last executing test programs: 8.600898361s ago: executing program 3 (id=826): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="186000000000000000000e0000000000181100008492d63b915cfef2beed94ad04125f34095481037419769472083402b58cc5d064f0b58a27fcd4c7e697fd6f3d83bfa47e61a3a13b88a108b2699a407d9dd885495a23283493e2", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) lseek(0xffffffffffffffff, 0xfffffffff7fffffe, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x64}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$FIONCLEX(r6, 0x5450) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) 7.473808667s ago: executing program 3 (id=830): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0xffffffff, "152a8b7d8c220803fd19cc7a25ff2e000000f500000000000000000800"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/103, 0x67, 0x800) 5.006334894s ago: executing program 2 (id=844): setns(0xc9, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0) 4.880694717s ago: executing program 2 (id=845): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0) 4.854952717s ago: executing program 0 (id=846): unshare(0x2a060400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x0, 0x0}, 0x10) 4.73786794s ago: executing program 2 (id=847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x86ff39d4d87f103b, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) 4.622609543s ago: executing program 0 (id=848): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0xffffffff, "152a8b7d8c220803fd19cc7a25ff2e000000f500000000000000000800"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 4.621783873s ago: executing program 1 (id=849): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000008510", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 4.534682905s ago: executing program 2 (id=850): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00', 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) 4.516514425s ago: executing program 0 (id=851): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x20400, &(0x7f0000000340)=ANY=[], 0x2, 0x605, &(0x7f0000001f80)="$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") unshare(0x8060400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x7) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x4c80, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000280)=ANY=[]) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fallocate(0xffffffffffffffff, 0x71, 0x80000001, 0xcfc9) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) clock_gettime(0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x0) write(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 4.422745727s ago: executing program 1 (id=852): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x6008080) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="580100001000050700000000000000000000000000000000896d5ad149404c010000000000000000000000000000000100000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB], 0x158}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="4137a29b582bd471798f15f967e7f8118e1abf61", 0x14}], 0x1}}], 0x1, 0x4000801) 4.391363028s ago: executing program 3 (id=853): setns(0xc9, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0) 3.624309136s ago: executing program 2 (id=854): socket$inet6(0xa, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)) 3.623538026s ago: executing program 1 (id=855): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x30}}, 0x0) 3.528320608s ago: executing program 0 (id=856): socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2c060000) unshare(0x28000600) 3.471511849s ago: executing program 1 (id=857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf25170000005c00068014000300"], 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 3.466104759s ago: executing program 3 (id=858): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) bind$can_j1939(r3, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f000000a580)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 3.232531785s ago: executing program 2 (id=859): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0xffffffff, "152a8b7d8c220803fd19cc7a25ff2e000000f500000000000000000800"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 2.849902854s ago: executing program 1 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x4, @remote, 0x3}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @broadcast}], 0x3c) sendmmsg$inet6(r1, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r6 = socket(0x2b, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x8000000, 0x2, 0x0, 0x18, 0x4, 0x96}, 0x20) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 1.010578766s ago: executing program 1 (id=861): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0xffffffff, "152a8b7d8c220803fd19cc7a25ff2e000000f500000000000000000800"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/103, 0x67, 0x800) 915.466439ms ago: executing program 0 (id=862): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) 875.6313ms ago: executing program 3 (id=863): r0 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) gettid() timer_create(0x5, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_PHYS_ADDR(r1, 0x40026102, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xd0) syz_io_uring_setup(0x496, 0x0, &(0x7f0000000000), &(0x7f0000000600), &(0x7f0000000040)) timer_delete(0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a000100050000000000007208c303000500000000", 0x39}], 0x1) 77.943528ms ago: executing program 0 (id=864): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x20400, &(0x7f0000000340)=ANY=[], 0x2, 0x605, &(0x7f0000001f80)="$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") unshare(0x8060400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x4c80, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000280)=ANY=[]) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) fallocate(0xffffffffffffffff, 0x71, 0x80000001, 0xcfc9) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) clock_gettime(0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x0) write(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 0s ago: executing program 3 (id=865): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x6008080) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="580100001000050700000000000000000000000000000000896d5ad149404c010000000000000000000000000000000100000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="00000000000000000000000000000001000012343300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/133], 0x158}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="4137a29b582bd471798f15f967e7f8118e1abf61", 0x14}], 0x1}}], 0x1, 0x4000801) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.0' (ED25519) to the list of known hosts. [ 81.611042][ T5764] cgroup: Unknown subsys name 'net' [ 81.747321][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.452238][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.695482][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.704432][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.712205][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.713090][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.723422][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.731914][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.735587][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.742316][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.748640][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.761735][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.770755][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.778826][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.786489][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.794032][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.840070][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.852692][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.861463][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.867357][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.871183][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.883963][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.889812][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.893105][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.904402][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.912614][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.373505][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 86.454396][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 86.515328][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 86.592068][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.599952][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.607201][ T5777] bridge_slave_0: entered allmulticast mode [ 86.615004][ T5777] bridge_slave_0: entered promiscuous mode [ 86.628142][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.635775][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.643111][ T5777] bridge_slave_1: entered allmulticast mode [ 86.650340][ T5777] bridge_slave_1: entered promiscuous mode [ 86.683466][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 86.751465][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.758792][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.765986][ T5775] bridge_slave_0: entered allmulticast mode [ 86.773877][ T5775] bridge_slave_0: entered promiscuous mode [ 86.791650][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.803603][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.825043][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.832403][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.839774][ T5775] bridge_slave_1: entered allmulticast mode [ 86.846837][ T5775] bridge_slave_1: entered promiscuous mode [ 86.949225][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.977302][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.990631][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.997872][ T5776] bridge_slave_0: entered allmulticast mode [ 87.010826][ T5776] bridge_slave_0: entered promiscuous mode [ 87.034508][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.051326][ T5777] team0: Port device team_slave_0 added [ 87.062940][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.071043][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.083952][ T5776] bridge_slave_1: entered allmulticast mode [ 87.091680][ T5776] bridge_slave_1: entered promiscuous mode [ 87.132166][ T5777] team0: Port device team_slave_1 added [ 87.202831][ T5775] team0: Port device team_slave_0 added [ 87.267876][ T5775] team0: Port device team_slave_1 added [ 87.297422][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.335624][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.344082][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.374753][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.401690][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.412256][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.438534][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.476197][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.498660][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.505901][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.517133][ T5778] bridge_slave_0: entered allmulticast mode [ 87.524353][ T5778] bridge_slave_0: entered promiscuous mode [ 87.541952][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.549081][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.575858][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.597699][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.605178][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.612792][ T5778] bridge_slave_1: entered allmulticast mode [ 87.619901][ T5778] bridge_slave_1: entered promiscuous mode [ 87.639196][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.646161][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.672350][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.739906][ T5777] hsr_slave_0: entered promiscuous mode [ 87.746652][ T5777] hsr_slave_1: entered promiscuous mode [ 87.756837][ T5776] team0: Port device team_slave_0 added [ 87.766152][ T5776] team0: Port device team_slave_1 added [ 87.784651][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.834765][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.849308][ T51] Bluetooth: hci0: command tx timeout [ 87.866203][ T5775] hsr_slave_0: entered promiscuous mode [ 87.872753][ T5775] hsr_slave_1: entered promiscuous mode [ 87.879129][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.887034][ T5775] Cannot create hsr debugfs directory [ 87.893273][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.900622][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.928664][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.941978][ T51] Bluetooth: hci1: command tx timeout [ 87.942001][ T5781] Bluetooth: hci3: command tx timeout [ 87.942746][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.960294][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.986494][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.012173][ T51] Bluetooth: hci2: command tx timeout [ 88.032799][ T5778] team0: Port device team_slave_0 added [ 88.041897][ T5778] team0: Port device team_slave_1 added [ 88.086173][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.093955][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.120362][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.170781][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.177770][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.204886][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.262870][ T5776] hsr_slave_0: entered promiscuous mode [ 88.269591][ T5776] hsr_slave_1: entered promiscuous mode [ 88.275755][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.283410][ T5776] Cannot create hsr debugfs directory [ 88.392523][ T5778] hsr_slave_0: entered promiscuous mode [ 88.399701][ T5778] hsr_slave_1: entered promiscuous mode [ 88.406126][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.414938][ T5778] Cannot create hsr debugfs directory [ 88.760016][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.777074][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.787379][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.798788][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.869073][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.880565][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.897971][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.922800][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.017379][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.059794][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.073725][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.089764][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.145856][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.156789][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.169940][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.196968][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.242567][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.305482][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.353909][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.361324][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.385005][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.392218][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.410825][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.451601][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.481828][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.489073][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.515906][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.523129][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.585394][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.610828][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.677121][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.732355][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.774128][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.788001][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.795193][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.850901][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.858141][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.881557][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.888787][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.935100][ T51] Bluetooth: hci0: command tx timeout [ 89.967268][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.974452][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.009977][ T51] Bluetooth: hci3: command tx timeout [ 90.015599][ T51] Bluetooth: hci1: command tx timeout [ 90.089309][ T51] Bluetooth: hci2: command tx timeout [ 90.097672][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.287432][ T5775] veth0_vlan: entered promiscuous mode [ 90.304059][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.337628][ T5775] veth1_vlan: entered promiscuous mode [ 90.423144][ T5775] veth0_macvtap: entered promiscuous mode [ 90.481198][ T5775] veth1_macvtap: entered promiscuous mode [ 90.548067][ T5777] veth0_vlan: entered promiscuous mode [ 90.584177][ T5777] veth1_vlan: entered promiscuous mode [ 90.614479][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.694730][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.720548][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.744171][ T5777] veth0_macvtap: entered promiscuous mode [ 90.754201][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.766601][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.775983][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.786012][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.816837][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.836650][ T5777] veth1_macvtap: entered promiscuous mode [ 90.890320][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.906545][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.921801][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.944095][ T5776] veth0_vlan: entered promiscuous mode [ 90.974075][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.986319][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.998016][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.032845][ T5776] veth1_vlan: entered promiscuous mode [ 91.062915][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.073664][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.083046][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.091849][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.116340][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.142611][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.185331][ T5778] veth0_vlan: entered promiscuous mode [ 91.217861][ T5776] veth0_macvtap: entered promiscuous mode [ 91.233910][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.236143][ T5776] veth1_macvtap: entered promiscuous mode [ 91.252569][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.264189][ T5778] veth1_vlan: entered promiscuous mode [ 91.343016][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.358628][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.373550][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.384904][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.397439][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.437241][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.455676][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.467484][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.478740][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.491402][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.514353][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.523479][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.533440][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.546886][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.572020][ T5778] veth0_macvtap: entered promiscuous mode [ 91.651789][ T5778] veth1_macvtap: entered promiscuous mode [ 91.669992][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.694610][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.788368][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.804627][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.841092][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.865080][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.875519][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.886783][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.896852][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.908594][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.920980][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.952769][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.962050][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.979727][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.987115][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.991841][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.008981][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.020770][ T51] Bluetooth: hci0: command tx timeout [ 92.029404][ T172] cfg80211: failed to load regulatory.db [ 92.049595][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.063229][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.088836][ T51] Bluetooth: hci3: command tx timeout [ 92.094312][ T51] Bluetooth: hci1: command tx timeout [ 92.101775][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.169415][ T51] Bluetooth: hci2: command tx timeout [ 92.179774][ T5850] syz.1.6[5850]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.196070][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.228479][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.252848][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.268005][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.305792][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.323977][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.340341][ T5850] loop1: detected capacity change from 0 to 4096 [ 92.382831][ T5850] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 92.400439][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 92.612034][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.654777][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.811599][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.844142][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.859409][ T5857] fuse: Unknown parameter 'grou00000000000000000000' [ 93.467159][ T5860] loop1: detected capacity change from 0 to 32768 [ 93.475657][ T5860] ======================================================= [ 93.475657][ T5860] WARNING: The mand mount option has been deprecated and [ 93.475657][ T5860] and is ignored by this kernel. Remove the mand [ 93.475657][ T5860] option from the mount to silence this warning. [ 93.475657][ T5860] ======================================================= [ 93.561659][ T5860] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.716817][ T5860] XFS (loop1): Ending clean mount [ 94.036128][ T5775] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 94.089624][ T51] Bluetooth: hci0: command tx timeout [ 94.170591][ T51] Bluetooth: hci1: command tx timeout [ 94.174929][ T5781] Bluetooth: hci3: command tx timeout [ 94.249694][ T5781] Bluetooth: hci2: command tx timeout [ 94.575698][ T5882] loop2: detected capacity change from 0 to 4096 [ 94.609108][ T5882] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 94.625335][ T5884] fuse: Unknown parameter 'grou00000000000000000000' [ 95.039237][ T5892] loop1: detected capacity change from 0 to 4096 [ 95.073982][ T5892] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 95.185640][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 95.305332][ T5900] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 95.320573][ T5892] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 95.337821][ T5892] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 95.347525][ T5892] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 95.366602][ T5892] ntfs3: loop1: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size [ 95.925760][ T59] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 96.908968][ T5915] input: syz0 as /devices/virtual/input/input5 [ 97.367198][ T5918] fuse: Unknown parameter 'grou00000000000000000000' [ 97.529467][ T5908] loop3: detected capacity change from 0 to 32768 [ 97.594727][ T5908] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.766443][ T5908] XFS (loop3): Ending clean mount [ 97.887586][ T5778] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.940779][ T5941] fuse: Unknown parameter 'group_i00000000000000000000' [ 98.096169][ T5946] fuse: Unknown parameter 'group_i00000000000000000000' [ 98.645311][ T5962] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 98.655020][ T5962] overlayfs: missing 'lowerdir' [ 98.758459][ T5963] No such timeout policy "syz1" [ 98.806010][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 98.818646][ T5957] loop3: detected capacity change from 0 to 4096 [ 99.078457][ T5957] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 99.514128][ T5968] input: syz0 as /devices/virtual/input/input6 [ 100.744129][ T5979] fuse: Unknown parameter 'group_i00000000000000000000' [ 101.040674][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.075369][ T5971] loop2: detected capacity change from 0 to 32768 [ 101.227808][ T5971] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.334881][ T5971] XFS (loop2): Ending clean mount [ 101.340499][ T5157] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 101.431360][ T6000] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 101.440289][ T6000] overlayfs: missing 'lowerdir' [ 101.509220][ T6000] No such timeout policy "syz1" [ 101.528027][ T5157] usb 2-1: device descriptor read/64, error -71 [ 102.178348][ T5157] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 102.338374][ T5157] usb 2-1: device descriptor read/64, error -71 [ 102.419083][ T5776] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.463818][ T5157] usb usb2-port1: attempt power cycle [ 102.536435][ T6004] loop0: detected capacity change from 0 to 4096 [ 102.554599][ T6004] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 102.861721][ T6008] input: syz0 as /devices/virtual/input/input7 [ 102.879913][ T5157] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 102.922074][ T5157] usb 2-1: device descriptor read/8, error -71 [ 103.044336][ T6012] fuse: Unknown parameter 'group_id00000000000000000000' [ 103.208832][ T5157] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 103.271806][ T5157] usb 2-1: device descriptor read/8, error -71 [ 103.389360][ T5157] usb usb2-port1: unable to enumerate USB device [ 104.473007][ T6035] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 104.481964][ T6035] overlayfs: missing 'lowerdir' [ 104.529730][ T6035] No such timeout policy "syz1" [ 105.468469][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 105.714378][ T6026] loop1: detected capacity change from 0 to 32768 [ 105.731993][ T6026] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 105.740494][ T6026] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 105.797311][ T6026] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 105.815224][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 105.828446][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 105.879164][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 50ms [ 105.887497][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 105.895861][ T6026] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 106.486497][ T6051] fuse: Unknown parameter 'group_id00000000000000000000' [ 106.884600][ T6058] input: syz0 as /devices/virtual/input/input8 [ 107.149109][ T172] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 107.418751][ T172] usb 4-1: device descriptor read/64, error -71 [ 107.766493][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 107.784249][ T172] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 107.948448][ T172] usb 4-1: device descriptor read/64, error -71 [ 108.070116][ T172] usb usb4-port1: attempt power cycle [ 108.492083][ T172] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 108.530202][ T172] usb 4-1: device descriptor read/8, error -71 [ 108.801301][ T172] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 108.839150][ T172] usb 4-1: device descriptor read/8, error -71 [ 108.979580][ T172] usb usb4-port1: unable to enumerate USB device [ 109.764819][ T6079] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 109.774674][ T6079] overlayfs: missing 'lowerdir' [ 109.826336][ T6077] No such timeout policy "syz1" [ 110.089275][ T6083] fuse: Unknown parameter 'group_id00000000000000000000' [ 110.331541][ T6087] Device name cannot be null; rc = [-22] [ 111.398756][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 111.515888][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 111.630897][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.708601][ T5817] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 111.898448][ T5817] usb 2-1: device descriptor read/64, error -71 [ 111.960846][ T6072] loop2: detected capacity change from 0 to 32768 [ 112.168266][ C0] sched: RT throttling activated [ 112.202079][ T5817] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 112.565183][ T5817] usb 2-1: device descriptor read/64, error -71 [ 112.712008][ T5817] usb usb2-port1: attempt power cycle [ 113.222663][ T5817] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 113.289287][ T6117] fuse: Bad value for 'user_id' [ 113.309045][ T5817] usb 2-1: device descriptor read/8, error -71 [ 113.618897][ T5817] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 113.879032][ T5817] usb 2-1: device descriptor read/8, error -71 [ 113.900703][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 114.003382][ T5817] usb usb2-port1: unable to enumerate USB device [ 115.005291][ T6150] fuse: Bad value for 'user_id' [ 115.725893][ T6155] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5775] was attempted by " °ÿ Ðÿ ¦ Àÿ Àÿ Ðÿ ¦ ðÿ °ÿ Àÿ ÿÿÿÿ [ 115.767757][ T6156] loop3: detected capacity change from 0 to 1024 [ 116.043268][ T5791] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.598372][ T172] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 119.788566][ T172] usb 3-1: device descriptor read/64, error -71 [ 120.058429][ T172] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 120.238393][ T172] usb 3-1: device descriptor read/64, error -71 [ 120.358746][ T172] usb usb3-port1: attempt power cycle [ 120.756560][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 122.185333][ T6190] fuse: Bad value for 'user_id' [ 122.571711][ T6197] loop2: detected capacity change from 0 to 1024 [ 123.488453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 127.278366][ T5820] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 127.482202][ T5820] usb 2-1: device descriptor read/64, error -71 [ 127.778520][ T5820] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 127.958448][ T5820] usb 2-1: device descriptor read/64, error -71 [ 128.082468][ T5820] usb usb2-port1: attempt power cycle [ 128.185036][ T6218] loop2: detected capacity change from 0 to 4096 [ 128.241241][ T6218] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 128.256689][ T6218] ntfs3: loop2: Failed to load $Extend (-22). [ 128.264014][ T6218] ntfs3: loop2: Failed to initialize $Extend. [ 128.508538][ T5820] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 128.560938][ T5820] usb 2-1: device descriptor read/8, error -71 [ 128.677492][ T6222] loop0: detected capacity change from 0 to 1024 [ 128.762842][ T6216] loop3: detected capacity change from 0 to 32768 [ 128.780893][ T6216] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 128.783725][ T6166] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.795335][ T6216] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 129.563021][ T5820] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 129.691618][ T5820] usb 2-1: device descriptor read/8, error -71 [ 129.702879][ T6216] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 130.758935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 131.360749][ T5820] usb usb2-port1: unable to enumerate USB device [ 131.382353][ T5157] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 131.400205][ T5157] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 131.492125][ T5157] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 91ms [ 131.502845][ T5157] gfs2: fsid=syz:syz.0: jid=0: Done [ 131.508135][ T6216] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 131.612948][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 131.647069][ T6216] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 131.659679][ T6234] fuse: Bad value for 'fd' [ 133.728413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 134.228928][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.235670][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.880307][ T5157] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 136.048917][ T5157] usb 1-1: device descriptor read/64, error -71 [ 136.193726][ T6268] fuse: Bad value for 'fd' [ 136.517089][ T5157] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 136.788646][ T5157] usb 1-1: device descriptor read/64, error -71 [ 136.921124][ T5157] usb usb1-port1: attempt power cycle [ 138.438870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 138.848476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 139.300452][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 141.094180][ T6300] fuse: Bad value for 'fd' [ 142.898416][ T5157] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.078501][ T5157] usb 3-1: Using ep0 maxpacket: 8 [ 143.101361][ T5157] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.158473][ T5157] usb 3-1: config 4 interface 0 has no altsetting 0 [ 143.372683][ T6313] 9pnet_fd: p9_fd_create_unix (6313): problem connecting socket: ./file0: -111 [ 143.891911][ T5157] usb 3-1: string descriptor 0 read error: -22 [ 143.968268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 144.042556][ T5157] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 144.051812][ T5157] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 144.093183][ T5157] usb 3-1: can't set config #4, error -71 [ 144.102904][ T5157] usb 3-1: USB disconnect, device number 5 [ 145.373306][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 145.508527][ T5157] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 145.898867][ T5157] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 145.921037][ T5157] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.930264][ T5157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.147588][ T6333] loop3: detected capacity change from 0 to 1024 [ 148.678829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 148.965164][ T172] usb 3-1: USB disconnect, device number 6 [ 151.384859][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 152.736018][ T6366] xt_connbytes: Forcing CT accounting to be enabled [ 152.779119][ T5157] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 153.124991][ T5157] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 153.226913][ T5157] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.324619][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.712960][ T6371] fuse: Bad value for 'fd' [ 154.208370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 155.738365][ T5819] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 155.961225][ T5819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.970063][ T5819] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.980264][ T5819] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 155.991882][ T5819] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice=d3.16 [ 156.001014][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.011406][ T5819] usb 3-1: Product: syz [ 156.015614][ T5819] usb 3-1: Manufacturer: syz [ 156.020349][ T5819] usb 3-1: SerialNumber: syz [ 156.249081][ T5819] usb 3-1: unit 2 not found! [ 156.254106][ T5819] usb 3-1: unit 0 not found! [ 156.290273][ T5819] usb 3-1: USB disconnect, device number 7 [ 156.329244][ T6363] udevd[6363]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.399623][ T5817] usb 1-1: USB disconnect, device number 5 [ 156.857647][ T6384] fuse: Bad value for 'fd' [ 157.081633][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 160.166390][ T6415] xt_connbytes: Forcing CT accounting to be enabled [ 161.181342][ T6421] fuse: Bad value for 'fd' [ 161.189436][ T6423] loop0: detected capacity change from 0 to 256 [ 161.206081][ T6423] FAT-fs (loop0): Unrecognized mount option "non" or missing value [ 162.789744][ T6423] device-mapper: ioctl: Invalid ioctl structure: uuid ¿pƒrèñ¹“>ÅwC¾"devtmpfs, name , dev f3 [ 162.808387][ T23] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 162.979222][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 162.991416][ T23] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 163.015020][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.035007][ T6432] loop0: detected capacity change from 0 to 8 [ 163.050409][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.695176][ T27] usb 4-1: USB disconnect, device number 6 [ 164.934837][ T6454] xt_connbytes: Forcing CT accounting to be enabled [ 165.036821][ T23] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 165.868174][ T23] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 165.958378][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.984889][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.996748][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.349773][ T23] usbtmc 1-1:16.0: bulk endpoints not found [ 166.590457][ T6464] loop2: detected capacity change from 0 to 256 [ 166.602465][ T6466] fuse: Invalid rootmode [ 166.614146][ T6464] FAT-fs (loop2): Unrecognized mount option "non" or missing value [ 166.670136][ T6464] device-mapper: ioctl: Invalid ioctl structure: uuid ¿pƒrèñ¹“>ÅwC¾"devtmpfs, name , dev f3 [ 166.688032][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 167.056571][ T6481] syz.3.192 uses obsolete (PF_INET,SOCK_PACKET) [ 168.005123][ T23] usb 1-1: USB disconnect, device number 6 [ 168.817203][ T6501] xt_connbytes: Forcing CT accounting to be enabled [ 169.902061][ T6510] fuse: Invalid rootmode [ 169.920030][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 170.378357][ T5817] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 170.499597][ T6516] device-mapper: ioctl: Invalid ioctl structure: uuid ¿pƒrèñ¹“>ÅwC¾"devtmpfs, name , dev f3 [ 170.715407][ T5817] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 170.913703][ T5817] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.229249][ T5817] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.238506][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.262663][ T5817] usbtmc 3-1:16.0: bulk endpoints not found [ 171.908602][ T6535] fuse: Invalid rootmode [ 172.298323][ T788] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 172.365842][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 172.501358][ T788] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 172.542274][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 172.579335][ T788] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 172.619123][ T788] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 172.648344][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.671149][ T788] usb 4-1: config 0 descriptor?? [ 172.677248][ T6537] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 174.299861][ T5819] usb 3-1: USB disconnect, device number 8 [ 174.922518][ T788] usbhid 4-1:0.0: can't add hid device: -71 [ 174.948729][ T788] usbhid: probe of 4-1:0.0 failed with error -71 [ 174.961807][ T788] usb 4-1: USB disconnect, device number 7 [ 175.690361][ T6559] loop3: detected capacity change from 0 to 256 [ 175.779678][ T6559] FAT-fs (loop3): Unrecognized mount option "non" or missing value [ 175.875084][ T6559] device-mapper: ioctl: Invalid ioctl structure: uuid ¿pƒrèñ¹“>ÅwC¾"devtmpfs, name , dev f3 [ 175.959747][ T6567] fuse: Bad value for 'rootmode' [ 178.381756][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 178.678348][ T5842] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 178.889237][ T5842] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 178.920076][ T6599] fuse: Bad value for 'rootmode' [ 178.928724][ T5842] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.968397][ T5842] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.977518][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.013570][ T5842] usbtmc 2-1:16.0: bulk endpoints not found [ 179.323982][ T6607] loop0: detected capacity change from 0 to 1024 [ 181.641067][ T23] usb 2-1: USB disconnect, device number 14 [ 181.938912][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 182.647475][ T6640] fuse: Bad value for 'rootmode' [ 183.338428][ T23] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 184.518879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 184.934834][ T23] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 184.946335][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.956504][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 184.969570][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.983126][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.991902][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 185.029774][ T23] usbtmc 2-1:16.0: bulk endpoints not found [ 185.205902][ T6670] process 'syz.2.248' launched './file0' with NULL argv: empty string added [ 186.452269][ T6682] fuse: Unknown parameter 'use00000000000000000000' [ 186.817397][ T23] usb 2-1: USB disconnect, device number 15 [ 187.443064][ T6690] warning: `syz.0.249' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 188.909611][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 189.639613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 190.652769][ T6724] fuse: Unknown parameter 'use00000000000000000000' [ 190.660171][ T23] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 190.927264][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.939373][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.949817][ T23] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 190.959041][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.394957][ T23] usb 4-1: config 0 descriptor?? [ 192.001147][ T23] aquacomputer_d5next 0003:0C70:F0B6.0002: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 192.600317][ T23] usb 4-1: USB disconnect, device number 8 [ 193.029032][ T5820] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 193.216947][ T6735] fido_id[6735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 193.261067][ T28] audit: type=1326 audit(1788142452.966:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.2.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9430b9e159 code=0x7ffc0000 [ 193.341801][ T28] audit: type=1326 audit(1788142453.016:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.2.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9430b9e159 code=0x7ffc0000 [ 193.366027][ T5820] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 193.406823][ T5820] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.433394][ T28] audit: type=1326 audit(1788142453.016:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.2.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9430b9e159 code=0x7ffc0000 [ 193.469109][ T5820] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 193.518484][ T5820] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 193.527606][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.528614][ T28] audit: type=1326 audit(1788142453.016:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.2.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9430b9e159 code=0x7ffc0000 [ 193.628789][ T5820] usbtmc 1-1:16.0: bulk endpoints not found [ 193.710348][ T28] audit: type=1326 audit(1788142453.016:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.2.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9430b9e159 code=0x7ffc0000 [ 193.809037][ T28] audit: type=1326 audit(1788142453.016:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.2.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9430b9e159 code=0x7ffc0000 [ 193.837275][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 193.898729][ T28] audit: type=1326 audit(1788142453.026:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.2.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9430b9e159 code=0x7ffc0000 [ 193.952165][ T6752] fuse: Unknown parameter 'use00000000000000000000' [ 193.979180][ T28] audit: type=1326 audit(1788142453.026:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.2.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9430b9e159 code=0x7ffc0000 [ 194.063711][ T28] audit: type=1326 audit(1788142453.026:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.2.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9430b9e159 code=0x7ffc0000 [ 194.122988][ T28] audit: type=1326 audit(1788142453.026:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.2.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9430b9e159 code=0x7ffc0000 [ 194.435126][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.441599][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.925576][ T23] usb 1-1: USB disconnect, device number 7 [ 198.868344][ T23] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 199.065508][ T6787] fuse: Unknown parameter 'user_i00000000000000000000' [ 199.110389][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.148309][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 199.148325][ T28] audit: type=1800 audit(1788142458.846:26): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.279" name="ipv4_address" dev="configfs" ino=10342 res=0 errno=0 [ 199.184746][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.225787][ T23] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 199.258274][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.288029][ T23] usb 1-1: config 0 descriptor?? [ 199.438390][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 201.911870][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 201.917957][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 201.930902][ T23] usb 1-1: USB disconnect, device number 8 [ 202.248410][ T5817] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 202.515848][ T5817] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 202.631333][ T5817] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.645941][ T5817] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 202.666764][ T5817] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.695770][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.761326][ T5817] usbtmc 3-1:16.0: bulk endpoints not found [ 203.023778][ T6818] fuse: Unknown parameter 'user_i00000000000000000000' [ 204.122027][ T28] audit: type=1800 audit(1788142463.836:27): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.292" name="ipv4_address" dev="configfs" ino=9870 res=0 errno=0 [ 204.357449][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 206.371021][ T27] usb 3-1: USB disconnect, device number 9 [ 206.778510][ T5819] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 206.858520][ T27] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 207.000417][ T5819] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.013698][ T5819] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 207.038427][ T5819] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.071342][ T5819] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.087377][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.108827][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.116895][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.152896][ T5819] usbtmc 1-1:16.0: bulk endpoints not found [ 207.168326][ T27] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 207.202709][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.229855][ T27] usb 3-1: config 0 descriptor?? [ 207.359208][ T6852] fuse: Unknown parameter 'user_i00000000000000000000' [ 207.803176][ T27] aquacomputer_d5next 0003:0C70:F0B6.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 208.582628][ T27] usb 3-1: USB disconnect, device number 10 [ 208.716413][ T6857] fido_id[6857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 210.313040][ T5817] usb 1-1: USB disconnect, device number 9 [ 211.049314][ T6872] loop0: detected capacity change from 0 to 256 [ 211.074033][ T6872] FAT-fs (loop0): Unrecognized mount option "non" or missing value [ 211.472866][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 212.991258][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 212.991282][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 212.997549][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 213.003606][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 213.212426][ T28] audit: type=1800 audit(1788142472.926:28): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.307" name="ipv4_address" dev="configfs" ino=10521 res=0 errno=0 [ 213.811056][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 214.553217][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 214.838442][ T23] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 215.082051][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.160942][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.255189][ T23] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 215.293125][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.334588][ T23] usb 2-1: config 0 descriptor?? [ 215.339718][ T27] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 215.501378][ T6910] fuse: Unknown parameter 'user_id00000000000000000000' [ 215.560985][ T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.608537][ T27] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 215.658321][ T27] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.722121][ T27] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.752499][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.789055][ T27] usbtmc 1-1:16.0: bulk endpoints not found [ 215.881878][ T23] aquacomputer_d5next 0003:0C70:F0B6.0004: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 217.300398][ T6769] udevd[6769]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 218.552169][ T788] usb 1-1: USB disconnect, device number 10 [ 218.720141][ T27] usb 2-1: USB disconnect, device number 16 [ 218.827131][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 218.867964][ T6939] fuse: Unknown parameter 'user_id00000000000000000000' [ 222.180958][ T5842] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 222.242771][ T6971] fuse: Unknown parameter 'user_id00000000000000000000' [ 222.488859][ T5842] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.508344][ T5842] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 222.527942][ T5842] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.556078][ T6977] loop0: detected capacity change from 0 to 256 [ 222.586434][ T5842] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.617261][ T6977] FAT-fs (loop0): Unrecognized mount option "non" or missing value [ 222.646290][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.690132][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 222.759803][ T5842] usbtmc 4-1:16.0: bulk endpoints not found [ 224.588765][ T5820] usb 4-1: USB disconnect, device number 9 [ 224.823547][ T6998] fuse: Bad value for 'fd' [ 229.049182][ T7034] fuse: Bad value for 'fd' [ 230.766345][ T5842] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 230.988373][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 231.049945][ T5842] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.068688][ T5842] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 231.088430][ T5842] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.118283][ T5842] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.147725][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.210328][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.221673][ T5842] usbtmc: probe of 3-1:16.0 failed with error -22 [ 231.241189][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.288809][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.318322][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.378393][ T23] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 231.428331][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.833154][ T23] usb 1-1: USB disconnect, device number 11 [ 233.052160][ T788] usb 3-1: USB disconnect, device number 11 [ 234.226635][ T7070] fuse: Bad value for 'fd' [ 235.383982][ T7077] loop0: detected capacity change from 0 to 1024 [ 235.447711][ T6768] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 237.799028][ T5842] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 238.743070][ T5842] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.776998][ T5842] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 238.812680][ T5842] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.097981][ T5842] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.675624][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.811244][ T5842] usbtmc: probe of 2-1:16.0 failed with error -22 [ 239.834848][ T7113] fuse: Unknown parameter '0x0000000000000003' [ 240.466618][ T7120] loop0: detected capacity change from 0 to 1024 [ 240.553612][ T6768] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.055446][ T5842] usb 2-1: USB disconnect, device number 17 [ 243.906066][ T7154] fuse: Unknown parameter '0x0000000000000003' [ 246.734671][ T5157] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 246.953833][ T5157] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.983292][ T5157] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 247.007916][ T5157] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.038369][ T5157] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 247.057763][ T5157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.412775][ T5157] usb 3-1: can't set config #16, error -71 [ 248.578796][ T5157] usb 3-1: USB disconnect, device number 12 [ 249.869036][ T7192] fuse: Unknown parameter '0x0000000000000003' [ 249.977170][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 252.328578][ T5820] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 252.526380][ T5820] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.550926][ T5820] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.582450][ T5820] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.598240][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.284050][ T5820] usb 4-1: usb_control_msg returned -32 [ 253.294597][ T5820] usbtmc 4-1:16.0: can't read capabilities [ 254.117571][ T5820] usb 4-1: USB disconnect, device number 10 [ 254.367045][ T7228] Invalid argument reading file caps for ./file0 [ 254.684134][ T7234] fuse: Unknown parameter '0x0000000000000003' [ 255.429831][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 256.935423][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.942856][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.881994][ T7270] fuse: Unknown parameter '0x0000000000000003' [ 261.188512][ T5821] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 261.405453][ T5821] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.488115][ T5821] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.627887][ T5821] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.724790][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.917106][ T7076] kernel write not supported for file /sg0 (pid: 7076 comm: kworker/1:6) [ 262.154386][ T5821] usb 4-1: usb_control_msg returned -32 [ 262.173060][ T5821] usbtmc 4-1:16.0: can't read capabilities [ 262.181139][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 262.202666][ T5821] usb 4-1: USB disconnect, device number 11 [ 265.232598][ T5821] kernel write not supported for file /sg0 (pid: 5821 comm: kworker/1:5) [ 265.561366][ T7312] fuse: Unknown parameter '0x0000000000000003' [ 265.980186][ T7319] FAULT_INJECTION: forcing a failure. [ 265.980186][ T7319] name failslab, interval 1, probability 0, space 0, times 1 [ 266.007036][ T7319] CPU: 0 PID: 7319 Comm: syz.1.432 Not tainted syzkaller #0 [ 266.014394][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.024513][ T7319] Call Trace: [ 266.027840][ T7319] [ 266.030821][ T7319] dump_stack_lvl+0x18c/0x250 [ 266.035587][ T7319] ? show_regs_print_info+0x20/0x20 [ 266.040844][ T7319] ? load_image+0x420/0x420 [ 266.045400][ T7319] ? __might_sleep+0xe0/0xe0 [ 266.050050][ T7319] ? __lock_acquire+0x7d80/0x7d80 [ 266.055137][ T7319] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 266.061137][ T7319] should_fail_ex+0x394/0x4c0 [ 266.065889][ T7319] should_failslab+0x9/0x20 [ 266.070457][ T7319] slab_pre_alloc_hook+0x59/0x300 [ 266.075539][ T7319] ? pcpu_alloc+0x11e7/0x1880 [ 266.080292][ T7319] ? percpu_ref_init+0xc3/0x340 [ 266.085202][ T7319] __kmem_cache_alloc_node+0x53/0x250 [ 266.090647][ T7319] ? percpu_ref_init+0xc3/0x340 [ 266.095585][ T7319] ? free_ioctx_users+0x1c0/0x1c0 [ 266.100678][ T7319] kmalloc_trace+0x2a/0xe0 [ 266.105156][ T7319] percpu_ref_init+0xc3/0x340 [ 266.109885][ T7319] ? percpu_ref_put+0x230/0x230 [ 266.114798][ T7319] ioctx_alloc+0x24e/0x770 [ 266.119269][ T7319] __se_sys_io_setup+0x7b/0x190 [ 266.124184][ T7319] do_syscall_64+0x55/0xb0 [ 266.128670][ T7319] ? clear_bhb_loop+0x40/0x90 [ 266.133403][ T7319] ? clear_bhb_loop+0x40/0x90 [ 266.138162][ T7319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.144112][ T7319] RIP: 0033:0x7f9d9c19e159 [ 266.148588][ T7319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.168258][ T7319] RSP: 002b:00007f9d9d057028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 266.176727][ T7319] RAX: ffffffffffffffda RBX: 00007f9d9c425fa0 RCX: 00007f9d9c19e159 [ 266.184766][ T7319] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 266.192816][ T7319] RBP: 00007f9d9c235024 R08: 0000000000000000 R09: 0000000000000000 [ 266.200833][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.208847][ T7319] R13: 00007f9d9c426038 R14: 00007f9d9c425fa0 R15: 00007ffe179df088 [ 266.216881][ T7319] [ 267.131966][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 267.149604][ T5820] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 269.250841][ T5820] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.269254][ T5820] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.298356][ T5820] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.307840][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.556163][ T7348] fuse: Unknown parameter 'fd0x0000000000000003' [ 269.561730][ T5820] usb 2-1: usb_control_msg returned -32 [ 269.579816][ T5820] usbtmc 2-1:16.0: can't read capabilities [ 269.611277][ T5820] usb 2-1: USB disconnect, device number 18 [ 269.708034][ T5817] kernel write not supported for file /sg0 (pid: 5817 comm: kworker/1:3) [ 269.865814][ T7354] FAULT_INJECTION: forcing a failure. [ 269.865814][ T7354] name failslab, interval 1, probability 0, space 0, times 0 [ 269.881258][ T7354] CPU: 0 PID: 7354 Comm: syz.0.443 Not tainted syzkaller #0 [ 269.888619][ T7354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.898723][ T7354] Call Trace: [ 269.902047][ T7354] [ 269.905019][ T7354] dump_stack_lvl+0x18c/0x250 [ 269.909761][ T7354] ? show_regs_print_info+0x20/0x20 [ 269.915012][ T7354] ? load_image+0x420/0x420 [ 269.919567][ T7354] ? __might_sleep+0xe0/0xe0 [ 269.924232][ T7354] ? __lock_acquire+0x7d80/0x7d80 [ 269.929321][ T7354] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 269.935269][ T7354] should_fail_ex+0x394/0x4c0 [ 269.940006][ T7354] should_failslab+0x9/0x20 [ 269.944565][ T7354] slab_pre_alloc_hook+0x59/0x300 [ 269.949630][ T7354] ? pcpu_alloc+0x11e7/0x1880 [ 269.954340][ T7354] ? percpu_ref_init+0xc3/0x340 [ 269.959217][ T7354] __kmem_cache_alloc_node+0x53/0x250 [ 269.964641][ T7354] ? percpu_ref_init+0xc3/0x340 [ 269.969518][ T7354] ? free_ioctx_users+0x1c0/0x1c0 [ 269.974569][ T7354] kmalloc_trace+0x2a/0xe0 [ 269.979018][ T7354] percpu_ref_init+0xc3/0x340 [ 269.983721][ T7354] ? percpu_ref_put+0x230/0x230 [ 269.988601][ T7354] ioctx_alloc+0x24e/0x770 [ 269.993051][ T7354] __se_sys_io_setup+0x7b/0x190 [ 269.997933][ T7354] do_syscall_64+0x55/0xb0 [ 270.002370][ T7354] ? clear_bhb_loop+0x40/0x90 [ 270.007069][ T7354] ? clear_bhb_loop+0x40/0x90 [ 270.011800][ T7354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.017717][ T7354] RIP: 0033:0x7f57cb19e159 [ 270.022160][ T7354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.041798][ T7354] RSP: 002b:00007f57cc0f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 270.050244][ T7354] RAX: ffffffffffffffda RBX: 00007f57cb425fa0 RCX: 00007f57cb19e159 [ 270.058273][ T7354] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 270.066269][ T7354] RBP: 00007f57cb235024 R08: 0000000000000000 R09: 0000000000000000 [ 270.074259][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.082269][ T7354] R13: 00007f57cb426038 R14: 00007f57cb425fa0 R15: 00007ffc520bd888 [ 270.090289][ T7354] [ 270.987211][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 272.889023][ T7380] fuse: Unknown parameter 'fd0x0000000000000003' [ 273.204002][ T7391] 9pnet_fd: Insufficient options for proto=fd [ 273.411443][ T7399] FAULT_INJECTION: forcing a failure. [ 273.411443][ T7399] name failslab, interval 1, probability 0, space 0, times 0 [ 273.444535][ T7399] CPU: 1 PID: 7399 Comm: syz.2.456 Not tainted syzkaller #0 [ 273.451905][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.462024][ T7399] Call Trace: [ 273.465343][ T7399] [ 273.468312][ T7399] dump_stack_lvl+0x18c/0x250 [ 273.473131][ T7399] ? show_regs_print_info+0x20/0x20 [ 273.478400][ T7399] ? load_image+0x420/0x420 [ 273.482958][ T7399] ? __might_sleep+0xe0/0xe0 [ 273.487600][ T7399] ? __lock_acquire+0x7d80/0x7d80 [ 273.492653][ T7399] ? __asan_memset+0x22/0x40 [ 273.497280][ T7399] should_fail_ex+0x394/0x4c0 [ 273.502001][ T7399] should_failslab+0x9/0x20 [ 273.506576][ T7399] slab_pre_alloc_hook+0x59/0x300 [ 273.511643][ T7399] kmem_cache_alloc+0x5a/0x2c0 [ 273.516456][ T7399] ? security_inode_alloc+0x34/0x110 [ 273.521784][ T7399] security_inode_alloc+0x34/0x110 [ 273.526938][ T7399] inode_init_always+0x914/0xc90 [ 273.531919][ T7399] new_inode_pseudo+0x95/0x1d0 [ 273.536717][ T7399] alloc_anon_inode+0x1e/0x2f0 [ 273.541510][ T7399] aio_setup_ring+0x104/0xf30 [ 273.546223][ T7399] ? pcpu_alloc+0x11e7/0x1880 [ 273.550944][ T7399] ? ioctx_alloc+0x2e2/0x770 [ 273.555586][ T7399] ? free_ioctx_reqs+0x190/0x190 [ 273.560559][ T7399] ioctx_alloc+0x316/0x770 [ 273.565014][ T7399] __se_sys_io_setup+0x7b/0x190 [ 273.569900][ T7399] do_syscall_64+0x55/0xb0 [ 273.574352][ T7399] ? clear_bhb_loop+0x40/0x90 [ 273.579052][ T7399] ? clear_bhb_loop+0x40/0x90 [ 273.583752][ T7399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.589682][ T7399] RIP: 0033:0x7f9430b9e159 [ 273.594126][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.613940][ T7399] RSP: 002b:00007f94319da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 273.622387][ T7399] RAX: ffffffffffffffda RBX: 00007f9430e25fa0 RCX: 00007f9430b9e159 [ 273.630395][ T7399] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 273.638480][ T7399] RBP: 00007f9430c35024 R08: 0000000000000000 R09: 0000000000000000 [ 273.646484][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.654483][ T7399] R13: 00007f9430e26038 R14: 00007f9430e25fa0 R15: 00007ffd47a07398 [ 273.662516][ T7399] [ 273.668508][ T5820] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 274.084731][ T5820] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.094685][ T5820] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.108335][ T5820] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.117445][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.299098][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 275.345711][ T5820] usb 2-1: usb_control_msg returned -32 [ 275.352666][ T5820] usbtmc 2-1:16.0: can't read capabilities [ 275.385596][ T5820] usb 2-1: USB disconnect, device number 19 [ 276.173836][ T7423] fuse: Unknown parameter 'fd0x0000000000000003' [ 276.236226][ T7425] loop0: detected capacity change from 0 to 1024 [ 277.765604][ T7434] 9pnet_fd: Insufficient options for proto=fd [ 279.176155][ T7448] FAULT_INJECTION: forcing a failure. [ 279.176155][ T7448] name failslab, interval 1, probability 0, space 0, times 0 [ 279.196964][ T7448] CPU: 1 PID: 7448 Comm: syz.3.468 Not tainted syzkaller #0 [ 279.204332][ T7448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.214448][ T7448] Call Trace: [ 279.217776][ T7448] [ 279.220753][ T7448] dump_stack_lvl+0x18c/0x250 [ 279.225494][ T7448] ? show_regs_print_info+0x20/0x20 [ 279.230755][ T7448] ? load_image+0x420/0x420 [ 279.235319][ T7448] ? __might_sleep+0xe0/0xe0 [ 279.239983][ T7448] ? __lock_acquire+0x7d80/0x7d80 [ 279.245071][ T7448] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 279.251059][ T7448] should_fail_ex+0x394/0x4c0 [ 279.255810][ T7448] should_failslab+0x9/0x20 [ 279.260395][ T7448] slab_pre_alloc_hook+0x59/0x300 [ 279.265502][ T7448] ? pcpu_alloc+0x11e7/0x1880 [ 279.270241][ T7448] ? percpu_ref_init+0xc3/0x340 [ 279.275145][ T7448] __kmem_cache_alloc_node+0x53/0x250 [ 279.280584][ T7448] ? percpu_ref_init+0xc3/0x340 [ 279.285478][ T7448] ? free_ioctx_users+0x1c0/0x1c0 [ 279.290559][ T7448] kmalloc_trace+0x2a/0xe0 [ 279.295046][ T7448] percpu_ref_init+0xc3/0x340 [ 279.299779][ T7448] ? percpu_ref_put+0x230/0x230 [ 279.304692][ T7448] ioctx_alloc+0x24e/0x770 [ 279.309213][ T7448] __se_sys_io_setup+0x7b/0x190 [ 279.314129][ T7448] do_syscall_64+0x55/0xb0 [ 279.318610][ T7448] ? clear_bhb_loop+0x40/0x90 [ 279.323338][ T7448] ? clear_bhb_loop+0x40/0x90 [ 279.328078][ T7448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.334034][ T7448] RIP: 0033:0x7f8b0b99e159 [ 279.338505][ T7448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.358167][ T7448] RSP: 002b:00007f8b0c83b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 279.366633][ T7448] RAX: ffffffffffffffda RBX: 00007f8b0bc25fa0 RCX: 00007f8b0b99e159 [ 279.374660][ T7448] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 279.382716][ T7448] RBP: 00007f8b0ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 279.390731][ T7448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.398759][ T7448] R13: 00007f8b0bc26038 R14: 00007f8b0bc25fa0 R15: 00007ffca0b597f8 [ 279.406799][ T7448] [ 279.418601][ T5820] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 279.464855][ T7453] loop0: detected capacity change from 0 to 1024 [ 279.534862][ T7327] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 281.041848][ T5820] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.053975][ T5820] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.148864][ T5820] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 281.157985][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.385097][ T5820] usb 2-1: usb_control_msg returned -32 [ 281.404483][ T5820] usbtmc 2-1:16.0: can't read capabilities [ 281.438448][ T5820] usb 2-1: USB disconnect, device number 20 [ 282.142342][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 282.393965][ T5820] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 283.305536][ T7483] 9pnet_fd: Insufficient options for proto=fd [ 283.369265][ T5820] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.408478][ T5820] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.454681][ T5820] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.488394][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.746428][ T5820] usb 1-1: usb_control_msg returned -71 [ 285.767124][ T5820] usbtmc 1-1:16.0: can't read capabilities [ 285.792657][ T5820] usb 1-1: USB disconnect, device number 12 [ 286.010860][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.484'. [ 286.582067][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 286.917813][ T5821] kernel write not supported for file /sg0 (pid: 5821 comm: kworker/1:5) [ 289.716701][ T5820] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 289.964571][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 290.852989][ T5820] usb 3-1: device descriptor read/all, error -71 [ 290.983133][ T7553] 9pnet_fd: Insufficient options for proto=fd [ 291.017830][ T7555] loop0: detected capacity change from 0 to 512 [ 291.149469][ T7555] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 291.161437][ T7555] FAT-fs (loop0): Filesystem has been set read-only [ 294.361212][ T5820] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 294.370198][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 294.554241][ T5820] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.565602][ T5820] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.583600][ T5820] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.593345][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.848568][ T5820] usb 1-1: GET_CAPABILITIES returned 0 [ 294.854143][ T5820] usbtmc 1-1:16.0: can't read capabilities [ 295.226830][ T7600] 9pnet_fd: Insufficient options for proto=fd [ 298.409898][ T7616] FAULT_INJECTION: forcing a failure. [ 298.409898][ T7616] name failslab, interval 1, probability 0, space 0, times 0 [ 298.422957][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 298.469811][ T7616] CPU: 1 PID: 7616 Comm: syz.2.520 Not tainted syzkaller #0 [ 298.477304][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.487428][ T7616] Call Trace: [ 298.490760][ T7616] [ 298.493741][ T7616] dump_stack_lvl+0x18c/0x250 [ 298.498498][ T7616] ? show_regs_print_info+0x20/0x20 [ 298.503754][ T7616] ? load_image+0x420/0x420 [ 298.508319][ T7616] ? __might_sleep+0xe0/0xe0 [ 298.513060][ T7616] ? __lock_acquire+0x7d80/0x7d80 [ 298.518137][ T7616] ? __asan_memset+0x22/0x40 [ 298.522793][ T7616] should_fail_ex+0x394/0x4c0 [ 298.527543][ T7616] should_failslab+0x9/0x20 [ 298.532105][ T7616] slab_pre_alloc_hook+0x59/0x300 [ 298.537196][ T7616] kmem_cache_alloc+0x5a/0x2c0 [ 298.542030][ T7616] ? security_inode_alloc+0x34/0x110 [ 298.547385][ T7616] security_inode_alloc+0x34/0x110 [ 298.552568][ T7616] inode_init_always+0x914/0xc90 [ 298.557567][ T7616] new_inode_pseudo+0x95/0x1d0 [ 298.562381][ T7616] alloc_anon_inode+0x1e/0x2f0 [ 298.567186][ T7616] aio_setup_ring+0x104/0xf30 [ 298.571912][ T7616] ? pcpu_alloc+0x11e7/0x1880 [ 298.576622][ T7616] ? ioctx_alloc+0x2e2/0x770 [ 298.581246][ T7616] ? free_ioctx_reqs+0x190/0x190 [ 298.586221][ T7616] ioctx_alloc+0x316/0x770 [ 298.590678][ T7616] __se_sys_io_setup+0x7b/0x190 [ 298.595573][ T7616] do_syscall_64+0x55/0xb0 [ 298.600025][ T7616] ? clear_bhb_loop+0x40/0x90 [ 298.604830][ T7616] ? clear_bhb_loop+0x40/0x90 [ 298.609549][ T7616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.615477][ T7616] RIP: 0033:0x7f9430b9e159 [ 298.619942][ T7616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.639667][ T7616] RSP: 002b:00007f94319da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 298.648124][ T7616] RAX: ffffffffffffffda RBX: 00007f9430e25fa0 RCX: 00007f9430b9e159 [ 298.656127][ T7616] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 298.664123][ T7616] RBP: 00007f9430c35024 R08: 0000000000000000 R09: 0000000000000000 [ 298.672133][ T7616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.680134][ T7616] R13: 00007f9430e26038 R14: 00007f9430e25fa0 R15: 00007ffd47a07398 [ 298.688152][ T7616] [ 298.960874][ T7628] 9pnet_fd: Insufficient options for proto=fd [ 300.101060][ T7575] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -110 [ 300.202188][ T7076] usb 1-1: USB disconnect, device number 13 [ 300.822260][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 302.471260][ T7667] 9pnet_fd: Insufficient options for proto=fd [ 303.138474][ T5821] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 303.371015][ T5821] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.488435][ T5821] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.513114][ T5821] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 303.524427][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.805970][ T5821] usb 2-1: GET_CAPABILITIES returned 0 [ 303.816162][ T5821] usbtmc 2-1:16.0: can't read capabilities [ 304.565247][ T7076] usb 2-1: USB disconnect, device number 21 [ 304.742348][ T7692] FAULT_INJECTION: forcing a failure. [ 304.742348][ T7692] name failslab, interval 1, probability 0, space 0, times 0 [ 304.755383][ T7692] CPU: 0 PID: 7692 Comm: syz.2.541 Not tainted syzkaller #0 [ 304.762733][ T7692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.772834][ T7692] Call Trace: [ 304.776161][ T7692] [ 304.779142][ T7692] dump_stack_lvl+0x18c/0x250 [ 304.783887][ T7692] ? show_regs_print_info+0x20/0x20 [ 304.789141][ T7692] ? load_image+0x420/0x420 [ 304.793701][ T7692] ? __might_sleep+0xe0/0xe0 [ 304.798357][ T7692] ? __lock_acquire+0x7d80/0x7d80 [ 304.803440][ T7692] ? __asan_memset+0x22/0x40 [ 304.808105][ T7692] should_fail_ex+0x394/0x4c0 [ 304.812851][ T7692] should_failslab+0x9/0x20 [ 304.817398][ T7692] slab_pre_alloc_hook+0x59/0x300 [ 304.822465][ T7692] kmem_cache_alloc+0x5a/0x2c0 [ 304.827263][ T7692] ? security_inode_alloc+0x34/0x110 [ 304.832593][ T7692] security_inode_alloc+0x34/0x110 [ 304.837742][ T7692] inode_init_always+0x914/0xc90 [ 304.842740][ T7692] new_inode_pseudo+0x95/0x1d0 [ 304.847532][ T7692] alloc_anon_inode+0x1e/0x2f0 [ 304.852329][ T7692] aio_setup_ring+0x104/0xf30 [ 304.857040][ T7692] ? pcpu_alloc+0x11e7/0x1880 [ 304.861748][ T7692] ? ioctx_alloc+0x2e2/0x770 [ 304.866364][ T7692] ? free_ioctx_reqs+0x190/0x190 [ 304.871342][ T7692] ioctx_alloc+0x316/0x770 [ 304.875792][ T7692] __se_sys_io_setup+0x7b/0x190 [ 304.880679][ T7692] do_syscall_64+0x55/0xb0 [ 304.885130][ T7692] ? clear_bhb_loop+0x40/0x90 [ 304.889837][ T7692] ? clear_bhb_loop+0x40/0x90 [ 304.894543][ T7692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.900481][ T7692] RIP: 0033:0x7f9430b9e159 [ 304.904924][ T7692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.924560][ T7692] RSP: 002b:00007f94319da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 304.933022][ T7692] RAX: ffffffffffffffda RBX: 00007f9430e25fa0 RCX: 00007f9430b9e159 [ 304.941062][ T7692] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 304.949070][ T7692] RBP: 00007f9430c35024 R08: 0000000000000000 R09: 0000000000000000 [ 304.957068][ T7692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.965068][ T7692] R13: 00007f9430e26038 R14: 00007f9430e25fa0 R15: 00007ffd47a07398 [ 304.973083][ T7692] [ 305.020311][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 305.335317][ T7704] 9pnet_fd: Insufficient options for proto=fd [ 309.278924][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 309.736143][ T7738] 9pnet_fd: Insufficient options for proto=fd [ 309.743331][ T7076] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 309.963177][ T7076] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.985148][ T7076] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.998454][ T7076] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 310.007629][ T7076] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.231390][ T7076] usb 4-1: GET_CAPABILITIES returned 0 [ 310.238499][ T7076] usbtmc 4-1:16.0: can't read capabilities [ 310.445890][ T8] usb 4-1: USB disconnect, device number 12 [ 312.535279][ T7753] FAULT_INJECTION: forcing a failure. [ 312.535279][ T7753] name failslab, interval 1, probability 0, space 0, times 0 [ 312.562298][ T7753] CPU: 1 PID: 7753 Comm: syz.0.558 Not tainted syzkaller #0 [ 312.569758][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.579853][ T7753] Call Trace: [ 312.583168][ T7753] [ 312.586147][ T7753] dump_stack_lvl+0x18c/0x250 [ 312.590888][ T7753] ? show_regs_print_info+0x20/0x20 [ 312.596137][ T7753] ? load_image+0x420/0x420 [ 312.600696][ T7753] ? __might_sleep+0xe0/0xe0 [ 312.605359][ T7753] ? __lock_acquire+0x7d80/0x7d80 [ 312.610429][ T7753] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 312.616377][ T7753] should_fail_ex+0x394/0x4c0 [ 312.621119][ T7753] should_failslab+0x9/0x20 [ 312.625682][ T7753] slab_pre_alloc_hook+0x59/0x300 [ 312.630776][ T7753] ? pcpu_alloc+0x11e7/0x1880 [ 312.635511][ T7753] ? percpu_ref_init+0xc3/0x340 [ 312.640417][ T7753] __kmem_cache_alloc_node+0x53/0x250 [ 312.645849][ T7753] ? percpu_ref_init+0xc3/0x340 [ 312.650749][ T7753] ? free_ioctx_users+0x1c0/0x1c0 [ 312.655819][ T7753] kmalloc_trace+0x2a/0xe0 [ 312.660336][ T7753] percpu_ref_init+0xc3/0x340 [ 312.665061][ T7753] ? percpu_ref_put+0x230/0x230 [ 312.669962][ T7753] ioctx_alloc+0x24e/0x770 [ 312.674447][ T7753] __se_sys_io_setup+0x7b/0x190 [ 312.679345][ T7753] do_syscall_64+0x55/0xb0 [ 312.683810][ T7753] ? clear_bhb_loop+0x40/0x90 [ 312.688535][ T7753] ? clear_bhb_loop+0x40/0x90 [ 312.693272][ T7753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.699210][ T7753] RIP: 0033:0x7f57cb19e159 [ 312.703670][ T7753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.723319][ T7753] RSP: 002b:00007f57cc0f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 312.731786][ T7753] RAX: ffffffffffffffda RBX: 00007f57cb425fa0 RCX: 00007f57cb19e159 [ 312.739802][ T7753] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 312.747819][ T7753] RBP: 00007f57cb235024 R08: 0000000000000000 R09: 0000000000000000 [ 312.755835][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.763864][ T7753] R13: 00007f57cb426038 R14: 00007f57cb425fa0 R15: 00007ffc520bd888 [ 312.771987][ T7753] [ 312.786668][ T7755] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(7) [ 313.001203][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 313.464934][ T7771] 9pnet_fd: Insufficient options for proto=fd [ 314.339818][ T7780] loop0: detected capacity change from 0 to 1024 [ 316.079778][ T7792] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(7) [ 316.188280][ T8] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 316.369749][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 316.550545][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 316.568358][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.885391][ T7811] 9pnet_fd: Insufficient options for proto=fd [ 316.960493][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 316.969761][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.309769][ T8] usb 2-1: GET_CAPABILITIES returned 0 [ 317.315317][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.317489][ T8] usbtmc 2-1:16.0: can't read capabilities [ 317.333876][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.708335][ T5821] usb 2-1: USB disconnect, device number 22 [ 318.140986][ T7820] FAULT_INJECTION: forcing a failure. [ 318.140986][ T7820] name failslab, interval 1, probability 0, space 0, times 0 [ 318.155359][ T7820] CPU: 0 PID: 7820 Comm: syz.0.570 Not tainted syzkaller #0 [ 318.162736][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.172846][ T7820] Call Trace: [ 318.176203][ T7820] [ 318.179183][ T7820] dump_stack_lvl+0x18c/0x250 [ 318.183931][ T7820] ? show_regs_print_info+0x20/0x20 [ 318.189209][ T7820] ? load_image+0x420/0x420 [ 318.193821][ T7820] ? __might_sleep+0xe0/0xe0 [ 318.198493][ T7820] ? __lock_acquire+0x7d80/0x7d80 [ 318.203596][ T7820] should_fail_ex+0x394/0x4c0 [ 318.208346][ T7820] should_failslab+0x9/0x20 [ 318.212917][ T7820] slab_pre_alloc_hook+0x59/0x300 [ 318.218032][ T7820] kmem_cache_alloc_lru+0x4d/0x2b0 [ 318.223215][ T7820] ? __d_alloc+0x31/0x710 [ 318.227612][ T7820] __d_alloc+0x31/0x710 [ 318.231807][ T7820] d_alloc_pseudo+0x1d/0x70 [ 318.236334][ T7820] alloc_file_pseudo+0xe4/0x210 [ 318.241216][ T7820] ? fput+0x1a0/0x1a0 [ 318.245237][ T7820] ? alloc_anon_inode+0x1ab/0x2f0 [ 318.250309][ T7820] aio_setup_ring+0x1f1/0xf30 [ 318.255025][ T7820] ? pcpu_alloc+0x11e7/0x1880 [ 318.259794][ T7820] ? ioctx_alloc+0x2e2/0x770 [ 318.264422][ T7820] ? free_ioctx_reqs+0x190/0x190 [ 318.269412][ T7820] ioctx_alloc+0x316/0x770 [ 318.273868][ T7820] __se_sys_io_setup+0x7b/0x190 [ 318.278752][ T7820] do_syscall_64+0x55/0xb0 [ 318.283233][ T7820] ? clear_bhb_loop+0x40/0x90 [ 318.287944][ T7820] ? clear_bhb_loop+0x40/0x90 [ 318.292656][ T7820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.298586][ T7820] RIP: 0033:0x7f57cb19e159 [ 318.303031][ T7820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.322669][ T7820] RSP: 002b:00007f57cc0f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 318.331112][ T7820] RAX: ffffffffffffffda RBX: 00007f57cb425fa0 RCX: 00007f57cb19e159 [ 318.339109][ T7820] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 318.347107][ T7820] RBP: 00007f57cb235024 R08: 0000000000000000 R09: 0000000000000000 [ 318.355104][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.363113][ T7820] R13: 00007f57cb426038 R14: 00007f57cb425fa0 R15: 00007ffc520bd888 [ 318.371143][ T7820] [ 318.498123][ T7827] loop0: detected capacity change from 0 to 256 [ 319.971101][ T7827] FAT-fs (loop0): Unrecognized mount option "non" or missing value [ 320.000457][ T7827] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(7) [ 320.286663][ T7839] 9pnet_fd: Insufficient options for proto=fd [ 322.446883][ T7855] FAULT_INJECTION: forcing a failure. [ 322.446883][ T7855] name failslab, interval 1, probability 0, space 0, times 0 [ 322.463961][ T7855] CPU: 1 PID: 7855 Comm: syz.0.587 Not tainted syzkaller #0 [ 322.471320][ T7855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.481428][ T7855] Call Trace: [ 322.484776][ T7855] [ 322.487754][ T7855] dump_stack_lvl+0x18c/0x250 [ 322.492497][ T7855] ? show_regs_print_info+0x20/0x20 [ 322.497754][ T7855] ? load_image+0x420/0x420 [ 322.502330][ T7855] ? __might_sleep+0xe0/0xe0 [ 322.506988][ T7855] ? __lock_acquire+0x7d80/0x7d80 [ 322.512069][ T7855] ? __asan_memset+0x22/0x40 [ 322.516731][ T7855] should_fail_ex+0x394/0x4c0 [ 322.521477][ T7855] should_failslab+0x9/0x20 [ 322.526048][ T7855] slab_pre_alloc_hook+0x59/0x300 [ 322.531145][ T7855] kmem_cache_alloc+0x5a/0x2c0 [ 322.535968][ T7855] ? security_inode_alloc+0x34/0x110 [ 322.541322][ T7855] security_inode_alloc+0x34/0x110 [ 322.546507][ T7855] inode_init_always+0x914/0xc90 [ 322.551513][ T7855] new_inode_pseudo+0x95/0x1d0 [ 322.556345][ T7855] alloc_anon_inode+0x1e/0x2f0 [ 322.561171][ T7855] aio_setup_ring+0x104/0xf30 [ 322.565909][ T7855] ? pcpu_alloc+0x11e7/0x1880 [ 322.570644][ T7855] ? ioctx_alloc+0x2e2/0x770 [ 322.575306][ T7855] ? free_ioctx_reqs+0x190/0x190 [ 322.580309][ T7855] ioctx_alloc+0x316/0x770 [ 322.584788][ T7855] __se_sys_io_setup+0x7b/0x190 [ 322.589695][ T7855] do_syscall_64+0x55/0xb0 [ 322.594194][ T7855] ? clear_bhb_loop+0x40/0x90 [ 322.598927][ T7855] ? clear_bhb_loop+0x40/0x90 [ 322.603660][ T7855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.609632][ T7855] RIP: 0033:0x7f57cb19e159 [ 322.614094][ T7855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.633755][ T7855] RSP: 002b:00007f57cc0f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 322.642229][ T7855] RAX: ffffffffffffffda RBX: 00007f57cb425fa0 RCX: 00007f57cb19e159 [ 322.650254][ T7855] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 322.658274][ T7855] RBP: 00007f57cb235024 R08: 0000000000000000 R09: 0000000000000000 [ 322.666291][ T7855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.674313][ T7855] R13: 00007f57cb426038 R14: 00007f57cb425fa0 R15: 00007ffc520bd888 [ 322.682358][ T7855] [ 322.990851][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 323.059778][ T5157] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 324.683258][ T5157] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.694768][ T5157] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.708633][ T5157] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.789790][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.028527][ T5157] usb 1-1: GET_CAPABILITIES returned 0 [ 325.034100][ T5157] usbtmc 1-1:16.0: can't read capabilities [ 325.265126][ T5817] usb 1-1: USB disconnect, device number 14 [ 326.543575][ T7891] FAULT_INJECTION: forcing a failure. [ 326.543575][ T7891] name failslab, interval 1, probability 0, space 0, times 0 [ 326.583741][ T7891] CPU: 1 PID: 7891 Comm: syz.1.597 Not tainted syzkaller #0 [ 326.591133][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.601251][ T7891] Call Trace: [ 326.604581][ T7891] [ 326.607564][ T7891] dump_stack_lvl+0x18c/0x250 [ 326.612310][ T7891] ? show_regs_print_info+0x20/0x20 [ 326.617563][ T7891] ? load_image+0x420/0x420 [ 326.622121][ T7891] ? __might_sleep+0xe0/0xe0 [ 326.626782][ T7891] ? __lock_acquire+0x7d80/0x7d80 [ 326.631868][ T7891] ? __asan_memset+0x22/0x40 [ 326.636566][ T7891] should_fail_ex+0x394/0x4c0 [ 326.641314][ T7891] should_failslab+0x9/0x20 [ 326.645898][ T7891] slab_pre_alloc_hook+0x59/0x300 [ 326.650998][ T7891] kmem_cache_alloc+0x5a/0x2c0 [ 326.655822][ T7891] ? security_inode_alloc+0x34/0x110 [ 326.661195][ T7891] security_inode_alloc+0x34/0x110 [ 326.666370][ T7891] inode_init_always+0x914/0xc90 [ 326.671413][ T7891] new_inode_pseudo+0x95/0x1d0 [ 326.676236][ T7891] alloc_anon_inode+0x1e/0x2f0 [ 326.681056][ T7891] aio_setup_ring+0x104/0xf30 [ 326.685796][ T7891] ? pcpu_alloc+0x11e7/0x1880 [ 326.690539][ T7891] ? ioctx_alloc+0x2e2/0x770 [ 326.695184][ T7891] ? free_ioctx_reqs+0x190/0x190 [ 326.700194][ T7891] ioctx_alloc+0x316/0x770 [ 326.704681][ T7891] __se_sys_io_setup+0x7b/0x190 [ 326.709598][ T7891] do_syscall_64+0x55/0xb0 [ 326.714060][ T7891] ? clear_bhb_loop+0x40/0x90 [ 326.718786][ T7891] ? clear_bhb_loop+0x40/0x90 [ 326.723533][ T7891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.729517][ T7891] RIP: 0033:0x7f9d9c19e159 [ 326.733983][ T7891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.753643][ T7891] RSP: 002b:00007f9d9d057028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 326.762112][ T7891] RAX: ffffffffffffffda RBX: 00007f9d9c425fa0 RCX: 00007f9d9c19e159 [ 326.770162][ T7891] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 326.778189][ T7891] RBP: 00007f9d9c235024 R08: 0000000000000000 R09: 0000000000000000 [ 326.786218][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.794246][ T7891] R13: 00007f9d9c426038 R14: 00007f9d9c425fa0 R15: 00007ffe179df088 [ 326.802286][ T7891] [ 326.882861][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 330.689456][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 333.643235][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.622'. [ 334.578282][ T5157] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 336.175037][ T5157] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 336.196574][ T5157] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 336.220977][ T5157] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 336.247531][ T5157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.298886][ T5157] usb 2-1: config 0 descriptor?? [ 336.304692][ T7985] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 336.777500][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 336.815681][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 336.838671][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 336.858397][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 336.866067][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.060207][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.163888][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.267407][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.376440][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.479211][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.517554][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.563913][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.608521][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.647575][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.693052][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.726359][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.742987][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.752286][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.761768][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.790937][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.801563][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.813307][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.821496][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.834423][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.843181][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.852453][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.863761][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.871691][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.912629][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.931186][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.953096][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.978948][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 337.999945][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.636'. [ 338.018226][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 338.058263][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 338.077922][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 338.098122][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 338.105918][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 338.156833][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 338.187153][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 338.201008][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 338.221190][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 339.682072][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 339.712581][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 339.793850][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: unknown main item tag 0x0 [ 339.809264][ T5157] cmedia_hs100b 0003:0D8C:0014.0005: hidraw0: USB HID v0.07 Device [HID 0d8c:0014] on usb-dummy_hcd.1-1/input0 [ 339.838706][ T5157] usb 2-1: USB disconnect, device number 23 [ 340.006864][ T8028] fido_id[8028]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 341.319303][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.648'. [ 344.333879][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 346.320189][ T5157] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 346.768408][ T5157] usb 2-1: device not accepting address 24, error -71 [ 346.953709][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'. [ 349.718035][ T8140] loop0: detected capacity change from 0 to 256 [ 349.727325][ T8140] FAT-fs (loop0): Unrecognized mount option "non" or missing value [ 349.873085][ T7685] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 351.939425][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 352.224672][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 354.044086][ T7685] udevd[7685]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 354.431332][ T28] audit: type=1326 audit(1788142614.146:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.2.695" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9430b9e159 code=0x0 [ 354.548847][ T5817] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 354.816027][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.871078][ T5817] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 354.948396][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.001665][ T5817] usb 2-1: config 0 descriptor?? [ 355.216590][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 355.224571][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 355.232402][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 355.240600][ T5817] usbhid 2-1:0.0: can't add hid device: -71 [ 355.246671][ T5817] usbhid: probe of 2-1:0.0 failed with error -71 [ 355.260239][ T5817] usb 2-1: USB disconnect, device number 26 [ 355.860137][ T5817] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 355.894728][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 356.061892][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.084432][ T5817] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 356.096955][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.108368][ T5817] usb 2-1: config 0 descriptor?? [ 357.887442][ T5817] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 357.924896][ T5817] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 358.312481][ T28] audit: type=1326 audit(1788142618.026:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.3.705" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b0b99e159 code=0x0 [ 358.349181][ T8] usb 2-1: USB disconnect, device number 27 [ 358.349221][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 359.738720][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 362.838330][ T28] audit: type=1326 audit(1788142622.546:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.0.717" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57cb19e159 code=0x0 [ 364.123524][ T28] audit: type=1804 audit(1788142623.836:32): pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.718" name="/newroot/174/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1213 res=1 errno=0 [ 364.147844][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 366.022475][ T8305] capability: warning: `syz.2.725' uses deprecated v2 capabilities in a way that may be insecure [ 366.364850][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 366.382994][ T8317] loop0: detected capacity change from 0 to 256 [ 366.409866][ T8317] FAT-fs (loop0): Unrecognized mount option "non" or missing value [ 367.668661][ T28] audit: type=1326 audit(1788142627.306:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.1.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d9c19e159 code=0x0 [ 367.713244][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 371.185035][ T8370] capability: warning: `syz.3.738' uses 32-bit capabilities (legacy support in use) [ 371.255854][ T8372] autofs4:pid:8372:autofs_fill_super: called with bogus options [ 371.462530][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 373.193140][ T8398] netlink: 52 bytes leftover after parsing attributes in process `syz.3.754'. [ 373.247946][ T8399] loop0: detected capacity change from 0 to 512 [ 373.337402][ T8399] EXT4-fs (loop0): orphan cleanup on readonly fs [ 373.346629][ T8399] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 373.362892][ T8399] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 373.450329][ T8399] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.753: attempt to clear invalid blocks 2 len 1 [ 373.501197][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 373.571880][ T8399] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.753: invalid indirect mapped block 1819239214 (level 0) [ 373.676011][ T8399] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.753: invalid indirect mapped block 1819239214 (level 1) [ 373.897659][ T8399] EXT4-fs (loop0): 1 truncate cleaned up [ 373.997553][ T8399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 374.105567][ T8399] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.343022][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.758'. [ 374.478093][ T8420] jffs2: notice: (8420) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 375.830880][ T8431] FAULT_INJECTION: forcing a failure. [ 375.830880][ T8431] name failslab, interval 1, probability 0, space 0, times 0 [ 375.880927][ T8431] CPU: 0 PID: 8431 Comm: syz.2.763 Not tainted syzkaller #0 [ 375.888308][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.898412][ T8431] Call Trace: [ 375.901788][ T8431] [ 375.904829][ T8431] dump_stack_lvl+0x18c/0x250 [ 375.909696][ T8431] ? show_regs_print_info+0x20/0x20 [ 375.914974][ T8431] ? load_image+0x420/0x420 [ 375.919543][ T8431] ? __might_sleep+0xe0/0xe0 [ 375.924215][ T8431] ? __lock_acquire+0x7d80/0x7d80 [ 375.929313][ T8431] ? __asan_memset+0x22/0x40 [ 375.934007][ T8431] should_fail_ex+0x394/0x4c0 [ 375.938778][ T8431] should_failslab+0x9/0x20 [ 375.943358][ T8431] slab_pre_alloc_hook+0x59/0x300 [ 375.948451][ T8431] kmem_cache_alloc+0x5a/0x2c0 [ 375.953258][ T8431] ? security_inode_alloc+0x34/0x110 [ 375.958622][ T8431] security_inode_alloc+0x34/0x110 [ 375.963866][ T8431] inode_init_always+0x914/0xc90 [ 375.968869][ T8431] new_inode_pseudo+0x95/0x1d0 [ 375.973682][ T8431] alloc_anon_inode+0x1e/0x2f0 [ 375.978518][ T8431] aio_setup_ring+0x104/0xf30 [ 375.983245][ T8431] ? pcpu_alloc+0x11e7/0x1880 [ 375.987978][ T8431] ? ioctx_alloc+0x2e2/0x770 [ 375.992622][ T8431] ? free_ioctx_reqs+0x190/0x190 [ 375.997626][ T8431] ioctx_alloc+0x316/0x770 [ 376.002110][ T8431] __se_sys_io_setup+0x7b/0x190 [ 376.007009][ T8431] do_syscall_64+0x55/0xb0 [ 376.011480][ T8431] ? clear_bhb_loop+0x40/0x90 [ 376.016318][ T8431] ? clear_bhb_loop+0x40/0x90 [ 376.021042][ T8431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.026979][ T8431] RIP: 0033:0x7f9430b9e159 [ 376.031487][ T8431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.051266][ T8431] RSP: 002b:00007f94319da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 376.059775][ T8431] RAX: ffffffffffffffda RBX: 00007f9430e25fa0 RCX: 00007f9430b9e159 [ 376.067785][ T8431] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 376.075798][ T8431] RBP: 00007f9430c35024 R08: 0000000000000000 R09: 0000000000000000 [ 376.083811][ T8431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.091825][ T8431] R13: 00007f9430e26038 R14: 00007f9430e25fa0 R15: 00007ffd47a07398 [ 376.099873][ T8431] [ 376.629216][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 379.635520][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.648856][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.747287][ T8470] FAULT_INJECTION: forcing a failure. [ 379.747287][ T8470] name failslab, interval 1, probability 0, space 0, times 0 [ 379.760147][ T8470] CPU: 1 PID: 8470 Comm: syz.3.773 Not tainted syzkaller #0 [ 379.767506][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 379.777618][ T8470] Call Trace: [ 379.780969][ T8470] [ 379.783951][ T8470] dump_stack_lvl+0x18c/0x250 [ 379.788728][ T8470] ? show_regs_print_info+0x20/0x20 [ 379.793977][ T8470] ? load_image+0x420/0x420 [ 379.798537][ T8470] ? __might_sleep+0xe0/0xe0 [ 379.803200][ T8470] ? __lock_acquire+0x7d80/0x7d80 [ 379.808258][ T8470] ? __asan_memset+0x22/0x40 [ 379.812891][ T8470] should_fail_ex+0x394/0x4c0 [ 379.817608][ T8470] should_failslab+0x9/0x20 [ 379.822154][ T8470] slab_pre_alloc_hook+0x59/0x300 [ 379.827216][ T8470] kmem_cache_alloc+0x5a/0x2c0 [ 379.832019][ T8470] ? security_inode_alloc+0x34/0x110 [ 379.837345][ T8470] security_inode_alloc+0x34/0x110 [ 379.842495][ T8470] inode_init_always+0x914/0xc90 [ 379.847478][ T8470] new_inode_pseudo+0x95/0x1d0 [ 379.852285][ T8470] alloc_anon_inode+0x1e/0x2f0 [ 379.857084][ T8470] aio_setup_ring+0x104/0xf30 [ 379.861800][ T8470] ? pcpu_alloc+0x11e7/0x1880 [ 379.866511][ T8470] ? ioctx_alloc+0x2e2/0x770 [ 379.871150][ T8470] ? free_ioctx_reqs+0x190/0x190 [ 379.876128][ T8470] ioctx_alloc+0x316/0x770 [ 379.880585][ T8470] __se_sys_io_setup+0x7b/0x190 [ 379.885503][ T8470] do_syscall_64+0x55/0xb0 [ 379.889958][ T8470] ? clear_bhb_loop+0x40/0x90 [ 379.894759][ T8470] ? clear_bhb_loop+0x40/0x90 [ 379.899471][ T8470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.905401][ T8470] RIP: 0033:0x7f8b0b99e159 [ 379.909852][ T8470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.929762][ T8470] RSP: 002b:00007f8b0c83b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 379.938235][ T8470] RAX: ffffffffffffffda RBX: 00007f8b0bc25fa0 RCX: 00007f8b0b99e159 [ 379.946234][ T8470] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 379.954236][ T8470] RBP: 00007f8b0ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 379.962235][ T8470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.970229][ T8470] R13: 00007f8b0bc26038 R14: 00007f8b0bc25fa0 R15: 00007ffca0b597f8 [ 379.978241][ T8470] [ 380.190304][ T8] kernel write not supported for file /input/mice (pid: 8 comm: kworker/0:0) [ 380.352567][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 381.067331][ T8501] loop0: detected capacity change from 0 to 1024 [ 381.178331][ T7685] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 384.670681][ T8522] FAULT_INJECTION: forcing a failure. [ 384.670681][ T8522] name failslab, interval 1, probability 0, space 0, times 0 [ 384.712835][ T8522] CPU: 1 PID: 8522 Comm: syz.2.786 Not tainted syzkaller #0 [ 384.720229][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 384.730338][ T8522] Call Trace: [ 384.733706][ T8522] [ 384.736677][ T8522] dump_stack_lvl+0x18c/0x250 [ 384.741429][ T8522] ? show_regs_print_info+0x20/0x20 [ 384.746697][ T8522] ? load_image+0x420/0x420 [ 384.751294][ T8522] ? __might_sleep+0xe0/0xe0 [ 384.755985][ T8522] ? __lock_acquire+0x7d80/0x7d80 [ 384.761058][ T8522] ? __asan_memset+0x22/0x40 [ 384.765713][ T8522] should_fail_ex+0x394/0x4c0 [ 384.770458][ T8522] should_failslab+0x9/0x20 [ 384.775008][ T8522] slab_pre_alloc_hook+0x59/0x300 [ 384.780074][ T8522] kmem_cache_alloc+0x5a/0x2c0 [ 384.784870][ T8522] ? security_inode_alloc+0x34/0x110 [ 384.790193][ T8522] security_inode_alloc+0x34/0x110 [ 384.795344][ T8522] inode_init_always+0x914/0xc90 [ 384.800321][ T8522] new_inode_pseudo+0x95/0x1d0 [ 384.805127][ T8522] alloc_anon_inode+0x1e/0x2f0 [ 384.809918][ T8522] aio_setup_ring+0x104/0xf30 [ 384.814627][ T8522] ? pcpu_alloc+0x11e7/0x1880 [ 384.819340][ T8522] ? ioctx_alloc+0x2e2/0x770 [ 384.823962][ T8522] ? free_ioctx_reqs+0x190/0x190 [ 384.828933][ T8522] ioctx_alloc+0x316/0x770 [ 384.833381][ T8522] __se_sys_io_setup+0x7b/0x190 [ 384.838269][ T8522] do_syscall_64+0x55/0xb0 [ 384.842728][ T8522] ? clear_bhb_loop+0x40/0x90 [ 384.847431][ T8522] ? clear_bhb_loop+0x40/0x90 [ 384.852137][ T8522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.858053][ T8522] RIP: 0033:0x7f9430b9e159 [ 384.862497][ T8522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.882135][ T8522] RSP: 002b:00007f94319da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 384.890577][ T8522] RAX: ffffffffffffffda RBX: 00007f9430e25fa0 RCX: 00007f9430b9e159 [ 384.898572][ T8522] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 384.906562][ T8522] RBP: 00007f9430c35024 R08: 0000000000000000 R09: 0000000000000000 [ 384.914552][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.922552][ T8522] R13: 00007f9430e26038 R14: 00007f9430e25fa0 R15: 00007ffd47a07398 [ 384.930566][ T8522] [ 385.102986][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 385.315732][ T8536] loop0: detected capacity change from 0 to 1024 [ 389.320046][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 389.463809][ T8576] loop0: detected capacity change from 0 to 1024 [ 391.486280][ T8594] netlink: 104 bytes leftover after parsing attributes in process `syz.1.808'. [ 392.013173][ T8601] netlink: 104 bytes leftover after parsing attributes in process `syz.0.817'. [ 393.130647][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 393.151349][ T8610] loop0: detected capacity change from 0 to 1024 [ 393.333197][ T7685] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 395.553897][ T8631] netlink: 104 bytes leftover after parsing attributes in process `syz.2.821'. [ 395.897695][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 397.942510][ T8661] netlink: 104 bytes leftover after parsing attributes in process `syz.0.831'. [ 398.101533][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 399.372730][ T7327] udevd[7327]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 399.580381][ T8690] netlink: 104 bytes leftover after parsing attributes in process `syz.2.841'. [ 399.884759][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 400.745476][ T7327] udevd[7327]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 401.064344][ T8720] netlink: 104 bytes leftover after parsing attributes in process `syz.1.852'. [ 401.477951][ T8732] netlink: 68 bytes leftover after parsing attributes in process `syz.1.857'. [ 401.621880][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.858'. [ 403.143001][ T8746] syz.1.860 (8746) used greatest stack depth: 20328 bytes left [ 404.626371][ T8751] sit0: entered promiscuous mode [ 404.637297][ T8751] netlink: 'syz.3.863': attribute type 1 has an invalid length. [ 404.645084][ T8751] netlink: 9 bytes leftover after parsing attributes in process `syz.3.863'. [ 404.866498][ T8758] netlink: 104 bytes leftover after parsing attributes in process `syz.3.865'. [ 405.647468][ T1138] ------------[ cut here ]------------ [ 405.653439][ T1138] WARNING: CPU: 1 PID: 1138 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830 [ 405.663120][ T1138] Modules linked in: [ 405.667062][ T1138] CPU: 1 PID: 1138 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 405.674803][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.684939][ T1138] Workqueue: iou_exit io_ring_exit_work [ 405.690603][ T1138] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 405.696365][ T1138] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 00 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 01 61 00 f7 e9 b1 fd ff ff e8 f7 60 00 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 405.716160][ T1138] RSP: 0018:ffffc90004bdfa40 EFLAGS: 00010293 [ 405.722308][ T1138] RAX: ffffffff8a871179 RBX: ffff88807ccda000 RCX: ffff888024411e00 [ 405.730352][ T1138] RDX: 0000000000000000 RSI: ffffffffffffffee RDI: 0000000000000000 [ 405.738359][ T1138] RBP: ffffc90004bdfbb0 R08: ffffc90004bdf9c7 R09: 1ffff9200097bf38 [ 405.746343][ T1138] R10: dffffc0000000000 R11: fffff5200097bf39 R12: dffffc0000000000 [ 405.754385][ T1138] R13: 0000000100002871 R14: 0000000100002883 R15: ffff88807ccda510 [ 405.762397][ T1138] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 405.771374][ T1138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.777968][ T1138] CR2: 0000200000019680 CR3: 0000000077c9e000 CR4: 00000000003506e0 [ 405.786002][ T1138] Call Trace: [ 405.789351][ T1138] [ 405.792304][ T1138] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 405.798238][ T1138] ? _raw_spin_unlock_irq+0x23/0x50 [ 405.803529][ T1138] ? process_scheduled_works+0x975/0x1600 [ 405.809441][ T1138] ? process_scheduled_works+0x975/0x1600 [ 405.815221][ T1138] process_scheduled_works+0xa60/0x1600 [ 405.820933][ T1138] ? worker_attach_to_pool+0x370/0x370 [ 405.826457][ T1138] ? assign_work+0x3cc/0x5d0 [ 405.831163][ T1138] worker_thread+0xa5e/0xfe0 [ 405.835816][ T1138] kthread+0x2fa/0x390 [ 405.839939][ T1138] ? pr_cont_work+0x550/0x550 [ 405.844654][ T1138] ? kthread_blkcg+0xd0/0xd0 [ 405.849361][ T1138] ret_from_fork+0x48/0x80 [ 405.853820][ T1138] ? kthread_blkcg+0xd0/0xd0 [ 405.858481][ T1138] ret_from_fork_asm+0x11/0x20 [ 405.863320][ T1138] [ 405.866358][ T1138] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 405.873668][ T1138] CPU: 1 PID: 1138 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 405.881253][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.891326][ T1138] Workqueue: iou_exit io_ring_exit_work [ 405.896922][ T1138] Call Trace: [ 405.900211][ T1138] [ 405.903164][ T1138] dump_stack_lvl+0x18c/0x250 [ 405.907882][ T1138] ? show_regs_print_info+0x20/0x20 [ 405.913113][ T1138] ? load_image+0x420/0x420 [ 405.917637][ T1138] panic+0x2ca/0x720 [ 405.921647][ T1138] ? bpf_jit_dump+0xd0/0xd0 [ 405.926181][ T1138] ? ret_from_fork_asm+0x11/0x20 [ 405.931145][ T1138] __warn+0x2e0/0x470 [ 405.935202][ T1138] ? io_ring_exit_work+0x3b9/0x830 [ 405.940362][ T1138] ? io_ring_exit_work+0x3b9/0x830 [ 405.945496][ T1138] report_bug+0x2be/0x4f0 [ 405.949902][ T1138] ? io_ring_exit_work+0x3b9/0x830 [ 405.955055][ T1138] ? io_ring_exit_work+0x3b9/0x830 [ 405.960203][ T1138] ? io_ring_exit_work+0x3bb/0x830 [ 405.965331][ T1138] handle_bug+0xcf/0x120 [ 405.969590][ T1138] exc_invalid_op+0x1a/0x50 [ 405.974123][ T1138] asm_exc_invalid_op+0x1a/0x20 [ 405.978981][ T1138] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 405.984735][ T1138] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 00 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 01 61 00 f7 e9 b1 fd ff ff e8 f7 60 00 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 406.004363][ T1138] RSP: 0018:ffffc90004bdfa40 EFLAGS: 00010293 [ 406.010448][ T1138] RAX: ffffffff8a871179 RBX: ffff88807ccda000 RCX: ffff888024411e00 [ 406.018442][ T1138] RDX: 0000000000000000 RSI: ffffffffffffffee RDI: 0000000000000000 [ 406.026466][ T1138] RBP: ffffc90004bdfbb0 R08: ffffc90004bdf9c7 R09: 1ffff9200097bf38 [ 406.034447][ T1138] R10: dffffc0000000000 R11: fffff5200097bf39 R12: dffffc0000000000 [ 406.042451][ T1138] R13: 0000000100002871 R14: 0000000100002883 R15: ffff88807ccda510 [ 406.050439][ T1138] ? io_ring_exit_work+0x3b9/0x830 [ 406.055585][ T1138] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 406.061425][ T1138] ? _raw_spin_unlock_irq+0x23/0x50 [ 406.066655][ T1138] ? process_scheduled_works+0x975/0x1600 [ 406.072395][ T1138] ? process_scheduled_works+0x975/0x1600 [ 406.078168][ T1138] process_scheduled_works+0xa60/0x1600 [ 406.083768][ T1138] ? worker_attach_to_pool+0x370/0x370 [ 406.089253][ T1138] ? assign_work+0x3cc/0x5d0 [ 406.093883][ T1138] worker_thread+0xa5e/0xfe0 [ 406.098511][ T1138] kthread+0x2fa/0x390 [ 406.102612][ T1138] ? pr_cont_work+0x550/0x550 [ 406.107313][ T1138] ? kthread_blkcg+0xd0/0xd0 [ 406.111927][ T1138] ret_from_fork+0x48/0x80 [ 406.116384][ T1138] ? kthread_blkcg+0xd0/0xd0 [ 406.120989][ T1138] ret_from_fork_asm+0x11/0x20 [ 406.125780][ T1138] [ 406.128970][ T1138] Kernel Offset: disabled [ 406.133398][ T1138] Rebooting in 86400 seconds..