @link_id={0x65, 0x12, {@random="716fa60d7fb3", @broadcast}}, @measure_req={0x26, 0x48, {0x1, 0x8, 0x5, "d57fef38eb73d7524a97a415ac2951a24c0f5dfab1cd926342149537ecec25aefa14e5475f1ca1e27e16aa009425fc9efa67802de088d9d90cba345b82462980c64732f48b"}}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @null, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 489.004042ms ago: executing program 3 (id=1376): syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)={'security\x00', 0x0, [0x6, 0x1, 0x5, 0x5, 0x8]}, &(0x7f0000000100)=0x54) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 2 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2a, 0x800000002, 0x9) ioctl$SIOCPNENABLEPIPE(r3, 0x8917, 0x1000000000000) kernel console output (not intermixed with test programs): [ 25.752981][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.754209][ T4329] Cannot create hsr debugfs directory [ 25.793899][ T4332] device hsr_slave_0 entered promiscuous mode [ 25.833056][ T4332] device hsr_slave_1 entered promiscuous mode [ 25.872945][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.874125][ T4332] Cannot create hsr debugfs directory [ 25.887940][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.889117][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.893344][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.900468][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.901612][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.905803][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.993962][ T4319] device hsr_slave_0 entered promiscuous mode [ 26.033323][ T4319] device hsr_slave_1 entered promiscuous mode [ 26.073061][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.074304][ T4319] Cannot create hsr debugfs directory [ 26.135890][ T4320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.176452][ T4320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.214369][ T4320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.255487][ T4320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.309794][ T4324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.354858][ T4324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.397432][ T4324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.439470][ T4329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.474162][ T4329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.513744][ T4324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.557333][ T4329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.594444][ T4329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.647315][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.650545][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.652307][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.659616][ T4332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.704371][ T4332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.747751][ T4332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.784063][ T4332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.818018][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.830386][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.832322][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.834391][ T1609] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.835558][ T1609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.837439][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.848831][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.850409][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.851922][ T1609] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.852985][ T1609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.860453][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 26.862030][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 26.869181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.870872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 26.872377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 26.874022][ T4330] Bluetooth: hci2: command 0x0409 tx timeout [ 26.874386][ T4323] Bluetooth: hci0: command 0x0409 tx timeout [ 26.875002][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 26.876446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 26.882313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 26.883016][ T4330] Bluetooth: hci3: command 0x0409 tx timeout [ 26.887652][ T4319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.924577][ T4319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.952931][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 26.964314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.965818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.970217][ T4319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.993980][ T4319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.054105][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.056097][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.057589][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.059198][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.074731][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.082246][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.087444][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.089503][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.090942][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.102657][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.104678][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.106139][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.107192][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.112558][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.115046][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.116812][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.118124][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.119084][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.121541][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.128261][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.129889][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.135973][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.139464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.141098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.142507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.149672][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.151647][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.154089][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.155703][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.157101][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.158616][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.160025][ T253] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.161205][ T253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.165076][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.166632][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.168113][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.169739][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.178879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.180407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.182228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.184627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.186064][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.187068][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.192472][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.193998][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.195632][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.196992][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.198419][ T1609] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.199523][ T1609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.200854][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.207117][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.209472][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.210936][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.212366][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.214638][ T253] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.215600][ T253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.216817][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.218486][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.219686][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.225560][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.229499][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.231857][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.234293][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.236172][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.238416][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.241231][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.242769][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.245413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.246886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.248376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.253532][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.265699][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.267366][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.268781][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.270331][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.280055][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.281906][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.284173][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.285659][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.287048][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.288334][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.289653][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.296166][ T4324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.298056][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.301556][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.303141][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.304578][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.306148][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.307628][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.308964][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.310381][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.311901][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.314837][ T258] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.315898][ T258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.318546][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.321703][ T4320] device veth0_vlan entered promiscuous mode [ 27.326702][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.328098][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.333500][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.335535][ T4320] device veth1_vlan entered promiscuous mode [ 27.341228][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.342721][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.347523][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.349036][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.350499][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.351652][ T4413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.357990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.359641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.367309][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.368533][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.369685][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.371862][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.373865][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.375411][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.378080][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.386916][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.388316][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.389778][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.405588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.407124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.408558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.410099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.412677][ T4320] device veth0_macvtap entered promiscuous mode [ 27.418004][ T4320] device veth1_macvtap entered promiscuous mode [ 27.419399][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.420846][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.422578][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.425202][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.426715][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.430028][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.431582][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.435742][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.437986][ T4329] device veth0_vlan entered promiscuous mode [ 27.441208][ T4329] device veth1_vlan entered promiscuous mode [ 27.444236][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.455900][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.459442][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.460870][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.462152][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.465014][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.476423][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.481075][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.482627][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.484651][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.486190][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.494061][ T4329] device veth0_macvtap entered promiscuous mode [ 27.496596][ T4329] device veth1_macvtap entered promiscuous mode [ 27.498552][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.499648][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.500805][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.502371][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.504655][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.506299][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.509383][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.514400][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.515953][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.517361][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.518971][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.520451][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.521796][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.525018][ T4320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.526477][ T4320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.527802][ T4320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.529153][ T4320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.532381][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.539258][ T4324] device veth0_vlan entered promiscuous mode [ 27.549506][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.551250][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.553953][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.557070][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.558365][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.559563][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.561043][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.564747][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.572298][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.574606][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.576546][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.578812][ T4324] device veth1_vlan entered promiscuous mode [ 27.581207][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.582701][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.585733][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.588701][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.590278][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.594524][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.595868][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.597239][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.598566][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.628137][ T4332] device veth0_vlan entered promiscuous mode [ 27.630696][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.632225][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.634843][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.637550][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.639305][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.660970][ T4332] device veth1_vlan entered promiscuous mode [ 27.674933][ T4324] device veth0_macvtap entered promiscuous mode [ 27.677762][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.679331][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.680886][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.684225][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.685617][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.687528][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.688855][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.691112][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.696134][ T4324] device veth1_macvtap entered promiscuous mode [ 27.705730][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.707419][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.709026][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.710710][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.714203][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.716209][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.717671][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.719210][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.720684][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.722116][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.726594][ T258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.727866][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.728951][ T258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.730027][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.730552][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.734090][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.739352][ T4332] device veth0_macvtap entered promiscuous mode [ 27.742213][ T4332] device veth1_macvtap entered promiscuous mode [ 27.748717][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.750283][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.751797][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.755100][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.756891][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.758583][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.760123][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.761784][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.764911][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.770737][ T258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.772729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.774558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.777240][ T258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.779850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.786130][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.787643][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.789285][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.790575][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.793607][ T4324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.794957][ T4324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.796252][ T4324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.797575][ T4324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.801033][ T4319] device veth0_vlan entered promiscuous mode [ 27.806344][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.807839][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.809311][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.810870][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.812387][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.814462][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.816561][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.817680][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.819339][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.825386][ T4319] device veth1_vlan entered promiscuous mode [ 27.829961][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.831580][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.833673][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.835235][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.836599][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.838101][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.840325][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.845576][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.846998][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.848477][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.849930][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.896410][ T4332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.897853][ T4332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.899196][ T4332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.900523][ T4332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.908681][ T258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.909924][ T258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.919246][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.920340][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.926325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.927927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.929393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.930717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.936057][ T4319] device veth0_macvtap entered promiscuous mode [ 27.946259][ T4431] can0: slcan on ptm0. [ 27.952418][ T4319] device veth1_macvtap entered promiscuous mode [ 27.960943][ T4431] loop2: detected capacity change from 0 to 512 [ 28.002118][ T4431] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2196: inode #15: comm syz.2.3: corrupted in-inode xattr [ 28.007251][ T4431] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 28.020960][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.022219][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.027569][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.029151][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.030597][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.033966][ T4431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.051902][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.061140][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.066442][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.068100][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.069548][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.071118][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.072610][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.146183][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.149047][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.156191][ T4445] loop0: detected capacity change from 0 to 128 [ 28.157977][ T4445] hpfs: bad mount options. [ 28.158121][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.160405][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.206976][ T4313] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.277047][ T4445] loop0: detected capacity change from 0 to 32768 [ 28.281376][ T4445] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4445) [ 28.286071][ T4445] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 28.287733][ T4445] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 28.289091][ T4445] BTRFS info (device loop0): enabling auto defrag [ 28.290065][ T4445] BTRFS info (device loop0): use no compression [ 28.291055][ T4445] BTRFS info (device loop0): force clearing of disk cache [ 28.292161][ T4445] BTRFS info (device loop0): max_inline at 4096 [ 28.293215][ T4445] BTRFS info (device loop0): disabling free space tree [ 28.299980][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.301601][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.303434][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.304976][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.306828][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.308571][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.309966][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.311694][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.316476][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.318955][ T4431] sp0: Synchronizing with TNC [ 28.340946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.342627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.349780][ T4319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.351287][ T4319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.352646][ T4319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.354913][ T258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.356196][ T258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.361078][ T4319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.375127][ T258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.380541][ T4458] process 'syz.1.6' launched './file1' with NULL argv: empty string added [ 28.391733][ T4445] BTRFS info (device loop0): enabling ssd optimizations [ 28.396494][ T4445] BTRFS info (device loop0): rebuilding free space tree [ 28.412639][ T4445] BTRFS info (device loop0): disabling free space tree [ 28.414369][ T4445] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 28.416115][ T4445] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 28.507812][ T4324] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 28.531804][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.533349][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.550696][ T253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.564418][ T4430] can0 (unregistered): slcan off ptm0. [ 28.567672][ T258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.568963][ T258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.570675][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.626084][ T4465] loop1: detected capacity change from 0 to 8192 [ 28.656435][ T4465] loop1: p1 < > p3 p4 < > [ 28.658387][ T4465] loop1: p3 size 33554432 extends beyond EOD, truncated [ 28.658726][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 28.689959][ T4458] vxcan1: tx address claim with dlc 0 [ 28.741980][ T27] audit: type=1326 audit(28.730:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.3.9" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f5b9e8 code=0x0 [ 28.765921][ T4501] loop0: detected capacity change from 32768 to 2 [ 28.870381][ T4521] device veth0_to_batadv entered promiscuous mode [ 28.875073][ T4521] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 28.886039][ T4524] Zero length message leads to an empty skb [ 28.887461][ T4521] netlink: 183168 bytes leftover after parsing attributes in process `syz.1.12'. [ 28.953594][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 28.954674][ T4330] Bluetooth: hci2: command 0x041b tx timeout [ 28.963499][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 28.964538][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 29.003755][ T4506] loop4: detected capacity change from 0 to 32768 [ 29.018425][ T4506] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5 (4506) [ 29.034105][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 29.041191][ T4506] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 29.043041][ T4506] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 29.044647][ T4506] BTRFS info (device loop4): setting nodatacow, compression disabled [ 29.045908][ T4506] BTRFS info (device loop4): turning off barriers [ 29.048760][ T4530] loop0: detected capacity change from 0 to 256 [ 29.050367][ T4530] exfat: Bad value for 'umask' [ 29.051768][ T4506] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 29.054223][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 29.055443][ T4506] BTRFS info (device loop4): trying to use backup root at mount time [ 29.056929][ T4506] BTRFS info (device loop4): turning on barriers [ 29.058012][ T4506] BTRFS info (device loop4): max_inline at 4096 [ 29.059009][ T4506] BTRFS info (device loop4): using free space tree [ 29.068092][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 29.081786][ T4530] device geneve0 entered promiscuous mode [ 29.091996][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 29.096738][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 29.101059][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 29.172391][ T4556] FAULT_INJECTION: forcing a failure. [ 29.172391][ T4556] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 29.175308][ T4556] CPU: 0 PID: 4556 Comm: syz.2.21 Not tainted syzkaller #0 [ 29.176461][ T4556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 29.178042][ T4556] Call trace: [ 29.178519][ T4556] dump_backtrace+0x1c8/0x1f4 [ 29.179252][ T4556] show_stack+0x2c/0x3c [ 29.179924][ T4556] __dump_stack+0x30/0x40 [ 29.180570][ T4556] dump_stack_lvl+0xf8/0x160 [ 29.181294][ T4556] dump_stack+0x1c/0x5c [ 29.181915][ T4556] should_fail_ex+0x3c4/0x520 [ 29.182636][ T4556] should_fail+0x14/0x24 [ 29.183239][ T4556] should_fail_usercopy+0x20/0x30 [ 29.183952][ T4556] copyin+0x2c/0x154 [ 29.184557][ T4556] _copy_from_iter+0x40c/0xf40 [ 29.185252][ T4556] netlink_sendmsg+0x5e0/0x9b0 [ 29.185944][ T4556] ____sys_sendmsg+0x5b8/0x918 [ 29.186658][ T4556] __sys_sendmsg+0x25c/0x320 [ 29.187393][ T4556] __arm64_sys_sendmsg+0x80/0x94 [ 29.188234][ T4556] invoke_syscall+0x98/0x2bc [ 29.188982][ T4556] el0_svc_common+0x138/0x258 [ 29.189726][ T4556] do_el0_svc+0x58/0x13c [ 29.190411][ T4556] el0_svc+0x58/0x138 [ 29.191058][ T4556] el0t_64_sync_handler+0x84/0xf0 [ 29.191821][ T4556] el0t_64_sync+0x18c/0x190 [ 29.248628][ T39] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 29.251294][ T4506] BTRFS error (device loop4): failed to load root extent [ 29.252486][ T4506] BTRFS warning (device loop4): try to load backup roots slot 1 [ 29.257314][ T4413] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 29.259534][ T4506] BTRFS warning (device loop4): couldn't read tree root [ 29.260625][ T4506] BTRFS warning (device loop4): try to load backup roots slot 2 [ 29.262428][ T4506] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 29.270433][ T4506] BTRFS warning (device loop4): couldn't read tree root [ 29.271566][ T4506] BTRFS warning (device loop4): try to load backup roots slot 3 [ 29.307649][ T4506] BTRFS info (device loop4): enabling ssd optimizations [ 29.309134][ T4506] BTRFS info (device loop4): rebuilding free space tree [ 29.312539][ T4506] BTRFS info (device loop4): checking UUID tree [ 29.448439][ T4572] loop2: detected capacity change from 0 to 8192 [ 29.457536][ T4551] loop1: detected capacity change from 0 to 32768 [ 29.504961][ T4572] loop2: p1 < > p3 p4 < > [ 29.507034][ T4572] loop2: p3 size 33554432 extends beyond EOD, truncated [ 29.601670][ T4586] 9pnet_fd: Insufficient options for proto=fd [ 29.604048][ T4586] ======================================================= [ 29.604048][ T4586] WARNING: The mand mount option has been deprecated and [ 29.604048][ T4586] and is ignored by this kernel. Remove the mand [ 29.604048][ T4586] option from the mount to silence this warning. [ 29.604048][ T4586] ======================================================= [ 29.818074][ T4551] XFS (loop1): Mounting V5 Filesystem [ 29.872824][ T4551] XFS (loop1): Ending clean mount [ 30.056435][ T4605] loop3: detected capacity change from 0 to 1024 [ 30.083855][ T4605] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 30.085281][ T4605] EXT4-fs (loop3): group descriptors corrupted! [ 30.096413][ T4319] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 30.119842][ T4320] XFS (loop1): Unmounting Filesystem [ 30.197451][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 30.200598][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 30.204042][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 30.286568][ T4595] loop2: detected capacity change from 0 to 32768 [ 30.304989][ T4595] jfs_mount: Failed to read FILESYSTEM_I [ 30.306104][ T4595] Mount JFS Failure: -5 [ 30.306774][ T4595] jfs_mount failed w/return code = -5 [ 30.309454][ T4313] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4313) [ 30.344079][ T4625] FAULT_INJECTION: forcing a failure. [ 30.344079][ T4625] name failslab, interval 1, probability 0, space 0, times 0 [ 30.346257][ T4625] CPU: 0 PID: 4625 Comm: syz.4.33 Not tainted syzkaller #0 [ 30.347326][ T4625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 30.348844][ T4625] Call trace: [ 30.349361][ T4625] dump_backtrace+0x1c8/0x1f4 [ 30.350095][ T4625] show_stack+0x2c/0x3c [ 30.350692][ T4625] __dump_stack+0x30/0x40 [ 30.351352][ T4625] dump_stack_lvl+0xf8/0x160 [ 30.352014][ T4625] dump_stack+0x1c/0x5c [ 30.352605][ T4625] should_fail_ex+0x3c4/0x520 [ 30.353317][ T4625] __should_failslab+0xc0/0x120 [ 30.354133][ T4625] should_failslab+0x10/0x28 [ 30.354920][ T4625] kmem_cache_alloc+0x88/0x318 [ 30.355120][ T4611] loop3: detected capacity change from 0 to 40427 [ 30.355740][ T4625] skb_clone+0x194/0x308 [ 30.357415][ T4625] __netlink_deliver_tap+0x36c/0x6e4 [ 30.358260][ T4625] netlink_deliver_tap+0x1ac/0x1b0 [ 30.359030][ T4625] netlink_unicast+0x5ec/0x824 [ 30.359772][ T4625] netlink_sendmsg+0x6e8/0x9b0 [ 30.360480][ T4625] ____sys_sendmsg+0x5b8/0x918 [ 30.361239][ T4625] __sys_sendmsg+0x25c/0x320 [ 30.361958][ T4625] __arm64_sys_sendmsg+0x80/0x94 [ 30.362699][ T4625] invoke_syscall+0x98/0x2bc [ 30.363393][ T4625] el0_svc_common+0x138/0x258 [ 30.364082][ T4625] do_el0_svc+0x58/0x13c [ 30.364729][ T4625] el0_svc+0x58/0x138 [ 30.365316][ T4625] el0t_64_sync_handler+0x84/0xf0 [ 30.366103][ T4625] el0t_64_sync+0x18c/0x190 [ 30.367573][ T4611] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 30.368797][ T4611] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 30.395106][ T4611] F2FS-fs (loop3): Found nat_bits in checkpoint [ 30.411462][ T4611] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 30.413291][ T4611] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 30.464356][ T4635] loop0: detected capacity change from 0 to 256 [ 30.465840][ T4635] exfat: Deprecated parameter 'namecase' [ 30.495373][ T4635] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 30.509708][ T4633] loop2: detected capacity change from 0 to 8192 [ 30.536723][ T4633] loop2: p1 < > p3 p4 < > [ 30.537968][ T4633] loop2: p3 size 33554432 extends beyond EOD, truncated [ 30.609744][ T4492] libceph: connect (1)[b::]:6789 error -101 [ 30.610906][ T4492] libceph: mon0 (1)[b::]:6789 connect error [ 30.613412][ T4492] libceph: connect (1)[b::]:6789 error -101 [ 30.614448][ T4492] libceph: mon0 (1)[b::]:6789 connect error [ 30.616553][ T4492] libceph: connect (1)[c::]:6789 error -101 [ 30.617504][ T4492] libceph: mon0 (1)[c::]:6789 connect error [ 30.864532][ T4664] i2c i2c-0: Invalid block write size 34 [ 30.873892][ T4492] libceph: connect (1)[c::]:6789 error -101 [ 30.875165][ T4492] libceph: mon0 (1)[c::]:6789 connect error [ 30.876746][ T4492] libceph: connect (1)[b::]:6789 error -101 [ 30.877936][ T4492] libceph: mon0 (1)[b::]:6789 connect error [ 30.890997][ T78] block nbd0: Attempted send on invalid socket [ 30.892067][ T78] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 30.894358][ T4670] MINIX-fs: unable to read superblock [ 30.968745][ T4672] loop3: detected capacity change from 0 to 2048 [ 31.006873][ T4672] netlink: 300 bytes leftover after parsing attributes in process `syz.3.42'. [ 31.017559][ T4676] netlink: 'syz.0.43': attribute type 4 has an invalid length. [ 31.033192][ T4330] Bluetooth: hci1: command 0x040f tx timeout [ 31.034218][ T4330] Bluetooth: hci3: command 0x040f tx timeout [ 31.035178][ T4330] Bluetooth: hci2: command 0x040f tx timeout [ 31.036189][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 31.041004][ T4676] loop0: detected capacity change from 0 to 512 [ 31.050263][ T4468] udevd[4468]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 31.057932][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 31.062305][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 31.086226][ T4676] EXT2-fs (loop0): error: ext2_check_page: size of directory #2 is not a multiple of chunk size [ 31.096644][ T4676] EXT2-fs (loop0): error: remounting filesystem read-only [ 31.104309][ T4668] loop2: detected capacity change from 0 to 32768 [ 31.122993][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 31.126562][ T4668] XFS (loop2): Mounting V5 Filesystem [ 31.128793][ T4678] loop3: detected capacity change from 0 to 8192 [ 31.131251][ T4678] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "audit" [ 31.160354][ T4668] XFS (loop2): Ending clean mount [ 31.170874][ T4668] XFS (loop2): Quotacheck needed: Please wait. [ 31.195060][ T4668] XFS (loop2): Quotacheck: Done. [ 31.265991][ T4329] XFS (loop2): Unmounting Filesystem [ 31.365461][ T4637] ceph: No mds server is up or the cluster is laggy [ 31.366844][ T4638] ceph: No mds server is up or the cluster is laggy [ 31.384009][ T4492] libceph: connect (1)[b::]:6789 error -101 [ 31.387158][ T4492] libceph: mon0 (1)[b::]:6789 connect error [ 31.390051][ T4492] libceph: connect (1)[c::]:6789 error -101 [ 31.391097][ T4492] libceph: mon0 (1)[c::]:6789 connect error [ 31.429641][ T4689] loop0: detected capacity change from 0 to 40427 [ 31.438120][ T4689] F2FS-fs (loop0): invalid crc value [ 31.471450][ T4689] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.515557][ T4701] loop1: detected capacity change from 0 to 64 [ 31.523349][ T4689] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.529954][ T4689] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.531349][ T4689] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.532611][ T4689] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.534231][ T4689] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 31.558266][ T4698] loop4: detected capacity change from 0 to 8192 [ 31.561696][ T4324] syz-executor: attempt to access beyond end of device [ 31.561696][ T4324] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 31.595700][ T4704] FAULT_INJECTION: forcing a failure. [ 31.595700][ T4704] name failslab, interval 1, probability 0, space 0, times 0 [ 31.597706][ T4704] CPU: 0 PID: 4704 Comm: syz.2.47 Not tainted syzkaller #0 [ 31.598763][ T4704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 31.600257][ T4704] Call trace: [ 31.600753][ T4704] dump_backtrace+0x1c8/0x1f4 [ 31.601455][ T4704] show_stack+0x2c/0x3c [ 31.602063][ T4704] __dump_stack+0x30/0x40 [ 31.602717][ T4704] dump_stack_lvl+0xf8/0x160 [ 31.603394][ T4704] dump_stack+0x1c/0x5c [ 31.604019][ T4704] should_fail_ex+0x3c4/0x520 [ 31.604750][ T4704] __should_failslab+0xc0/0x120 [ 31.605463][ T4704] should_failslab+0x10/0x28 [ 31.606175][ T4704] kmem_cache_alloc+0x88/0x318 [ 31.606853][ T4704] skb_clone+0x194/0x308 [ 31.607487][ T4704] nfnetlink_rcv+0x3f4/0x1afc [ 31.608191][ T4704] netlink_unicast+0x60c/0x824 [ 31.608949][ T4704] netlink_sendmsg+0x6e8/0x9b0 [ 31.609652][ T4704] ____sys_sendmsg+0x5b8/0x918 [ 31.610391][ T4704] __sys_sendmsg+0x25c/0x320 [ 31.611058][ T4704] __arm64_sys_sendmsg+0x80/0x94 [ 31.611763][ T4704] invoke_syscall+0x98/0x2bc [ 31.612463][ T4704] el0_svc_common+0x138/0x258 [ 31.613159][ T4704] do_el0_svc+0x58/0x13c [ 31.613856][ T4704] el0_svc+0x58/0x138 [ 31.614440][ T4704] el0t_64_sync_handler+0x84/0xf0 [ 31.615256][ T4704] el0t_64_sync+0x18c/0x190 [ 31.618165][ T4698] loop4: p1 < > p3 p4 < > [ 31.619406][ T4698] loop4: p3 size 33554432 extends beyond EOD, truncated [ 31.733889][ T4712] FAULT_INJECTION: forcing a failure. [ 31.733889][ T4712] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 31.736061][ T4712] CPU: 1 PID: 4712 Comm: syz.0.50 Not tainted syzkaller #0 [ 31.737098][ T4712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 31.738468][ T4712] Call trace: [ 31.738895][ T4712] dump_backtrace+0x1c8/0x1f4 [ 31.741231][ T4712] show_stack+0x2c/0x3c [ 31.741870][ T4712] __dump_stack+0x30/0x40 [ 31.742612][ T4712] dump_stack_lvl+0xf8/0x160 [ 31.743363][ T4712] dump_stack+0x1c/0x5c [ 31.743994][ T4712] should_fail_ex+0x3c4/0x520 [ 31.744753][ T4712] should_fail_alloc_page+0x74/0xb8 [ 31.745591][ T4712] prepare_alloc_pages+0x1c0/0x504 [ 31.746406][ T4712] __alloc_pages+0x134/0x53c [ 31.747195][ T4712] __folio_alloc+0x1c/0x44 [ 31.747878][ T4712] vma_alloc_folio+0x37c/0x8b4 [ 31.748602][ T4712] alloc_zeroed_user_highpage_movable+0x74/0x88 [ 31.749549][ T4712] handle_mm_fault+0x15a0/0x2ff0 [ 31.750322][ T4712] do_page_fault+0x310/0x99c [ 31.751115][ T4712] do_translation_fault+0x94/0xc8 [ 31.751883][ T4712] do_mem_abort+0x70/0x194 [ 31.752556][ T4712] el0_da+0x70/0x154 [ 31.753142][ T4712] el0t_64_sync_handler+0x90/0xf0 [ 31.753885][ T4712] el0t_64_sync+0x18c/0x190 [ 31.779836][ T4713] loop1: detected capacity change from 0 to 4096 [ 31.787548][ T4712] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 31.795697][ T4707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 31.798592][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 31.818996][ T4713] ntfs: volume version 3.1. [ 31.841848][ T4713] ntfs: (device loop1): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 32.078395][ T4711] loop2: detected capacity change from 0 to 40427 [ 32.093603][ T4711] F2FS-fs (loop2): invalid crc value [ 32.104452][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 32.106378][ T4711] F2FS-fs (loop2): Found nat_bits in checkpoint [ 32.164894][ T4711] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 32.204289][ T4726] loop1: detected capacity change from 0 to 256 [ 32.216327][ T4717] loop0: detected capacity change from 0 to 32768 [ 32.219901][ T4717] xfs: Unknown parameter '' [ 32.223738][ T4726] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 32.229760][ T4329] syz-executor: attempt to access beyond end of device [ 32.229760][ T4329] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 32.862351][ T4745] loop2: detected capacity change from 0 to 8192 [ 32.904052][ T4745] loop2: p1 < > p3 p4 < > [ 32.905438][ T4745] loop2: p3 size 33554432 extends beyond EOD, truncated [ 32.948709][ T4740] loop4: detected capacity change from 0 to 40427 [ 32.951649][ T4740] F2FS-fs (loop4): build fault injection attr: rate: 694, type: 0x3ffff [ 32.962391][ T4740] F2FS-fs (loop4): invalid crc value [ 32.964501][ T4741] loop0: detected capacity change from 0 to 32768 [ 32.977384][ T4740] F2FS-fs (loop4): Found nat_bits in checkpoint [ 33.003169][ T4740] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 33.022170][ T4741] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 33.050983][ T4740] F2FS-fs (loop4) : inject slab alloc in f2fs_kmem_cache_alloc of __f2fs_get_acl+0x6c/0x5d4 [ 33.066775][ T4741] OCFS2: ERROR (device loop0): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 25 used bits, but a count shows 24 [ 33.069715][ T4741] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 33.071273][ T4741] OCFS2: Returning error to the calling process. [ 33.088906][ T4741] (syz.0.61,4741,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5 [ 33.090293][ T4741] (syz.0.61,4741,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -5 [ 33.111609][ T4741] (syz.0.61,4741,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5 [ 33.113483][ T4330] Bluetooth: hci0: command 0x0419 tx timeout [ 33.114323][ T4330] Bluetooth: hci2: command 0x0419 tx timeout [ 33.115249][ T4330] Bluetooth: hci3: command 0x0419 tx timeout [ 33.116188][ T4330] Bluetooth: hci1: command 0x0419 tx timeout [ 33.123151][ T4741] (syz.0.61,4741,1):ocfs2_lock_allocators:2672 ERROR: status = -5 [ 33.124294][ T4741] (syz.0.61,4741,1):ocfs2_write_begin_nolock:1744 ERROR: status = -5 [ 33.125507][ T4741] (syz.0.61,4741,1):ocfs2_write_begin:1907 ERROR: status = -5 [ 33.152518][ T4741] OCFS2: ERROR (device loop0): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 25 used bits, but a count shows 24 [ 33.155557][ T4741] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 33.156960][ T4741] OCFS2: Returning error to the calling process. [ 33.157994][ T4741] (syz.0.61,4741,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5 [ 33.159298][ T4741] (syz.0.61,4741,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -5 [ 33.160611][ T4741] (syz.0.61,4741,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5 [ 33.161879][ T4741] (syz.0.61,4741,1):ocfs2_mknod:357 ERROR: status = -5 [ 33.163601][ T4741] (syz.0.61,4741,1):ocfs2_mknod:502 ERROR: status = -5 [ 33.164717][ T4741] (syz.0.61,4741,1):ocfs2_create:676 ERROR: status = -5 [ 33.167359][ T4319] syz-executor: attempt to access beyond end of device [ 33.167359][ T4319] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 33.200593][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 33.214225][ T4758] netlink: 36 bytes leftover after parsing attributes in process `syz.1.67'. [ 33.235077][ T4760] FAULT_INJECTION: forcing a failure. [ 33.235077][ T4760] name failslab, interval 1, probability 0, space 0, times 0 [ 33.238759][ T4760] CPU: 0 PID: 4760 Comm: syz.2.66 Not tainted syzkaller #0 [ 33.239795][ T4760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 33.241357][ T4760] Call trace: [ 33.241869][ T4760] dump_backtrace+0x1c8/0x1f4 [ 33.242572][ T4760] show_stack+0x2c/0x3c [ 33.243277][ T4760] __dump_stack+0x30/0x40 [ 33.243934][ T4760] dump_stack_lvl+0xf8/0x160 [ 33.244682][ T4760] dump_stack+0x1c/0x5c [ 33.245318][ T4760] should_fail_ex+0x3c4/0x520 [ 33.246080][ T4760] __should_failslab+0xc0/0x120 [ 33.246876][ T4760] should_failslab+0x10/0x28 [ 33.247599][ T4760] __kmem_cache_alloc_node+0x7c/0x320 [ 33.248513][ T4760] __kmalloc+0xd8/0x178 [ 33.249195][ T4760] __arm64_sys_memfd_create+0x11c/0x45c [ 33.250094][ T4760] invoke_syscall+0x98/0x2bc [ 33.250866][ T4760] el0_svc_common+0x138/0x258 [ 33.251664][ T4760] do_el0_svc+0x58/0x13c [ 33.252395][ T4760] el0_svc+0x58/0x138 [ 33.253055][ T4760] el0t_64_sync_handler+0x84/0xf0 [ 33.253889][ T4760] el0t_64_sync+0x18c/0x190 [ 33.337222][ T4764] FAULT_INJECTION: forcing a failure. [ 33.337222][ T4764] name failslab, interval 1, probability 0, space 0, times 0 [ 33.339264][ T4764] CPU: 1 PID: 4764 Comm: syz.4.65 Not tainted syzkaller #0 [ 33.340317][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 33.341786][ T4764] Call trace: [ 33.342283][ T4764] dump_backtrace+0x1c8/0x1f4 [ 33.343024][ T4764] show_stack+0x2c/0x3c [ 33.343706][ T4764] __dump_stack+0x30/0x40 [ 33.344374][ T4764] dump_stack_lvl+0xf8/0x160 [ 33.345043][ T4764] dump_stack+0x1c/0x5c [ 33.345677][ T4764] should_fail_ex+0x3c4/0x520 [ 33.346405][ T4764] __should_failslab+0xc0/0x120 [ 33.347129][ T4764] should_failslab+0x10/0x28 [ 33.347835][ T4764] __kmem_cache_alloc_node+0x7c/0x320 [ 33.348693][ T4764] kmalloc_trace+0x48/0x94 [ 33.349414][ T4764] nf_tables_newtable+0x3d4/0x10f0 [ 33.350166][ T4764] nfnetlink_rcv+0xc80/0x1afc [ 33.350883][ T4764] netlink_unicast+0x60c/0x824 [ 33.351635][ T4764] netlink_sendmsg+0x6e8/0x9b0 [ 33.352430][ T4764] ____sys_sendmsg+0x5b8/0x918 [ 33.353123][ T4764] __sys_sendmsg+0x25c/0x320 [ 33.353804][ T4764] __arm64_sys_sendmsg+0x80/0x94 [ 33.354539][ T4764] invoke_syscall+0x98/0x2bc [ 33.355224][ T4764] el0_svc_common+0x138/0x258 [ 33.355884][ T4764] do_el0_svc+0x58/0x13c [ 33.356462][ T4764] el0_svc+0x58/0x138 [ 33.357084][ T4764] el0t_64_sync_handler+0x84/0xf0 [ 33.357757][ T4764] el0t_64_sync+0x18c/0x190 [ 33.372462][ T4762] loop1: detected capacity change from 0 to 8192 [ 33.400676][ T4693] loop3: detected capacity change from 0 to 262144 [ 33.407447][ T4693] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.46 (4693) [ 33.423512][ T4693] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 33.425951][ T4762] loop1: p1 < > p3 p4 < > [ 33.426058][ T4693] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 33.428650][ T4762] loop1: p3 size 33554432 extends beyond EOD, truncated [ 33.430396][ T4693] BTRFS info (device loop3): using free space tree [ 33.513943][ T4766] loop2: detected capacity change from 0 to 32768 [ 33.515611][ T4766] (syz.2.69,4766,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "journal_asynt" or missing value [ 33.517396][ T4766] (syz.2.69,4766,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 33.522446][ T4779] loop4: detected capacity change from 0 to 256 [ 33.528787][ T4775] binder: 4774:4775 ioctl c0306201 20000240 returned -14 [ 33.549824][ T4779] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 33.628029][ T4693] BTRFS info (device loop3): enabling ssd optimizations [ 33.866600][ T4815] fuse: Unknown parameter '0x0000000000000003' [ 33.876007][ T4815] input: syz0 as /devices/virtual/input/input2 [ 33.948758][ T4819] FAULT_INJECTION: forcing a failure. [ 33.948758][ T4819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.950934][ T4819] CPU: 1 PID: 4819 Comm: syz.4.80 Not tainted syzkaller #0 [ 33.952131][ T4819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 33.953696][ T4819] Call trace: [ 33.954255][ T4819] dump_backtrace+0x1c8/0x1f4 [ 33.954964][ T4819] show_stack+0x2c/0x3c [ 33.955623][ T4819] __dump_stack+0x30/0x40 [ 33.956330][ T4819] dump_stack_lvl+0xf8/0x160 [ 33.957032][ T4819] dump_stack+0x1c/0x5c [ 33.957666][ T4819] should_fail_ex+0x3c4/0x520 [ 33.958406][ T4819] should_fail+0x14/0x24 [ 33.959032][ T4819] should_fail_usercopy+0x20/0x30 [ 33.959858][ T4819] __arm64_sys_memfd_create+0x15c/0x45c [ 33.960728][ T4819] invoke_syscall+0x98/0x2bc [ 33.961409][ T4819] el0_svc_common+0x138/0x258 [ 33.962126][ T4819] do_el0_svc+0x58/0x13c [ 33.962776][ T4819] el0_svc+0x58/0x138 [ 33.963375][ T4819] el0t_64_sync_handler+0x84/0xf0 [ 33.964118][ T4819] el0t_64_sync+0x18c/0x190 [ 33.979756][ T4821] loop2: detected capacity change from 0 to 256 [ 34.047146][ T4821] capability: warning: `syz.2.81' uses 32-bit capabilities (legacy support in use) [ 34.111278][ T4332] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 34.190323][ T4828] loop4: detected capacity change from 0 to 8 [ 34.227368][ T4828] SQUASHFS error: Unable to read inode 0x0 [ 34.251122][ T4324] ocfs2: Unmounting device (7,0) on (node local) [ 34.266396][ T4828] loop4: detected capacity change from 0 to 128 [ 34.305612][ T4313] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 34.307951][ T4828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.309461][ T4828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.399118][ T4826] loop2: detected capacity change from 0 to 32768 [ 34.410549][ T4826] [ 34.410549][ T4826] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 34.410549][ T4826] [ 34.416889][ T4833] loop0: detected capacity change from 0 to 1024 [ 34.426387][ T4826] ERROR: (device loop2): diWrite: ixpxd invalid [ 34.426387][ T4826] [ 34.429246][ T4826] ERROR: (device loop2): txAbort: [ 34.429246][ T4826] [ 34.446174][ T4826] UBIFS error (pid: 4826): cannot open "(null)", error -22 [ 34.466653][ T4837] IPv6: sit1: Disabled Multicast RS [ 34.481239][ T4837] loop1: detected capacity change from 0 to 1024 [ 34.515160][ T4825] [ 34.515160][ T4825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 34.515160][ T4825] [ 34.519856][ T4825] [ 34.519856][ T4825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 34.519856][ T4825] [ 34.610793][ T9] hfsplus: b-tree write err: -5, ino 4 [ 34.625936][ T4848] FAULT_INJECTION: forcing a failure. [ 34.625936][ T4848] name failslab, interval 1, probability 0, space 0, times 0 [ 34.628025][ T4848] CPU: 0 PID: 4848 Comm: syz.3.83 Not tainted syzkaller #0 [ 34.629185][ T4848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 34.630744][ T4848] Call trace: [ 34.631298][ T4848] dump_backtrace+0x1c8/0x1f4 [ 34.632035][ T4848] show_stack+0x2c/0x3c [ 34.632692][ T4848] __dump_stack+0x30/0x40 [ 34.633347][ T4848] dump_stack_lvl+0xf8/0x160 [ 34.634126][ T4848] dump_stack+0x1c/0x5c [ 34.634835][ T4848] should_fail_ex+0x3c4/0x520 [ 34.635588][ T4848] __should_failslab+0xc0/0x120 [ 34.636369][ T4848] should_failslab+0x10/0x28 [ 34.637127][ T4848] __kmem_cache_alloc_node+0x7c/0x320 [ 34.638017][ T4848] kmalloc_trace+0x48/0x94 [ 34.638779][ T4848] nf_tables_newtable+0x3d4/0x10f0 [ 34.639588][ T4848] nfnetlink_rcv+0xc80/0x1afc [ 34.640357][ T4848] netlink_unicast+0x60c/0x824 [ 34.641084][ T4848] netlink_sendmsg+0x6e8/0x9b0 [ 34.641826][ T4848] ____sys_sendmsg+0x5b8/0x918 [ 34.642526][ T4848] __sys_sendmsg+0x25c/0x320 [ 34.643241][ T4848] __arm64_sys_sendmsg+0x80/0x94 [ 34.644011][ T4848] invoke_syscall+0x98/0x2bc [ 34.644747][ T4848] el0_svc_common+0x138/0x258 [ 34.645506][ T4848] do_el0_svc+0x58/0x13c [ 34.646191][ T4848] el0_svc+0x58/0x138 [ 34.646845][ T4848] el0t_64_sync_handler+0x84/0xf0 [ 34.647634][ T4848] el0t_64_sync+0x18c/0x190 [ 34.648401][ C0] vkms_vblank_simulate: vblank timer overrun [ 34.750665][ T4864] Bluetooth: MGMT ver 1.22 [ 34.772215][ T4840] loop0: detected capacity change from 0 to 32768 [ 34.886291][ T4840] XFS (loop0): Mounting V5 Filesystem [ 34.944311][ T4899] loop1: detected capacity change from 0 to 256 [ 34.960984][ T4840] XFS (loop0): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:128). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 34.968738][ T4840] XFS (loop0): log mount/recovery failed: error -22 [ 35.000644][ T4899] FAT-fs (loop1): Directory bread(block 64) failed [ 35.001796][ T4899] FAT-fs (loop1): Directory bread(block 65) failed [ 35.003340][ T4899] FAT-fs (loop1): Directory bread(block 66) failed [ 35.004626][ T4899] FAT-fs (loop1): Directory bread(block 67) failed [ 35.005663][ T4899] FAT-fs (loop1): Directory bread(block 68) failed [ 35.006647][ T4899] FAT-fs (loop1): Directory bread(block 69) failed [ 35.007665][ T4899] FAT-fs (loop1): Directory bread(block 70) failed [ 35.008578][ T4899] FAT-fs (loop1): Directory bread(block 71) failed [ 35.021008][ T4916] loop4: detected capacity change from 0 to 128 [ 35.022437][ T4916] EXT4-fs: inline encryption not supported [ 35.023128][ T4899] FAT-fs (loop1): Directory bread(block 72) failed [ 35.027495][ T4918] FAULT_INJECTION: forcing a failure. [ 35.027495][ T4918] name failslab, interval 1, probability 0, space 0, times 0 [ 35.029588][ T4918] CPU: 0 PID: 4918 Comm: syz.3.108 Not tainted syzkaller #0 [ 35.029907][ T4899] FAT-fs (loop1): Directory bread(block 73) failed [ 35.030745][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 35.033246][ T4918] Call trace: [ 35.033723][ T4918] dump_backtrace+0x1c8/0x1f4 [ 35.034416][ T4918] show_stack+0x2c/0x3c [ 35.035050][ T4918] __dump_stack+0x30/0x40 [ 35.035752][ T4918] dump_stack_lvl+0xf8/0x160 [ 35.036490][ T4918] dump_stack+0x1c/0x5c [ 35.037181][ T4918] should_fail_ex+0x3c4/0x520 [ 35.037943][ T4918] __should_failslab+0xc0/0x120 [ 35.038678][ T4918] should_failslab+0x10/0x28 [ 35.039400][ T4918] __kmem_cache_alloc_node+0x7c/0x320 [ 35.040244][ T4918] __kmalloc+0xd8/0x178 [ 35.040852][ T4918] nla_strdup+0x98/0x140 [ 35.041507][ T4918] nf_tables_newtable+0x3ec/0x10f0 [ 35.042307][ T4918] nfnetlink_rcv+0xc80/0x1afc [ 35.043006][ T4918] netlink_unicast+0x60c/0x824 [ 35.043703][ T4918] netlink_sendmsg+0x6e8/0x9b0 [ 35.044382][ T4918] ____sys_sendmsg+0x5b8/0x918 [ 35.045097][ T4918] __sys_sendmsg+0x25c/0x320 [ 35.045811][ T4918] __arm64_sys_sendmsg+0x80/0x94 [ 35.046625][ T4918] invoke_syscall+0x98/0x2bc [ 35.047350][ T4918] el0_svc_common+0x138/0x258 [ 35.048065][ T4918] do_el0_svc+0x58/0x13c [ 35.048703][ T4918] el0_svc+0x58/0x138 [ 35.049362][ T4918] el0t_64_sync_handler+0x84/0xf0 [ 35.050091][ T4918] el0t_64_sync+0x18c/0x190 [ 35.059473][ T4916] EXT4-fs (loop4): DAX unsupported by block device. [ 35.068341][ T4840] XFS (loop0): log mount failed [ 35.118103][ T4313] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.123619][ T4916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.125059][ T4916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.167232][ T4930] loop3: detected capacity change from 0 to 128 [ 35.192997][ T4330] Bluetooth: hci2: command 0x0406 tx timeout [ 35.225963][ T4488] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.379890][ T4940] loop3: detected capacity change from 0 to 32768 [ 35.403399][ T4940] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.117 (4940) [ 35.411360][ T4940] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 35.413582][ T4940] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 35.414875][ T4940] BTRFS info (device loop3): using free space tree [ 35.544321][ T4940] BTRFS info (device loop3): enabling ssd optimizations [ 35.551329][ T4944] loop1: detected capacity change from 0 to 32768 [ 35.554771][ T4944] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.119 (4944) [ 35.561180][ T4944] netlink: 'syz.1.119': attribute type 32 has an invalid length. [ 35.586081][ T4332] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 35.644741][ T4313] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4313) [ 35.753887][ T4975] FAULT_INJECTION: forcing a failure. [ 35.753887][ T4975] name failslab, interval 1, probability 0, space 0, times 0 [ 35.755990][ T4975] CPU: 1 PID: 4975 Comm: syz.3.123 Not tainted syzkaller #0 [ 35.757162][ T4975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 35.758710][ T4975] Call trace: [ 35.759275][ T4975] dump_backtrace+0x1c8/0x1f4 [ 35.760010][ T4975] show_stack+0x2c/0x3c [ 35.760656][ T4975] __dump_stack+0x30/0x40 [ 35.761354][ T4975] dump_stack_lvl+0xf8/0x160 [ 35.762081][ T4975] dump_stack+0x1c/0x5c [ 35.762687][ T4975] should_fail_ex+0x3c4/0x520 [ 35.763428][ T4975] __should_failslab+0xc0/0x120 [ 35.764190][ T4975] should_failslab+0x10/0x28 [ 35.764904][ T4975] __kmem_cache_alloc_node+0x7c/0x320 [ 35.765709][ T4975] __kmalloc_node+0xdc/0x17c [ 35.766411][ T4975] kvmalloc_node+0x88/0x1dc [ 35.767165][ T4975] rhashtable_init+0x3dc/0xa38 [ 35.767896][ T4975] rhltable_init+0x28/0x80 [ 35.768557][ T4975] nf_tables_newtable+0x558/0x10f0 [ 35.769341][ T4975] nfnetlink_rcv+0xc80/0x1afc [ 35.770100][ T4975] netlink_unicast+0x60c/0x824 [ 35.770860][ T4975] netlink_sendmsg+0x6e8/0x9b0 [ 35.771615][ T4975] ____sys_sendmsg+0x5b8/0x918 [ 35.772467][ T4975] __sys_sendmsg+0x25c/0x320 [ 35.773262][ T4975] __arm64_sys_sendmsg+0x80/0x94 [ 35.774037][ T4975] invoke_syscall+0x98/0x2bc [ 35.774707][ T4975] el0_svc_common+0x138/0x258 [ 35.775419][ T4975] do_el0_svc+0x58/0x13c [ 35.776024][ T4975] el0_svc+0x58/0x138 [ 35.776613][ T4975] el0t_64_sync_handler+0x84/0xf0 [ 35.777393][ T4975] el0t_64_sync+0x18c/0x190 [ 36.092148][ T4982] loop1: detected capacity change from 0 to 512 [ 36.196708][ T4969] loop0: detected capacity change from 0 to 32768 [ 36.217382][ T4982] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 36.231884][ T4982] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 36.236130][ T4468] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.342115][ T4988] loop4: detected capacity change from 0 to 32768 [ 36.344485][ T4988] jfs: Unrecognized mount option "discard=0x0000000" or missing value [ 36.372615][ T4994] loop0: detected capacity change from 0 to 1024 [ 36.384379][ T4313] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.401884][ T4994] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.488489][ T4998] loop4: detected capacity change from 0 to 512 [ 36.512328][ T4998] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 36.516544][ T4998] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 36.530686][ T4998] EXT4-fs (loop4): 1 truncate cleaned up [ 36.531670][ T4998] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.539544][ T4991] loop3: detected capacity change from 0 to 32768 [ 36.644719][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 36.811967][ T5009] loop1: detected capacity change from 0 to 4096 [ 36.827415][ T4994] ext4: Unknown parameter 'heartbeat' [ 36.879963][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 36.997080][ T4320] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 36.998161][ T4320] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 37.053229][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.129'. [ 37.079985][ T5014] loop3: detected capacity change from 0 to 32768 [ 37.128740][ T5014] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 37.220800][ T5042] 9pnet_fd: Insufficient options for proto=fd [ 37.266327][ T4332] ocfs2: Unmounting device (7,3) on (node local) [ 37.373290][ T5032] loop0: detected capacity change from 0 to 32768 [ 37.374920][ T5032] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 37.443184][ T5035] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.129: Logical block already allocated [ 37.463383][ T5035] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 37.802328][ T5035] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.129: Logical block already allocated [ 37.861657][ T5050] loop3: detected capacity change from 0 to 32768 [ 37.865807][ T5050] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.143 (5050) [ 37.871813][ T5050] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 37.875188][ T5050] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 37.876770][ T5050] BTRFS info (device loop3): enabling auto defrag [ 37.878095][ T5050] BTRFS info (device loop3): use no compression [ 37.879274][ T5050] BTRFS info (device loop3): force clearing of disk cache [ 37.881771][ T5050] BTRFS info (device loop3): max_inline at 4096 [ 37.886413][ T5050] BTRFS info (device loop3): disabling free space tree [ 38.057147][ T4319] EXT4-fs (loop4): unmounting filesystem. [ 38.160014][ T5050] BTRFS info (device loop3): enabling ssd optimizations [ 38.161852][ T5050] BTRFS info (device loop3): rebuilding free space tree [ 38.167658][ T5050] BTRFS info (device loop3): disabling free space tree [ 38.168904][ T5050] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 38.171975][ T5050] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 38.557386][ T4332] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 38.580863][ T5111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.582234][ T5111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.988389][ T5115] block device autoloading is deprecated and will be removed. [ 39.089354][ T5127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 39.131553][ T27] audit: type=1326 audit(39.120:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 39.138540][ T27] audit: type=1326 audit(39.120:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 39.159737][ T27] audit: type=1326 audit(39.130:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 39.163245][ T27] audit: type=1326 audit(39.130:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 39.166455][ T27] audit: type=1326 audit(39.130:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=428 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 39.169823][ T27] audit: type=1326 audit(39.130:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 39.176085][ T27] audit: type=1326 audit(39.130:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 39.179392][ T27] audit: type=1326 audit(39.130:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 39.182813][ T27] audit: type=1326 audit(39.140:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.3.168" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 39.253913][ T5141] netlink: 32 bytes leftover after parsing attributes in process `syz.1.173'. [ 39.570552][ T5145] netlink: 'syz.3.172': attribute type 7 has an invalid length. [ 39.571820][ T5145] netlink: 'syz.3.172': attribute type 8 has an invalid length. [ 39.599307][ T5149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.601430][ T5149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.625150][ T4492] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 40.109799][ T4492] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 40.111258][ T4492] usb 1-1: config 0 has no interface number 0 [ 40.112220][ T4492] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 40.118558][ T4492] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 40.118684][ T5165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.120215][ T4492] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 40.122130][ T5165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.130645][ T4492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.138644][ T4492] usb 1-1: config 0 descriptor?? [ 40.142436][ T5135] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 40.168472][ T4492] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 40.323180][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 40.365678][ T4492] usb 1-1: USB disconnect, device number 2 [ 40.365777][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 41.600074][ T5223] Invalid option length (1045702) for dns_resolver key [ 42.186585][ T5241] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.334156][ T5241] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.767258][ T5241] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.884151][ T5241] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.042056][ T5241] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.048903][ T5241] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.360697][ T5241] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.364018][ T5241] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.196638][ T5315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.243' sets config #84 [ 44.216352][ T5319] loop2: detected capacity change from 0 to 7 [ 44.220368][ T5319] Dev loop2: unable to read RDB block 7 [ 44.223335][ T5319] loop2: unable to read partition table [ 44.224376][ T5319] loop2: partition table beyond EOD, truncated [ 44.226886][ T5319] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 44.777860][ T5338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.780332][ T5338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.438742][ T4389] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.442143][ T4389] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.449562][ T5379] netlink: 'syz.3.268': attribute type 1 has an invalid length. [ 46.499968][ T5379] device macvlan2 entered promiscuous mode [ 46.501897][ T5379] device bond1 entered promiscuous mode [ 46.504016][ T5379] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 46.547246][ T5379] device bond1 left promiscuous mode [ 49.324373][ T4616] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 49.504419][ T4616] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 49.506103][ T4616] usb 1-1: config 0 interface 0 has no altsetting 0 [ 49.509046][ T4616] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 49.510649][ T4616] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 49.512104][ T4616] usb 1-1: Product: syz [ 49.512798][ T4616] usb 1-1: Manufacturer: syz [ 49.514239][ T4616] usb 1-1: SerialNumber: syz [ 49.520360][ T4616] usb 1-1: config 0 descriptor?? [ 49.534491][ T4616] usb 1-1: selecting invalid altsetting 0 [ 50.154153][ T5502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.163889][ T5502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.858707][ T4490] usb 1-1: USB disconnect, device number 3 [ 51.956166][ T5564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.957796][ T5564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.977517][ T5567] binder: 5566:5567 ioctl 4018620d 0 returned -22 [ 51.983723][ T5567] binder: 5566:5567 got transaction to invalid handle, 1 [ 51.985273][ T5567] binder: 5567:5566 cannot find target node [ 51.987403][ T5567] binder: 5566:5567 transaction async to 0:0 failed 1/29201/-22, size 0-0 line 3045 [ 51.990543][ T4497] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.080486][ T5573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.082017][ T5573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.770444][ T5603] capability: warning: `syz.4.350' uses deprecated v2 capabilities in a way that may be insecure [ 53.527202][ T5631] mmap: syz.0.361 (5631) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.680841][ T5643] kernel profiling enabled (shift: 17) [ 54.087245][ T5661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.090173][ T5661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.490497][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 54.514791][ T5667] device bond0 entered promiscuous mode [ 54.515713][ T5667] device bond_slave_0 entered promiscuous mode [ 54.516810][ T5667] device bond_slave_1 entered promiscuous mode [ 54.543293][ T5667] device gretap0 entered promiscuous mode [ 54.559464][ T5674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.561079][ T5674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.584242][ T5667] device hsr1 entered promiscuous mode [ 55.165147][ T5699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.166590][ T5699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.845395][ T5721] device ip6gre1 entered promiscuous mode [ 57.616514][ T27] audit: type=1326 audit(2000000004.710:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5769 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 57.619875][ T27] audit: type=1326 audit(2000000004.710:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5769 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=282 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 57.625137][ T5773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.626506][ T5773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.627626][ T27] audit: type=1326 audit(2000000004.710:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5769 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 57.630906][ T27] audit: type=1326 audit(2000000004.710:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5769 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 57.647922][ T27] audit: type=1326 audit(2000000004.720:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5769 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 57.726540][ T27] audit: type=1326 audit(2000000004.720:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5769 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 57.730257][ T27] audit: type=1326 audit(2000000004.720:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5769 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 57.734007][ T27] audit: type=1326 audit(2000000004.720:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5769 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 57.737432][ T27] audit: type=1326 audit(2000000004.720:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5769 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 57.740885][ T27] audit: type=1326 audit(2000000004.720:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5769 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa0f5b9e8 code=0x7ffc0000 [ 58.417644][ T5808] ksmbd: Unknown IPC event: 4, ignore. [ 58.519200][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 59.039062][ T5826] serio: Serial port ptm0 [ 60.038477][ T5854] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 64.475540][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.477546][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.500852][ T7] cfg80211: failed to load regulatory.db [ 65.651452][ T5986] input: syz1 as /devices/virtual/input/input4 [ 66.343001][ T6026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.344883][ T6026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.687759][ T6049] sp0: Synchronizing with TNC [ 67.961503][ T6049] [U] è [ 68.837304][ T6070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.839783][ T6070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.053510][ T6084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.524'. [ 69.290339][ T6087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.365508][ T6085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.783496][ T6107] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 69.925850][ T6121] netlink: 132 bytes leftover after parsing attributes in process `syz.1.539'. [ 70.619446][ T6148] device syzkaller1 entered promiscuous mode [ 72.189526][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.191342][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.286135][ T6206] 9pnet_fd: Insufficient options for proto=fd [ 72.829222][ T4389] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 73.117590][ T4389] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 73.120004][ T4389] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.122683][ T4389] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 73.124885][ T4389] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 73.126266][ T4389] usb 1-1: Manufacturer: syz [ 73.167455][ T4389] usb 1-1: config 0 descriptor?? [ 73.174264][ T4389] Registered IR keymap rc-hauppauge [ 73.588491][ T4389] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 73.594377][ T4389] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 73.600846][ T4389] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 73.611023][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 73.622072][ T4389] usb 1-1: USB disconnect, device number 4 [ 73.915854][ T4330] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 73.917731][ T4330] Bluetooth: hci4: Injecting HCI hardware error event [ 73.923913][ T47] Bluetooth: hci4: hardware error 0x00 [ 75.027642][ T6274] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 75.205547][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 75.249161][ T6284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.252187][ T6284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.552889][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 75.554981][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 75.556391][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.560186][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 75.561305][ T24] pvrusb2: ********** [ 75.561899][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 75.565930][ T24] pvrusb2: Important functionality might not be entirely working. [ 75.567155][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 75.568772][ T24] pvrusb2: ********** [ 75.784692][ T2835] pvrusb2: Invalid write control endpoint [ 75.816438][ T2835] pvrusb2: Invalid write control endpoint [ 75.817802][ T2835] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 75.819344][ T2835] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 75.820468][ T2835] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 75.821906][ T2835] pvrusb2: Device being rendered inoperable [ 75.824700][ T2835] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 75.826039][ T2835] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 75.829310][ T2835] pvrusb2: Attached sub-driver cx25840 [ 75.830291][ T2835] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 75.831799][ T2835] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 76.015809][ T6267] pvrusb2: Killing an I2C write to 2 that is too large (desired=62 limit=61) [ 76.018621][ T24] usb 1-1: USB disconnect, device number 5 [ 76.030460][ T6297] netlink: 'syz.1.605': attribute type 6 has an invalid length. [ 76.031898][ T6297] netlink: 'syz.1.605': attribute type 7 has an invalid length. [ 76.037339][ T6297] netlink: 'syz.1.605': attribute type 8 has an invalid length. [ 76.097284][ T6304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.098689][ T6304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.342597][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.344266][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.392915][ T47] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 77.120253][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.131966][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.293007][ T4492] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 78.471064][ T6356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.472738][ T6356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.545997][ T4492] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 78.552076][ T4492] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 78.554035][ T4492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.555348][ T4492] usb 1-1: Product: syz [ 78.556013][ T4492] usb 1-1: Manufacturer: syz [ 78.556830][ T4492] usb 1-1: SerialNumber: syz [ 78.559862][ T4492] usb 1-1: config 0 descriptor?? [ 78.950976][ T6370] dccp_v4_rcv: dropped packet with invalid checksum [ 79.709176][ T6386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.710648][ T6386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.753596][ T4373] usb 1-1: USB disconnect, device number 6 [ 79.816492][ T6395] netlink: 36 bytes leftover after parsing attributes in process `syz.0.643'. [ 79.840981][ T6398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.845762][ T6398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.986200][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.659'. [ 81.060936][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.659'. [ 83.214307][ T6483] loop8: detected capacity change from 0 to 7 [ 83.225517][ T6483] Dev loop8: unable to read RDB block 7 [ 83.226411][ T6483] loop8: unable to read partition table [ 83.231874][ T6483] loop8: partition table beyond EOD, truncated [ 83.240352][ T6483] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 83.331228][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 83.446081][ T6496] serio: Serial port ptm1 [ 84.762303][ T4382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 84.767042][ T4382] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.779861][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.781460][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.896834][ T6529] fido_id[6529]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.062932][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 87.079041][ T6594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.713'. [ 87.504202][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.506030][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 87.507583][ T24] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 87.509156][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.512624][ T24] usb 1-1: config 0 descriptor?? [ 89.162315][ T6643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.172558][ T6643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.432941][ T24] usb 1-1: USB disconnect, device number 7 [ 89.717223][ T6667] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 90.206228][ T6688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.207670][ T6688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.741244][ T6707] binder: tried to use weak ref as strong ref [ 90.742379][ T6707] binder: 6706:6707 Acquire 1 refcount change on invalid ref 0 ret -22 [ 91.197264][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.198873][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.066501][ T6781] usb usb8: usbfs: process 6781 (syz.4.783) did not claim interface 0 before use [ 93.102024][ T6781] xt_connbytes: Forcing CT accounting to be enabled [ 93.104001][ T6781] Cannot find del_set index 1 as target [ 93.698529][ T6804] netlink: 'syz.2.793': attribute type 10 has an invalid length. [ 93.700829][ T6804] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.793'. [ 94.037759][ T6811] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 94.039022][ T6811] netlink: 224 bytes leftover after parsing attributes in process `syz.0.795'. [ 95.015092][ T6844] fuse: Bad value for 'group_id' [ 95.136981][ T6862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.816'. [ 95.223888][ T6868] netlink: 'syz.0.818': attribute type 83 has an invalid length. [ 95.260681][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.813'. [ 95.744324][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.826'. [ 96.456791][ T6913] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20003 [ 96.652429][ T6919] netlink: 48 bytes leftover after parsing attributes in process `syz.1.838'. [ 97.121412][ T6925] binder: 6924:6925 tried to acquire reference to desc 0, got 1 instead [ 97.129214][ T6925] binder: 6924:6925 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 97.131441][ T6925] binder: 6925 RLIMIT_NICE not set [ 97.132527][ T6925] binder: 6925 RLIMIT_NICE not set [ 97.138295][ T6925] binder: 6925 RLIMIT_NICE not set [ 97.140727][ T6925] binder: 6924:6925 got transaction with invalid handle, 1 [ 97.142020][ T6925] binder: 6925:6924 translate handle failed [ 97.145050][ T6925] binder: 6924:6925 transaction reply to 6924:6925 failed 11/29201/-22, size 72-24 line 3393 [ 97.147052][ T6925] binder: send failed reply for transaction 10 to 6924:6925 [ 97.156947][ T4492] binder: undelivered TRANSACTION_COMPLETE [ 97.157971][ T4492] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.159121][ T4492] binder: undelivered TRANSACTION_ERROR: 29190 [ 99.963543][ T7017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.964946][ T7017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.971398][ T7017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.983064][ T7017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.086043][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.094804][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.492946][ T4614] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 100.682978][ T4614] usb 1-1: Using ep0 maxpacket: 32 [ 100.898766][ T4614] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 100.900169][ T4614] usb 1-1: config 0 has no interface number 0 [ 100.901189][ T4614] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 100.902791][ T4614] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 100.904863][ T4614] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.915509][ T4614] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 100.917321][ T4614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.918634][ T4614] usb 1-1: Product: syz [ 100.919244][ T4614] usb 1-1: Manufacturer: syz [ 100.920013][ T4614] usb 1-1: SerialNumber: syz [ 100.933981][ T4614] usb 1-1: config 0 descriptor?? [ 100.937445][ T7036] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.941988][ T4614] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input6 [ 101.574316][ T24] usb 1-1: USB disconnect, device number 8 [ 101.693681][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.896'. [ 102.460213][ T7096] syz.3.907 uses obsolete (PF_INET,SOCK_PACKET) [ 102.692952][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 102.875953][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 102.878182][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 102.879276][ T24] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 102.880660][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.893912][ T24] usb 1-1: config 0 descriptor?? [ 103.445695][ T24] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 103.446969][ T24] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 103.448040][ T24] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 103.465350][ T24] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 103.639510][ C1] usb 1-1: input irq status -75 received [ 104.022180][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 104.099537][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.101166][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.515537][ T24] corsair-cpro: probe of 0003:1B1C:0C10.0003 failed with error -110 [ 104.548545][ T24] usb 1-1: USB disconnect, device number 9 [ 104.561949][ T7157] "syz.3.933" (7157) uses obsolete ecb(arc4) skcipher [ 104.595294][ T7158] fido_id[7158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 105.206175][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 105.257517][ T7183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.259976][ T7183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.305063][ T7188] loop2: detected capacity change from 0 to 7 [ 105.306921][ T4488] Dev loop2: unable to read RDB block 7 [ 105.307980][ T4488] loop2: AHDI p1 p2 [ 105.308626][ T4488] loop2: partition table partially beyond EOD, truncated [ 105.312803][ T7188] Dev loop2: unable to read RDB block 7 [ 105.316892][ T7188] loop2: AHDI p1 p2 [ 105.317554][ T7188] loop2: partition table partially beyond EOD, truncated [ 105.977851][ T7192] tipc: Enabling of bearer rejected, failed to enable media [ 106.798084][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.803509][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.222004][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 107.327175][ T7246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.345843][ T7246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.346918][ T7249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.348826][ T7249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.886539][ T7253] binder: 7252:7253 tried to acquire reference to desc 0, got 1 instead [ 107.888664][ T7253] binder: release 7252:7253 transaction 16 out, still active [ 107.890249][ T7253] binder: undelivered TRANSACTION_COMPLETE [ 107.891511][ T7253] binder: 7252:7253 ioctl c0306201 0 returned -14 [ 107.900556][ T22] binder: send failed reply for transaction 16, target dead [ 109.097812][ T7290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.099392][ T7290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.665315][ T7298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.666811][ T7298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.761246][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.762830][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.669139][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 111.102626][ T7338] device pim6reg1 entered promiscuous mode [ 112.925803][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.933197][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.940442][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.943308][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.530829][ T7400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.535661][ T7400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.674599][ T7427] tipc: Enabling of bearer rejected, failed to enable media [ 115.003088][ T4382] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 115.385118][ T4382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.387195][ T4382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.389839][ T4382] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.392089][ T4382] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 115.394534][ T4382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.397267][ T4382] usb 1-1: config 0 descriptor?? [ 115.917288][ T7433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.922644][ T7433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.437676][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.441399][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.502763][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.504352][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.505414][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.506478][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.507492][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.508474][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.509442][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.510401][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.520135][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.521205][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.522502][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.523892][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.525025][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.526181][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.527273][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.528358][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.531674][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.536957][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.538012][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.539066][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.540121][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.548001][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.549116][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.550135][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.551145][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.552268][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.558578][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.559622][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.560695][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.561752][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.570276][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.571360][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.572386][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.574188][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.575407][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.576434][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.577395][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.578382][ T4382] itetech 0003:258A:6A88.0004: unknown main item tag 0x0 [ 116.584501][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 116.584509][ T27] audit: type=1326 audit(2000000063.680:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 116.589504][ T27] audit: type=1326 audit(2000000063.680:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 116.594612][ T4382] itetech 0003:258A:6A88.0004: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.0-1/input0 [ 116.597466][ T27] audit: type=1326 audit(2000000063.680:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 116.602635][ T27] audit: type=1326 audit(2000000063.680:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 116.609865][ T27] audit: type=1326 audit(2000000063.680:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 116.613594][ T27] audit: type=1326 audit(2000000063.680:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 116.616753][ T27] audit: type=1326 audit(2000000063.680:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 116.620004][ T27] audit: type=1326 audit(2000000063.680:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=432 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 116.625784][ T27] audit: type=1326 audit(2000000063.680:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 116.629168][ T27] audit: type=1326 audit(2000000063.680:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd5b9e8 code=0x7ffc0000 [ 116.638240][ T47] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 116.717075][ T4497] usb 1-1: USB disconnect, device number 10 [ 116.897321][ T7500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.898725][ T7500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.463145][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 119.691063][ T7585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.697609][ T7585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.039651][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 121.945369][ T7648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.953149][ T7648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.418893][ T7719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.420748][ T7719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.425509][ T7719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.427057][ T7719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.689260][ T4491] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 125.022916][ T4491] usb 1-1: Using ep0 maxpacket: 32 [ 125.059128][ T4491] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 125.060446][ T4491] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.061995][ T4491] usb 1-1: config 0 has no interface number 0 [ 125.063016][ T4491] usb 1-1: too many endpoints for config 0 interface 133 altsetting 255: 255, using maximum allowed: 30 [ 125.066752][ T4491] usb 1-1: config 0 interface 133 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 125.068937][ T4491] usb 1-1: config 0 interface 133 has no altsetting 0 [ 125.079332][ T4491] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 125.080777][ T4491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.081967][ T4491] usb 1-1: Product: syz [ 125.082593][ T4491] usb 1-1: Manufacturer: syz [ 125.083964][ T4491] usb 1-1: SerialNumber: syz [ 125.086931][ T4491] usb 1-1: config 0 descriptor?? [ 125.687036][ T4491] usb 1-1: probing VID:PID(0424:012C) [ 125.691459][ T4491] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 125.696421][ T4491] vub300: probe of 1-1:0.133 failed with error -22 [ 125.706144][ T4491] usb 1-1: USB disconnect, device number 11 [ 125.729194][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.730725][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.913410][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.914434][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.567967][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'. [ 126.627790][ T7773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.627893][ T7773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.142745][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.145868][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.151788][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.155049][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.523629][ T7789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.525233][ T7789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.018702][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.020422][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.060851][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.064594][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.702118][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.704112][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.832978][ T4608] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 129.012920][ T4608] usb 1-1: Using ep0 maxpacket: 16 [ 129.015841][ T4608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.017653][ T4608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.019252][ T4608] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 129.020883][ T4608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.026092][ T4608] usb 1-1: config 0 descriptor?? [ 129.707546][ T4608] apple 0003:05AC:0247.0005: unexpected long global item [ 129.711029][ T4608] apple 0003:05AC:0247.0005: parse failed [ 129.716241][ T4608] apple: probe of 0003:05AC:0247.0005 failed with error -22 [ 129.909623][ T4608] usb 1-1: USB disconnect, device number 12 [ 130.493738][ T5945] Bluetooth: hci5: Frame reassembly failed (-84) [ 130.830136][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.839528][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.553094][ T47] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 132.554522][ T4330] Bluetooth: hci5: command 0x1003 tx timeout [ 132.670188][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 132.670202][ T27] audit: type=1326 audit(2000000079.760:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.2.1217" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5b9e8 code=0x0 [ 132.932735][ T7937] syz.3.1218 sent an empty control message without MSG_MORE. [ 133.031531][ T7945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.035461][ T7945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.039075][ T7945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.040656][ T7945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.106721][ T7952] binder: 7950:7952 got transaction to invalid handle, 1 [ 133.108051][ T7952] binder: 7952:7950 cannot find target node [ 133.113309][ T7952] binder: 7950:7952 transaction call to 0:0 failed 21/29201/-22, size 0-0 line 3045 [ 133.117460][ T7952] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.351819][ T7965] fuse: blksize only supported for fuseblk [ 134.447524][ T7973] [U] á [ 134.836813][ T4608] hid-generic 0020:537100:0000.0006: hidraw0: SENSOR HUB HID v240000.00 Device [syz1] on syz0 [ 135.535940][ T8007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.609404][ T8007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.098116][ T8034] Bluetooth: hci0: invalid length 4, exp 2 for type 13 [ 138.107346][ T8058] libceph: resolve '0' (ret=-3): failed [ 138.481221][ T4491] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 138.615871][ T27] audit: type=1326 audit(2000000085.710:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5b9e8 code=0x7ffc0000 [ 138.620721][ T27] audit: type=1326 audit(2000000085.710:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5b9e8 code=0x7ffc0000 [ 138.630257][ T27] audit: type=1326 audit(2000000085.720:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa5f5b9e8 code=0x7ffc0000 [ 138.653117][ T27] audit: type=1326 audit(2000000085.720:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5b9e8 code=0x7ffc0000 [ 138.658839][ T27] audit: type=1326 audit(2000000085.720:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5b9e8 code=0x7ffc0000 [ 138.663239][ T4491] usb 1-1: Using ep0 maxpacket: 32 [ 138.665954][ T4491] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 138.667685][ T4491] usb 1-1: config 1 interface 0 has no altsetting 0 [ 138.670538][ T4491] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 138.672315][ T4491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.674609][ T4491] usb 1-1: Product: syz [ 138.675278][ T4491] usb 1-1: Manufacturer: syz [ 138.678277][ T4491] usb 1-1: SerialNumber: syz [ 138.679785][ T27] audit: type=1326 audit(2000000085.720:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=204 compat=0 ip=0xffffa5f5b9e8 code=0x7ffc0000 [ 138.698217][ T27] audit: type=1326 audit(2000000085.720:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5b9e8 code=0x7ffc0000 [ 138.703946][ T27] audit: type=1326 audit(2000000085.720:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.2.1272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f5b9e8 code=0x7ffc0000 [ 139.022751][ T4491] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 139.030319][ T4491] usb 1-1: USB disconnect, device number 13 [ 139.086609][ T8101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.088223][ T8101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.105379][ T4491] appletouch 1-1:1.0: input: appletouch disconnected [ 139.559981][ T8105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.561637][ T8105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.252947][ T4608] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 141.548939][ T4608] usb 1-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 141.550469][ T4608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.554838][ T4608] usb 1-1: config 0 descriptor?? [ 141.561029][ T4608] pwc: Creative Labs Webcam 5 detected. [ 142.105220][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.109432][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.166738][ T4608] pwc: recv_control_msg error -71 req 02 val 2b00 [ 142.168365][ T4608] pwc: recv_control_msg error -71 req 02 val 2700 [ 142.169827][ T4608] pwc: recv_control_msg error -71 req 04 val 1600 [ 142.171183][ T4608] pwc: recv_control_msg error -71 req 02 val 2c00 [ 142.173534][ T4608] pwc: recv_control_msg error -71 req 04 val 1000 [ 142.176022][ T4608] pwc: recv_control_msg error -71 req 04 val 1300 [ 142.177648][ T4608] pwc: recv_control_msg error -71 req 04 val 1400 [ 142.183646][ T4608] pwc: recv_control_msg error -71 req 02 val 2000 [ 142.185849][ T4608] pwc: recv_control_msg error -71 req 02 val 2100 [ 142.189031][ T4608] pwc: recv_control_msg error -71 req 06 val 0600 [ 142.191313][ T4608] pwc: recv_control_msg error -71 req 04 val 1500 [ 142.192975][ T4608] pwc: recv_control_msg error -71 req 02 val 2500 [ 142.196362][ T4608] pwc: recv_control_msg error -71 req 02 val 2400 [ 142.198599][ T4608] pwc: recv_control_msg error -71 req 02 val 2600 [ 142.200003][ T4608] pwc: recv_control_msg error -71 req 02 val 2900 [ 142.201684][ T4608] pwc: recv_control_msg error -71 req 02 val 2800 [ 142.203174][ T4608] pwc: recv_control_msg error -71 req 04 val 1100 [ 142.204455][ T4608] pwc: recv_control_msg error -71 req 04 val 1200 [ 142.205837][ T4608] pwc: Failed to power off camera (-71) [ 142.211738][ T4608] pwc: Registered as video11. [ 142.213621][ T4608] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 142.217308][ T4608] usb 1-1: USB disconnect, device number 14 [ 142.399055][ T27] audit: type=1326 audit(2000000089.490:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.1322" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa955b9e8 code=0x0 [ 143.841930][ T8256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.843526][ T8256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.911030][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 143.912599][ T4330] CPU: 0 PID: 4330 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 143.913792][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 143.915406][ T4330] Workqueue: hci0 hci_rx_work [ 143.916158][ T4330] Call trace: [ 143.916675][ T4330] dump_backtrace+0x1c8/0x1f4 [ 143.917431][ T4330] show_stack+0x2c/0x3c [ 143.918122][ T4330] __dump_stack+0x30/0x40 [ 143.918846][ T4330] dump_stack_lvl+0xf8/0x160 [ 143.919562][ T4330] dump_stack+0x1c/0x5c [ 143.920202][ T4330] sysfs_create_dir_ns+0x22c/0x24c [ 143.921008][ T4330] kobject_add_internal+0x5a8/0xb30 [ 143.921928][ T4330] kobject_add+0x134/0x1f8 [ 143.922707][ T4330] device_add+0x3f0/0xf94 [ 143.923386][ T4330] hci_conn_add_sysfs+0xbc/0x1cc [ 143.924176][ T4330] le_conn_complete_evt+0xcb0/0x1220 [ 143.926153][ T4330] hci_le_conn_complete_evt+0x114/0x3f8 [ 143.926182][ T4330] hci_le_meta_evt+0x2c0/0x4a4 [ 143.926192][ T4330] hci_event_packet+0x6ac/0xf08 [ 143.926200][ T4330] hci_rx_work+0x324/0xaa0 [ 143.926206][ T4330] process_one_work+0x7f4/0x13a8 [ 143.926213][ T4330] worker_thread+0x8c8/0xfbc [ 143.926219][ T4330] kthread+0x250/0x2d8 [ 143.926228][ T4330] ret_from_fork+0x10/0x20 [ 143.926450][ T4330] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 143.926463][ T4330] Bluetooth: hci0: failed to register connection device [ 144.108420][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 144.112059][ T8276] tipc: Enabling of bearer rejected, failed to enable media [ 144.206098][ T8279] binder: 8270:8279 ioctl 4018620d 0 returned -22 [ 144.429120][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 144.994255][ T8305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1359'. [ 144.996299][ T8302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.997870][ T8302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.106387][ T8317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.108112][ T8317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.542944][ T4608] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 145.569715][ T8329] binder: 8328:8329 tried to acquire reference to desc 0, got 1 instead [ 145.571087][ T8329] binder: 8328:8329 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 145.710082][ T8339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.711611][ T8339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.773051][ T4608] usb 1-1: Using ep0 maxpacket: 16 [ 146.116982][ T4608] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 146.131251][ T4608] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 146.132783][ T4608] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.137546][ T4608] usb 1-1: Product: syz [ 146.139536][ T4608] usb 1-1: Manufacturer: syz [ 146.140568][ T4608] usb 1-1: SerialNumber: syz [ 146.145203][ T4608] usbtest 1-1:254.0: couldn't get endpoints, -22 [ 146.146198][ T4608] usbtest: probe of 1-1:254.0 failed with error -22 [ 146.397337][ T4330] ------------[ cut here ]------------ [ 146.398358][ T4330] WARNING: CPU: 0 PID: 4330 at net/bluetooth/hci_conn.c:668 hci_conn_timeout+0x1fc/0x424 [ 146.399877][ T4330] Modules linked in: [ 146.400487][ T4330] CPU: 0 PID: 4330 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 146.401606][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 146.403260][ T4330] Workqueue: hci2 hci_conn_timeout [ 146.404112][ T4330] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 146.405396][ T4330] pc : hci_conn_timeout+0x1fc/0x424 [ 146.406226][ T4330] lr : hci_conn_timeout+0x1fc/0x424 [ 146.407020][ T4330] sp : ffff800020be7b30 [ 146.407671][ T4330] x29: ffff800020be7b30 x28: ffff0000d101a000 x27: ffff0000d5fca330 [ 146.408889][ T4330] x26: ffff0000c0885618 x25: 1fffe00018110ac3 x24: dfff800000000000 [ 146.410188][ T4330] x23: ffff0000c4ad6000 x22: dfff800000000000 x21: 00000000ffffffff [ 146.411537][ T4330] x20: ffff0000d5fca000 x19: ffff0000d5fca330 x18: ffff800011a5bd40 [ 146.412820][ T4330] x17: ffff800018184000 x16: ffff800008042d90 x15: ffff800017c65000 [ 146.414077][ T4330] x14: ffff0000df37a658 x13: 0000000000000000 x12: 0000000000ff0100 [ 146.415300][ T4330] x11: ff00800010b0185c x10: 0000000000000000 x9 : ffff800010b0185c [ 146.416534][ T4330] x8 : ffff0000df379bc0 x7 : 0000000000000000 x6 : 0000000000000000 [ 146.417784][ T4330] x5 : ffff8000181a4c60 x4 : 0000000000000008 x3 : ffff800010b01698 [ 146.419007][ T4330] x2 : 0000000000000000 x1 : 00000000ffffffff x0 : 0000000000000000 [ 146.420249][ T4330] Call trace: [ 146.420730][ T4330] hci_conn_timeout+0x1fc/0x424 [ 146.421534][ T4330] process_one_work+0x7f4/0x13a8 [ 146.422286][ T4330] worker_thread+0x8c8/0xfbc [ 146.422943][ T4330] kthread+0x250/0x2d8 [ 146.423583][ T4330] ret_from_fork+0x10/0x20 [ 146.424328][ T4330] irq event stamp: 3040 [ 146.424950][ T4330] hardirqs last enabled at (3039): [] exit_to_kernel_mode+0xcc/0xfc [ 146.426407][ T4330] hardirqs last disabled at (3040): [] el1_dbg+0x24/0x80 [ 146.427757][ T4330] softirqs last enabled at (2948): [] handle_softirqs+0xaf8/0xc6c [ 146.429182][ T4330] softirqs last disabled at (2905): [] __do_softirq+0x14/0x20 [ 146.430527][ T4330] ---[ end trace 0000000000000000 ]--- [ 146.534164][ T4608] usb 1-1: USB disconnect, device number 15 [ 148.472898][ T4336] Bluetooth: hci3: command 0x0406 tx timeout [ 148.472938][ T4330] Bluetooth: hci1: command 0x0406 tx timeout