last executing test programs: 10.798506516s ago: executing program 0 (id=442): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket(0x2b, 0x1, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = socket(0xa, 0x3, 0xff) recvmmsg(r1, &(0x7f0000002040), 0x400000000000233, 0x10022, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x9, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900082b01fec400000000000000000000000000bbfe8000000000000000000000000000aaff"], 0x0) 10.498469613s ago: executing program 0 (id=444): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004001f"], 0x38}}, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$mtd(&(0x7f0000000700), 0x0, 0x2) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000740)={0x2, 0x0, 0x98, &(0x7f0000000780)={0x4, 0x10000, 0x1}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(0x0, 0x401, 0x145981) ioctl$BLKDISCARD(r5, 0x1277, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x97}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000340)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000580)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) sendmmsg(r8, &(0x7f0000000640)=[{{&(0x7f0000000680)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0x0) 9.301135813s ago: executing program 1 (id=451): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$P9_RVERSION(r2, &(0x7f0000000500)={0x15, 0x65, 0xffff, 0x61, 0x8, '9P2000.u'}, 0x15) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x20e) 8.776468156s ago: executing program 1 (id=454): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d00"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x40, 0xc, 0x1, '9'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.530674926s ago: executing program 2 (id=457): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7) 7.457361088s ago: executing program 2 (id=458): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x7, 0x7ffc0001}]}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) unshare(0x20000) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='measure #', 0x9) socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) 4.345833864s ago: executing program 0 (id=460): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) 4.178493198s ago: executing program 1 (id=461): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='ramfs\x00', 0x14011, 0x0) syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x1484a8, &(0x7f0000000500)=ANY=[], 0x21, 0x0, 0x0) symlinkat(&(0x7f0000000540)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES8=r0], 0x1, 0x3b7, &(0x7f0000000780)="$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") 4.081405801s ago: executing program 2 (id=462): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$P9_RVERSION(r2, &(0x7f0000000500)={0x15, 0x65, 0xffff, 0x61, 0x8, '9P2000.u'}, 0x15) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x20e) 3.830127517s ago: executing program 0 (id=463): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x1100, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000440)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000580)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.805950917s ago: executing program 1 (id=464): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 3.586975173s ago: executing program 0 (id=465): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7) 3.586330653s ago: executing program 2 (id=466): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7) 3.515564465s ago: executing program 0 (id=467): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000500)='\f', 0x1, 0x8000c61) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88842, 0x0) 3.486225195s ago: executing program 2 (id=468): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@dev}}, 0x28}}, 0x0) 3.371551468s ago: executing program 2 (id=469): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d00"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x40, 0xc, 0x1, '9'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.130417014s ago: executing program 3 (id=471): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40200}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) 2.987614907s ago: executing program 3 (id=472): socket$igmp(0x2, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.789922062s ago: executing program 3 (id=473): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.950526563s ago: executing program 3 (id=474): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001180)={0x0, 0x0, 0x0}, &(0x7f00000011c0)=0xc) setresgid(0x0, r1, r1) 1.874342015s ago: executing program 3 (id=475): ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000240)={{}, "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"}) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) write(r0, &(0x7f0000000960)='1', 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7) 1.118780893s ago: executing program 1 (id=476): ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000240)={{}, "6615aa80ab4f1018d03939dc1f4913d0b36393a7be890b8c8099d2d6295faaa576da3ac725bbe24e2506810811945b36a8a17c0e7dfebe3be6ddeb3ad05f7c4840260edb7cca0b7a830bc2b416a8c190a79261cb10f5bb9ecac876ca938296132b5b983dbdacd8a7820690867dabb04f8478961b1f0a6b0674a49afe5b4cf32e5db4d5dd5ae1f7bba29cd1842c565bcabe22ee32e6d04e5b75ff1c993090ab50c99fc1378ef4b40c089ef1afb858135ede6ec48a2176c4f439cff10b011be3b4fba9d22929033987633eb65063b09882717439bff29ca760cecc0f00a2f1ef3a601dbde81814b176520158a6d1c7be176595fd5b8a8fe98743d5322ccb4d08d7d78145d0123f02c534476546068177aaf8ca4d843fc15e357f030f005f5a9e1a3a80116522babc1531479e706ab2e07281f14530cfa96bc74198b83c2c3e0d38cf431afc7da39d5b26135c4a6436001009abe66caa01db2f69ac06fe6cb2ff32b026c6575a5031c00fb6a4b6494143642d7b74a241b553ec53694f5f48f5f15b286fdb64c65e3923d309200082788f8c3082808625c1c097cb16ec1743bb5ee8c2402e1bda1414539696fea6557887ebc60e54549283364fe9aa238e86531f8186323b6b89ceffc219139133e93cfe933e7dfb337591815908880ccce1b8dccfcf18cbb657b6d0467cc26d3079ebb8a9ce1b88ecec2240d2eba7aaf1dd9b5089225d850adeab8d53da7b938bbd71e381441ab433e105f87c3a27d65c4cc0c6635923923a9d8bf716bc3e0a393bab0005380d184f4e4bcd2ee8288ba0d852b8d5ed1d4fcf7962c630a18b92e06cb777246362e3b58bae372bb8b51c64250f5f6725b42b91bcba1aab68a28826478083b29544cd85e165dcb159e28ccd16f3e7ba3e6843995e230478f3d47160f4a32b99fca47d586285991f00bf43f15ffec1d0b23f5efd51313c43a38ecb03bf054c057b240b3f1095b3de1b0c609229eb8bb2465e4c11016b2ab8557a30a03a36a2a3f91d4d5a76f5d47466b411ec7fdd6b5c48145b55146d4c24f6da0c38233c829bf2bd4bb286a5114546995c9dc0243c8249905317e0a12f4970dd576349f1fa2ef8e7e8a780a39fc723cb8794a6a126de2a1644de371b8d5bbaf0783a0de54338d892e284d645ebc6e3cc3fad2a2be56023f6f53164ffc11f3041cf5d6897691e6beb79d95f63ea0905d4b85d2d758f4fa5a933f6f58d746c731efc22e59cb9583273386b531af099af77a3e880e69abe32a7a9ef3f9d7b0ef9f852f77ff66668ab84981242c9eb4511ac119e9f01dbfbdd17a1fbfcffe1c0335d09a727600fca7b99ac08ff2c61a5efaa8c38b5bf37fc2c427b668f4156c294bfc2aad46c4fb92eba008dc754587e21a4d978962c92cb13d58214b8af19a87d87b493650f699cdec89a8117d505173be2f250f4812545db21d925c69bf9a8dc453fb116481002909ee4e69a17f018f3946bddb669728160335272757f65b9dab4ff71d1a534645c2549b96fb97496e4c6bc5af2eab51250a448393ba68c688851fcb899e2d5b37cabe2e253a5d2adc7da32adf8b8208c7cf0f55785edb7c585996076ce10f6d3695add14fbed09ae93497b48e3ac00137bc4add6f64b31add8b9b1df9381ebd3cb4bf6f83b0ccb643784992b4938cc5485fb53127508f98dd0a38c7e5616263f5ec0cc2caa332b9a754fc22fb787c8347fa72a69c31ad8c94878d1d4b83871cc41f9c75ccb6cf3b0a5218cd99ebb268e2272545fb1cbcd4b539305ce1cc2c68f6f902de49952cf1a67c078149226df1cdc3cc6ecb25318a8a606e6b2554087a169e760eabb797914b43dd7699ca2fb5660dcafe551c5cf46922435a614590c6b9fae8ec9684af4cc6eeca17e4e3c017d78b77b5e27bbdd6a70f0ffe0977585a7cf9b56cfdf4decd301e5efbdddd5651e43d0c2c38383ef428a1f3d7c9ef2e61973649875fa25b4da910c2d0617f4ef21eaae38142f8849c49f0c84882e27e4d9a55e49841ce11115791767db0a79e20fc9c17c5bf7fd2cfba506e101c2b357373fffd5b3756012ff628800b9f4e665cbe991b6c2b91e9f9eb87172a7cc71e0faa8b7127e83b3b38741eb6052ba53f6a373eae906f9477beca9f7180ccf0423d212bb8596289d11dff76432a4d0f8bea4a6108c2ae47b12027771689f74a1f15bb68944c51813f90853333e9b718c3db3e3e54df02c113c0ed477e7abd5ec5b2910616a773aaa43f1ea6c9ccbd3a7241f4021c2467881f37154237f068db8d9df46123893332cd3184d6341f362bcbb61c8a9c01d6ad8f5c91841960505edd8f5bc28b75dda749be2d7f5fcf4e51174474cc6d60ef560de8f8e907dffac4c584c473468a7cda41f2d8b5c667673e339347eee98842ba9499a6675cf00bedf2d5ebaaca3d000caaaf4d6d7b4dabae340d32834575aa02c269798c2fecfcaeab9cf26c6a6b2afc3cd33e833ba5654cd845cbf558e08c9b5608c41f2caf4d3a626c2ee6ae22512c5abb270422262459c58a9cd66cdfb9f222be28284e389bbf6381c64733d365d0f15885139a01f273dd67002e1f208dff1dd41802407f7d4e2597eadaa41195c1fc2e12f60508567fc7a7e9c64c01c4308f59684ef3bb98e993694b06e055c99479b5a32cc37112d6dd5b51c0cfeebe64cd4791f33169634e95e254929937c97e4eca906f0aa33a7014339d16c0e0822aaba2e060c9c114df27c13f5da8f3e58e92d4d7b2f0ecc3cadc9d103c2928f63ab0f8f1e8a3cfdecf88b09d0d5be77d2177c4b7f5533add623fe702f7d6f2753ef0c3413135452cda0fcb437c0a951805406b7a3c6c916c3ba0ca47e5edbd53bf9876c406cbce97d38a629ba08d9aaeadacad9a3a8cdd56db5b5ef846ac5da223fc151b95244e5169cd397a8a319425bb1218d6b823ed76f20c221ad1b35f654fdaecdfac4e16c9107387e27155f76bb93781e2de176c24acb86cd6997b13b61d80b6bd9476d20898ace8d3a21fbe9b954e7edfbb7940bb14c3ddca53c99e9d7ac4912cb9a6cacb31ec88b3e60d217fedf5428ad5ecf8823719d420a9619bf8dd4f2c021ed9c7f1f032a549b3ce448b2669ba59ba3d86fb87112bd34b72108c04c5a8170fb369c85158d0fe33b56c6bb36c45cf35f7e9ebaa85a54b291f22850c8e0958c155b399aae18bb99e6da4a9beed2e32a10083a6341e8487b0ece9eb25ee3944721c575621c0653d8e606a97a5a2712c9a6e32fccb76d2518538d04543474314f73a98cb49a14709b283ac6a4cc3397286d2dfec8566ffbcbfffeb96e8148ba506a5109c229f0e8e854cde5b922319601b51b353a1563f7d4b61e282b1c20ba11f8d64969718d75384cbdc4010c8a7caefcaab3bce2349cf3071c9a0be5376a71de404f02e968a24fe273f6f8ec359b4c6cba93e98a8ecb6c3168b208dc21d54cb455a36b7df04bed4cb076df50b521217172037b9a82c6b95c582751a8fc2094d65c6609ee05c32c3914bb4f5ba68d4da80d640a5acaa91be2263c1390afe39009f6b28819cda37d460d8a0d3d72e6853648033adee8ea28a7effdf5551dd9f0c621552de054dd230b4d2788dfac5fc456ee01222bed0a166b75695589ea469d05a4d02857c03dfad6ca601cd17ff38683207fafb30b43ed0b4f8eb6b10146ab7dc0fa9fc40ba7bb75517e0e7538ec81198015c3cecd6e47c42a09de418f7103bd9e986ee03f1d00ae610903f6f6c362dfcd43ff1e6012e0fe27df03c25d44cff2e1c04f907add3f0d4a774b2d72a2ecafb5b06fc50a16bd84d8c7f4a7ba2f602ed94b9a2108b6e1cca7244681fa4fb7c377a06ef14b5ae39e87114eebbb8f698f91fc8e4927bce8b445127c3995f8d728e10db347caaa00c522eb67996e7227ba55c082d3e5090aeefa251c67b85c425f921a24265bd83a97069b5efffd93d421b66806643283270cf0a26390fab87dc836d9c73f9e889544130d73e3611d5afbf37317b03ad1456c31319f19e6dea61ba45f7982ab73ceedff1a28fd660b09e2bcbb2ec86ea529c856eb7d88952b56b3b7233c870d87b68a1404ddf20a800e478fe232ca21a6544d6ea46406535818e7ec6a50db0658708db3b53d772745360b6b82de138efc3a1bc4cbac375986b1fcf1a916bf8b45dd3dc7b9f994e8c30c3eb877d960aef36a8b6992e9253dbbe57b631361fd19dd6dfff4d340663b0c478d0de112fc6783a7a062881ed9676a8b13424edec2e51bc3044f51f7b3a307d61777e4f71ce9198d73bc1bd89d34bbdee24e3e4a119e523a72a002013d3d05119803fd9815714824ea0ee5eb14211f0446253102892becdf7f34414a5fb08f8ed92e40c7cd03cac2a9ff63691970afc5675ffdcde15956b46ca944c14ffd76e89dcd2c78462629b9db770c579ae4ec4252e5f69916b3964c18c54b419a6285f27809e4049165309204b19ce48951ced7fc48b20d20d43811cab6c32d4e4cf05ebcb715c21019002e3bedcf86bc6baec9578a1b36ea567c088aa97a7dad7e050472f7906d226747bb2fbbd52e328069dc8c547c45a7cff5b7949548d4799641798314d2f4a11b198bce08f7c936299eeb15d10cff730e4781ce80664b7c1e375c6cd392de58a025280e7c9b7f6a5590b68bc8e7a90232a79e663bb0c393cd94e9b72ee86053c87f1ee197e684fc8cf5c8893971eee36f55e6acfc5dd0a7a38baf9642b37b294513a12591b07be05787b870e7e28892780390e59567fcd78c97691b28e2d0b3eb6344ae92c5ac7aac40d67ab8f152d41f60c0c077d60c552db80ef8baec5bcc9adaa33cba28dc3b52df4d2951d024a219fa75a612248045a7abcaca6f606248f21aa543fb56dd132cf30b021c30976e84e8ed2e5615cdecc874908512b9e3a48f80445e75260312d9d5b8bc9534187aa91ed1d03398c738b38fb06c6e8746674d24422539f94e27d1af2865ee64adfaf98ca63e83456ff17c60a95698b01f8e6f4962469a2d9ea503cf344d15ea52699e7d62efc77530672d62cf6f03a14857f59d3307f925d6004eb2104ccb90e67930357f13b4d74dc009d482d56a4b6e566716f549351b3738112f9ff1e4217661450918f07689641ee72e9f3055defe72ac05774c016e0431926a7ab75973f46f0625d6e5b19403ea7fbed8d9775007c41c444bcfa562eb2e7532fe332abc7587b87a5ad77e05888dcbe1b87c69199e276ddca4750a7b3ef0f46d132ac73d42bb9ea6864e88bda5db891490d92f9577be973ec4653baeb0b1d90bc7757cacd0973bdb9909aab7c16598cb4dc2a19ac57dab3c22836c172218078a8bf91e7ca81ba05eeef9e966489b182f6be07bb174c7fb28c8940d0902db9f45b73471ce9a760b78d40cc117da1caa07412cde830db9b15aac1ec5f5a8b1d109ee24eb4949174dad32c850cd9e6d42c736241ebf310293bc03880b7e0e775ef4e954e16abe7d9de9e576b0809755706d9b7384c27916866e17948cf5f3baaf9eba6718fee030194a6bb2fdc401d1c67c22a8a0bac6bcef24076dcc359190df4748114a6634761903f0482c76098eba24c841e6a6e6ba9b599fec88f9e5e0158352a05ef1ab162bfec139dc0653cb875d883b0c98f02d1fe35419133537521b5f8f48cb8269971e58fe3b3b4804dd69e7038161d7786a71de18533287f21445e6f49e93c53ddf7820e234a8ec5cc9c4d154fb5980c59a3545a1ea4fc67a758e24328811131ff9afe8561eaadaf6cb502fcbcaee557229f64fd74a33c52ab3f163"}) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) write(r0, &(0x7f0000000960)='1', 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) 838.54072ms ago: executing program 3 (id=477): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 1 (id=478): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x4040800) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, {0x401}}, '\\\\172.20.20.170\\share\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) dup(0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000d10ffc)=0x200, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r8, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\172.20.20.170\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000300)='cifs\x00', 0x0, &(0x7f0000000400)='vers=1.0,username=guest,password=,port=20000,soft\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. [ 82.926788][ T5762] cgroup: Unknown subsys name 'net' [ 83.090027][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.839723][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.617697][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.627759][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.639637][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.643588][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.648871][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.658956][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.663317][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.670203][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.676541][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.689848][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.691310][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.701232][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.707541][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.714998][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.719775][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.725943][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.736079][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.743135][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.747733][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.759199][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.767742][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.775048][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.783146][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.791931][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.428142][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 87.524116][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.608866][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 87.664349][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 87.821180][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.828421][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.836604][ T5775] bridge_slave_0: entered allmulticast mode [ 87.844233][ T5775] bridge_slave_0: entered promiscuous mode [ 87.853282][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.860436][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.871906][ T5774] bridge_slave_0: entered allmulticast mode [ 87.879034][ T5774] bridge_slave_0: entered promiscuous mode [ 87.888385][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.895654][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.903295][ T5774] bridge_slave_1: entered allmulticast mode [ 87.910329][ T5774] bridge_slave_1: entered promiscuous mode [ 87.943912][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.951261][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.958424][ T5775] bridge_slave_1: entered allmulticast mode [ 87.966049][ T5775] bridge_slave_1: entered promiscuous mode [ 88.036980][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.051153][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.060955][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.068111][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.078384][ T5777] bridge_slave_0: entered allmulticast mode [ 88.085573][ T5777] bridge_slave_0: entered promiscuous mode [ 88.102732][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.122540][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.129811][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.137673][ T5777] bridge_slave_1: entered allmulticast mode [ 88.145286][ T5777] bridge_slave_1: entered promiscuous mode [ 88.188126][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.218690][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.225989][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.233597][ T5778] bridge_slave_0: entered allmulticast mode [ 88.240927][ T5778] bridge_slave_0: entered promiscuous mode [ 88.262535][ T5774] team0: Port device team_slave_0 added [ 88.283292][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.293115][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.300340][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.308494][ T5778] bridge_slave_1: entered allmulticast mode [ 88.316103][ T5778] bridge_slave_1: entered promiscuous mode [ 88.325493][ T5774] team0: Port device team_slave_1 added [ 88.346973][ T5775] team0: Port device team_slave_0 added [ 88.356113][ T5775] team0: Port device team_slave_1 added [ 88.364323][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.424719][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.431814][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.457854][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.495604][ T5777] team0: Port device team_slave_0 added [ 88.516207][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.526169][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.552599][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.565126][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.574603][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.604528][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.618177][ T5777] team0: Port device team_slave_1 added [ 88.627270][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.640732][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.666384][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.673704][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.701755][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.779006][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.786468][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.812845][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.826164][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.833492][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.859559][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.886356][ T5778] team0: Port device team_slave_0 added [ 88.893729][ T5783] Bluetooth: hci1: command tx timeout [ 88.899435][ T5783] Bluetooth: hci2: command tx timeout [ 88.908738][ T5788] Bluetooth: hci3: command tx timeout [ 88.908761][ T5785] Bluetooth: hci0: command tx timeout [ 88.940251][ T5774] hsr_slave_0: entered promiscuous mode [ 88.947674][ T5774] hsr_slave_1: entered promiscuous mode [ 88.966629][ T5778] team0: Port device team_slave_1 added [ 88.977363][ T5775] hsr_slave_0: entered promiscuous mode [ 88.984685][ T5775] hsr_slave_1: entered promiscuous mode [ 88.991726][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.999578][ T5775] Cannot create hsr debugfs directory [ 89.059231][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.066304][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.092313][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.116990][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.124579][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.150855][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.283293][ T5777] hsr_slave_0: entered promiscuous mode [ 89.289865][ T5777] hsr_slave_1: entered promiscuous mode [ 89.299582][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.307325][ T5777] Cannot create hsr debugfs directory [ 89.347926][ T5778] hsr_slave_0: entered promiscuous mode [ 89.354598][ T5778] hsr_slave_1: entered promiscuous mode [ 89.361000][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.368607][ T5778] Cannot create hsr debugfs directory [ 89.724427][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.743786][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.757707][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.771669][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.843265][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.855382][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.884724][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.905552][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.957389][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.982678][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.996571][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.029888][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.097015][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.136545][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.158335][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.173254][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.260328][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.323494][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.352499][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.368096][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.375698][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.422009][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.429265][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.456698][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.482472][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.489629][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.499639][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.506914][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.529186][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.584341][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.637789][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.679849][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.696087][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.703363][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.764470][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.771737][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.788223][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.795517][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.808526][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.815793][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.971399][ T5788] Bluetooth: hci3: command tx timeout [ 90.976888][ T5788] Bluetooth: hci0: command tx timeout [ 90.983812][ T5086] Bluetooth: hci1: command tx timeout [ 90.989960][ T5783] Bluetooth: hci2: command tx timeout [ 91.227709][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.398644][ T5775] veth0_vlan: entered promiscuous mode [ 91.428322][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.471409][ T5775] veth1_vlan: entered promiscuous mode [ 91.523976][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.558025][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.568504][ T5778] veth0_vlan: entered promiscuous mode [ 91.592608][ T5778] veth1_vlan: entered promiscuous mode [ 91.645202][ T5775] veth0_macvtap: entered promiscuous mode [ 91.664956][ T5775] veth1_macvtap: entered promiscuous mode [ 91.695227][ T5778] veth0_macvtap: entered promiscuous mode [ 91.712015][ T5778] veth1_macvtap: entered promiscuous mode [ 91.798986][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.811102][ T5777] veth0_vlan: entered promiscuous mode [ 91.820260][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.828268][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.839972][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.855077][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.866028][ T5774] veth0_vlan: entered promiscuous mode [ 91.891126][ T5774] veth1_vlan: entered promiscuous mode [ 91.899666][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.913358][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.925433][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.937909][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.948091][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.957184][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.966088][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.982817][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.991823][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.002041][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.012061][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.038104][ T5777] veth1_vlan: entered promiscuous mode [ 92.219166][ T5774] veth0_macvtap: entered promiscuous mode [ 92.241558][ T5777] veth0_macvtap: entered promiscuous mode [ 92.252998][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.272945][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.285129][ T5774] veth1_macvtap: entered promiscuous mode [ 92.320945][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.328836][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.353518][ T5777] veth1_macvtap: entered promiscuous mode [ 92.370871][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.378760][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.422765][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.435146][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.443286][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.451678][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.463219][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.474136][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.486250][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.498567][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.527883][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.541665][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.552832][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.568104][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.630250][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.643927][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.654497][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.665659][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.676085][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.686913][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.705157][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.713988][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.725379][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.734597][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.747021][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.776783][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.789203][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.800987][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.812241][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.827640][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.857705][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.873134][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.919517][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.941833][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.953971][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.967226][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.050759][ T5788] Bluetooth: hci0: command tx timeout [ 93.052874][ T5783] Bluetooth: hci3: command tx timeout [ 93.056421][ T5788] Bluetooth: hci2: command tx timeout [ 93.062234][ T5086] Bluetooth: hci1: command tx timeout [ 93.186965][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.153183][ T5783] Bluetooth: hci3: command tx timeout [ 95.158673][ T5783] Bluetooth: hci1: command tx timeout [ 95.167005][ T5086] Bluetooth: hci2: command tx timeout [ 95.168735][ T5788] Bluetooth: hci0: command tx timeout [ 95.200675][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.363892][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.408759][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.503881][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.531491][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.592966][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.611080][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.300115][ T23] cfg80211: failed to load regulatory.db [ 97.491327][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.911259][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 98.335974][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.367367][ T5883] binder: 5880:5883 ioctl c018937d 2000000001c0 returned -22 [ 98.387782][ T5883] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 98.387782][ T5883] [ 98.401966][ T5883] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 98.416037][ T5883] CIFS: Attempting to mount //172.20.20.170/share [ 98.591294][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 98.600426][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.627517][ T9] usb 2-1: config 0 descriptor?? [ 98.634089][ T5883] CIFS: VFS: cifs_mount failed w/return code = -512 [ 98.674021][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 98.813917][ T5892] syz.0.17[5892]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 98.974301][ T5894] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.039378][ T5894] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 99.908649][ T9] gspca_vc032x: reg_r err -71 [ 99.916389][ T9] vc032x: probe of 2-1:0.0 failed with error -71 [ 100.268155][ T9] usb 2-1: USB disconnect, device number 2 [ 101.090949][ T5916] binder: 5913:5916 ioctl c018937d 2000000001c0 returned -22 [ 101.107911][ T5916] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 101.107911][ T5916] [ 101.122751][ T5916] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 101.137456][ T5916] CIFS: Attempting to mount //172.20.20.170/share [ 101.884678][ T5916] CIFS: VFS: cifs_mount failed w/return code = -112 [ 102.312391][ T5925] siw: device registration error -23 [ 104.170234][ T5948] binder: 5944:5948 ioctl c018937d 2000000001c0 returned -22 [ 104.188991][ T5948] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 104.188991][ T5948] [ 104.203880][ T5948] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 104.217033][ T5948] CIFS: Attempting to mount //172.20.20.170/share [ 104.942428][ T5948] CIFS: VFS: cifs_mount failed w/return code = -112 [ 105.590647][ T5817] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.770595][ T5817] usb 3-1: Using ep0 maxpacket: 8 [ 105.778992][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.791602][ T5817] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 105.801996][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.814575][ T5817] usb 3-1: config 0 descriptor?? [ 105.832204][ T5817] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 105.971329][ T5966] siw: device registration error -23 [ 106.429143][ T5817] gspca_vc032x: reg_r err -110 [ 106.733590][ T5817] vc032x: probe of 3-1:0.0 failed with error -110 [ 108.396797][ T5987] binder: 5983:5987 ioctl c018937d 2000000001c0 returned -22 [ 108.412234][ T5987] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 108.412234][ T5987] [ 108.426033][ T5987] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 108.439114][ T5987] CIFS: Attempting to mount //172.20.20.170/share [ 109.202623][ T5987] CIFS: VFS: error -4 create cifsd thread [ 109.208722][ T5987] CIFS: VFS: cifs_mount failed w/return code = -4 [ 109.264483][ T5855] usb 3-1: USB disconnect, device number 2 [ 111.263108][ T6003] siw: device registration error -23 [ 113.274889][ T6021] binder: 6019:6021 ioctl c018937d 2000000001c0 returned -22 [ 113.299377][ T6021] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 113.299377][ T6021] [ 113.313972][ T6021] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 113.327212][ T6021] CIFS: Attempting to mount //172.20.20.170/share [ 113.390607][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.122429][ T6021] CIFS: VFS: cifs_mount failed w/return code = -112 [ 114.250664][ T5855] usb 4-1: Using ep0 maxpacket: 8 [ 115.059124][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.107578][ T5855] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 115.140440][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.189263][ T5855] usb 4-1: config 0 descriptor?? [ 115.204800][ T5855] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 116.121642][ T5855] gspca_vc032x: reg_r err -110 [ 116.126810][ T5855] vc032x: probe of 4-1:0.0 failed with error -110 [ 116.160796][ T5855] usb 4-1: USB disconnect, device number 2 [ 116.981227][ T6056] binder: 6054:6056 ioctl c018937d 2000000001c0 returned -22 [ 116.998711][ T6056] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 116.998711][ T6056] [ 117.012672][ T6056] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 117.025632][ T6056] CIFS: Attempting to mount //172.20.20.170/share [ 117.733753][ T6056] CIFS: VFS: error -4 create cifsd thread [ 117.824227][ T6056] CIFS: VFS: cifs_mount failed w/return code = -4 [ 118.011253][ T6061] 0x000000000003-0x000000010001 : "" [ 118.076089][ T6061] ftl_cs: FTL header corrupt! [ 118.114350][ T6061] FAULT_INJECTION: forcing a failure. [ 118.114350][ T6061] name failslab, interval 1, probability 0, space 0, times 1 [ 118.190845][ T6061] CPU: 1 PID: 6061 Comm: syz.0.73 Not tainted syzkaller #0 [ 118.198132][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.208235][ T6061] Call Trace: [ 118.211568][ T6061] [ 118.214581][ T6061] dump_stack_lvl+0x18c/0x250 [ 118.219337][ T6061] ? show_regs_print_info+0x20/0x20 [ 118.224759][ T6061] ? load_image+0x420/0x420 [ 118.229311][ T6061] ? __might_sleep+0xe0/0xe0 [ 118.233952][ T6061] ? __lock_acquire+0x7eb0/0x7eb0 [ 118.239071][ T6061] should_fail_ex+0x394/0x4c0 [ 118.243870][ T6061] should_failslab+0x9/0x20 [ 118.248463][ T6061] slab_pre_alloc_hook+0x59/0x300 [ 118.253577][ T6061] kmem_cache_alloc+0x5a/0x2c0 [ 118.258430][ T6061] ? __kernfs_new_node+0xe5/0x7f0 [ 118.263535][ T6061] __kernfs_new_node+0xe5/0x7f0 [ 118.268457][ T6061] ? kernfs_new_node+0x260/0x260 [ 118.273494][ T6061] ? up_write+0x1be/0x410 [ 118.277870][ T6061] kernfs_new_node+0x14c/0x260 [ 118.282695][ T6061] __kernfs_create_file+0x4b/0x2e0 [ 118.287861][ T6061] sysfs_add_file_mode_ns+0x237/0x2f0 [ 118.293297][ T6061] internal_create_group+0x431/0xd10 [ 118.298637][ T6061] ? kernfs_add_one+0x149/0x6b0 [ 118.303548][ T6061] ? sysfs_create_group+0x20/0x20 [ 118.308622][ T6061] ? sysfs_create_dir_ns+0x16b/0x2a0 [ 118.313952][ T6061] ? sysfs_warn_dup+0xa0/0xa0 [ 118.318667][ T6061] ? do_syscall_64+0x55/0xb0 [ 118.323327][ T6061] sysfs_create_groups+0x59/0x120 [ 118.328404][ T6061] kobject_add_internal+0x65e/0xc90 [ 118.333655][ T6061] kobject_add+0x164/0x240 [ 118.338145][ T6061] ? kobject_init+0x1d0/0x1d0 [ 118.342866][ T6061] ? kobject_init+0x7f/0x1d0 [ 118.347508][ T6061] blk_register_queue+0xaf/0x440 [ 118.352509][ T6061] device_add_disk+0x68c/0xfe0 [ 118.357333][ T6061] add_mtd_blktrans_dev+0x1039/0x14e0 [ 118.362771][ T6061] mtdblock_add_mtd+0x18a/0x240 [ 118.367681][ T6061] blktrans_notify_add+0x99/0xe0 [ 118.372666][ T6061] add_mtd_device+0x11b3/0x17e0 [ 118.377593][ T6061] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 118.383437][ T6061] ? __mutex_lock+0x321/0xc80 [ 118.388178][ T6061] ? mtd_cls_resume+0x130/0x130 [ 118.393141][ T6061] mtd_add_partition+0x30a/0x510 [ 118.398136][ T6061] ? release_mtd_partition+0x80/0x80 [ 118.403472][ T6061] ? __might_fault+0xaa/0x120 [ 118.408184][ T6061] ? __might_fault+0xc6/0x120 [ 118.412914][ T6061] ? __might_fault+0xaa/0x120 [ 118.417657][ T6061] mtdchar_blkpg_ioctl+0x287/0x2b0 [ 118.422819][ T6061] ? shrink_ecclayout+0xae0/0xae0 [ 118.427909][ T6061] ? __lock_acquire+0x1431/0x7eb0 [ 118.432981][ T6061] ? __might_fault+0xaa/0x120 [ 118.437728][ T6061] ? __might_fault+0xc6/0x120 [ 118.442448][ T6061] ? __might_fault+0xaa/0x120 [ 118.447169][ T6061] mtdchar_ioctl+0x14f7/0x1b80 [ 118.451980][ T6061] ? mtdchar_close+0x180/0x180 [ 118.456809][ T6061] ? verify_lock_unused+0x140/0x140 [ 118.462077][ T6061] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 118.467773][ T6061] ? tomoyo_path_number_perm+0x217/0x5e0 [ 118.473452][ T6061] ? __lock_acquire+0x7eb0/0x7eb0 [ 118.478512][ T6061] ? slab_free_freelist_hook+0x130/0x1a0 [ 118.484201][ T6061] ? tomoyo_path_number_perm+0x217/0x5e0 [ 118.489907][ T6061] ? __mutex_trylock_common+0x160/0x270 [ 118.495488][ T6061] ? trace_raw_output_contention_end+0xd0/0xd0 [ 118.501692][ T6061] ? rcu_is_watching+0x15/0xb0 [ 118.506510][ T6061] ? trace_contention_end+0x39/0xe0 [ 118.511745][ T6061] ? __mutex_lock+0x30d/0xc80 [ 118.516494][ T6061] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 118.521899][ T6061] ? mutex_lock_nested+0x20/0x20 [ 118.526872][ T6061] ? __fget_files+0x28/0x460 [ 118.531869][ T6061] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 118.537107][ T6061] ? mtdchar_write+0x5c0/0x5c0 [ 118.541902][ T6061] __se_sys_ioctl+0xfd/0x170 [ 118.546560][ T6061] do_syscall_64+0x55/0xb0 [ 118.551006][ T6061] ? clear_bhb_loop+0x40/0x90 [ 118.555740][ T6061] ? clear_bhb_loop+0x40/0x90 [ 118.560478][ T6061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.566452][ T6061] RIP: 0033:0x7f198c19e1d9 [ 118.570911][ T6061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.590570][ T6061] RSP: 002b:00007f198d11f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.599028][ T6061] RAX: ffffffffffffffda RBX: 00007f198c425fa0 RCX: 00007f198c19e1d9 [ 118.607045][ T6061] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000004 [ 118.615121][ T6061] RBP: 00007f198c235888 R08: 0000000000000000 R09: 0000000000000000 [ 118.623123][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.631126][ T6061] R13: 00007f198c426038 R14: 00007f198c425fa0 R15: 00007fff13a44cc8 [ 118.639153][ T6061] [ 118.804051][ T6061] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock1) [ 119.344839][ T6047] loop3: detected capacity change from 0 to 32768 [ 119.427764][ T6047] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 119.437360][ T6047] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 119.560765][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.377416][ T6047] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 120.408383][ T5855] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 120.444189][ T5855] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 120.530578][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 121.322320][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.332591][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 121.341818][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.371057][ T23] usb 1-1: config 0 descriptor?? [ 121.385563][ T23] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 121.607547][ T5855] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1163ms [ 121.629901][ T5855] gfs2: fsid=syz:syz.0: jid=0: Done [ 121.641480][ T6047] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 121.669877][ T6047] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 122.017983][ T23] gspca_vc032x: reg_r err -32 [ 122.033481][ T23] vc032x: probe of 1-1:0.0 failed with error -32 [ 122.194274][ T6084] binder: 6082:6084 ioctl c018937d 2000000001c0 returned -22 [ 122.211453][ T6084] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 122.211453][ T6084] [ 122.226177][ T6084] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 122.239502][ T6084] CIFS: Attempting to mount //172.20.20.170/share [ 122.980870][ T6084] CIFS: VFS: cifs_mount failed w/return code = -112 [ 123.065279][ T8] usb 1-1: USB disconnect, device number 2 [ 126.809134][ T6110] loop3: detected capacity change from 0 to 32768 [ 126.816443][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 126.858137][ T6110] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 126.887535][ T6110] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 127.010587][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 127.195589][ T6110] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 16ms [ 127.403472][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 127.461484][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 127.618326][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.680015][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 127.689310][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.721772][ T8] usb 3-1: config 0 descriptor?? [ 127.740814][ T8] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 128.432855][ T8] gspca_vc032x: reg_r err -32 [ 128.456205][ T8] vc032x: probe of 3-1:0.0 failed with error -32 [ 128.664368][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1202ms [ 128.680773][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 128.690697][ T6110] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 128.709049][ T6110] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 128.940239][ T6142] binder: 6140:6142 ioctl c018937d 2000000001c0 returned -22 [ 128.957397][ T6142] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 128.957397][ T6142] [ 128.971582][ T6142] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 128.985767][ T6142] CIFS: Attempting to mount //172.20.20.170/share [ 129.715718][ T6142] CIFS: VFS: cifs_mount failed w/return code = -112 [ 129.808316][ T5784] usb 3-1: USB disconnect, device number 3 [ 131.169853][ T6146] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 132.904881][ T6174] binder: 6172:6174 ioctl c018937d 2000000001c0 returned -22 [ 132.913215][ T5784] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.932034][ T6174] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 132.932034][ T6174] [ 132.945927][ T6174] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 132.959077][ T6174] CIFS: Attempting to mount //172.20.20.170/share [ 133.151818][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.162697][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.220356][ T5784] usb 2-1: Using ep0 maxpacket: 8 [ 133.294682][ T5784] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.406653][ T5784] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 133.501706][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.656865][ T5784] usb 2-1: config 0 descriptor?? [ 133.685299][ T6174] CIFS: VFS: cifs_mount failed w/return code = -512 [ 133.726076][ T5784] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 134.362494][ T6168] loop3: detected capacity change from 0 to 32768 [ 134.371767][ T5784] gspca_vc032x: reg_r err -32 [ 134.396325][ T5784] vc032x: probe of 2-1:0.0 failed with error -32 [ 134.515421][ T6168] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 134.619619][ T6168] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 134.883606][ T6168] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 134.916383][ T5784] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 134.934092][ T5784] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 135.062006][ T5784] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 127ms [ 135.089505][ T5784] gfs2: fsid=syz:syz.0: jid=0: Done [ 135.114956][ T6168] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 136.633626][ T5817] usb 2-1: USB disconnect, device number 3 [ 139.110754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 139.641278][ T6219] binder: 6217:6219 ioctl c018937d 2000000001c0 returned -22 [ 139.658969][ T6219] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 139.658969][ T6219] [ 139.672815][ T6219] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 139.685948][ T6219] CIFS: Attempting to mount //172.20.20.170/share [ 140.427488][ T6219] CIFS: VFS: cifs_mount failed w/return code = -112 [ 141.031442][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.320260][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 141.389910][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.484284][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 141.580373][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.687747][ T27] usb 4-1: config 0 descriptor?? [ 141.736018][ T27] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 142.238370][ T6224] loop2: detected capacity change from 0 to 32768 [ 142.268104][ T6224] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 142.286837][ T6224] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 142.331604][ T6239] Zero length message leads to an empty skb [ 142.362544][ T27] gspca_vc032x: reg_r err -32 [ 142.369212][ T27] vc032x: probe of 4-1:0.0 failed with error -32 [ 142.397831][ T6224] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 142.411869][ T5855] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 142.423059][ T5855] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 142.523960][ T5855] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 100ms [ 142.556992][ T5855] gfs2: fsid=syz:syz.0: jid=0: Done [ 142.563741][ T6224] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 143.820749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 144.481038][ T5784] usb 4-1: USB disconnect, device number 3 [ 145.468452][ T6255] binder: 6252:6255 ioctl c018937d 2000000001c0 returned -22 [ 145.485485][ T6255] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 145.485485][ T6255] [ 145.499409][ T6255] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 145.512604][ T6255] CIFS: Attempting to mount //172.20.20.170/share [ 145.678683][ T6255] CIFS: VFS: cifs_mount failed w/return code = -512 [ 145.754872][ T6260] rnbd_client L602: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0) [ 145.994413][ T6260] rtrs_client L2081: : Failed to resolve address, err: -19 [ 146.103152][ T6260] rtrs_client L2626: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 150.124637][ T6284] loop1: detected capacity change from 0 to 32768 [ 150.245622][ T6284] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 150.254150][ T6284] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 150.319780][ T6291] binder: 6282:6291 ioctl c018937d 2000000001c0 returned -22 [ 150.340218][ T6289] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 150.340218][ T6289] [ 150.344869][ T5817] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.362868][ T6289] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 150.376809][ T6289] CIFS: Attempting to mount //172.20.20.170/share [ 150.441702][ T6284] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 5ms [ 150.486112][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 150.593390][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 150.660000][ T6289] CIFS: VFS: cifs_mount failed w/return code = -112 [ 150.822976][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 229ms [ 150.839644][ T5817] usb 3-1: Using ep0 maxpacket: 8 [ 150.852751][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.863727][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 150.869677][ T6284] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 150.894703][ T5817] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 150.940609][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.016979][ T5817] usb 3-1: config 0 descriptor?? [ 151.059000][ T5817] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 151.685743][ T5817] gspca_vc032x: reg_r err -32 [ 151.927976][ T5817] vc032x: probe of 3-1:0.0 failed with error -32 [ 153.335530][ T969] usb 3-1: USB disconnect, device number 4 [ 153.904743][ T6320] binder: 6317:6320 ioctl c018937d 2000000001c0 returned -22 [ 153.924988][ T6320] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 153.924988][ T6320] [ 153.939048][ T6320] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 153.953854][ T6320] CIFS: Attempting to mount //172.20.20.170/share [ 154.713117][ T6320] CIFS: VFS: cifs_mount failed w/return code = -512 [ 155.286563][ T6325] loop2: detected capacity change from 0 to 32768 [ 155.312755][ T6325] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 155.321064][ T6325] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 155.358381][ T6325] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 155.380398][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 155.401260][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 156.251495][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 850ms [ 156.260012][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 156.285750][ T6325] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 158.735522][ T6355] binder: 6352:6355 ioctl c018937d 2000000001c0 returned -22 [ 158.752690][ T6355] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 158.752690][ T6355] [ 158.766738][ T6355] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 158.784727][ T6355] CIFS: Attempting to mount //172.20.20.170/share [ 158.940712][ T6355] CIFS: VFS: error -4 create cifsd thread [ 159.112218][ T6355] CIFS: VFS: cifs_mount failed w/return code = -4 [ 159.900647][ T969] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.160602][ T969] usb 3-1: Using ep0 maxpacket: 8 [ 160.203348][ T969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.308369][ T969] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 160.343162][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.384183][ T969] usb 3-1: config 0 descriptor?? [ 160.412550][ T969] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 161.029088][ T969] gspca_vc032x: reg_r err -32 [ 161.034144][ T969] vc032x: probe of 3-1:0.0 failed with error -32 [ 161.459079][ T6377] loop3: detected capacity change from 0 to 32768 [ 161.469901][ T6377] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 161.478258][ T6377] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 161.607738][ T6377] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 161.619338][ T56] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 161.626281][ T56] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 161.814026][ T56] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 187ms [ 161.838609][ T56] gfs2: fsid=syz:syz.0: jid=0: Done [ 161.859743][ T6377] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 163.017330][ T56] usb 3-1: USB disconnect, device number 5 [ 163.469008][ T6394] binder: 6390:6394 ioctl c018937d 2000000001c0 returned -22 [ 163.491066][ T6394] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 163.491066][ T6394] [ 163.505107][ T6394] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 163.519322][ T6394] CIFS: Attempting to mount //172.20.20.170/share [ 164.059997][ T6394] CIFS: VFS: cifs_mount failed w/return code = -112 [ 165.450741][ T5855] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.120757][ T5855] usb 3-1: Using ep0 maxpacket: 8 [ 166.201530][ T5855] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.290709][ T5855] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 166.311852][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.342510][ T5855] usb 3-1: config 0 descriptor?? [ 166.363790][ T5855] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 167.393112][ T6417] loop3: detected capacity change from 0 to 32768 [ 167.429024][ T6417] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 167.437415][ T6417] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 167.455723][ T5855] gspca_vc032x: reg_r err -32 [ 167.464799][ T5855] vc032x: probe of 3-1:0.0 failed with error -32 [ 167.817409][ T6417] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 167.849159][ T5855] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 167.859922][ T5855] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 167.990042][ T6427] binder: 6425:6427 ioctl c018937d 2000000001c0 returned -22 [ 168.005406][ T6427] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 168.005406][ T6427] [ 168.019305][ T6427] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 168.032365][ T6427] CIFS: Attempting to mount //172.20.20.170/share [ 168.745259][ T6427] CIFS: VFS: cifs_mount failed w/return code = -112 [ 168.824835][ T5855] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 964ms [ 168.835615][ T56] usb 3-1: USB disconnect, device number 6 [ 168.871023][ T5855] gfs2: fsid=syz:syz.0: jid=0: Done [ 168.900812][ T6417] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 172.130865][ T56] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 172.943379][ T56] usb 2-1: Using ep0 maxpacket: 8 [ 172.972441][ T56] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.005248][ T56] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 173.040628][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.039923][ T56] usb 2-1: config 0 descriptor?? [ 174.073188][ T6463] binder: 6458:6463 ioctl c018937d 2000000001c0 returned -22 [ 174.100561][ T6463] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 174.100561][ T6463] [ 174.115675][ T6463] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 174.129102][ T6463] CIFS: Attempting to mount //172.20.20.170/share [ 174.147645][ T56] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 174.391117][ T6463] CIFS: VFS: cifs_mount failed w/return code = -112 [ 174.570637][ T56] gspca_vc032x: reg_r err -32 [ 174.575508][ T56] vc032x: probe of 2-1:0.0 failed with error -32 [ 175.970362][ T27] usb 2-1: USB disconnect, device number 4 [ 176.426122][ T6472] loop3: detected capacity change from 0 to 32768 [ 176.437551][ T6472] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 176.445948][ T6472] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 177.100698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 178.182645][ T6472] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 4ms [ 178.949734][ T56] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 178.983188][ T56] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 179.226374][ T56] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 243ms [ 179.946537][ T56] gfs2: fsid=syz:syz.0: jid=0: Done [ 180.050559][ T6472] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 180.075442][ T6472] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 180.533638][ T6496] binder: 6494:6496 ioctl c018937d 2000000001c0 returned -22 [ 180.550012][ T6496] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 180.550012][ T6496] [ 180.563902][ T6496] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 180.577006][ T6496] CIFS: Attempting to mount //172.20.20.170/share [ 181.454101][ T6496] CIFS: VFS: cifs_mount failed w/return code = -112 [ 182.960583][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 183.170567][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 183.182315][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.192911][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 183.222762][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.254329][ T27] usb 4-1: config 0 descriptor?? [ 183.282973][ T27] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 183.570887][ T27] gspca_vc032x: reg_r err -32 [ 183.583778][ T27] vc032x: probe of 4-1:0.0 failed with error -32 [ 183.896053][ T6514] loop1: detected capacity change from 0 to 32768 [ 183.941591][ T6514] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 183.949833][ T6514] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 184.124066][ T6514] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 184.133479][ T5784] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 184.140317][ T5784] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 184.222046][ T5784] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 81ms [ 184.242120][ T5784] gfs2: fsid=syz:syz.0: jid=0: Done [ 184.248491][ T6514] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 184.719952][ T27] usb 4-1: USB disconnect, device number 4 [ 184.932442][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 185.831823][ T6541] binder: 6539:6541 ioctl c018937d 2000000001c0 returned -22 [ 185.849700][ T6541] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 185.849700][ T6541] [ 185.863745][ T6541] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 185.877045][ T6541] CIFS: Attempting to mount //172.20.20.170/share [ 186.839229][ T6541] CIFS: VFS: cifs_mount failed w/return code = -112 [ 188.189259][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 189.506877][ T6589] binder: 6584:6589 ioctl c018937d 2000000001c0 returned -22 [ 189.524480][ T6589] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 189.524480][ T6589] [ 189.538532][ T6589] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 189.552099][ T6589] CIFS: Attempting to mount //172.20.20.170/share [ 190.264509][ T6589] CIFS: VFS: cifs_mount failed w/return code = -512 [ 191.299067][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 191.754565][ T6626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 192.098203][ T6628] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.123209][ T6639] binder: 6633:6639 ioctl c018937d 2000000001c0 returned -22 [ 193.141843][ T6639] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 193.141843][ T6639] [ 193.155821][ T6639] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 193.168830][ T6639] CIFS: Attempting to mount //172.20.20.170/share [ 193.904449][ T6639] CIFS: VFS: cifs_mount failed w/return code = -112 [ 194.601043][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.608752][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.430618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 195.992069][ T6676] binder: 6673:6676 ioctl c018937d 2000000001c0 returned -22 [ 196.016532][ T6676] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 196.016532][ T6676] [ 196.030832][ T6676] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 196.044737][ T6676] CIFS: Attempting to mount //172.20.20.170/share [ 196.743686][ T6676] CIFS: VFS: cifs_mount failed w/return code = -112 [ 197.241927][ T6683] loop0: detected capacity change from 0 to 40427 [ 197.255331][ T6683] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 197.263431][ T6683] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 197.323480][ T6683] F2FS-fs (loop0): Found nat_bits in checkpoint [ 197.400210][ T6683] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 197.407628][ T6683] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.547309][ T6683] syz.0.269: attempt to access beyond end of device [ 197.547309][ T6683] loop0: rw=2049, sector=77824, nr_sectors = 280 limit=40427 [ 197.601699][ T6683] syz.0.269: attempt to access beyond end of device [ 197.601699][ T6683] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 199.364489][ T3485] kworker/u4:10: attempt to access beyond end of device [ 199.364489][ T3485] loop0: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 199.451863][ T5774] syz-executor: attempt to access beyond end of device [ 199.451863][ T5774] loop0: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 199.478461][ T5774] F2FS-fs (loop0): Issue discard(5637, 5637, 1) failed, ret: -5 [ 199.567488][ T6719] binder: 6716:6719 ioctl c018937d 2000000001c0 returned -22 [ 199.584069][ T6719] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 199.584069][ T6719] [ 199.598049][ T6719] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 199.619458][ T6719] CIFS: Attempting to mount //172.20.20.170/share [ 200.357752][ T6719] CIFS: VFS: cifs_mount failed w/return code = -112 [ 200.595450][ T6727] bond_slave_0: entered promiscuous mode [ 200.602373][ T6727] bond_slave_1: entered promiscuous mode [ 200.632223][ T6727] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 200.689909][ T6727] bond1: (slave macvlan2): making interface the new active one [ 200.704011][ T6727] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 200.709023][ T28] audit: type=1326 audit(1791671912.083:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 200.735396][ T6727] syz.2.279 (6727) used greatest stack depth: 20008 bytes left [ 200.779447][ T28] audit: type=1326 audit(1791671912.113:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 200.813862][ T28] audit: type=1326 audit(1791671912.123:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 200.844027][ T28] audit: type=1326 audit(1791671912.133:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 200.876931][ T28] audit: type=1326 audit(1791671912.133:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 200.925157][ T28] audit: type=1326 audit(1791671912.133:7): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 200.986714][ T28] audit: type=1326 audit(1791671912.133:8): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 201.055400][ T28] audit: type=1326 audit(1791671912.133:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 201.119676][ T28] audit: type=1326 audit(1791671912.133:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 202.122187][ T5784] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 202.600828][ T5784] usb 1-1: Using ep0 maxpacket: 32 [ 202.608487][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.628037][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.645189][ T5784] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 202.668513][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.681738][ T5784] usb 1-1: config 0 descriptor?? [ 202.697433][ T5784] hub 1-1:0.0: USB hub found [ 202.861806][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 202.909745][ T6757] binder: 6755:6757 ioctl c018937d 2000000001c0 returned -22 [ 202.929128][ T6757] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 202.929128][ T6757] [ 202.943154][ T6757] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 202.956175][ T6757] CIFS: Attempting to mount //172.20.20.170/share [ 202.972014][ T5784] hub 1-1:0.0: 1 port detected [ 203.106775][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.133474][ T5784] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 203.160789][ T5784] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 203.232675][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 203.369220][ T8] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 203.392107][ T5784] usbhid 1-1:0.0: can't add hid device: -71 [ 203.456269][ T5784] usbhid: probe of 1-1:0.0 failed with error -71 [ 203.485601][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.705299][ T6757] CIFS: VFS: cifs_mount failed w/return code = -112 [ 203.712366][ T5784] usb 1-1: USB disconnect, device number 3 [ 203.787162][ T8] idmouse 2-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 204.091844][ T6772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.110959][ T6772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.121821][ T6774] FAULT_INJECTION: forcing a failure. [ 204.121821][ T6774] name failslab, interval 1, probability 0, space 0, times 0 [ 204.143045][ T6774] CPU: 0 PID: 6774 Comm: syz.0.293 Not tainted syzkaller #0 [ 204.150436][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.160737][ T6774] Call Trace: [ 204.164085][ T6774] [ 204.167064][ T6774] dump_stack_lvl+0x18c/0x250 [ 204.171848][ T6774] ? show_regs_print_info+0x20/0x20 [ 204.177111][ T6774] ? load_image+0x420/0x420 [ 204.181684][ T6774] ? __lock_acquire+0x7eb0/0x7eb0 [ 204.186773][ T6774] should_fail_ex+0x394/0x4c0 [ 204.191526][ T6774] should_failslab+0x9/0x20 [ 204.196100][ T6774] slab_pre_alloc_hook+0x59/0x300 [ 204.201206][ T6774] ? bpf_prog_alloc+0x3d/0x1a0 [ 204.206038][ T6774] ? bpf_prog_create_from_user+0xa6/0x420 [ 204.212014][ T6774] ? do_seccomp+0x794/0xdc0 [ 204.216580][ T6774] kmem_cache_alloc_node+0x5e/0x310 [ 204.221850][ T6774] ? alloc_vmap_area+0x1b4/0x1e50 [ 204.226931][ T6774] alloc_vmap_area+0x1b4/0x1e50 [ 204.231910][ T6774] ? vm_map_ram+0xcf0/0xcf0 [ 204.236472][ T6774] ? rcu_is_watching+0x15/0xb0 [ 204.241305][ T6774] __get_vm_area_node+0x162/0x370 [ 204.246368][ T6774] __vmalloc_node_range+0x36f/0x1320 [ 204.251695][ T6774] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 204.257379][ T6774] ? __stack_depot_save+0x1f/0x660 [ 204.262590][ T6774] ? kasan_set_track+0x5f/0x70 [ 204.267385][ T6774] ? do_syscall_64+0x55/0xb0 [ 204.272024][ T6774] ? free_vm_area+0x50/0x50 [ 204.276584][ T6774] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 204.282188][ T6774] __vmalloc+0x7a/0x90 [ 204.286307][ T6774] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 204.291887][ T6774] bpf_prog_alloc_no_stats+0x46/0x430 [ 204.297285][ T6774] bpf_prog_alloc+0x3d/0x1a0 [ 204.301892][ T6774] ? bpf_prog_create_from_user+0x81/0x420 [ 204.307721][ T6774] bpf_prog_create_from_user+0xa6/0x420 [ 204.313302][ T6774] ? seccomp_notify_detach+0x220/0x220 [ 204.318805][ T6774] do_seccomp+0x794/0xdc0 [ 204.323186][ T6774] ? prctl_set_seccomp+0x60/0x60 [ 204.328147][ T6774] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 204.334153][ T6774] ? lockdep_hardirqs_on+0x98/0x150 [ 204.339388][ T6774] do_syscall_64+0x55/0xb0 [ 204.343860][ T6774] ? clear_bhb_loop+0x40/0x90 [ 204.348598][ T6774] ? clear_bhb_loop+0x40/0x90 [ 204.353323][ T6774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.359310][ T6774] RIP: 0033:0x7f198c19e1d9 [ 204.363778][ T6774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.383430][ T6774] RSP: 002b:00007f198d11f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 204.391880][ T6774] RAX: ffffffffffffffda RBX: 00007f198c425fa0 RCX: 00007f198c19e1d9 [ 204.399899][ T6774] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 204.407904][ T6774] RBP: 00007f198c235888 R08: 0000000000000000 R09: 0000000000000000 [ 204.415910][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.423917][ T6774] R13: 00007f198c426038 R14: 00007f198c425fa0 R15: 00007fff13a44cc8 [ 204.431918][ T6774] [ 204.446896][ T6774] syz.0.293: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 204.822908][ T6774] CPU: 0 PID: 6774 Comm: syz.0.293 Not tainted syzkaller #0 [ 204.830275][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.840369][ T6774] Call Trace: [ 204.843691][ T6774] [ 204.846751][ T6774] dump_stack_lvl+0x18c/0x250 [ 204.851482][ T6774] ? show_regs_print_info+0x20/0x20 [ 204.856729][ T6774] ? load_image+0x420/0x420 [ 204.861305][ T6774] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 204.867780][ T6774] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 204.874344][ T6774] warn_alloc+0x246/0x340 [ 204.878735][ T6774] ? slab_free_freelist_hook+0x130/0x1a0 [ 204.884423][ T6774] ? zone_watermark_ok_safe+0x230/0x230 [ 204.890197][ T6774] ? __get_vm_area_node+0x17b/0x370 [ 204.895483][ T6774] ? __get_vm_area_node+0x17b/0x370 [ 204.900751][ T6774] __vmalloc_node_range+0x394/0x1320 [ 204.906101][ T6774] ? __stack_depot_save+0x1f/0x660 [ 204.911275][ T6774] ? kasan_set_track+0x5f/0x70 [ 204.916123][ T6774] ? do_syscall_64+0x55/0xb0 [ 204.920781][ T6774] ? free_vm_area+0x50/0x50 [ 204.925352][ T6774] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 204.931001][ T6774] __vmalloc+0x7a/0x90 [ 204.935133][ T6774] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 204.940728][ T6774] bpf_prog_alloc_no_stats+0x46/0x430 [ 204.946163][ T6774] bpf_prog_alloc+0x3d/0x1a0 [ 204.950805][ T6774] ? bpf_prog_create_from_user+0x81/0x420 [ 204.956586][ T6774] bpf_prog_create_from_user+0xa6/0x420 [ 204.962187][ T6774] ? seccomp_notify_detach+0x220/0x220 [ 204.967803][ T6774] do_seccomp+0x794/0xdc0 [ 204.972204][ T6774] ? prctl_set_seccomp+0x60/0x60 [ 204.977204][ T6774] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 204.983252][ T6774] ? lockdep_hardirqs_on+0x98/0x150 [ 204.988541][ T6774] do_syscall_64+0x55/0xb0 [ 204.993015][ T6774] ? clear_bhb_loop+0x40/0x90 [ 204.997743][ T6774] ? clear_bhb_loop+0x40/0x90 [ 205.002821][ T6774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.008792][ T6774] RIP: 0033:0x7f198c19e1d9 [ 205.013280][ T6774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.032951][ T6774] RSP: 002b:00007f198d11f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 205.041435][ T6774] RAX: ffffffffffffffda RBX: 00007f198c425fa0 RCX: 00007f198c19e1d9 [ 205.049466][ T6774] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 205.057499][ T6774] RBP: 00007f198c235888 R08: 0000000000000000 R09: 0000000000000000 [ 205.065527][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.073552][ T6774] R13: 00007f198c426038 R14: 00007f198c425fa0 R15: 00007fff13a44cc8 [ 205.081597][ T6774] [ 205.214753][ T6774] Mem-Info: [ 205.243385][ T5784] usb 2-1: USB disconnect, device number 5 [ 205.261657][ T6774] active_anon:8417 inactive_anon:0 isolated_anon:0 [ 205.261657][ T6774] active_file:16542 inactive_file:39996 isolated_file:0 [ 205.261657][ T6774] unevictable:768 dirty:48 writeback:0 [ 205.261657][ T6774] slab_reclaimable:10627 slab_unreclaimable:90415 [ 205.261657][ T6774] mapped:27517 shmem:4234 pagetables:580 [ 205.261657][ T6774] sec_pagetables:0 bounce:0 [ 205.261657][ T6774] kernel_misc_reclaimable:0 [ 205.261657][ T6774] free:1174567 free_pcp:11100 free_cma:0 [ 205.331077][ T6774] Node 0 active_anon:33668kB inactive_anon:0kB active_file:66168kB inactive_file:159780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110068kB dirty:192kB writeback:0kB shmem:15400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10612kB pagetables:2320kB sec_pagetables:0kB all_unreclaimable? no [ 205.374804][ T6774] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 205.404372][ T5784] idmouse 2-1:1.0: disconnected [ 205.500063][ T6774] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.780210][ T6774] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 205.800009][ T6774] Node 0 DMA32 free:1130212kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:22028kB inactive_anon:0kB active_file:66168kB inactive_file:158700kB unevictable:1536kB writepending:192kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:34424kB local_pcp:13920kB free_cma:0kB [ 205.836034][ T6774] lowmem_reserve[]: 0 0 1 1 1 [ 205.841432][ T6774] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:1080kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 205.891569][ T6774] lowmem_reserve[]: 0 0 0 0 0 [ 205.896457][ T6774] Node 1 Normal free:3552572kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22280kB local_pcp:11232kB free_cma:0kB [ 206.040979][ T6774] lowmem_reserve[]: 0 0 0 0 0 [ 206.063081][ T6774] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 206.156789][ T6774] Node 0 DMA32: 912*4kB (UME) 1061*8kB (UME) 861*16kB (UME) 406*32kB (UME) 472*64kB (UME) 94*128kB (UME) 80*256kB (UM) 54*512kB (UME) 35*1024kB (UME) 21*2048kB (UME) 224*4096kB (M) = 1125624kB [ 206.311201][ T6774] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 206.409945][ T6774] Node 1 Normal: 231*4kB (UE) 52*8kB (UME) 36*16kB (UME) 70*32kB (UME) 20*64kB (UE) 6*128kB (UME) 1*256kB (U) 2*512kB (ME) 2*1024kB (UE) 2*2048kB (UE) 864*4096kB (M) = 3552572kB [ 206.576501][ T6774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.669786][ T6774] Node 0 hugepages_total=167 hugepages_free=167 hugepages_surp=0 hugepages_size=2048kB [ 206.720723][ T6774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.730388][ T6774] Node 1 hugepages_total=167 hugepages_free=167 hugepages_surp=0 hugepages_size=2048kB [ 206.740363][ T6774] 58323 total pagecache pages [ 206.745225][ T6774] 0 pages in swap cache [ 206.749428][ T6774] Free swap = 124996kB [ 206.753796][ T6774] Total swap = 124996kB [ 206.758002][ T6774] 2097051 pages RAM [ 206.761960][ T6774] 0 pages HighMem/MovableOnly [ 206.766813][ T6774] 421118 pages reserved [ 206.771046][ T6774] 0 pages cma reserved [ 207.150033][ T6798] binder: 6791:6798 ioctl c018937d 2000000001c0 returned -22 [ 207.167440][ T6798] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 207.167440][ T6798] [ 207.181389][ T6798] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 208.221683][ T6798] CIFS: Attempting to mount //172.20.20.170/share [ 208.367813][ T6798] CIFS: VFS: error -4 create cifsd thread [ 208.409347][ T6798] CIFS: VFS: cifs_mount failed w/return code = -4 [ 209.598821][ T6817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.306'. [ 210.719708][ T6830] binder: 6826:6830 ioctl c018937d 2000000001c0 returned -22 [ 210.738290][ T6830] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 210.738290][ T6830] [ 210.752248][ T6830] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 210.765428][ T6830] CIFS: Attempting to mount //172.20.20.170/share [ 210.987124][ T6829] loop3: detected capacity change from 0 to 128 [ 211.059610][ T6830] CIFS: VFS: cifs_mount failed w/return code = -512 [ 211.101591][ T6829] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 211.126058][ T6829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.973961][ T6829] loop3: detected capacity change from 0 to 16 [ 212.060736][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 212.060750][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 212.061085][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 212.147323][ T6829] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 800, please upgrade kernel [ 212.501461][ T5817] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 212.670650][ T5817] usb 3-1: device descriptor read/64, error -71 [ 212.701750][ T6861] FAULT_INJECTION: forcing a failure. [ 212.701750][ T6861] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 212.740544][ T6861] CPU: 1 PID: 6861 Comm: syz.1.320 Not tainted syzkaller #0 [ 212.747922][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 212.760025][ T6861] Call Trace: [ 212.763352][ T6861] [ 212.766415][ T6861] dump_stack_lvl+0x18c/0x250 [ 212.771150][ T6861] ? show_regs_print_info+0x20/0x20 [ 212.776484][ T6861] ? load_image+0x420/0x420 [ 212.781053][ T6861] ? __might_fault+0xaa/0x120 [ 212.785786][ T6861] ? __lock_acquire+0x7eb0/0x7eb0 [ 212.790868][ T6861] ? __lock_acquire+0x7eb0/0x7eb0 [ 212.795949][ T6861] should_fail_ex+0x394/0x4c0 [ 212.800690][ T6861] set_fd_set+0x3a/0x90 [ 212.804952][ T6861] core_sys_select+0x938/0xa80 [ 212.805006][ T6861] ? poll_select_set_timeout+0x150/0x150 [ 212.805064][ T6861] ? sigprocmask+0x190/0x190 [ 212.805099][ T6861] __se_sys_pselect6+0x272/0x340 [ 212.805140][ T6861] ? __x64_sys_pselect6+0xf0/0xf0 [ 212.805179][ T6861] ? __x64_sys_pselect6+0x21/0xf0 [ 212.805214][ T6861] do_syscall_64+0x55/0xb0 [ 212.805235][ T6861] ? clear_bhb_loop+0x40/0x90 [ 212.805258][ T6861] ? clear_bhb_loop+0x40/0x90 [ 212.805283][ T6861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.805318][ T6861] RIP: 0033:0x7f8f0559e1d9 [ 212.805338][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.805357][ T6861] RSP: 002b:00007f8f064ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 212.805382][ T6861] RAX: ffffffffffffffda RBX: 00007f8f05825fa0 RCX: 00007f8f0559e1d9 [ 212.805399][ T6861] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.805414][ T6861] RBP: 00007f8f05635888 R08: 00002000000008c0 R09: 0000200000000900 [ 212.805430][ T6861] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000000 [ 212.805445][ T6861] R13: 00007f8f05826038 R14: 00007f8f05825fa0 R15: 00007ffe4fe0fd78 [ 212.805478][ T6861] [ 213.161964][ T5817] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 213.450425][ T5817] usb 3-1: device descriptor read/64, error -71 [ 213.612250][ T5817] usb usb3-port1: attempt power cycle [ 214.070545][ T5817] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 214.177791][ T6870] binder: 6868:6870 ioctl c018937d 2000000001c0 returned -22 [ 214.198281][ T6870] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 214.198281][ T6870] [ 214.212683][ T6870] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 214.225941][ T6870] CIFS: Attempting to mount //172.20.20.170/share [ 214.250940][ T5817] usb 3-1: device descriptor read/8, error -71 [ 214.600675][ T5817] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 214.666662][ T6870] CIFS: VFS: cifs_mount failed w/return code = -112 [ 214.721260][ T5817] usb 3-1: device descriptor read/8, error -71 [ 214.967685][ T5817] usb usb3-port1: unable to enumerate USB device [ 215.870230][ T6884] syzkaller0: entered promiscuous mode [ 215.880561][ T6884] syzkaller0: entered allmulticast mode [ 216.146088][ T6897] loop3: detected capacity change from 0 to 512 [ 216.234370][ T6879] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 217.405421][ T6907] binder: 6905:6907 ioctl c018937d 2000000001c0 returned -22 [ 217.419718][ T6907] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 217.419718][ T6907] [ 217.433652][ T6907] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 217.447405][ T6907] CIFS: Attempting to mount //172.20.20.170/share [ 218.060678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 218.196714][ T6907] CIFS: VFS: error -4 create cifsd thread [ 218.308027][ T6907] CIFS: VFS: cifs_mount failed w/return code = -4 [ 219.400605][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 219.571822][ T27] usb 4-1: device descriptor read/64, error -71 [ 219.840609][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 220.000641][ T27] usb 4-1: device descriptor read/64, error -71 [ 220.239080][ T27] usb usb4-port1: attempt power cycle [ 220.731026][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 220.819570][ T27] usb 4-1: device descriptor read/8, error -71 [ 221.280793][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 221.319670][ T27] usb 4-1: device descriptor read/8, error -71 [ 221.656876][ T6943] binder: 6937:6943 ioctl c018937d 2000000001c0 returned -22 [ 221.673233][ T6943] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 221.673233][ T6943] [ 221.687543][ T6943] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 221.701326][ T6943] CIFS: Attempting to mount //172.20.20.170/share [ 221.819525][ T27] usb usb4-port1: unable to enumerate USB device [ 221.879822][ T6943] CIFS: VFS: cifs_mount failed w/return code = -512 [ 222.324176][ T6936] loop2: detected capacity change from 0 to 32768 [ 222.339156][ T6953] loop0: detected capacity change from 0 to 8192 [ 222.373294][ T6936] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 222.388419][ T6936] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.449019][ T6953] loop0: AHDI p1 p2 p3 p4 [ 222.476884][ T6953] loop0: p1 start 2130706432 is beyond EOD, truncated [ 222.503847][ T6953] loop0: p3 start 1761607680 is beyond EOD, truncated [ 223.328155][ T6936] XFS (loop2): Ending clean mount [ 223.489355][ T6936] XFS (loop2): Quotacheck needed: Please wait. [ 223.551810][ T5855] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 223.593918][ T5855] XFS (loop2): Unmount and run xfs_repair [ 223.624998][ T5855] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 223.648377][ T5855] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 223.665114][ T5855] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 223.676007][ T5855] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 223.685313][ T5855] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 223.695464][ T5855] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 223.720488][ T5855] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 223.740047][ T5855] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 223.759496][ T5855] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 223.779061][ T3427] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 223.857198][ T6936] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 223.990254][ T5777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.185714][ T6977] process 'syz.0.355' launched './file0' with NULL argv: empty string added [ 224.461828][ T6983] binder: 6980:6983 ioctl c018937d 2000000001c0 returned -22 [ 224.479681][ T6983] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 224.479681][ T6983] [ 224.493906][ T6983] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 224.507091][ T6983] CIFS: Attempting to mount //172.20.20.170/share [ 224.905025][ T6983] CIFS: VFS: cifs_mount failed w/return code = -112 [ 225.430539][ T5784] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 225.600682][ T5784] usb 4-1: device descriptor read/64, error -71 [ 225.907490][ T7013] loop2: detected capacity change from 0 to 8 [ 225.994798][ T7014] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 225.994798][ T7014] [ 226.008680][ T7014] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 226.022340][ T7014] CIFS: Attempting to mount //172.20.20.170/share [ 226.093300][ T5784] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 226.319311][ T7013] ip_tables: iptables: counters copy to user failed while replacing table [ 226.336197][ T5784] usb 4-1: device descriptor read/64, error -71 [ 226.532056][ T5784] usb usb4-port1: attempt power cycle [ 226.746995][ T7014] CIFS: VFS: cifs_mount failed w/return code = -112 [ 227.000922][ T5784] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 227.061230][ T5784] usb 4-1: device descriptor read/8, error -71 [ 227.341632][ T5784] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 227.399929][ T5784] usb 4-1: device descriptor read/8, error -71 [ 227.532155][ T5784] usb usb4-port1: unable to enumerate USB device [ 227.582517][ T7045] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 227.582517][ T7045] [ 227.597409][ T7045] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 227.611372][ T7045] CIFS: Attempting to mount //172.20.20.170/share [ 228.360357][ T7045] CIFS: VFS: cifs_mount failed w/return code = -112 [ 228.485548][ T7054] loop2: detected capacity change from 0 to 1024 [ 228.512640][ T7054] ======================================================= [ 228.512640][ T7054] WARNING: The mand mount option has been deprecated and [ 228.512640][ T7054] and is ignored by this kernel. Remove the mand [ 228.512640][ T7054] option from the mount to silence this warning. [ 228.512640][ T7054] ======================================================= [ 228.623488][ T7054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 228.655622][ T7054] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.777109][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 229.385070][ T7089] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 229.385070][ T7089] [ 229.399012][ T7089] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 229.412093][ T7089] CIFS: Attempting to mount //172.20.20.170/share [ 229.458586][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 230.114005][ T7089] CIFS: VFS: cifs_mount failed w/return code = -112 [ 230.270632][ T27] usb 2-1: device descriptor read/64, error -71 [ 230.311023][ T7099] loop3: detected capacity change from 0 to 8 [ 230.351133][ T7099] squashfs image failed sanity check [ 230.570727][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 231.550582][ T27] usb 2-1: device descriptor read/64, error -71 [ 231.707388][ T27] usb usb2-port1: attempt power cycle [ 231.836306][ T7117] binder: 7115:7117 ioctl c018937d 2000000001c0 returned -22 [ 231.899421][ T7116] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 231.899421][ T7116] [ 231.920633][ T7116] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 231.949517][ T7116] CIFS: Attempting to mount //172.20.20.170/share [ 232.200660][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 232.341672][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 232.557115][ T27] usb 2-1: device not accepting address 8, error -71 [ 232.564579][ T7116] CIFS: VFS: cifs_mount failed w/return code = -112 [ 232.769340][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.082930][ T23] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 233.346444][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.038586][ T23] wacom 0003:056A:033B.0001: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 234.106053][ T23] wacom 0003:056A:033B.0001: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 234.124150][ T23] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0001/input/input5 [ 234.476948][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 234.499153][ C0] wacom 0003:056A:033B.0001: Event data for report 2 was too short (9 vs 1) [ 234.640573][ T8] usb 1-1: device descriptor read/64, error -71 [ 234.744929][ T23] usb 3-1: USB disconnect, device number 11 [ 235.120157][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 235.293357][ T8] usb 1-1: device descriptor read/64, error -71 [ 235.492149][ T8] usb usb1-port1: attempt power cycle [ 235.835931][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 235.871729][ T7174] binder: 7168:7174 ioctl c018937d 2000000001c0 returned -22 [ 235.925682][ T7174] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 235.925682][ T7174] [ 235.960610][ T7174] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 235.974427][ T7174] CIFS: Attempting to mount //172.20.20.170/share [ 235.990548][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 236.101312][ T8] usb 1-1: device descriptor read/8, error -71 [ 236.536898][ T7174] CIFS: VFS: cifs_mount failed w/return code = -512 [ 237.154928][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 237.221501][ T8] usb 1-1: device descriptor read/8, error -71 [ 237.345870][ T8] usb usb1-port1: unable to enumerate USB device [ 237.389711][ T7200] loop2: detected capacity change from 0 to 1024 [ 237.429558][ T28] audit: type=1326 audit(1791671948.803:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.0.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 237.476036][ T5784] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 237.491538][ T28] audit: type=1326 audit(1791671948.803:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.0.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 237.527146][ T7200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 237.537274][ T28] audit: type=1326 audit(1791671948.803:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.0.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 237.624175][ T7200] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.681542][ T28] audit: type=1326 audit(1791671948.803:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.0.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 237.808034][ T5784] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.938457][ T5784] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 238.022100][ T28] audit: type=1326 audit(1791671948.803:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.0.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 238.108368][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.593717][ T28] audit: type=1326 audit(1791671948.803:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.0.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 239.249450][ T28] audit: type=1326 audit(1791671948.803:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.0.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 239.688876][ T5784] wacom 0003:056A:033B.0002: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 239.832999][ T28] audit: type=1326 audit(1791671948.803:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.0.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 239.993104][ T5784] wacom 0003:056A:033B.0002: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 240.215937][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 240.276637][ T28] audit: type=1326 audit(1791671948.803:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.0.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 240.309144][ T5784] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0002/input/input8 [ 240.423939][ T28] audit: type=1326 audit(1791671948.803:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.0.426" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f198c19e1d9 code=0x7ffc0000 [ 240.597756][ T5784] usb 2-1: USB disconnect, device number 10 [ 240.716699][ T7217] loop2: detected capacity change from 0 to 256 [ 240.930874][ T7220] binder: 7218:7220 ioctl c018937d 2000000001c0 returned -22 [ 241.183564][ T7222] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 241.183564][ T7222] [ 241.199685][ T7222] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 241.213300][ T7222] CIFS: Attempting to mount //172.20.20.170/share [ 241.348750][ T7229] loop3: detected capacity change from 0 to 64 [ 241.388862][ T7229] hfs: unable to change codepage [ 241.396449][ T7229] hfs: unable to parse mount options [ 241.565003][ T7234] FAULT_INJECTION: forcing a failure. [ 241.565003][ T7234] name failslab, interval 1, probability 0, space 0, times 0 [ 241.580370][ T7234] CPU: 0 PID: 7234 Comm: syz.1.433 Not tainted syzkaller #0 [ 241.587734][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 241.597850][ T7234] Call Trace: [ 241.601185][ T7234] [ 241.604170][ T7234] dump_stack_lvl+0x18c/0x250 [ 241.608914][ T7234] ? show_regs_print_info+0x20/0x20 [ 241.614172][ T7234] ? load_image+0x420/0x420 [ 241.618743][ T7234] ? __might_sleep+0xe0/0xe0 [ 241.623516][ T7234] ? __lock_acquire+0x7eb0/0x7eb0 [ 241.628604][ T7234] should_fail_ex+0x394/0x4c0 [ 241.633334][ T7234] should_failslab+0x9/0x20 [ 241.637899][ T7234] slab_pre_alloc_hook+0x59/0x300 [ 241.642977][ T7234] ? mas_next_slot+0x910/0x980 [ 241.647810][ T7234] kmem_cache_alloc+0x5a/0x2c0 [ 241.652645][ T7234] ? vm_area_dup+0x27/0x270 [ 241.657204][ T7234] vm_area_dup+0x27/0x270 [ 241.661587][ T7234] __split_vma+0x1a8/0xc20 [ 241.666069][ T7234] ? mmap_write_unlock+0x160/0x160 [ 241.668839][ T7222] CIFS: VFS: cifs_mount failed w/return code = -112 [ 241.671226][ T7234] ? split_vma+0x8f/0x110 [ 241.671342][ T7234] userfaultfd_ioctl+0x3feb/0x4a60 [ 241.671390][ T7234] ? userfaultfd_poll+0x1c0/0x1c0 [ 241.671414][ T7234] ? do_vfs_ioctl+0x156c/0x1cc0 [ 241.671448][ T7234] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 241.703276][ T7234] ? tomoyo_path_number_perm+0x217/0x5e0 [ 241.708938][ T7234] ? __lock_acquire+0x7eb0/0x7eb0 [ 241.713998][ T7234] ? slab_free_freelist_hook+0x130/0x1a0 [ 241.719655][ T7234] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 241.725313][ T7234] ? __kmem_cache_free+0xba/0x1f0 [ 241.730393][ T7234] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 241.736175][ T7234] ? tomoyo_path_number_perm+0x217/0x5e0 [ 241.741859][ T7234] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 241.747441][ T7234] ? bpf_lsm_file_ioctl+0x9/0x10 [ 241.752416][ T7234] ? security_file_ioctl+0x80/0xa0 [ 241.757574][ T7234] ? userfaultfd_poll+0x1c0/0x1c0 [ 241.762633][ T7234] __se_sys_ioctl+0xfd/0x170 [ 241.767256][ T7234] do_syscall_64+0x55/0xb0 [ 241.771707][ T7234] ? clear_bhb_loop+0x40/0x90 [ 241.776402][ T7234] ? clear_bhb_loop+0x40/0x90 [ 241.781105][ T7234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.787023][ T7234] RIP: 0033:0x7f8f0559e1d9 [ 241.790902][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 241.791447][ T7234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.818760][ T7234] RSP: 002b:00007f8f064ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.827196][ T7234] RAX: ffffffffffffffda RBX: 00007f8f05825fa0 RCX: 00007f8f0559e1d9 [ 241.835191][ T7234] RDX: 00002000000001c0 RSI: 00000000c020aa00 RDI: 0000000000000004 [ 241.843184][ T7234] RBP: 00007f8f05635888 R08: 0000000000000000 R09: 0000000000000000 [ 241.851173][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.859158][ T7234] R13: 00007f8f05826038 R14: 00007f8f05825fa0 R15: 00007ffe4fe0fd78 [ 241.867161][ T7234] [ 242.037106][ T7242] FAULT_INJECTION: forcing a failure. [ 242.037106][ T7242] name failslab, interval 1, probability 0, space 0, times 0 [ 242.043376][ T23] usb 3-1: device descriptor read/64, error -71 [ 242.051221][ T7242] CPU: 0 PID: 7242 Comm: syz.1.437 Not tainted syzkaller #0 [ 242.063753][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 242.073946][ T7242] Call Trace: [ 242.077269][ T7242] [ 242.080243][ T7242] dump_stack_lvl+0x18c/0x250 [ 242.084984][ T7242] ? show_regs_print_info+0x20/0x20 [ 242.090266][ T7242] ? load_image+0x420/0x420 [ 242.094840][ T7242] ? __lock_acquire+0x7eb0/0x7eb0 [ 242.099931][ T7242] should_fail_ex+0x394/0x4c0 [ 242.104676][ T7242] should_failslab+0x9/0x20 [ 242.109245][ T7242] slab_pre_alloc_hook+0x59/0x300 [ 242.114353][ T7242] ? lookup_mnt+0x580/0x580 [ 242.118906][ T7242] ? get_mountpoint+0x205/0x440 [ 242.123807][ T7242] __kmem_cache_alloc_node+0x53/0x250 [ 242.129245][ T7242] ? get_mountpoint+0x205/0x440 [ 242.134150][ T7242] kmalloc_trace+0x2a/0xe0 [ 242.138627][ T7242] get_mountpoint+0x205/0x440 [ 242.143351][ T7242] do_lock_mount+0x441/0x530 [ 242.148003][ T7242] ? mnt_warn_timestamp_expiry+0x2c0/0x2c0 [ 242.153844][ T7242] ? do_raw_spin_unlock+0x121/0x230 [ 242.159088][ T7242] ? ktime_get_real_seconds+0x9/0x20 [ 242.164415][ T7242] ? mnt_warn_timestamp_expiry+0x12f/0x2c0 [ 242.170273][ T7242] do_new_mount+0x385/0xa40 [ 242.174820][ T7242] __se_sys_mount+0x2e7/0x3d0 [ 242.179535][ T7242] ? __x64_sys_mount+0xc0/0xc0 [ 242.184331][ T7242] ? lockdep_hardirqs_on+0x98/0x150 [ 242.189560][ T7242] ? __x64_sys_mount+0x20/0xc0 [ 242.194387][ T7242] do_syscall_64+0x55/0xb0 [ 242.198834][ T7242] ? clear_bhb_loop+0x40/0x90 [ 242.203548][ T7242] ? clear_bhb_loop+0x40/0x90 [ 242.208262][ T7242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.214199][ T7242] RIP: 0033:0x7f8f0559e1d9 [ 242.218651][ T7242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.238305][ T7242] RSP: 002b:00007f8f064ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 242.246765][ T7242] RAX: ffffffffffffffda RBX: 00007f8f05825fa0 RCX: 00007f8f0559e1d9 [ 242.254801][ T7242] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000 [ 242.262805][ T7242] RBP: 00007f8f05635888 R08: 0000000000000000 R09: 0000000000000000 [ 242.270804][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.278806][ T7242] R13: 00007f8f05826038 R14: 00007f8f05825fa0 R15: 00007ffe4fe0fd78 [ 242.286828][ T7242] [ 242.450629][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 242.728113][ T7253] loop0: detected capacity change from 0 to 256 [ 242.748208][ T23] usb 3-1: device descriptor read/64, error -71 [ 242.874664][ T6879] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.881826][ T23] usb usb3-port1: attempt power cycle [ 243.772713][ T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 243.831484][ T23] usb 3-1: device descriptor read/8, error -71 [ 244.114113][ T23] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 244.122196][ T5818] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 244.145511][ T7269] binder: 7267:7269 ioctl c018937d 2000000001c0 returned -22 [ 244.161230][ T23] usb 3-1: device descriptor read/8, error -71 [ 244.260726][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 244.270328][ T7269] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 244.270328][ T7269] [ 244.285119][ T23] usb usb3-port1: unable to enumerate USB device [ 244.292312][ T7269] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 244.315707][ T7269] CIFS: Attempting to mount //172.20.20.170/share [ 244.334360][ T5818] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.356812][ T5818] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 244.372829][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.445074][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.455487][ T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 244.466376][ T27] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 244.476189][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.512248][ T27] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 244.815331][ T7279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.832987][ T5818] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 244.849431][ T7279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.861489][ T5818] wacom 0003:056A:033B.0003: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 244.919094][ T7269] CIFS: VFS: cifs_mount failed w/return code = -112 [ 244.934531][ T5818] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0003/input/input11 [ 245.281633][ C0] wacom 0003:056A:033B.0003: Event data for report 2 was too short (9 vs 1) [ 245.560829][ T27] usb 4-1: USB disconnect, device number 13 [ 246.622459][ T9] usb 1-1: USB disconnect, device number 8 [ 246.647954][ T9] idmouse 1-1:1.0: disconnected [ 246.654929][ T5855] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 246.976798][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 246.976813][ T28] audit: type=1326 audit(1791671958.353:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.458" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb9e1d9 code=0x7ffc0000 [ 247.026953][ T28] audit: type=1326 audit(1791671958.353:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.458" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb9e1d9 code=0x7ffc0000 [ 247.051769][ T5855] usb 2-1: Using ep0 maxpacket: 8 [ 247.057484][ T28] audit: type=1326 audit(1791671958.383:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.458" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb9e1d9 code=0x7ffc0000 [ 247.082417][ T5855] usb 2-1: no configurations [ 247.087088][ T5855] usb 2-1: can't read configurations, error -22 [ 247.126820][ T28] audit: type=1326 audit(1791671958.383:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.458" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb9e1d9 code=0x7ffc0000 [ 247.216734][ T7306] loop3: detected capacity change from 0 to 8 [ 248.450865][ T7298] sched: RT throttling activated [ 248.808769][ T5855] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 248.967641][ T28] audit: type=1326 audit(1791671958.383:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.458" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb9e1d9 code=0x7ffc0000 [ 249.215342][ T5855] usb 2-1: Using ep0 maxpacket: 8 [ 249.436155][ T28] audit: type=1326 audit(1791671958.383:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.458" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f710bb9e1d9 code=0x7ffc0000 [ 250.046322][ T5855] usb 2-1: device descriptor read/all, error -71 [ 250.050925][ T28] audit: type=1326 audit(1791671958.383:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.458" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb9e1d9 code=0x7ffc0000 [ 250.078211][ T28] audit: type=1326 audit(1791671958.383:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.458" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb9e1d9 code=0x7ffc0000 [ 250.103699][ T28] audit: type=1326 audit(1791671958.383:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.458" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710bb9e1d9 code=0x7ffc0000 [ 250.128630][ T28] audit: type=1326 audit(1791671958.383:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.458" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f710bb9e1d9 code=0x7ffc0000 [ 250.141204][ T5855] usb usb2-port1: attempt power cycle [ 250.289422][ T7320] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 250.310739][ T7321] binder: 7315:7321 ioctl c018937d 2000000001c0 returned -22 [ 250.337877][ T7319] loop1: detected capacity change from 0 to 512 [ 250.361393][ T7316] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 250.361393][ T7316] [ 250.398903][ T7316] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 250.422772][ T7316] CIFS: Attempting to mount //172.20.20.170/share [ 251.028994][ T7316] CIFS: VFS: cifs_mount failed w/return code = -112 [ 251.140603][ T5855] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 251.173074][ T5855] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.194359][ T5855] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 251.211306][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.283282][ T7346] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 251.323432][ T23] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 251.523076][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 251.532621][ T23] usb 3-1: no configurations [ 251.549500][ T23] usb 3-1: can't read configurations, error -22 [ 251.664593][ T5855] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 251.698006][ T5855] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 251.732405][ T23] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 251.742222][ T5855] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0004/input/input14 [ 251.960908][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 251.983987][ T23] usb 3-1: no configurations [ 251.997812][ T23] usb 3-1: can't read configurations, error -22 [ 252.030056][ T23] usb usb3-port1: attempt power cycle [ 252.111037][ T5855] usb 2-1: USB disconnect, device number 13 [ 252.481046][ T23] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 252.533397][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 252.543086][ T23] usb 3-1: no configurations [ 252.547720][ T23] usb 3-1: can't read configurations, error -22 [ 252.742366][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 252.886811][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 252.955697][ T23] usb 3-1: no configurations [ 253.014803][ T23] usb 3-1: can't read configurations, error -22 [ 253.098039][ T23] usb usb3-port1: unable to enumerate USB device [ 254.541010][ T3485] ------------[ cut here ]------------ [ 254.546973][ T3485] WARNING: CPU: 1 PID: 3485 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 254.558152][ T3485] Modules linked in: [ 254.562138][ T3485] CPU: 1 PID: 3485 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 254.569846][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 254.580069][ T3485] Workqueue: phy3 ieee80211_csa_finalize_work [ 254.586459][ T3485] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 254.593932][ T3485] Code: 48 89 df e8 54 1b cb f7 e9 d6 fc ff ff e8 3a 3a 72 f7 eb 24 e8 33 3a 72 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 22 3a 72 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 14 3a 72 f7 48 8b 7c 24 08 4c 8b 74 [ 254.613844][ T3485] RSP: 0018:ffffc9000cc579c0 EFLAGS: 00010293 [ 254.620538][ C0] ------------[ cut here ]------------ [ 254.620576][ C0] WARNING: CPU: 0 PID: 7367 at net/mac80211/tx.c:5057 __ieee80211_beacon_get+0x1141/0x1520 [ 254.620619][ C0] Modules linked in: [ 254.620636][ C0] CPU: 0 PID: 7367 Comm: syz.3.477 Not tainted syzkaller #0 [ 254.626107][ T3485] RAX: ffffffff8a155282 RBX: 0000000000000001 RCX: ffff88802f4fda00 [ 254.636425][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 254.636441][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 254.636474][ C0] Code: f7 4c 89 ef e8 d0 2c b5 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 1b e8 76 f7 0f 0b e9 61 f8 ff ff e8 0f e8 76 f7 <0f> 0b e9 85 fb ff ff e8 03 e8 76 f7 48 c7 c7 40 92 45 8f 4c 89 e6 [ 254.636490][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 254.636509][ C0] RAX: ffffffff8a10a8a1 RBX: dffffc0000000000 RCX: ffff888040983c00 [ 254.636525][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.636538][ C0] RBP: 0000000000000000 R08: ffff888040983c00 R09: 0000000000000003 [ 254.636553][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805bf46440 [ 254.636568][ C0] R13: ffff88801e7d2824 R14: ffff88805bf46930 R15: ffff88801e7d2800 [ 254.636585][ C0] FS: 00007fed7f45d6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 254.636605][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.640541][ T3485] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 254.647926][ C0] CR2: 0000200000001000 CR3: 000000002496b000 CR4: 00000000003506f0 [ 254.655940][ T3485] RBP: dffffc0000000000 R08: ffff88805bf4562f R09: 1ffff1100b7e8ac5 [ 254.666044][ C0] Call Trace: [ 254.666057][ C0] [ 254.666067][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 254.666110][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 254.666142][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 254.666178][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 254.666217][ C0] __iterate_interfaces+0x225/0x4c0 [ 254.666249][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 254.666280][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 254.666323][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 254.672815][ T3485] R10: dffffc0000000000 R11: ffffed100b7e8ac6 R12: 0000000000000001 [ 254.692420][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 254.692474][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 254.692502][ C0] ? hw_scan_work+0xf10/0xf10 [ 254.692530][ C0] __hrtimer_run_queues+0x525/0xc10 [ 254.698614][ T3485] R13: ffff88805bf46659 R14: ffff88801cb0ad48 R15: ffff88802d69f400 [ 254.706680][ C0] ? hrtimer_interrupt+0x980/0x980 [ 254.714871][ T3485] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 254.722730][ C0] ? read_tsc+0x9/0x20 [ 254.722770][ C0] hrtimer_run_softirq+0x177/0x290 [ 254.722802][ C0] handle_softirqs+0x27d/0x820 [ 254.722824][ C0] ? read_tsc+0x9/0x20 [ 254.722846][ C0] ? ktime_get+0x24b/0x280 [ 254.722877][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 254.722903][ C0] ? do_softirq+0x1a0/0x1a0 [ 254.722932][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 254.722966][ C0] __irq_exit_rcu+0xd3/0x190 [ 254.722990][ C0] ? irq_exit_rcu+0x20/0x20 [ 254.723023][ C0] irq_exit_rcu+0x9/0x20 [ 254.723043][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 254.723072][ C0] [ 254.723080][ C0] [ 254.723090][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 254.723115][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 254.723150][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 ab 35 c0 f6 65 8b 05 1c f3 66 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 254.723168][ C0] RSP: 0018:ffffc9000bbe77c0 EFLAGS: 00000206 [ 254.723191][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 7a9ae7d250994800 [ 254.723208][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacfe0 RDI: 0000000000000001 [ 254.723224][ C0] RBP: ffffc9000bbe7850 R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d [ 254.723241][ C0] R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: dffffc0000000000 [ 254.723258][ C0] R13: ffff8880b8c295c0 R14: ffff8880b8c295c0 R15: 1ffff9200177cef8 [ 254.723296][ C0] ? _raw_spin_unlock+0x40/0x40 [ 254.723326][ C0] ? rcu_is_watching+0x15/0xb0 [ 254.723379][ C0] __mod_timer+0x9b0/0xd60 [ 254.731699][ T3485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.739656][ C0] schedule_timeout+0x183/0x2d0 [ 254.748833][ T3485] CR2: 00007fed7e5eb8c0 CR3: 000000002496b000 CR4: 00000000003506e0 [ 254.755750][ C0] ? console_conditional_schedule+0x40/0x40 [ 254.763928][ T3485] Call Trace: [ 254.771814][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 254.779830][ T3485] [ 254.783202][ C0] ? update_process_times+0x1b0/0x1b0 [ 254.786101][ T3485] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 254.791691][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 254.797155][ T3485] ieee80211_csa_finalize+0x571/0xeb0 [ 254.803945][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 254.803972][ C0] ? snd_rawmidi_write+0x371/0xb90 [ 254.809537][ T3485] ? mutex_lock_nested+0x20/0x20 [ 254.814777][ C0] snd_rawmidi_write+0x3bd/0xb90 [ 254.814827][ C0] ? snd_rawmidi_read+0x6d0/0x6d0 [ 254.821150][ T3485] ? lockdep_hardirqs_on+0x98/0x150 [ 254.828395][ C0] ? do_task_dead+0xd0/0xd0 [ 254.828426][ C0] ? end_current_label_crit_section+0x149/0x170 [ 254.828456][ C0] ? common_file_perm+0x198/0x1f0 [ 254.828486][ C0] ? fsnotify_perm+0x5d/0x5e0 [ 254.828515][ C0] ? security_file_permission+0x79/0xa0 [ 254.828551][ C0] do_iter_write+0x4e5/0xc50 [ 254.828595][ C0] ? snd_rawmidi_read+0x6d0/0x6d0 [ 254.828630][ C0] ? vfs_iter_write+0xa0/0xa0 [ 254.828661][ C0] ? __import_iovec+0x3fa/0x850 [ 254.828704][ C0] ? import_iovec+0x73/0xa0 [ 254.828742][ C0] do_writev+0x27f/0x480 [ 254.828771][ C0] ? do_readv+0x460/0x460 [ 254.828811][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 254.828843][ C0] ? lock_chain_count+0x20/0x20 [ 254.828877][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 254.828908][ C0] do_syscall_64+0x55/0xb0 [ 254.828929][ C0] ? clear_bhb_loop+0x40/0x90 [ 254.828952][ C0] ? clear_bhb_loop+0x40/0x90 [ 254.828977][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.835540][ T3485] ? ieee80211_csa_finalize_work+0x140/0x140 [ 254.843298][ C0] RIP: 0033:0x7fed7e59e1d9 [ 254.843321][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.850361][ T3485] ? read_lock_is_recursive+0x20/0x20 [ 254.855670][ C0] RSP: 002b:00007fed7f45d028 EFLAGS: 00000246 [ 254.860351][ T3485] ieee80211_csa_finalize_work+0xf6/0x140 [ 254.865631][ C0] ORIG_RAX: 0000000000000014 [ 254.873676][ T3485] ? process_scheduled_works+0x975/0x1600 [ 254.878674][ C0] RAX: ffffffffffffffda RBX: 00007fed7e825fa0 RCX: 00007fed7e59e1d9 [ 254.887654][ T3485] process_scheduled_works+0xa60/0x1600 [ 254.891761][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 254.896985][ T3485] ? worker_attach_to_pool+0x370/0x370 [ 254.901679][ C0] RBP: 00007fed7e635888 R08: 0000000000000000 R09: 0000000000000000 [ 254.901696][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.901711][ C0] R13: 00007fed7e826038 R14: 00007fed7e825fa0 R15: 00007fff62370f98 [ 254.901748][ C0] [ 254.901760][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 254.901772][ C0] CPU: 0 PID: 7367 Comm: syz.3.477 Not tainted syzkaller #0 [ 254.901844][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 254.901881][ C0] Call Trace: [ 254.901904][ C0] [ 254.901924][ C0] dump_stack_lvl+0x18c/0x250 [ 254.902002][ C0] ? show_regs_print_info+0x20/0x20 [ 254.902056][ C0] ? load_image+0x420/0x420 [ 254.902165][ C0] panic+0x2ca/0x720 [ 254.902248][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 254.902382][ C0] __warn+0x2e0/0x470 [ 254.902446][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 254.902521][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 254.902604][ C0] report_bug+0x2be/0x4f0 [ 254.902659][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 254.902733][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 254.902796][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 254.902862][ C0] handle_bug+0xcf/0x120 [ 254.902917][ C0] exc_invalid_op+0x1a/0x50 [ 254.902969][ C0] asm_exc_invalid_op+0x1a/0x20 [ 254.903021][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 254.903095][ C0] Code: f7 4c 89 ef e8 d0 2c b5 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 1b e8 76 f7 0f 0b e9 61 f8 ff ff e8 0f e8 76 f7 <0f> 0b e9 85 fb ff ff e8 03 e8 76 f7 48 c7 c7 40 92 45 8f 4c 89 e6 [ 254.903132][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 254.903176][ C0] RAX: ffffffff8a10a8a1 RBX: dffffc0000000000 RCX: ffff888040983c00 [ 254.903218][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.903264][ C0] RBP: 0000000000000000 R08: ffff888040983c00 R09: 0000000000000003 [ 254.903311][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805bf46440 [ 254.903356][ C0] R13: ffff88801e7d2824 R14: ffff88805bf46930 R15: ffff88801e7d2800 [ 254.903419][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 254.903503][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 254.903568][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 254.903666][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 254.903741][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 254.903845][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 254.903943][ C0] __iterate_interfaces+0x225/0x4c0 [ 254.904021][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 254.904101][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 254.904185][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 254.904257][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 254.904352][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 254.904416][ C0] ? hw_scan_work+0xf10/0xf10 [ 254.904512][ C0] __hrtimer_run_queues+0x525/0xc10 [ 254.904644][ C0] ? hrtimer_interrupt+0x980/0x980 [ 254.904717][ C0] ? read_tsc+0x9/0x20 [ 254.904802][ C0] hrtimer_run_softirq+0x177/0x290 [ 254.904884][ C0] handle_softirqs+0x27d/0x820 [ 254.904936][ C0] ? read_tsc+0x9/0x20 [ 254.904990][ C0] ? ktime_get+0x24b/0x280 [ 254.905058][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 254.905132][ C0] ? do_softirq+0x1a0/0x1a0 [ 254.905197][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 254.905281][ C0] __irq_exit_rcu+0xd3/0x190 [ 254.905336][ C0] ? irq_exit_rcu+0x20/0x20 [ 254.905420][ C0] irq_exit_rcu+0x9/0x20 [ 254.905466][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 254.905538][ C0] [ 254.905551][ C0] [ 254.905571][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 254.905635][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 254.905719][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 ab 35 c0 f6 65 8b 05 1c f3 66 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 254.905761][ C0] RSP: 0018:ffffc9000bbe77c0 EFLAGS: 00000206 [ 254.905805][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 7a9ae7d250994800 [ 254.905853][ T3485] ? assign_work+0x3cc/0x5d0 [ 254.905985][ T3485] worker_thread+0xa5e/0xfe0 [ 254.906111][ T3485] ? _raw_spin_unlock+0x40/0x40 [ 254.906178][ T3485] ? __kthread_parkme+0x71/0x1c0 [ 254.906265][ T3485] kthread+0x2fa/0x390 [ 254.906319][ T3485] ? pr_cont_work+0x550/0x550 [ 254.906393][ T3485] ? kthread_blkcg+0xd0/0xd0 [ 254.906458][ T3485] ret_from_fork+0x48/0x80 [ 254.906522][ T3485] ? kthread_blkcg+0xd0/0xd0 [ 254.906579][ T3485] ret_from_fork_asm+0x11/0x20 [ 254.906701][ T3485] [ 254.906741][ T3485] irq event stamp: 1604429 [ 254.906755][ T3485] hardirqs last enabled at (1604431): [] vprintk_store+0x9fb/0xd50 [ 254.906843][ T3485] hardirqs last disabled at (1604432): [] vprintk_store+0x194/0xd50 [ 254.906925][ T3485] softirqs last enabled at (1604402): [] __irq_exit_rcu+0xd3/0x190 [ 254.906992][ T3485] softirqs last disabled at (1604355): [] __irq_exit_rcu+0xd3/0x190 [ 254.907065][ T3485] ---[ end trace 0000000000000000 ]--- [ 255.806983][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacfe0 RDI: 0000000000000001 [ 255.814980][ C0] RBP: ffffc9000bbe7850 R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d [ 255.822972][ C0] R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: dffffc0000000000 [ 255.830953][ C0] R13: ffff8880b8c295c0 R14: ffff8880b8c295c0 R15: 1ffff9200177cef8 [ 255.839058][ C0] ? _raw_spin_unlock+0x40/0x40 [ 255.844074][ C0] ? rcu_is_watching+0x15/0xb0 [ 255.849588][ C0] __mod_timer+0x9b0/0xd60 [ 255.854158][ C0] schedule_timeout+0x183/0x2d0 [ 255.859222][ C0] ? console_conditional_schedule+0x40/0x40 [ 255.865226][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 255.871359][ C0] ? update_process_times+0x1b0/0x1b0 [ 255.876875][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.883257][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 255.888564][ C0] ? snd_rawmidi_write+0x371/0xb90 [ 255.893886][ C0] snd_rawmidi_write+0x3bd/0xb90 [ 255.898847][ C0] ? snd_rawmidi_read+0x6d0/0x6d0 [ 255.903887][ C0] ? do_task_dead+0xd0/0xd0 [ 255.908402][ C0] ? end_current_label_crit_section+0x149/0x170 [ 255.914682][ C0] ? common_file_perm+0x198/0x1f0 [ 255.919738][ C0] ? fsnotify_perm+0x5d/0x5e0 [ 255.924430][ C0] ? security_file_permission+0x79/0xa0 [ 255.929994][ C0] do_iter_write+0x4e5/0xc50 [ 255.934610][ C0] ? snd_rawmidi_read+0x6d0/0x6d0 [ 255.939732][ C0] ? vfs_iter_write+0xa0/0xa0 [ 255.944512][ C0] ? __import_iovec+0x3fa/0x850 [ 255.949403][ C0] ? import_iovec+0x73/0xa0 [ 255.953953][ C0] do_writev+0x27f/0x480 [ 255.958381][ C0] ? do_readv+0x460/0x460 [ 255.962824][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 255.968824][ C0] ? lock_chain_count+0x20/0x20 [ 255.973693][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 255.978906][ C0] do_syscall_64+0x55/0xb0 [ 255.983336][ C0] ? clear_bhb_loop+0x40/0x90 [ 255.988029][ C0] ? clear_bhb_loop+0x40/0x90 [ 255.992725][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.998664][ C0] RIP: 0033:0x7fed7e59e1d9 [ 256.003103][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.022735][ C0] RSP: 002b:00007fed7f45d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 256.031183][ C0] RAX: ffffffffffffffda RBX: 00007fed7e825fa0 RCX: 00007fed7e59e1d9 [ 256.039173][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 256.047157][ C0] RBP: 00007fed7e635888 R08: 0000000000000000 R09: 0000000000000000 [ 256.055150][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.063136][ C0] R13: 00007fed7e826038 R14: 00007fed7e825fa0 R15: 00007fff62370f98 [ 256.071137][ C0] [ 256.074354][ C0] Kernel Offset: disabled [ 256.078741][ C0] Rebooting in 86400 seconds..