last executing test programs: 13.15909881s ago: executing program 4 (id=500): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r1, &(0x7f0000000380)=""/159, 0x9f, 0xa6a) 11.159633166s ago: executing program 4 (id=504): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) sendto(r0, &(0x7f0000000280)="ff650d8e167648196964b14cc49f82e5088b0ca0551713bac0a1e79319b4baf76117116c855d63568ff95b", 0x2b, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 10.696607061s ago: executing program 4 (id=508): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.051996443s ago: executing program 0 (id=511): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 9.777436637s ago: executing program 2 (id=513): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x9, 0xfb, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9.45987378s ago: executing program 3 (id=515): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f00009e6000/0x2000)=nil, 0x2000, 0x200000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x1000000}) 9.262163566s ago: executing program 2 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 9.054722002s ago: executing program 3 (id=517): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000580), 0xfe, 0x559e, &(0x7f0000005680)="$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") syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mknod$loop(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000240)='./file0/file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 8.678935718s ago: executing program 4 (id=519): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 8.406264483s ago: executing program 5 (id=520): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2e, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001240)={[{@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@fat=@debug}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@shortname_win95}, {@numtail}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@utf8no}]}, 0x7f, 0x2b6, &(0x7f0000000840)="$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") 8.303984412s ago: executing program 2 (id=521): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioperm(0x0, 0x3, 0x2) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) 7.162363693s ago: executing program 1 (id=522): openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 6.765226414s ago: executing program 4 (id=523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x32}, 0x50) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc)=0x3, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x3, 0x5000000) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0xc, 0xe}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000340)=@tcp=r1, 0x1}, 0x20) syz_usb_connect$midi(0x0, 0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000008ca15010140000102038d09022000010106500c090400000101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 6.311530749s ago: executing program 5 (id=524): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.367325325s ago: executing program 2 (id=525): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000280)={0x20, 0x31, 0x1, 't'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.175232643s ago: executing program 3 (id=526): connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write(r1, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r0, &(0x7f0000000780)=""/221, 0xfdef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 5.034008263s ago: executing program 1 (id=527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x25f0}], 0x1, 0x0, &(0x7f0000000240)={[0xffffffff]}, 0x8) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000884) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 4.885581089s ago: executing program 5 (id=528): r0 = gettid() r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117}, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.664336013s ago: executing program 0 (id=529): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x4, 0x0, 0x0, 0x2, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x7}, @fda={0x66646185, 0x8, 0x0, 0x5}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 4.037421103s ago: executing program 0 (id=530): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.8166283s ago: executing program 1 (id=531): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000001, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.546665912s ago: executing program 3 (id=532): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1005c, '\x00', 0x0, @fallback=0x24}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000140)=ANY=[], 0x18) 3.3232039s ago: executing program 0 (id=533): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000040)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000400)=@filename='nodev\x00', &(0x7f0000000500)='./debug\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r0 = epoll_create(0x1) epoll_wait(r0, &(0x7f0000000a00)=[{}], 0x1, 0xc8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)="02000000000000001122334455667788", 0x10) epoll_wait(r0, &(0x7f0000000a00)=[{}], 0x1, 0x1f4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/devcoredump/disabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='1', 0x1) 3.26626253s ago: executing program 5 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) openat(0xffffffffffffff9c, 0x0, 0x42, 0x58) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) 2.950945176s ago: executing program 5 (id=535): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c05c}}], 0x1, 0x2000c080) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.884069439s ago: executing program 3 (id=536): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x5ba8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.883525086s ago: executing program 1 (id=537): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b0c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0xfffffffe, 0x110002, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x4, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000009080)={0x2020, 0x0, 0x0, 0x0}, 0xfffffdca) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000002380)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x2, 0x5, 0x1, 0x4, 0x400000004, 0x401, 0xe767, 0x800, 0xe96, 0x6000, 0x2, r4, r2, 0x80000001, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.49723075s ago: executing program 4 (id=538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x84, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_HT_CAPABILITY={0x1e}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}]]}, 0x84}}, 0x0) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, [{0xdd, 0x16, "0100"/22}, {0xbf, 0xc, '\x00'/12}, {0xc0, 0xa, '\x00'/10}]}, 0x84) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, &(0x7f0000000580)) syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000600)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x2d, 0x1a}, [{0xdd, 0x16, "0100"/22}]}, 0x5c) 2.151839117s ago: executing program 1 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r1}, 0xffffffffffffffff, 0xfe, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) 2.143527512s ago: executing program 0 (id=551): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x1}) 1.965523766s ago: executing program 2 (id=540): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x1015, r1, 0x0) read(r2, &(0x7f0000000580)=""/190, 0xbe) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000380)="87", 0x1}], 0x1) 1.596733828s ago: executing program 3 (id=541): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xd1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xfffffffffffffffe}]}}}]}, 0x4c}}, 0x0) 391.495899ms ago: executing program 0 (id=542): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x80) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r1, r0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f00000002c0)={0x3, 0xffffffff, 0xfffffffe, 0xffff01c2, 0x2, 0xa}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x30, 0x2e]}}, 0x0, 0x41, 0x0, 0x1}, 0x28) 298.132087ms ago: executing program 5 (id=543): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) 125.714955ms ago: executing program 2 (id=544): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="2000af0000008ddb3cfe4132ea7c8235356210a12a8bd0a8bd371b43152379fe641cc5a6a5bef365bf2e20e71cd26043e460864f352c45c242b1833f07a881b86394fcf8cae274f4248c09eb367e273f4247bfb737fac24ab2c15246bed1372a9cfaab74974737bfc3a2da6bcf65fd36ef6f3ca2202dadc6ac1a3f5adf92d40777006a2de3b4aa985ba64855be666c9705a3"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004340)={&(0x7f00000003c0)={0x50, 0xffffffffffffffda, 0x5, {0x7, 0x2d, 0x6, 0x495a802, 0x8, 0x7fc, 0x87aa9, 0x6, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 0s ago: executing program 1 (id=545): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, 0x0, 0x0) close(r1) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. [ 87.417007][ T5593] cgroup: Unknown subsys name 'net' [ 87.505514][ T5593] cgroup: Unknown subsys name 'cpuset' [ 87.515599][ T5593] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.145335][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.144505][ T29] cfg80211: failed to load regulatory.db [ 91.756689][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.765480][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.775465][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.775757][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.785359][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.790775][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.798158][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.807468][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.812403][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.820291][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.825830][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.834766][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.844621][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.848009][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.854738][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.874153][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.888312][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.901420][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.914073][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.922585][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.932101][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.939179][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.947471][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.961082][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.973591][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.984822][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.993353][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.003270][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.013372][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.022607][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.941569][ T50] Bluetooth: hci2: command tx timeout [ 93.941716][ T5614] Bluetooth: hci0: command tx timeout [ 93.953976][ T5619] Bluetooth: hci1: command tx timeout [ 94.022415][ T5614] Bluetooth: hci4: command tx timeout [ 94.028515][ T5619] Bluetooth: hci3: command tx timeout [ 94.101034][ T5619] Bluetooth: hci5: command tx timeout [ 94.674891][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.682111][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.689246][ T5615] bridge_slave_0: entered allmulticast mode [ 94.697002][ T5615] bridge_slave_0: entered promiscuous mode [ 94.763184][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.770510][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.777890][ T5615] bridge_slave_1: entered allmulticast mode [ 94.785427][ T5615] bridge_slave_1: entered promiscuous mode [ 94.817544][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.825520][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.832803][ T5607] bridge_slave_0: entered allmulticast mode [ 94.840527][ T5607] bridge_slave_0: entered promiscuous mode [ 94.848585][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.855814][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.863324][ T5609] bridge_slave_0: entered allmulticast mode [ 94.870780][ T5609] bridge_slave_0: entered promiscuous mode [ 94.924845][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.932176][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.939310][ T5610] bridge_slave_0: entered allmulticast mode [ 94.947018][ T5610] bridge_slave_0: entered promiscuous mode [ 94.955070][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.962291][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.969407][ T5607] bridge_slave_1: entered allmulticast mode [ 94.977157][ T5607] bridge_slave_1: entered promiscuous mode [ 94.984373][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.991580][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.998692][ T5609] bridge_slave_1: entered allmulticast mode [ 95.006287][ T5609] bridge_slave_1: entered promiscuous mode [ 95.013547][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.020703][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.027917][ T5612] bridge_slave_0: entered allmulticast mode [ 95.035469][ T5612] bridge_slave_0: entered promiscuous mode [ 95.071859][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.079015][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.086213][ T5610] bridge_slave_1: entered allmulticast mode [ 95.093826][ T5610] bridge_slave_1: entered promiscuous mode [ 95.125120][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.132296][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.139431][ T5612] bridge_slave_1: entered allmulticast mode [ 95.147235][ T5612] bridge_slave_1: entered promiscuous mode [ 95.157494][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.244890][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.254341][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.261819][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.268962][ T5606] bridge_slave_0: entered allmulticast mode [ 95.276703][ T5606] bridge_slave_0: entered promiscuous mode [ 95.299593][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.312012][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.346206][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.353482][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.360618][ T5606] bridge_slave_1: entered allmulticast mode [ 95.368372][ T5606] bridge_slave_1: entered promiscuous mode [ 95.378221][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.390354][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.414019][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.426011][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.462362][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.499390][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.523535][ T5615] team0: Port device team_slave_0 added [ 95.555498][ T5607] team0: Port device team_slave_0 added [ 95.590086][ T5615] team0: Port device team_slave_1 added [ 95.598601][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.623639][ T5607] team0: Port device team_slave_1 added [ 95.631466][ T5609] team0: Port device team_slave_0 added [ 95.639352][ T5612] team0: Port device team_slave_0 added [ 95.659376][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.670867][ T5610] team0: Port device team_slave_0 added [ 95.691294][ T5609] team0: Port device team_slave_1 added [ 95.699000][ T5612] team0: Port device team_slave_1 added [ 95.744181][ T5610] team0: Port device team_slave_1 added [ 95.787932][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.795019][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.821005][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.859904][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.867020][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.893281][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.917941][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.925061][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.951043][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.963211][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.970221][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.996207][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.009589][ T5606] team0: Port device team_slave_0 added [ 96.022947][ T5619] Bluetooth: hci1: command tx timeout [ 96.028379][ T5614] Bluetooth: hci2: command tx timeout [ 96.028396][ T50] Bluetooth: hci0: command tx timeout [ 96.033856][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.046262][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.072255][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.084242][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.091395][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.117476][ T5619] Bluetooth: hci4: command tx timeout [ 96.117779][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.123273][ T5614] Bluetooth: hci3: command tx timeout [ 96.145300][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.152256][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.178167][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.188994][ T5614] Bluetooth: hci5: command tx timeout [ 96.191387][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.201372][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.227618][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.249597][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.256570][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.283225][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.306332][ T5606] team0: Port device team_slave_1 added [ 96.312598][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.319606][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.345967][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.413176][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.420137][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.446144][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.459249][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.466251][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.492372][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.536573][ T5607] hsr_slave_0: entered promiscuous mode [ 96.543159][ T5607] hsr_slave_1: entered promiscuous mode [ 96.641765][ T5610] hsr_slave_0: entered promiscuous mode [ 96.648236][ T5610] hsr_slave_1: entered promiscuous mode [ 96.654677][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 96.660444][ T5610] Cannot create hsr debugfs directory [ 96.701577][ T5615] hsr_slave_0: entered promiscuous mode [ 96.708893][ T5615] hsr_slave_1: entered promiscuous mode [ 96.715386][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 96.721299][ T5615] Cannot create hsr debugfs directory [ 96.768172][ T5612] hsr_slave_0: entered promiscuous mode [ 96.774683][ T5612] hsr_slave_1: entered promiscuous mode [ 96.781159][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 96.786884][ T5612] Cannot create hsr debugfs directory [ 96.819114][ T5609] hsr_slave_0: entered promiscuous mode [ 96.825606][ T5609] hsr_slave_1: entered promiscuous mode [ 96.831976][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 96.837689][ T5609] Cannot create hsr debugfs directory [ 96.968506][ T5606] hsr_slave_0: entered promiscuous mode [ 96.975279][ T5606] hsr_slave_1: entered promiscuous mode [ 96.982060][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 96.987784][ T5606] Cannot create hsr debugfs directory [ 97.637951][ T5610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.653001][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.662640][ T5610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.674635][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.683235][ T5610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.693610][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.702304][ T5610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.713888][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.790420][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.802118][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.810329][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.822199][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.830249][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.840529][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.849030][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.859486][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.944880][ T5612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.958542][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.979806][ T5612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.989817][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.998291][ T5612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.008706][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.022079][ T5612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.032363][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.101000][ T5614] Bluetooth: hci0: command tx timeout [ 98.101033][ T5619] Bluetooth: hci2: command tx timeout [ 98.106609][ T50] Bluetooth: hci1: command tx timeout [ 98.173264][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.181729][ T50] Bluetooth: hci3: command tx timeout [ 98.183672][ T5614] Bluetooth: hci4: command tx timeout [ 98.196444][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.204648][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.215377][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.224165][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.235374][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.243823][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.253776][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.261283][ T5614] Bluetooth: hci5: command tx timeout [ 98.317082][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.413009][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.425651][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.439244][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.451175][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.463389][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.472042][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.481766][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.509948][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.524236][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.542827][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.550019][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.606967][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.618663][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.625809][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.682992][ T5606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.693229][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.715265][ T5606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.725875][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.749093][ T5606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.760089][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.776991][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.792075][ T5606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.802766][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.841857][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.885171][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.900282][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.907457][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.931292][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.938412][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.968824][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.975981][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.028954][ T763] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.036153][ T763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.109872][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.263764][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.294883][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.315814][ T5607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.338521][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.345656][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.444370][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.451609][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.546362][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.585625][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.643101][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.650320][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.725224][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.732496][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.869583][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.924732][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.931950][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.983216][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.990462][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.108130][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.181236][ T5614] Bluetooth: hci2: command tx timeout [ 100.186880][ T5614] Bluetooth: hci1: command tx timeout [ 100.186953][ T50] Bluetooth: hci0: command tx timeout [ 100.263031][ T50] Bluetooth: hci3: command tx timeout [ 100.263055][ T5614] Bluetooth: hci4: command tx timeout [ 100.345416][ T5614] Bluetooth: hci5: command tx timeout [ 100.979139][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.222773][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.259493][ T5607] veth0_vlan: entered promiscuous mode [ 101.355682][ T5607] veth1_vlan: entered promiscuous mode [ 101.406278][ T5610] veth0_vlan: entered promiscuous mode [ 101.476950][ T5610] veth1_vlan: entered promiscuous mode [ 101.558949][ T5607] veth0_macvtap: entered promiscuous mode [ 101.600538][ T5607] veth1_macvtap: entered promiscuous mode [ 101.707881][ T5610] veth0_macvtap: entered promiscuous mode [ 101.734234][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.761637][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.808164][ T5610] veth1_macvtap: entered promiscuous mode [ 101.846880][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.913738][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.941610][ T763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.961509][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.981721][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.028662][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.045344][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.112915][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.142380][ T5794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.164720][ T5615] veth0_vlan: entered promiscuous mode [ 102.195245][ T5615] veth1_vlan: entered promiscuous mode [ 102.217692][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.231420][ T1111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.235586][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.312721][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.319204][ T5612] veth0_vlan: entered promiscuous mode [ 102.325675][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.406922][ T5609] veth0_vlan: entered promiscuous mode [ 102.447986][ T5612] veth1_vlan: entered promiscuous mode [ 102.449989][ T5607] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.463803][ T5615] veth0_macvtap: entered promiscuous mode [ 102.518471][ T5609] veth1_vlan: entered promiscuous mode [ 102.531492][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.539556][ T1111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.549842][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.568852][ T5615] veth1_macvtap: entered promiscuous mode [ 102.664688][ T5606] veth0_vlan: entered promiscuous mode [ 102.705499][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.719656][ T5606] veth1_vlan: entered promiscuous mode [ 102.725844][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.763416][ T5612] veth0_macvtap: entered promiscuous mode [ 102.780398][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.809086][ T5609] veth0_macvtap: entered promiscuous mode [ 102.822054][ T5794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.842485][ T5612] veth1_macvtap: entered promiscuous mode [ 102.876288][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.967306][ T5609] veth1_macvtap: entered promiscuous mode [ 103.091186][ T1111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.134591][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.163799][ T1111] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.266788][ T5606] veth0_macvtap: entered promiscuous mode [ 103.295365][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.454732][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.484260][ T1111] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.582668][ T5606] veth1_macvtap: entered promiscuous mode [ 103.607646][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.681075][ T5795] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.861187][ T5794] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.894682][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.912007][ T5794] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.935201][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.946401][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.954962][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.041060][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.141540][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.985192][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.078277][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.101108][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.182504][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.349738][ T5795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.388368][ T5795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.411855][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.544470][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.553399][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.576619][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.720399][ T5870] Bluetooth: MGMT ver 1.23 [ 105.735069][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.735144][ T763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.768520][ T763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.874544][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.882952][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.931218][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.097906][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.130357][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.175621][ T5868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.183442][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.185386][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.231858][ T5868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.252574][ T5868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.854286][ T5895] lo speed is unknown, defaulting to 1000 [ 106.867230][ T5894] loop5: detected capacity change from 0 to 256 [ 106.888967][ T5895] lo speed is unknown, defaulting to 1000 [ 106.946877][ T5895] lo speed is unknown, defaulting to 1000 [ 106.965179][ T5894] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 107.003206][ T5895] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 107.067114][ T5895] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 107.175333][ T5894] exFAT-fs (loop5): valid_size(150994954) is greater than size(10) [ 107.183038][ T5895] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 107.261397][ T2156] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.296439][ T5895] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.418704][ T5895] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 107.454228][ T2156] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 107.507472][ T2156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.540073][ T2156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.683205][ T2156] usb 4-1: config 0 descriptor?? [ 107.782361][ T50] Bluetooth: hci0: command 0x1407 tx timeout [ 107.782949][ T5614] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 107.806028][ T5895] lo speed is unknown, defaulting to 1000 [ 107.866434][ T30] audit: type=1326 audit(1787178440.031:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.24" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed1d9e0d9 code=0x7fc00000 [ 107.914749][ T30] audit: type=1326 audit(1787178440.071:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.24" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7efed1d9e0d9 code=0x7fc00000 [ 107.923709][ T5895] lo speed is unknown, defaulting to 1000 [ 108.027322][ T5917] netlink: 'syz.5.25': attribute type 1 has an invalid length. [ 108.059825][ T5895] lo speed is unknown, defaulting to 1000 [ 108.074186][ T2156] usbhid 4-1:0.0: can't add hid device: -71 [ 108.083768][ T2156] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 108.116742][ T5895] lo speed is unknown, defaulting to 1000 [ 108.131302][ T5917] netlink: 'syz.5.25': attribute type 10 has an invalid length. [ 108.150449][ T5895] lo speed is unknown, defaulting to 1000 [ 108.159070][ T2156] usb 4-1: USB disconnect, device number 2 [ 108.180653][ T5895] lo speed is unknown, defaulting to 1000 [ 108.191257][ T5917] netlink: 40 bytes leftover after parsing attributes in process `syz.5.25'. [ 108.214992][ T5917] dummy0: entered promiscuous mode [ 108.536596][ T5924] siw: device registration error -23 [ 108.544572][ T30] audit: type=1326 audit(1787178440.711:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.1.24" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed1d9e0d9 code=0x7fc00000 [ 108.652629][ T2156] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.674360][ T5925] v: renamed from veth0_vlan [ 108.741370][ T5731] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.816110][ T2156] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 108.837339][ T2156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.871133][ T2156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.922969][ T5731] usb 5-1: Using ep0 maxpacket: 32 [ 108.926679][ T2156] usb 4-1: config 0 descriptor?? [ 108.954834][ T5731] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 109.015876][ T5731] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 109.038546][ T5928] syzkaller0: create flow: hash 3364512821 index 1 [ 109.057480][ T5731] usb 5-1: config 0 has no interface number 0 [ 109.097065][ T5731] usb 5-1: config 0 interface 12 has no altsetting 0 [ 109.130451][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.173740][ T5731] usb 5-1: Product: syz [ 109.192380][ T5731] usb 5-1: Manufacturer: syz [ 109.205384][ T5731] usb 5-1: SerialNumber: syz [ 109.220186][ T5934] loop0: detected capacity change from 0 to 8192 [ 109.234030][ T5731] usb 5-1: config 0 descriptor?? [ 109.259343][ T5934] ======================================================= [ 109.259343][ T5934] WARNING: The mand mount option has been deprecated and [ 109.259343][ T5934] and is ignored by this kernel. Remove the mand [ 109.259343][ T5934] option from the mount to silence this warning. [ 109.259343][ T5934] ======================================================= [ 109.298376][ T5940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.339134][ T5934] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.425534][ T5940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.445346][ T5795] syzkaller0: tun_net_xmit 76 [ 109.472076][ T5732] syzkaller0: tun_net_xmit 76 [ 109.490321][ T5795] syzkaller0: tun_net_xmit 48 [ 109.540095][ T5939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.797511][ T2156] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 109.837766][ T2156] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 109.859590][ T5926] syzkaller0: delete flow: hash 3364512821 index 1 [ 110.021105][ T5770] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.226191][ T5770] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.266904][ T5770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.334811][ T5770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.371519][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.392815][ T2156] usb 4-1: USB disconnect, device number 3 [ 110.398724][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 110.453661][ T5770] usb 1-1: config 0 descriptor?? [ 110.903494][ T5614] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 110.913983][ T5614] Bluetooth: hci1: Injecting HCI hardware error event [ 110.925424][ T5614] Bluetooth: hci1: hardware error 0x00 [ 110.952034][ T5770] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 111.004111][ T5770] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input6 [ 111.095820][ T5958] loop2: detected capacity change from 0 to 32768 [ 111.390858][ T5731] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 111.404280][ T5770] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 111.427692][ T5731] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 111.487683][ T5731] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 111.523198][ T5731] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 111.579344][ T5770] usb 1-1: USB disconnect, device number 2 [ 111.595816][ T5731] usb 5-1: USB disconnect, device number 2 [ 111.898684][ T5971] fido_id[5971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 112.285142][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 113.092176][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.5.44'. [ 113.141267][ T5614] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 113.399262][ T5997] netlink: 'syz.2.45': attribute type 4 has an invalid length. [ 113.454758][ T5998] netlink: 'syz.2.45': attribute type 4 has an invalid length. [ 113.770927][ T5732] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 113.856716][ T5268] v: left promiscuous mode [ 113.872882][ T5978] macsec0: entered promiscuous mode [ 113.890992][ T5978] macsec0: left promiscuous mode [ 113.913589][ T5981] veth1_macvtap: left promiscuous mode [ 113.936345][ T5732] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 113.963283][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.989590][ T5732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 113.991689][ T5994] dummy0: left promiscuous mode [ 114.006667][ T5732] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 114.021116][ T5732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.053200][ T5732] usb 3-1: config 0 descriptor?? [ 114.068110][ T5999] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.123138][ T5765] v: entered promiscuous mode [ 114.217606][ T6001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.397038][ T5732] usbhid 3-1:0.0: can't add hid device: -71 [ 114.424208][ T5732] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 114.474810][ T5732] usb 3-1: USB disconnect, device number 2 [ 115.493575][ T6022] netlink: 'syz.1.52': attribute type 1 has an invalid length. [ 115.620124][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 115.856913][ T6018] loop5: detected capacity change from 0 to 8192 [ 115.895391][ T6030] loop2: detected capacity change from 0 to 1024 [ 115.925308][ T6031] binder: 6027:6031 ioctl c0306201 200000000680 returned -14 [ 115.934233][ T6018] loop5: p1 p2[DM] p3 p4 [ 115.963105][ T6018] loop5: p1 size 196608 extends beyond EOD, truncated [ 116.033981][ T6018] loop5: p2 start 4292936063 is beyond EOD, truncated [ 116.082027][ T6018] loop5: p3 start 83886144 is beyond EOD, truncated [ 116.177920][ T6018] loop5: p4 size 50331648 extends beyond EOD, truncated [ 117.056851][ T5625] udevd[5625]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 117.069598][ T5620] udevd[5620]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 117.223576][ T6065] gadgetfs: bound to dummy_udc driver [ 117.231292][ T6066] netlink: 44 bytes leftover after parsing attributes in process `syz.2.64'. [ 117.267318][ T6066] Zero length message leads to an empty skb [ 117.511812][ T5802] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 117.549305][ C1] gadgetfs: connected [ 117.562092][ T5802] gadgetfs: disconnected [ 117.606925][ T6071] lo speed is unknown, defaulting to 1000 [ 117.744200][ C1] gadgetfs: connected [ 117.764037][ T5802] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 117.811434][ T5802] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 117.857661][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.920509][ C1] gadgetfs: configuration #1 [ 118.309705][ T6069] loop5: detected capacity change from 0 to 32768 [ 118.425366][ T6065] gadgetfs: suspended from state 3 [ 118.483728][ T6065] gadgetfs: disconnected [ 118.489615][ T5765] usb 1-1: USB disconnect, device number 3 [ 118.838661][ T5732] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 118.913710][ T5732] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 119.135540][ T6103] netlink: 'syz.5.73': attribute type 1 has an invalid length. [ 119.203182][ T5731] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 119.283791][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.73'. [ 119.741716][ T5731] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 119.837157][ T6110] binder: 6109:6110 ioctl c0306201 200000000680 returned -14 [ 119.946525][ T6096] ceph: No mds server is up or the cluster is laggy [ 120.149900][ T6116] netlink: 'syz.1.78': attribute type 4 has an invalid length. [ 120.225058][ T6123] netlink: 'syz.1.78': attribute type 4 has an invalid length. [ 120.248957][ T6121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.574451][ T5802] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 121.093096][ T5802] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 121.149901][ T5802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.205406][ T5802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 121.260983][ T5802] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.310879][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.356635][ T5802] usb 2-1: config 0 descriptor?? [ 121.383227][ T6125] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.714231][ T5802] usbhid 2-1:0.0: can't add hid device: -71 [ 121.728039][ T5802] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 121.797227][ T5802] usb 2-1: USB disconnect, device number 2 [ 123.198450][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.90'. [ 123.391292][ T6168] binder: 6166:6168 ioctl c0306201 200000000680 returned -14 [ 123.869465][ T5770] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 124.028853][ T6161] loop3: detected capacity change from 0 to 32768 [ 124.141661][ T5770] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 124.820892][ T5770] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 124.907742][ T6172] ceph: No mds server is up or the cluster is laggy [ 125.338566][ T6191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.546820][ T6195] netlink: 'syz.4.102': attribute type 4 has an invalid length. [ 125.592175][ T6200] netlink: 'syz.4.102': attribute type 4 has an invalid length. [ 125.696596][ T5732] lo speed is unknown, defaulting to 1000 [ 125.720396][ T5770] lo speed is unknown, defaulting to 1000 [ 125.930954][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 126.098655][ T5770] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 126.122738][ T9] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 126.145040][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.161609][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 126.174517][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.191823][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.210098][ T9] usb 5-1: config 0 descriptor?? [ 126.225337][ T6203] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 126.361887][ T5802] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 126.529907][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 126.551986][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 126.577204][ T9] usb 5-1: USB disconnect, device number 3 [ 126.699310][ T6229] syzkaller0: create flow: hash 3364512821 index 1 [ 126.733533][ T6129] syzkaller0: tun_net_xmit 76 [ 126.752980][ T6129] syzkaller0: tun_net_xmit 48 [ 126.762182][ T5732] syzkaller0: tun_net_xmit 76 [ 126.780909][ T5731] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 126.869699][ T6226] syzkaller0: delete flow: hash 3364512821 index 1 [ 126.882478][ T5770] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 126.986599][ T5731] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 127.025762][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.047993][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.067255][ T5731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.093574][ T5731] usb 6-1: config 0 descriptor?? [ 127.102578][ T6231] loop2: detected capacity change from 0 to 512 [ 127.141198][ T6214] ceph: No mds server is up or the cluster is laggy [ 127.264030][ T6231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.300588][ T6231] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.522564][ T6231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.557957][ T6231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.572742][ T5731] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 127.590705][ T5731] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0002/input/input7 [ 127.762785][ T5731] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 127.837005][ T5731] usb 6-1: USB disconnect, device number 2 [ 127.956787][ T6240] fido_id[6240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 128.811680][ T5802] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 129.158132][ T5802] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 129.190028][ T5802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.216081][ T5802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.259745][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.415897][ T5802] usb 2-1: config 0 descriptor?? [ 129.917049][ T5802] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 129.987103][ T5802] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input8 [ 130.178066][ T5802] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 130.254565][ T5802] usb 2-1: USB disconnect, device number 3 [ 130.390152][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.596804][ T6262] fido_id[6262]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 130.868147][ T6274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.453325][ T6291] loop4: detected capacity change from 0 to 64 [ 131.913532][ T6291] hfs: request for non-existent node 131072 in B*Tree [ 131.921027][ T6291] hfs: request for non-existent node 131072 in B*Tree [ 132.108650][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.318092][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.906066][ T6309] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 133.158062][ T6273] loop5: detected capacity change from 0 to 32768 [ 134.635910][ T6334] loop4: detected capacity change from 0 to 512 [ 134.871682][ T6334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.939413][ T6334] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.142123][ T6333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.197023][ T6330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.788243][ T5610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.182524][ T5732] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 137.234504][ T6371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.329562][ T6356] loop0: detected capacity change from 0 to 32768 [ 137.361572][ T5732] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.373693][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.387185][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.418561][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.456476][ T5732] usb 4-1: config 0 descriptor?? [ 137.656885][ T6377] netlink: 'syz.5.147': attribute type 4 has an invalid length. [ 137.750039][ T6380] loop2: detected capacity change from 0 to 64 [ 137.772219][ T6381] netlink: 'syz.5.147': attribute type 4 has an invalid length. [ 137.917655][ T6380] hfs: request for non-existent node 131072 in B*Tree [ 137.931696][ T6380] hfs: request for non-existent node 131072 in B*Tree [ 138.787392][ T5732] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 138.841297][ T5770] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 138.903246][ T5732] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input9 [ 139.006774][ T6385] siw: device registration error -23 [ 139.023102][ T5770] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 139.057056][ T5770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.087387][ T5770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 139.134054][ T5770] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.169358][ T5770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.227556][ T5732] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 139.290022][ T5770] usb 6-1: config 0 descriptor?? [ 139.308162][ T5732] usb 4-1: USB disconnect, device number 4 [ 139.337872][ T6377] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 139.595337][ T6394] fido_id[6394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 139.691677][ T5770] usbhid 6-1:0.0: can't add hid device: -71 [ 139.718185][ T5770] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 139.765599][ T5770] usb 6-1: USB disconnect, device number 3 [ 139.905188][ T6397] loop0: detected capacity change from 0 to 4096 [ 140.027687][ T6397] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 140.110709][ T6397] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 140.135175][ T6397] loop0: [ 141.294006][ T6428] loop4: detected capacity change from 0 to 256 [ 141.328433][ T6428] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 141.457863][ T6428] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 141.608589][ T6432] loop0: detected capacity change from 0 to 64 [ 141.872707][ T6432] hfs: request for non-existent node 131072 in B*Tree [ 141.879612][ T6432] hfs: request for non-existent node 131072 in B*Tree [ 142.609961][ T6431] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 143.073272][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 143.082044][ T5770] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 143.083259][ T6446] siw: device registration error -23 [ 143.161455][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.194461][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.283683][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.331411][ T5770] usb 2-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 0.00 [ 143.351278][ T5770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.362911][ T5770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1072, setting to 8 [ 143.388599][ T5770] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.434948][ T5770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.452259][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 143.474920][ T5770] usb 2-1: config 0 descriptor?? [ 143.496037][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.505639][ T6440] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 143.535358][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.579339][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.639910][ T9] usb 3-1: config 0 descriptor?? [ 143.766490][ T6440] netlink: 'syz.1.166': attribute type 1 has an invalid length. [ 143.940025][ T6440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.108593][ T6458] bond1: (slave veth3): Enslaving as an active interface with a down link [ 144.148708][ T9] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 144.186866][ T6459] bond1: (slave dummy0): making interface the new active one [ 144.207841][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0005/input/input10 [ 144.242840][ T6459] dummy0: entered promiscuous mode [ 144.249237][ T6459] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 144.329810][ T9] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 144.342763][ T5770] usbhid 2-1:0.0: can't add hid device: -71 [ 144.342901][ T5770] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 144.441196][ T9] usb 3-1: USB disconnect, device number 3 [ 144.463353][ T5770] usb 2-1: USB disconnect, device number 4 [ 144.603537][ T6465] fido_id[6465]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 145.409359][ T6479] syzkaller0: create flow: hash 3364512821 index 1 [ 145.977081][ T6477] syzkaller0: delete flow: hash 3364512821 index 1 [ 146.075128][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 148.247869][ T6488] warning: `syz.4.178' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 148.288167][ T6492] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 148.330897][ T6495] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 149.119053][ T6520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.160910][ T5342] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 149.163479][ T6523] gretap1: entered promiscuous mode [ 149.208086][ T6523] bond1: (slave gretap1): making interface the new active one [ 149.228576][ T6523] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 149.325735][ T5342] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 149.368892][ T5342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.412947][ T5342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.435123][ T5342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.477745][ T5342] usb 5-1: config 0 descriptor?? [ 149.621761][ T6527] loop3: detected capacity change from 0 to 512 [ 149.656201][ T6529] netlink: 'syz.0.195': attribute type 4 has an invalid length. [ 149.715489][ T6533] netlink: 'syz.0.195': attribute type 4 has an invalid length. [ 149.757977][ T6527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.855300][ T6527] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.985053][ T6527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.007105][ T6527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.032377][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 150.162847][ T6535] loop5: detected capacity change from 0 to 32768 [ 150.174477][ T6535] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.196 (6535) [ 150.194523][ T10] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 150.202791][ T5342] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 150.212190][ T6535] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.222572][ T6535] BTRFS info (device loop5): using crc32c checksum algorithm [ 150.240265][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.257362][ T5342] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0006/input/input11 [ 150.300461][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 150.345990][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.359654][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.379345][ T6535] BTRFS info (device loop5): enabling ssd optimizations [ 150.386858][ T6535] BTRFS info (device loop5): turning on flush-on-commit [ 150.393927][ T6535] BTRFS info (device loop5): enabling free space tree [ 150.400712][ T6535] BTRFS info (device loop5): enabling auto defrag [ 150.407232][ T6535] BTRFS info (device loop5): use lzo compression, level 1 [ 150.414536][ T6535] BTRFS info (device loop5): max_inline set to 4096 [ 150.437592][ T10] usb 1-1: config 0 descriptor?? [ 150.470753][ T6529] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 150.505604][ T30] audit: type=1800 audit(1787178482.671:5): pid=6535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.196" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 150.632966][ T5342] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 150.681488][ T5342] usb 5-1: USB disconnect, device number 4 [ 150.794559][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 150.831439][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 150.850434][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.899808][ T10] usb 1-1: USB disconnect, device number 4 [ 151.160585][ T6554] fido_id[6554]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 151.522649][ T5612] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.559640][ T6564] netlink: 'syz.2.203': attribute type 2 has an invalid length. [ 151.588985][ T6564] netlink: 'syz.2.203': attribute type 2 has an invalid length. [ 152.005860][ T6568] syzkaller0: create flow: hash 3364512821 index 1 [ 152.343451][ T36] syzkaller0: tun_net_xmit 76 [ 152.359581][ T36] syzkaller0: tun_net_xmit 48 [ 152.360025][ T6576] netlink: 'syz.3.218': attribute type 4 has an invalid length. [ 152.381167][ T5731] syzkaller0: tun_net_xmit 76 [ 152.418522][ T6583] netlink: 'syz.3.218': attribute type 4 has an invalid length. [ 152.471383][ T5731] syzkaller0: tun_net_xmit 76 [ 152.677845][ T6565] syzkaller0: delete flow: hash 3364512821 index 1 [ 152.722884][ T5342] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 152.902358][ T5342] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 152.947571][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.978933][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 153.028596][ T5342] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 153.070902][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.106129][ T5342] usb 4-1: config 0 descriptor?? [ 153.130312][ T6585] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.270007][ T6598] loop5: detected capacity change from 0 to 256 [ 153.291875][ T6598] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.353537][ T6598] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 153.440087][ T6598] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 153.473522][ T6598] exFAT-fs (loop5): failed to load alloc-bitmap [ 153.497233][ T6598] exFAT-fs (loop5): failed to recognize exfat type [ 154.446612][ T5342] usbhid 4-1:0.0: can't add hid device: -71 [ 154.453557][ T5342] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 154.466095][ T5342] usb 4-1: USB disconnect, device number 5 [ 154.670696][ T6606] loop0: detected capacity change from 0 to 512 [ 154.734693][ T6606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.757078][ T6606] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.797757][ T6606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.819090][ T6606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.840904][ T2156] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.001631][ T2156] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 155.014526][ T2156] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.025784][ T2156] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.035658][ T2156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.050326][ T2156] usb 3-1: config 0 descriptor?? [ 155.342427][ T57] dummy0: left promiscuous mode [ 155.374171][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.502126][ T2156] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 155.546747][ T2156] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0007/input/input12 [ 155.637874][ T6617] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.220'. [ 155.641846][ T6621] netlink: 'syz.0.231': attribute type 4 has an invalid length. [ 155.699167][ T6623] loop3: detected capacity change from 0 to 2048 [ 155.716556][ T6624] netlink: 'syz.0.231': attribute type 4 has an invalid length. [ 155.879428][ T6623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.942088][ T2156] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 156.057604][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 156.071189][ T2156] usb 3-1: USB disconnect, device number 4 [ 156.699154][ T10] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 156.754092][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.783996][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 156.811943][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.851480][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.855339][ T5342] IPVS: starting estimator thread 0... [ 156.882776][ T6640] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_batadv, syncid = 3, id = 0 [ 156.914137][ T10] usb 1-1: config 0 descriptor?? [ 156.937271][ T6626] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 157.013410][ T6639] IPVS: using max 22 ests per chain, 52800 per kthread [ 157.199321][ T6641] fido_id[6641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 157.403015][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 157.428089][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 157.501176][ T10] usb 1-1: USB disconnect, device number 5 [ 158.452673][ T6660] syzkaller0: create flow: hash 3364512821 index 1 [ 160.752358][ T140] syzkaller0: tun_net_xmit 76 [ 160.874571][ T5802] syzkaller0: tun_net_xmit 76 [ 160.885793][ T140] syzkaller0: tun_net_xmit 48 [ 161.014262][ T6647] syzkaller0: delete flow: hash 3364512821 index 1 [ 162.013114][ T6674] loop0: detected capacity change from 0 to 512 [ 162.073112][ T6674] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.234: inode has both inline data and extents flags [ 162.128453][ T6674] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.130847][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 162.147703][ C1] EXT4-fs (loop0): initial error at time 1787178494: ext4_orphan_get:1399: inode 15 [ 162.157153][ C1] EXT4-fs (loop0): last error at time 1787178494: ext4_orphan_get:1399: inode 15 [ 162.177761][ T6674] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.234: couldn't read orphan inode 15 (err -117) [ 162.234714][ T6674] loop0: lost filesystem error report for type 5 error -117 [ 162.242293][ T6674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.408327][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.444526][ T6673] loop5: detected capacity change from 0 to 32768 [ 162.490291][ T6673] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.235 (6673) [ 162.569791][ T6673] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 162.580563][ T6673] BTRFS info (device loop5): using blake2b checksum algorithm [ 162.771777][ T6673] BTRFS info (device loop5): enabling ssd optimizations [ 162.782457][ T6673] BTRFS info (device loop5): turning on async discard [ 162.802190][ T6673] BTRFS info (device loop5): enabling free space tree [ 162.809101][ T6673] BTRFS info (device loop5): use zstd compression, level 3 [ 163.018245][ T30] audit: type=1800 audit(1787178495.181:6): pid=6673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.235" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 163.046388][ T30] audit: type=1800 audit(1787178495.211:7): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.235" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 163.306036][ T5612] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 164.453325][ T6714] syz.5.243 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 164.514681][ T6714] CPU: 1 UID: 0 PID: 6714 Comm: syz.5.243 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.514742][ T6714] Tainted: [L]=SOFTLOCKUP [ 164.514755][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 164.514776][ T6714] Call Trace: [ 164.514788][ T6714] [ 164.514801][ T6714] dump_stack_lvl+0x100/0x190 [ 164.514852][ T6714] dump_header+0xfb/0x606 [ 164.514896][ T6714] oom_kill_process.cold+0xd/0x330 [ 164.514943][ T6714] out_of_memory+0x340/0x14f0 [ 164.515009][ T6714] ? __pfx_out_of_memory+0x10/0x10 [ 164.515063][ T6714] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.515123][ T6714] mem_cgroup_out_of_memory+0xc6/0x130 [ 164.515187][ T6714] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 164.515249][ T6714] ? find_held_lock+0x2b/0x80 [ 164.515299][ T6714] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.515345][ T6714] ? do_raw_spin_unlock+0x145/0x1e0 [ 164.515406][ T6714] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.515454][ T6714] ? _raw_spin_unlock+0x28/0x50 [ 164.515506][ T6714] try_charge_memcg+0x6e1/0xdf0 [ 164.515567][ T6714] ? __pfx_try_charge_memcg+0x10/0x10 [ 164.515617][ T6714] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.515664][ T6714] ? find_held_lock+0x2b/0x80 [ 164.515699][ T6714] ? rcu_read_unlock+0x17/0x60 [ 164.515752][ T6714] ? rcu_read_unlock+0x17/0x60 [ 164.515801][ T6714] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.515865][ T6714] __memcg_slab_post_alloc_hook+0x46c/0x1160 [ 164.515937][ T6714] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.515985][ T6714] ? kasan_save_track+0x14/0x30 [ 164.516033][ T6714] kmem_cache_alloc_lru_noprof+0x57f/0x6a0 [ 164.516078][ T6714] ? __d_alloc+0x35/0xa50 [ 164.516133][ T6714] __d_alloc+0x35/0xa50 [ 164.516175][ T6714] ? do_raw_spin_lock+0x128/0x260 [ 164.516229][ T6714] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.516291][ T6714] d_alloc+0x4a/0x1e0 [ 164.516340][ T6714] d_alloc_name+0x83/0xb0 [ 164.516386][ T6714] ? __pfx_d_alloc_name+0x10/0x10 [ 164.516431][ T6714] ? fast_dput+0x168/0x6f0 [ 164.516484][ T6714] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.516530][ T6714] ? dput.part.0+0x4f/0x240 [ 164.516587][ T6714] simple_fill_super+0x4cf/0x690 [ 164.516640][ T6714] ? __pfx_nfsd_fill_super+0x10/0x10 [ 164.516683][ T6714] nfsd_fill_super+0x98/0x560 [ 164.516725][ T6714] ? __pfx_nfsd_fill_super+0x10/0x10 [ 164.516762][ T6714] get_tree_keyed+0x10e/0x1d0 [ 164.516822][ T6714] vfs_get_tree+0x92/0x320 [ 164.516868][ T6714] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.516918][ T6714] path_mount+0x7d0/0x24c0 [ 164.516976][ T6714] ? __pfx_path_mount+0x10/0x10 [ 164.517022][ T6714] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.517068][ T6714] ? lockdep_hardirqs_on+0x7d/0x110 [ 164.517129][ T6714] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.517175][ T6714] ? kmem_cache_free+0x127/0x6b0 [ 164.517252][ T6714] ? __x64_sys_mount+0x293/0x310 [ 164.517305][ T6714] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.517349][ T6714] __x64_sys_mount+0x293/0x310 [ 164.517399][ T6714] ? __pfx___x64_sys_mount+0x10/0x10 [ 164.517454][ T6714] ? srso_alias_return_thunk+0x5/0xfbef5 [ 164.517509][ T6714] do_syscall_64+0x123/0x790 [ 164.517567][ T6714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.517605][ T6714] RIP: 0033:0x7f4ba5f9e0d9 [ 164.517634][ T6714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.517668][ T6714] RSP: 002b:00007f4ba6e9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 164.517703][ T6714] RAX: ffffffffffffffda RBX: 00007f4ba6225fa0 RCX: 00007f4ba5f9e0d9 [ 164.517727][ T6714] RDX: 0000200000000400 RSI: 0000200000000100 RDI: 0000000000000000 [ 164.517749][ T6714] RBP: 00007f4ba6035024 R08: 0000000000000000 R09: 0000000000000000 [ 164.517771][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.517794][ T6714] R13: 00007f4ba6226038 R14: 00007f4ba6225fa0 R15: 00007ffc2fa8db18 [ 164.517846][ T6714] [ 164.557077][ T6714] memory: usage 8kB, limit 8kB, failcnt 21 [ 164.939287][ T6714] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 164.946895][ T6714] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 164.953951][ T6714] Memory cgroup stats for /syz5/test: [ 164.954396][ T6714] cache 0 [ 164.962813][ T6714] rss 0 [ 164.965580][ T6714] rss_huge 0 [ 164.968809][ T6714] shmem 0 [ 164.975188][ T6714] mapped_file 0 [ 164.978651][ T6714] dirty 0 [ 164.981864][ T6714] writeback 0 [ 164.985177][ T6714] workingset_refault_anon 0 [ 165.014626][ T6714] workingset_refault_file 0 [ 165.038257][ T6714] swap 0 [ 165.061028][ T6714] swapcached 0 [ 165.064661][ T6714] pgpgin 0 [ 165.067901][ T6714] pgpgout 0 [ 165.071710][ T6714] pgfault 0 [ 165.086258][ T6714] pgmajfault 0 [ 165.092951][ T6714] inactive_anon 0 [ 165.110025][ T6714] active_anon 0 [ 165.130924][ T6714] inactive_file 0 [ 165.148292][ T6714] active_file 0 [ 165.161013][ T6714] unevictable 0 [ 165.173552][ T6714] hierarchical_memory_limit 8192 [ 165.195605][ T6714] hierarchical_memsw_limit 9223372036854771712 [ 165.211354][ T6714] total_cache 0 [ 165.215405][ T6714] total_rss 0 [ 165.218805][ T6714] total_rss_huge 0 [ 165.224003][ T6714] total_shmem 0 [ 165.227682][ T6714] total_mapped_file 0 [ 165.232306][ T6714] total_dirty 0 [ 165.235796][ T6714] total_writeback 0 [ 165.239811][ T6714] total_workingset_refault_anon 0 [ 165.245067][ T6714] total_workingset_refault_file 0 [ 165.250322][ T6714] total_swap 0 [ 165.253843][ T6714] total_swapcached 0 [ 165.258361][ T6714] total_pgpgin 0 [ 165.262210][ T6714] total_pgpgout 0 [ 165.266639][ T6714] total_pgfault 0 [ 165.270314][ T6714] total_pgmajfault 0 [ 165.274772][ T6714] total_inactive_anon 0 [ 165.279466][ T6714] total_active_anon 0 [ 165.283913][ T6714] total_inactive_file 0 [ 165.288308][ T6714] total_active_file 0 [ 165.307908][ T6714] total_unevictable 0 [ 165.312533][ T6714] anon_cost 0 [ 165.322521][ T6714] file_cost 0 [ 165.325915][ T6714] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.243,pid=6713,uid=0 [ 165.351067][ T6714] Memory cgroup out of memory: Killed process 6714 (syz.5.243) total-vm:104300kB, anon-rss:1428kB, file-rss:22896kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 165.687746][ T6734] netlink: 'syz.3.249': attribute type 4 has an invalid length. [ 165.739265][ T6735] netlink: 'syz.3.249': attribute type 4 has an invalid length. [ 165.934705][ T6741] netlink: 156 bytes leftover after parsing attributes in process `syz.0.252'. [ 166.045461][ T2156] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 166.204418][ T2156] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 166.215844][ T2156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.241721][ T2156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 166.253321][ T2156] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 166.282616][ T2156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.324526][ T2156] usb 4-1: config 0 descriptor?? [ 166.337213][ T6738] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 166.590589][ T6744] loop1: detected capacity change from 0 to 256 [ 166.694652][ T6744] FAT-fs (loop1): data area starts beyond volume (274 > 64) [ 166.709617][ T2156] usbhid 4-1:0.0: can't add hid device: -71 [ 166.739762][ T2156] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 166.768385][ T6744] FAT-fs (loop1): Can't find a valid FAT filesystem [ 166.792085][ T2156] usb 4-1: USB disconnect, device number 6 [ 166.962052][ T6749] binder: 6747:6749 ioctl c0306201 200000000080 returned -14 [ 167.086667][ T6749] binder: 6747:6749 ioctl c0306201 2000000003c0 returned -14 [ 167.183892][ T6753] loop5: detected capacity change from 0 to 256 [ 167.212251][ T6753] vfat: Unknown parameter 'iocharećšb“i#;÷±…t' [ 168.514920][ T6794] syzkaller0: entered promiscuous mode [ 168.546004][ T6794] syzkaller0: entered allmulticast mode [ 168.763817][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 168.800858][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 169.430191][ T6811] netlink: 'syz.3.277': attribute type 4 has an invalid length. [ 169.485559][ T6808] netlink: 'syz.3.277': attribute type 4 has an invalid length. [ 169.753226][ T6819] input: syz0 as /devices/virtual/input/input13 [ 169.820885][ T5765] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 169.992665][ T5765] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 170.051973][ T5765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.070459][ T5765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 170.093948][ T5765] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 170.134982][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.174887][ T5765] usb 4-1: config 0 descriptor?? [ 170.213691][ T6808] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 170.356727][ T6827] uprobe: syz.2.282:6827 failed to unregister, leaking uprobe [ 170.477515][ T5765] usbhid 4-1:0.0: can't add hid device: -71 [ 170.493892][ T5765] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 170.511015][ T5765] usb 4-1: USB disconnect, device number 7 [ 171.590959][ T2156] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 171.760854][ T2156] usb 3-1: Using ep0 maxpacket: 8 [ 171.784921][ T2156] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.821338][ T2156] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.837994][ T2156] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.850477][ T2156] usb 3-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 171.863746][ T2156] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 171.876140][ T2156] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 171.887242][ T2156] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.901437][ T2156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.173229][ T2156] usb 3-1: GET_CAPABILITIES returned 0 [ 172.187207][ T2156] usbtmc 3-1:16.0: can't read capabilities [ 173.072450][ T5731] usb 3-1: USB disconnect, device number 5 [ 173.526219][ T6869] mmap: syz.4.295 (6869) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 176.041509][ T6889] loop5: detected capacity change from 0 to 16 [ 176.148026][ T6889] erofs (device loop5): mounted with root inode @ nid 36. [ 176.158246][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 176.592343][ T5794] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 177.689752][ T6925] binder: 6924:6925 unknown command 0 [ 177.713352][ T6925] binder: 6924:6925 ioctl c0306201 200000000080 returned -22 [ 177.849900][ T6927] jffs2: notice: (6927) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 178.483192][ T6941] process 'syz.2.321' launched './file0' with NULL argv: empty string added [ 179.023479][ T30] audit: type=1800 audit(1787178511.191:8): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.321" name="/" dev="fuse" ino=9 res=0 errno=0 [ 179.378647][ T6964] netlink: 'syz.2.329': attribute type 4 has an invalid length. [ 179.434409][ T6966] netlink: 'syz.2.329': attribute type 4 has an invalid length. [ 179.720399][ T6977] binder: 6975:6977 ioctl c0306201 200000000100 returned -14 [ 179.830946][ T5802] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 180.001763][ T5802] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 180.024773][ T5802] usb 2-1: config 0 has no interfaces? [ 180.046867][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.071117][ T5802] usb 2-1: Product: syz [ 180.087493][ T5802] usb 2-1: Manufacturer: syz [ 180.112322][ T5802] usb 2-1: SerialNumber: syz [ 180.136121][ T5802] usb 2-1: config 0 descriptor?? [ 180.445098][ T5731] usb 2-1: USB disconnect, device number 5 [ 180.504382][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 181.104587][ T7005] loop3: detected capacity change from 0 to 40427 [ 181.172990][ T7005] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 181.182860][ T7005] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 181.457805][ T7005] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 181.636520][ T7005] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 181.644384][ T7005] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 182.305113][ T30] audit: type=1804 audit(1787178514.471:9): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.342" name="/newroot/52/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 182.460613][ T7012] syz.3.342: attempt to access beyond end of device [ 182.460613][ T7012] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 182.688613][ T7005] syz.3.342: attempt to access beyond end of device [ 182.688613][ T7005] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.738011][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.355'. [ 184.554810][ T30] audit: type=1804 audit(1787178516.701:10): pid=7051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.356" name="/newroot/63/file0" dev="tmpfs" ino=365 res=1 errno=0 [ 185.083048][ T7046] uprobe: syz.5.356:7046 failed to unregister, leaking uprobe [ 188.760475][ T7102] loop3: detected capacity change from 0 to 1024 [ 188.795995][ T7102] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.922545][ T7102] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 189.021412][ T7102] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 189.100659][ T7102] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 189.177891][ T7102] EXT4-fs (loop3): journal inode is deleted [ 190.770792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 190.799026][ T7124] loop2: detected capacity change from 0 to 256 [ 191.436152][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 191.482466][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'. [ 191.931346][ T7146] syz.3.387 uses obsolete (PF_INET,SOCK_PACKET) [ 193.542820][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.616408][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.101220][ T7084] wlan1: Trigger new scan to find an IBSS to join [ 197.962114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #46!!! [ 197.980791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #84!!! [ 198.040797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 198.050783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 198.110388][ T5868] wlan1: Trigger new scan to find an IBSS to join [ 198.306455][ T7215] loop2: detected capacity change from 0 to 512 [ 198.397432][ T7215] EXT4-fs (loop2): Test dummy encryption mode enabled [ 198.470011][ T7215] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.409: inode has both inline data and extents flags [ 198.538259][ T7215] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 198.540715][ T7215] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.409: couldn't read orphan inode 15 (err -117) [ 198.540845][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 198.574400][ C0] EXT4-fs (loop2): initial error at time 1787178530: ext4_orphan_get:1399: inode 15 [ 198.585369][ C0] EXT4-fs (loop2): last error at time 1787178530: ext4_orphan_get:1399: inode 15 [ 198.604580][ T7215] loop2: lost filesystem error report for type 5 error -117 [ 198.618604][ T7215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.746532][ T7215] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 199.131877][ T7084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.161005][ T5342] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 199.320916][ T5342] usb 5-1: Using ep0 maxpacket: 32 [ 199.334464][ T5342] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 199.352412][ T5342] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 199.365160][ T5342] usb 5-1: config 0 has no interface number 0 [ 199.391482][ T5342] usb 5-1: config 0 interface 184 has no altsetting 0 [ 199.414011][ T5342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.431105][ T5342] usb 5-1: Product: syz [ 199.437088][ T5342] usb 5-1: Manufacturer: syz [ 199.447418][ T5342] usb 5-1: SerialNumber: syz [ 199.472961][ T5342] usb 5-1: config 0 descriptor?? [ 199.646721][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.960133][ T7240] loop2: detected capacity change from 0 to 512 [ 200.056516][ T7240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.124937][ T7240] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.464451][ T5342] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 200.500644][ T5342] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 200.995267][ T7240] EXT4-fs (loop2): shut down requested (2) [ 201.500318][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.778692][ T5342] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 201.833241][ T5342] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 201.886285][ T5342] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 201.920573][ T5342] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 201.988753][ T5342] usb 5-1: USB disconnect, device number 5 [ 202.923390][ T7265] fuse: Bad value for 'fd' [ 203.088590][ T7253] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 203.118884][ T7253] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 203.240271][ T7271] Illegal XDP return value 4294967294 on prog (id 31) dev syz_tun, expect packet loss! [ 203.898516][ T7253] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 203.974020][ T7275] netlink: 'syz.3.427': attribute type 4 has an invalid length. [ 203.983081][ T7253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.000546][ T7253] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.020662][ T7253] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.033762][ T7275] netlink: 'syz.3.427': attribute type 4 has an invalid length. [ 204.100987][ T7253] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.114402][ T7253] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 204.185318][ T7253] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 204.229539][ T7253] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.251192][ T7253] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 204.311916][ T7253] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 204.351724][ T7253] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 204.367551][ T7253] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 204.410991][ T7253] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 204.670880][ T5342] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 204.701048][ T5731] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 204.843720][ T5342] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 204.888476][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 204.921030][ T5731] usb 5-1: Using ep0 maxpacket: 8 [ 204.929369][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 204.929423][ T5342] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 204.929492][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.015381][ T5342] usb 4-1: config 0 descriptor?? [ 205.037754][ T5731] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 205.041526][ T7275] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.119244][ T5731] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 205.136279][ T5731] usb 5-1: config 0 has no interface number 0 [ 205.141089][ T5614] Bluetooth: hci0: command 0x1407 tx timeout [ 205.159877][ T5731] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.189116][ T5731] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 205.267761][ T5731] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.318547][ T5731] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 205.405392][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.483668][ T5731] usb 5-1: config 0 descriptor?? [ 205.531370][ T5342] usbhid 4-1:0.0: can't add hid device: -71 [ 205.570691][ T5342] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 205.613177][ T5731] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 205.699162][ T5342] usb 4-1: USB disconnect, device number 8 [ 206.020926][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.090224][ T5342] usb 5-1: USB disconnect, device number 6 [ 206.090224][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 206.110978][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.239058][ T5342] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 206.255910][ T7278] ldusb: No device or device unplugged -19 [ 206.262278][ T5614] Bluetooth: hci4: command 0x0c1a tx timeout [ 206.277373][ T7295] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 206.367569][ T7295] bond2: entered allmulticast mode [ 206.420939][ T5614] Bluetooth: hci5: command 0x0c1a tx timeout [ 206.560635][ T7298] bridge1: entered promiscuous mode [ 206.698354][ T7298] bridge1: entered allmulticast mode [ 206.808383][ T7298] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 207.191902][ T5342] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 207.226854][ T5614] Bluetooth: hci0: command 0x1407 tx timeout [ 207.356175][ T7309] bridge2: entered promiscuous mode [ 207.381926][ T5342] usb 5-1: Using ep0 maxpacket: 32 [ 207.420740][ T5342] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 207.504655][ T5342] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 207.559925][ T7309] bridge2: entered allmulticast mode [ 207.571813][ T5342] usb 5-1: config 0 has no interface number 0 [ 207.636560][ T5342] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 207.724395][ T5342] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 207.784106][ T5342] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 207.886702][ T5342] usb 5-1: config 0 interface 196 has no altsetting 0 [ 207.934201][ T5342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.980852][ T5342] usb 5-1: Product: syz [ 208.009608][ T5342] usb 5-1: Manufacturer: syz [ 208.048951][ T5342] usb 5-1: SerialNumber: syz [ 208.093886][ T5342] usb 5-1: config 0 descriptor?? [ 208.105337][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.140206][ T7306] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.181145][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 208.328682][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.439'. [ 208.353104][ T5614] Bluetooth: hci4: command 0x0c1a tx timeout [ 208.382682][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.439'. [ 208.434049][ T6658] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.468237][ T6658] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.512022][ T5614] Bluetooth: hci5: command 0x0c1a tx timeout [ 208.525629][ T6658] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.582699][ T6658] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.838524][ T5342] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 209.248108][ T5731] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 209.301167][ T5614] Bluetooth: hci0: command 0x1407 tx timeout [ 209.363543][ T5342] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 209.415612][ T5342] usb 5-1: USB disconnect, device number 7 [ 210.120793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 210.180793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 210.240817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 210.300784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 210.352657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #44!!! [ 210.382534][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 210.383858][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 210.446375][ T5731] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.472634][ T5619] Bluetooth: hci4: command 0x0c1a tx timeout [ 210.486150][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.500992][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.596084][ T5619] Bluetooth: hci5: command 0x0c1a tx timeout [ 210.629783][ T5731] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.659402][ T5619] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 210.695712][ T5342] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 211.723863][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.275505][ T5731] usb 1-1: config 0 descriptor?? [ 212.561122][ T5731] usb 1-1: can't set config #0, error -71 [ 212.644393][ T5731] usb 1-1: USB disconnect, device number 6 [ 212.818930][ T7341] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.445'. [ 212.874280][ T7341] openvswitch: netlink: Message has 512 unknown bytes. [ 213.751916][ T7369] overlayfs: overlapping lowerdir path [ 214.092201][ T7374] sch_tbf: burst 1520 is lower than device lo mtu (11337746) ! [ 214.496722][ T7375] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 215.150972][ T7393] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 215.274727][ T7399] Bluetooth: MGMT ver 1.23 [ 216.095948][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 216.589245][ T7420] netlink: 'syz.0.465': attribute type 83 has an invalid length. [ 216.635408][ T7406] batman_adv: batadv0: Adding interface: veth0 [ 216.646404][ T7406] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.686151][ T7406] batman_adv: batadv0: Interface activated: veth0 [ 216.694283][ T7422] netlink: 'syz.0.465': attribute type 83 has an invalid length. [ 216.705873][ T7407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.718981][ T7407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.740211][ T7407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.760586][ T7407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.777162][ T7407] batman_adv: batadv0: Interface deactivated: veth0 [ 216.818430][ T7407] batman_adv: batadv0: Removing interface: veth0 [ 217.010561][ T7410] hsr_slave_1 (unregistering): left promiscuous mode [ 217.432369][ T7416] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 217.604591][ T7416] bond1: (slave lo): Enslaving as an active interface with an up link [ 217.686578][ T7416] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 217.792590][ T5802] lo speed is unknown, defaulting to 1000 [ 217.793699][ T10] lo speed is unknown, defaulting to 1000 [ 217.806226][ T9] lo speed is unknown, defaulting to 1000 [ 218.151427][ T5802] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 218.391511][ T5802] usb 1-1: Using ep0 maxpacket: 16 [ 218.420971][ T5802] usb 1-1: unable to get BOS descriptor or descriptor too short [ 218.475387][ T5802] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 218.521704][ T5802] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.563662][ T5802] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.595889][ T7421] loop3: detected capacity change from 0 to 40427 [ 218.606745][ T5802] usb 1-1: string descriptor 0 read error: -22 [ 218.622452][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.660540][ T7421] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 218.698077][ T7421] F2FS-fs (loop3): invalid crc value [ 218.722381][ T7421] F2FS-fs (loop3): invalid crc value [ 218.731366][ T5802] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 218.761478][ T7421] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 218.838672][ T5802] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 219.062441][ T5802] usb 1-1: 2:1 : can't get High Capability descriptor [ 219.743163][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 219.823851][ T5802] usb 1-1: USB disconnect, device number 7 [ 220.537449][ T7451] team0: Port device team_slave_0 removed [ 221.066153][ T7471] loop5: detected capacity change from 0 to 512 [ 221.319982][ T7471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.357918][ T7471] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.392590][ T7469] loop0: detected capacity change from 0 to 4096 [ 221.402561][ T7460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.468452][ T7469] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 221.657767][ T7464] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 221.685581][ T7464] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 221.878388][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.682112][ T7468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.775212][ T7486] loop2: detected capacity change from 0 to 4096 [ 222.832268][ T7486] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.856251][ T7468] batadv_slave_1: entered promiscuous mode [ 222.903956][ T7486] EXT4-fs (loop2): Test dummy encryption mode enabled [ 223.343044][ T7486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.066412][ T7486] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 224.478834][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.661408][ T5342] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 224.838762][ T5342] usb 2-1: Using ep0 maxpacket: 32 [ 224.887337][ T5342] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 224.916658][ T5342] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 224.943012][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 224.959029][ T5342] usb 2-1: Product: syz [ 224.972645][ T5342] usb 2-1: Manufacturer: syz [ 224.984863][ T5342] usb 2-1: SerialNumber: syz [ 225.033947][ T5342] usb 2-1: config 0 descriptor?? [ 225.050986][ T7518] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 225.463024][ T9] usb 2-1: USB disconnect, device number 6 [ 226.873401][ T7535] syz_tun: entered allmulticast mode [ 227.064348][ T30] audit: type=1326 audit(1787178559.231:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.5.502" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba5f9e0d9 code=0x7fc00000 [ 227.425346][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053681c00: rx timeout, send abort [ 227.532086][ T5732] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 227.693844][ T30] audit: type=1326 audit(1787178559.861:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.5.502" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4ba5f97e57 code=0x7fc00000 [ 227.712118][ T5732] usb 2-1: Using ep0 maxpacket: 16 [ 227.743024][ T5732] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.770521][ T5732] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.807451][ T5732] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.871968][ T5732] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.906765][ T5732] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 227.926359][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053682400: rx timeout, send abort [ 227.940420][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053681c00: abort rx timeout. Force session deactivation [ 228.002586][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 228.016400][ T5732] usb 2-1: SerialNumber: syz [ 228.103353][ T5732] hub 2-1:1.0: bad descriptor, ignoring hub [ 228.144281][ T5732] hub 2-1:1.0: probe with driver hub failed with error -5 [ 228.185142][ T5732] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 228.241758][ T5619] Bluetooth: hci0: Unknown advertising packet type: 0x14 [ 228.436055][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053682400: abort rx timeout. Force session deactivation [ 228.569749][ T7558] lo speed is unknown, defaulting to 1000 [ 229.337471][ T7573] loop3: detected capacity change from 0 to 32768 [ 229.349978][ T7573] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.517 (7573) [ 229.377742][ T7573] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.398833][ T7573] BTRFS info (device loop3): using sha256 checksum algorithm [ 229.481143][ T5342] usb 2-1: USB disconnect, device number 7 [ 229.665350][ T7573] BTRFS info (device loop3): enabling ssd optimizations [ 229.673673][ T7573] BTRFS info (device loop3): turning on async discard [ 229.681801][ T7573] BTRFS info (device loop3): enabling free space tree [ 230.025256][ T7597] loop5: detected capacity change from 0 to 256 [ 232.892658][ T5606] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 232.941283][ T5802] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 233.056577][ T2156] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 233.144628][ T5802] usb 5-1: Using ep0 maxpacket: 8 [ 233.174869][ T5802] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.252112][ T2156] usb 3-1: Using ep0 maxpacket: 32 [ 233.257358][ T5802] usb 5-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 233.283221][ T2156] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 233.309453][ T5802] usb 5-1: too many configurations: 141, using maximum allowed: 8 [ 233.355454][ T2156] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 233.380079][ T5802] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.405346][ T2156] usb 3-1: config 0 has no interface number 0 [ 233.442368][ T5802] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.461364][ T2156] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.469040][ T7617] syzkaller0: entered promiscuous mode [ 233.532458][ T5802] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.543578][ T2156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.551772][ T7617] syzkaller0: entered allmulticast mode [ 233.576330][ T2156] usb 3-1: Product: syz [ 233.585183][ T5802] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.605390][ T2156] usb 3-1: Manufacturer: syz [ 233.617226][ T2156] usb 3-1: SerialNumber: syz [ 233.652597][ T5802] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.664671][ T2156] usb 3-1: config 0 descriptor?? [ 233.692713][ T5802] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.718340][ T2156] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 233.754088][ T2156] em28xx 3-1:0.132: Video interface 132 found: [ 233.771916][ T5802] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.820118][ T5802] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.859476][ T5802] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.897169][ T5802] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.986765][ T5802] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.027335][ T5802] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.088475][ T5802] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.132900][ T2156] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 234.140206][ T5802] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.190497][ T5802] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.211526][ T5802] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.244599][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.261981][ T30] audit: type=1804 audit(1787178566.421:13): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.530" name="/newroot/90/file0" dev="tmpfs" ino=498 res=1 errno=0 [ 234.279341][ T5802] usb 5-1: Product: syz [ 234.304934][ T5802] usb 5-1: Manufacturer: syz [ 234.320595][ T5802] usb 5-1: SerialNumber: syz [ 234.676090][ T5802] usb 5-1: USB disconnect, device number 8 [ 234.721276][ T7637] TC_ACT_REPEAT abuse ? [ 234.794730][ T2156] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 234.812619][ T2156] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 235.036678][ T2156] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 235.065731][ T2156] em28xx 3-1:0.132: analog set to bulk mode. [ 235.086279][ T5802] em28xx 3-1:0.132: Registering V4L2 extension [ 235.119620][ T2156] usb 3-1: USB disconnect, device number 6 [ 235.164240][ T2156] em28xx 3-1:0.132: Disconnecting em28xx [ 235.185749][ T7646] xt_hashlimit: size too large, truncated to 1048576 [ 236.486397][ T7659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.691082][ T7659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.427871][ T5802] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 237.428257][ T7672] bridge1: entered promiscuous mode [ 237.476197][ T5802] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 237.489766][ T7672] bridge1: entered allmulticast mode [ 237.529268][ T5802] em28xx 3-1:0.132: No AC97 audio processor [ 237.704962][ T5802] usb 3-1: Decoder not found [ 237.730598][ T5802] em28xx 3-1:0.132: failed to create media graph [ 237.761789][ T5802] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 237.816171][ T7671] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 237.822548][ T7671] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 237.828684][ T7671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 237.834809][ T7671] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 237.843078][ T7671] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 237.890674][ T5802] INFO: trying to register non-static key. [ 237.896517][ T5802] The code is fine but needs lockdep annotation, or maybe [ 237.903622][ T5802] you didn't initialize this object before use? [ 237.909859][ T5802] turning off the locking correctness validator. [ 237.916191][ T5802] CPU: 1 UID: 0 PID: 5802 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.916242][ T5802] Tainted: [L]=SOFTLOCKUP [ 237.916253][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 237.916277][ T5802] Workqueue: events request_module_async [ 237.916339][ T5802] Call Trace: [ 237.916350][ T5802] [ 237.916362][ T5802] dump_stack_lvl+0x100/0x190 [ 237.916403][ T5802] register_lock_class+0x79b/0x7b0 [ 237.916455][ T5802] __lock_acquire+0x3e7/0x1ec0 [ 237.916500][ T5802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.916542][ T5802] ? lock_acquire+0x1b9/0x370 [ 237.916585][ T5802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.916633][ T5802] lock_acquire+0x1b9/0x370 [ 237.916674][ T5802] ? __wake_up+0x1c/0x60 [ 237.916709][ T5802] ? vb2_video_unregister_device+0x12b/0x2e0 [ 237.916764][ T5802] ? kobject_put+0xb9/0x640 [ 237.916795][ T5802] ? _raw_spin_lock_irqsave+0x52/0x60 [ 237.916845][ T5802] _raw_spin_lock_irqsave+0x3a/0x60 [ 237.916886][ T5802] ? __wake_up+0x1c/0x60 [ 237.916919][ T5802] __wake_up+0x1c/0x60 [ 237.916954][ T5802] __vb2_queue_cancel+0x348/0xe90 [ 237.917008][ T5802] ? __pfx_device_del+0x10/0x10 [ 237.917049][ T5802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.917092][ T5802] ? kobject_put+0xb9/0x640 [ 237.917128][ T5802] vb2_core_queue_release+0x27/0x190 [ 237.917184][ T5802] vb2_video_unregister_device+0x152/0x2e0 [ 237.917240][ T5802] em28xx_v4l2_init.cold+0xe1a/0x3a18 [ 237.917311][ T5802] ? __pfx_em28xx_v4l2_init+0x10/0x10 [ 237.917353][ T5802] em28xx_init_extension+0x13a/0x200 [ 237.917410][ T5802] request_module_async+0x1e/0x30 [ 237.917465][ T5802] process_one_work+0xa23/0x1940 [ 237.917513][ T5802] ? __pfx_process_one_work+0x10/0x10 [ 237.917548][ T5802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.917598][ T5802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.917643][ T5802] worker_thread+0x5ef/0xe50 [ 237.917685][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 237.917723][ T5802] ? kthread+0x13a/0x450 [ 237.917753][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 237.917787][ T5802] kthread+0x373/0x450 [ 237.917822][ T5802] ? __pfx_kthread+0x10/0x10 [ 237.917855][ T5802] ret_from_fork+0x730/0xd60 [ 237.917903][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 237.917951][ T5802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.917993][ T5802] ? __switch_to+0x800/0x10f0 [ 237.918024][ T5802] ? __switch_to_asm+0x39/0x70 [ 237.918074][ T5802] ? __pfx_kthread+0x10/0x10 [ 237.918107][ T5802] ret_from_fork_asm+0x1a/0x30 [ 237.918168][ T5802] [ 237.918211][ T5802] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 238.173212][ T5802] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 238.181634][ T5802] CPU: 1 UID: 0 PID: 5802 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.192585][ T5802] Tainted: [L]=SOFTLOCKUP [ 238.196904][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 238.206963][ T5802] Workqueue: events request_module_async [ 238.212637][ T5802] RIP: 0010:__wake_up_common+0x9b/0x1f0 [ 238.218200][ T5802] Code: 02 00 0f 85 5b 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 b3 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 18 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8b [ 238.237824][ T5802] RSP: 0018:ffffc90004acf9c0 EFLAGS: 00010056 [ 238.243905][ T5802] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000 [ 238.251885][ T5802] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888023b79790 [ 238.259865][ T5802] RBP: ffff888023b79790 R08: 0000000000000000 R09: fffff52000959f2f [ 238.267842][ T5802] R10: 0000000000000003 R11: 00000000000075ab R12: 0000000000000003 [ 238.275820][ T5802] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888023b797d0 [ 238.283797][ T5802] FS: 0000000000000000(0000) GS:ffff888123ccc000(0000) knlGS:0000000000000000 [ 238.292738][ T5802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.299337][ T5802] CR2: 00007f5f5bbf3e9c CR3: 000000000eb94000 CR4: 0000000000350ef0 [ 238.307325][ T5802] Call Trace: [ 238.310601][ T5802] [ 238.313532][ T5802] __wake_up+0x31/0x60 [ 238.317613][ T5802] __vb2_queue_cancel+0x348/0xe90 [ 238.322668][ T5802] ? __pfx_device_del+0x10/0x10 [ 238.327531][ T5802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.333179][ T5802] ? kobject_put+0xb9/0x640 [ 238.337691][ T5802] vb2_core_queue_release+0x27/0x190 [ 238.343007][ T5802] vb2_video_unregister_device+0x152/0x2e0 [ 238.348846][ T5802] em28xx_v4l2_init.cold+0xe1a/0x3a18 [ 238.354266][ T5802] ? __pfx_em28xx_v4l2_init+0x10/0x10 [ 238.359652][ T5802] em28xx_init_extension+0x13a/0x200 [ 238.364967][ T5802] request_module_async+0x1e/0x30 [ 238.370021][ T5802] process_one_work+0xa23/0x1940 [ 238.374976][ T5802] ? __pfx_process_one_work+0x10/0x10 [ 238.380355][ T5802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.386033][ T5802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.391686][ T5802] worker_thread+0x5ef/0xe50 [ 238.396290][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 238.401413][ T5802] ? kthread+0x13a/0x450 [ 238.405659][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 238.410776][ T5802] kthread+0x373/0x450 [ 238.414860][ T5802] ? __pfx_kthread+0x10/0x10 [ 238.419458][ T5802] ret_from_fork+0x730/0xd60 [ 238.424070][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 238.429202][ T5802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.434848][ T5802] ? __switch_to+0x800/0x10f0 [ 238.439531][ T5802] ? __switch_to_asm+0x39/0x70 [ 238.444317][ T5802] ? __pfx_kthread+0x10/0x10 [ 238.448914][ T5802] ret_from_fork_asm+0x1a/0x30 [ 238.453713][ T5802] [ 238.456723][ T5802] Modules linked in: [ 238.460617][ T5802] ---[ end trace 0000000000000000 ]--- [ 238.466063][ T5802] RIP: 0010:__wake_up_common+0x9b/0x1f0 [ 238.471623][ T5802] Code: 02 00 0f 85 5b 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 b3 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 18 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8b [ 238.491236][ T5802] RSP: 0018:ffffc90004acf9c0 EFLAGS: 00010056 [ 238.497307][ T5802] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000 [ 238.505277][ T5802] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888023b79790 [ 238.513247][ T5802] RBP: ffff888023b79790 R08: 0000000000000000 R09: fffff52000959f2f [ 238.521219][ T5802] R10: 0000000000000003 R11: 00000000000075ab R12: 0000000000000003 [ 238.529187][ T5802] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888023b797d0 [ 238.537157][ T5802] FS: 0000000000000000(0000) GS:ffff888123ccc000(0000) knlGS:0000000000000000 [ 238.546090][ T5802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.552675][ T5802] CR2: 00007f5f5bbf3e9c CR3: 000000000eb94000 CR4: 0000000000350ef0 [ 238.560649][ T5802] Kernel panic - not syncing: Fatal exception [ 238.566919][ T5802] Kernel Offset: disabled [ 238.571229][ T5802] Rebooting in 86400 seconds..