last executing test programs: 4m54.437832625s ago: executing program 32 (id=146): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) syz_usb_connect(0x5, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0xa6, 0xcc, 0x92, 0x10, 0x4e6, 0x9, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x8, 0xa0, 0xf, "", [{{0x9, 0x4, 0x51, 0xf, 0x0, 0xd6, 0xef, 0xed, 0x80}}]}}]}}, 0x0) 4m41.11443788s ago: executing program 33 (id=214): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4c004) 4m40.96522079s ago: executing program 34 (id=218): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0xb5d6) 4m40.868680434s ago: executing program 35 (id=216): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}]}], {0x14, 0x10}}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000100000000000000", @ANYRES32=r1, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m48.040823849s ago: executing program 36 (id=421): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x80000001) 3m34.793548221s ago: executing program 8 (id=495): r0 = inotify_init1(0x0) r1 = fanotify_init(0x0, 0x800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r1, 0x641, 0x1028, r2, 0x0) inotify_add_watch(r0, &(0x7f00000002c0)='.\x00', 0xe0000157) close_range(r1, 0xffffffffffffffff, 0x0) 3m34.398372259s ago: executing program 8 (id=500): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mremap(&(0x7f0000af3000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000000000)=""/65, 0x41, 0x7bdb) 3m31.467707474s ago: executing program 8 (id=518): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) 3m29.783878295s ago: executing program 8 (id=537): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 3m28.681396652s ago: executing program 8 (id=543): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0x79cf, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 3m27.394469894s ago: executing program 8 (id=538): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0xc7f}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x8, 0x4) write$cgroup_int(r0, &(0x7f0000000200)=0x8, 0x12) read(r0, &(0x7f0000000100)=""/151, 0x97) 3m26.876594616s ago: executing program 37 (id=538): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0xc7f}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x8, 0x4) write$cgroup_int(r0, &(0x7f0000000200)=0x8, 0x12) read(r0, &(0x7f0000000100)=""/151, 0x97) 2m39.749792472s ago: executing program 5 (id=854): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 2m37.908131914s ago: executing program 5 (id=863): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0xf42}) 2m37.505272263s ago: executing program 5 (id=867): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffec2) setreuid(0x0, 0xee01) unlinkat(r0, &(0x7f0000000340)='./file1\x00', 0x0) 2m37.261013751s ago: executing program 5 (id=869): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000061c0)='./file4\x00', 0x8, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1, 0x1f1, &(0x7f0000000500)="$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") 2m36.794954383s ago: executing program 5 (id=874): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0) 2m36.004207508s ago: executing program 5 (id=882): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000000c0), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2m35.534442111s ago: executing program 38 (id=882): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000000c0), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m41.322446968s ago: executing program 9 (id=1188): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f00000000c0)='],.(\x00', 0x80, 0x152, &(0x7f0000000140)={0x9, 0xd, 0x8f3, 0x8}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)=@newlink={0x50, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x66f31}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2040000) 1m40.025244933s ago: executing program 9 (id=1193): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xbfffffff, 0xffffff61, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x8, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x102, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xf3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf423c, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000140)={0x1, 0x7, 0x1, 0x200000000000005, 0x401, 0x0, 0x200000003, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x4}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) 1m39.242476847s ago: executing program 9 (id=1198): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmmsg(r0, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) 1m38.391842164s ago: executing program 9 (id=1209): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000061c0)='./file4\x00', 0x8, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1, 0x1f1, &(0x7f0000000500)="$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") 1m37.915091178s ago: executing program 9 (id=1212): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000aae000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @code={0xa, 0x4c, {"d9e967f2450f0666ba410066ed3e66410fc7b600980000430f01dd0f20d835080000000f22d866baa00066b8000066ef0fc731c442c138260f20d5"}}], 0x64}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m37.360216946s ago: executing program 9 (id=1215): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf60", 0x33) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 1m36.829599161s ago: executing program 39 (id=1215): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf60", 0x33) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 1m10.508219801s ago: executing program 0 (id=1357): syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 1m8.504866574s ago: executing program 0 (id=1369): r0 = syz_open_dev$sndpcmc(&(0x7f0000002900), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x7, 0xfffffffd, 0xa, 0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0xfffffff8, 0x1}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) 1m8.206305693s ago: executing program 0 (id=1372): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m7.40745992s ago: executing program 0 (id=1379): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m6.074290381s ago: executing program 0 (id=1386): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = semget$private(0x0, 0x3, 0x42) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000040)=0x6) semop(r0, &(0x7f00000000c0)=[{0x0, 0xd00a, 0x1000}], 0x1) semop(r0, &(0x7f0000000180)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 1m5.21610689s ago: executing program 0 (id=1392): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x10010, 0xffffffffffffffff, 0xba909000) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) 1m4.662545759s ago: executing program 40 (id=1392): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x10010, 0xffffffffffffffff, 0xba909000) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) 55.28832549s ago: executing program 1 (id=1431): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 54.138468886s ago: executing program 1 (id=1432): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000000)={0x0, 0xdeeb, 0x0, 0x1, 0x330}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0x2, 0x10000002, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x10040000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=')'], 0x18}, 0x440e0) 53.038397962s ago: executing program 1 (id=1434): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 51.958474204s ago: executing program 1 (id=1438): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 51.458866213s ago: executing program 1 (id=1439): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f00000190c0)='./file0\x00', &(0x7f0000019080)=@random={'os2.', './binderfs/binder0\x00'}) syz_fuse_handle_req(r0, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a30bf328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae40167aa3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0000a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37b8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c32d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca871255ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d12e7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952ae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d7173db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13776204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f65913efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edcd3f35cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c1557311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000003500)={&(0x7f00000003c0)={0x50, 0x0, 0x7fffffff, {0x7, 0x29, 0x4, 0x400000, 0x7, 0x80, 0x8, 0x9, 0x0, 0x0, 0x10, 0x247}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 50.549848381s ago: executing program 1 (id=1443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0xffff1884, 0x4) 50.008965207s ago: executing program 41 (id=1443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0xffff1884, 0x4) 3.380814666s ago: executing program 7 (id=1661): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.350162131s ago: executing program 3 (id=1662): socket$can_bcm(0x1d, 0x2, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 3.099419551s ago: executing program 7 (id=1664): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f00000026c0)=[{}]) 2.956145639s ago: executing program 4 (id=1665): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) exit(0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440008d8}}, {{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0xb, 0xb0) 2.893106831s ago: executing program 3 (id=1666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@rand_addr=0x64010101, @in=@private=0xa010100, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2b}, {@in=@private=0xa010100, 0x4d4, 0x6c}, @in6=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x4002000001f, 0x2}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000000000000000000000000000000000020010000000000000000000000000001000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000050000000000000000001f00000000000000fd0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a07350003"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.681855633s ago: executing program 2 (id=1667): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080), 0xfffffe13) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) splice(r0, 0x0, r3, 0x0, 0x1e8640, 0x0) 2.607940007s ago: executing program 3 (id=1668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.54182889s ago: executing program 6 (id=1669): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020) 2.372229584s ago: executing program 3 (id=1670): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xc100092e) lsetxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x8) 2.372016674s ago: executing program 6 (id=1671): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) 2.276514633s ago: executing program 6 (id=1672): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r2, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2.166109744s ago: executing program 7 (id=1673): r0 = socket(0x28, 0x5, 0x0) close(0x3) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4008840) 2.104124166s ago: executing program 6 (id=1674): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000000)={{}, {0x1, 0x6}, [], {0x4, 0x3}, [], {0x10, 0x7}}, 0x24, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) 1.991416648s ago: executing program 6 (id=1675): syz_usb_connect(0x2, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810240000007050202", @ANYRESDEC], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$char_usb(r0, &(0x7f00000004c0)="620482", 0x3) 1.955986825s ago: executing program 4 (id=1676): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d0, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) keyctl$negate(0xd, 0x0, 0x2434093e, 0x0) 1.908422965s ago: executing program 7 (id=1677): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, 0x0, 0x8) r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) 1.801743246s ago: executing program 4 (id=1678): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1, 0x25, 0x0, @val=@tracing={0x0, 0x9}}, 0x20) syz_emit_ethernet(0x22, &(0x7f0000003bc0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @broadcast}}}}}, 0x0) 1.664144513s ago: executing program 2 (id=1679): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r0, 0x100004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000005, 0x4) sendmmsg(r1, &(0x7f0000004d40)=[{{&(0x7f0000000080)=@in={0x2, 0xffff, @loopback}, 0x80, 0x0}}], 0x1, 0x24008010) 1.591398897s ago: executing program 4 (id=1680): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x160, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x1f8, 0x1f8, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast1, @private=0xa010102, 0x0, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x8, 0x0, 0x2}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x40000000000021d, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.466527572s ago: executing program 2 (id=1681): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x3) shutdown(r0, 0x1) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000002c0)=@gcm_256={{0x304}, "b161dfb54aa99af9", "7580660af82ccb0fb70ea6a009b3edf2c52d5e08d20b756abf31cd84d09de3de", "4ca60b61", "5e60b05f32a07cb1"}, 0x38) 1.183296287s ago: executing program 2 (id=1682): socket$inet_icmp(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r1, 0x0, 0x0, 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xcec, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.183154027s ago: executing program 4 (id=1683): syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000000)=ANY=[], 0x81, 0x710, &(0x7f00000019c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[], 0x32600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '', 0x3a, 'cpuacct.usage_sys\x00', 0x3a, './file0'}, 0x39) 1.181688908s ago: executing program 3 (id=1692): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000500)=""/10, 0xa) read(r0, &(0x7f0000000080)=""/17, 0xc) read(r0, &(0x7f0000000500)=""/10, 0xa) 786.089165ms ago: executing program 3 (id=1684): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f00000026c0)=[{}]) 654.511281ms ago: executing program 7 (id=1685): r0 = syz_open_dev$usbmon(0x0, 0x8, 0x1) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)="73797a3016421c8fa04fdc54e30b5e545133ca82d2a7e0609decd21a9d093bd818da5a7c97046b8b12b409584118582651b0d92e5a0ffe76fc73f38be5211bbbe7183eeb89252a4110f6310633074c7051a327ebc5cd239a2e2a47a7ea354cc7f0140bd8b404d7afc221ef05c77424acd27cb00bfa9328ba05ffef4d3595c74bb9e6d2dc9dec09daf8d93285765dcf77a73f43f04ffae977fee3cc842686979b1a8220212a68481803e4e8bf74dd729bb72965cce4b0266b3291c991eb1dba9285d47d247cab72fefc076aa8bcaa5dbad51f2e399c6a20378a3f6bc114a7dcc3a3c28587b71816942e025f177d7bf02aa13803d5ef687752a5464b6aa6d2", 0xfe) 462.292509ms ago: executing program 2 (id=1686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) 424.121437ms ago: executing program 7 (id=1687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x4}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @private=0xa010100, @multicast1}, {0xa000, 0x6558, 0x8}}}}}}, 0x2e) 286.201703ms ago: executing program 4 (id=1688): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfefffffd, 0x5, 0x0, 0xfd, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000080000200000000001900", 0x3c}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0xe0cba8b119564bb4, 0x0, 0x46, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x2d}, 0x60) 278.670405ms ago: executing program 6 (id=1689): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0xffff, 0x6, 0xa, 0x101, 0x3, 0x2, 0x5, 0xb0df, r3}, &(0x7f0000000100)=0x20) 0s ago: executing program 2 (id=1690): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f000000cf00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8ad41, 0x11b) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) kernel console output (not intermixed with test programs): 0 ip=0x7f6aed79e159 code=0x0 [ 232.613338][ T4376] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 232.659212][ T6932] loop6: detected capacity change from 0 to 40427 [ 232.704341][ T6932] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 232.722401][ T6932] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 232.805011][ T6932] F2FS-fs (loop6): Found nat_bits in checkpoint [ 232.812070][ T4376] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.853571][ T4376] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 232.887899][ T4376] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.917755][ T4376] usb 10-1: config 0 descriptor?? [ 233.016170][ T6932] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 233.037619][ T6932] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 233.342959][ T4376] savu 0003:1E7D:2D5A.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 233.427057][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.713'. [ 233.716973][ T4376] usb 10-1: USB disconnect, device number 4 [ 233.932923][ T6961] fido_id[6961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 233.987857][ T6956] device hsr_slave_1 left promiscuous mode [ 234.803130][ C1] net_ratelimit: 54 callbacks suppressed [ 236.264075][ T7017] device gretap0 entered promiscuous mode [ 236.294826][ T7017] device vlan2 entered promiscuous mode [ 236.609224][ T7009] loop5: detected capacity change from 0 to 32768 [ 236.867477][ T7031] FAULT_INJECTION: forcing a failure. [ 236.867477][ T7031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.963425][ T7031] CPU: 0 PID: 7031 Comm: syz.9.736 Not tainted syzkaller #0 [ 236.970810][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 236.980920][ T7031] Call Trace: [ 236.984256][ T7031] [ 236.987238][ T7031] dump_stack_lvl+0x188/0x24e [ 236.991984][ T7031] ? show_regs_print_info+0x12/0x12 [ 236.997256][ T7031] ? load_image+0x410/0x410 [ 237.001832][ T7031] ? __lock_acquire+0x7c40/0x7c40 [ 237.006942][ T7031] should_fail_ex+0x390/0x4c0 [ 237.011696][ T7031] _copy_from_user+0x2c/0x170 [ 237.016453][ T7031] do_handle_open+0x1d2/0x870 [ 237.021203][ T7031] ? __ia32_compat_sys_open_by_handle_at+0x80/0x80 [ 237.027791][ T7031] ? lockdep_hardirqs_on+0x94/0x140 [ 237.033051][ T7031] do_syscall_64+0x4c/0xa0 [ 237.037524][ T7031] ? clear_bhb_loop+0x60/0xb0 [ 237.042232][ T7031] ? clear_bhb_loop+0x60/0xb0 [ 237.046943][ T7031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.052879][ T7031] RIP: 0033:0x7fa59d79e159 [ 237.057323][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.076973][ T7031] RSP: 002b:00007fa59b9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 237.085430][ T7031] RAX: ffffffffffffffda RBX: 00007fa59da25fa0 RCX: 00007fa59d79e159 [ 237.093436][ T7031] RDX: 0000000000121101 RSI: 0000200000000040 RDI: 0000000000000003 [ 237.101450][ T7031] RBP: 00007fa59d83506b R08: 0000000000000000 R09: 0000000000000000 [ 237.109464][ T7031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.117470][ T7031] R13: 00007fa59da26038 R14: 00007fa59da25fa0 R15: 00007ffed1424fc8 [ 237.125497][ T7031] [ 239.960879][ T7107] loop6: detected capacity change from 0 to 1024 [ 239.986385][ T7107] EXT4-fs: Ignoring removed bh option [ 240.003210][ C1] net_ratelimit: 63 callbacks suppressed [ 240.079402][ T7107] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 241.198705][ T5048] EXT4-fs (loop6): unmounting filesystem. [ 241.898903][ T7163] device geneve1 entered promiscuous mode [ 242.403444][ T4294] Bluetooth: hci2: command 0x0406 tx timeout [ 242.445872][ T7179] netlink: 27 bytes leftover after parsing attributes in process `syz.5.784'. [ 243.857841][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 243.904712][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'. [ 244.001793][ T7226] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.010875][ T7226] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.019784][ T7226] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.028625][ T7226] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.250016][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 244.271173][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'. [ 245.203121][ C1] net_ratelimit: 58 callbacks suppressed [ 245.285733][ T7262] fuse: Bad value for 'fd' [ 245.443239][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 245.705094][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.811'. [ 245.743213][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.811'. [ 245.791859][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.811'. [ 245.853774][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.811'. [ 245.866637][ T7280] overlayfs: failed to clone upperpath [ 247.831862][ T7336] input: syz0 as /devices/virtual/input/input12 [ 249.163912][ T4376] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 249.396617][ T4376] usb 10-1: config 4 has an invalid interface number: 44 but max is 0 [ 249.419598][ T4376] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 249.453698][ T4376] usb 10-1: config 4 has no interface number 0 [ 249.473682][ T4376] usb 10-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 249.532354][ T4376] usb 10-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 249.588557][ T4376] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.618303][ T4376] usb 10-1: Product: syz [ 249.633585][ T4376] usb 10-1: Manufacturer: syz [ 249.648590][ T4376] usb 10-1: SerialNumber: syz [ 249.853000][ T7394] FAULT_INJECTION: forcing a failure. [ 249.853000][ T7394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.880717][ T7394] CPU: 0 PID: 7394 Comm: syz.7.853 Not tainted syzkaller #0 [ 249.888100][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 249.898211][ T7394] Call Trace: [ 249.901541][ T7394] [ 249.904513][ T7394] dump_stack_lvl+0x188/0x24e [ 249.909248][ T7394] ? show_regs_print_info+0x12/0x12 [ 249.914528][ T7394] ? load_image+0x410/0x410 [ 249.919098][ T7394] ? __lock_acquire+0x7c40/0x7c40 [ 249.924185][ T7394] ? do_futex+0x310/0x320 [ 249.928564][ T7394] should_fail_ex+0x390/0x4c0 [ 249.933307][ T7394] strncpy_from_user+0x32/0x340 [ 249.938210][ T7394] __se_sys_add_key+0xd8/0x410 [ 249.943018][ T7394] ? __x64_sys_add_key+0xc0/0xc0 [ 249.943053][ T7394] ? lockdep_hardirqs_on+0x94/0x140 [ 249.943080][ T7394] ? __x64_sys_add_key+0x1c/0xc0 [ 249.943117][ T7394] do_syscall_64+0x4c/0xa0 [ 249.943139][ T7394] ? clear_bhb_loop+0x60/0xb0 [ 249.967712][ T7394] ? clear_bhb_loop+0x60/0xb0 [ 249.972439][ T7394] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.978382][ T7394] RIP: 0033:0x7f519679e159 [ 249.982836][ T7394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.002568][ T7394] RSP: 002b:00007f519769d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 250.011020][ T7394] RAX: ffffffffffffffda RBX: 00007f5196a25fa0 RCX: 00007f519679e159 [ 250.019053][ T7394] RDX: 00002000000000c0 RSI: 0000200000000440 RDI: 00002000000003c0 [ 250.027059][ T7394] RBP: 00007f519683506b R08: fffffffffffffffd R09: 0000000000000000 [ 250.035089][ T7394] R10: 00000000000000c9 R11: 0000000000000246 R12: 0000000000000000 [ 250.043116][ T7394] R13: 00007f5196a26038 R14: 00007f5196a25fa0 R15: 00007ffff42fb4c8 [ 250.051138][ T7394] [ 250.181564][ T7388] loop6: detected capacity change from 0 to 32768 [ 250.271411][ T4376] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 250.354218][ T4376] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 250.396474][ T7388] JBD2: Ignoring recovery information on journal [ 250.403175][ C1] net_ratelimit: 55 callbacks suppressed [ 250.464627][ T4376] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 250.539957][ T7378] i2c i2c-1: Invalid block size returned: 206 [ 250.547543][ T4376] usb 10-1: media controller created [ 250.592452][ T4376] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.767716][ T7388] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 251.198809][ T26] audit: type=1804 audit(1790654216.836:228): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.851" name="/newroot/122/file1/file1" dev="loop6" ino=17059 res=1 errno=0 [ 251.301989][ T4376] DVB: Unable to find symbol dib7000p_attach() [ 251.302754][ T26] audit: type=1804 audit(1790654216.886:229): pid=7416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.851" name="/newroot/122/file1/file1" dev="loop6" ino=17059 res=1 errno=0 [ 251.343181][ T4376] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 251.352904][ T7421] netlink: 204 bytes leftover after parsing attributes in process `syz.3.858'. [ 251.460927][ T7424] netlink: 232 bytes leftover after parsing attributes in process `syz.3.858'. [ 251.729154][ T5048] ocfs2: Unmounting device (7,6) on (node local) [ 251.733869][ T4376] rc_core: IR keymap rc-dib0700-rc5 not found [ 251.742187][ T4376] Registered IR keymap rc-empty [ 251.795399][ T4376] dvb-usb: could not initialize remote control. [ 251.801727][ T4376] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 251.892522][ T4376] usb 10-1: USB disconnect, device number 5 [ 252.029442][ T4376] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 252.447270][ T7450] loop5: detected capacity change from 0 to 16 [ 252.505676][ T7450] erofs: (device loop5): mounted with root inode @ nid 36. [ 252.643447][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 252.649574][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 254.631235][ T7512] netlink: 40 bytes leftover after parsing attributes in process `syz.9.889'. [ 255.066788][ T4294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.078985][ T4294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.087833][ T4294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.097461][ T4294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.106276][ T4294] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 255.114346][ T4294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.165519][ T7512] device hsr_slave_1 left promiscuous mode [ 255.311360][ T7528] loop6: detected capacity change from 0 to 512 [ 255.364600][ T7528] EXT4-fs: inline encryption not supported [ 255.406152][ T7528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.429963][ T7528] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 255.476003][ T7528] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 255.513316][ T7528] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 255.570500][ T7528] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 255.626529][ T7528] EXT4-fs (loop6): orphan cleanup on readonly fs [ 255.679789][ T7528] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.895: bg 0: block 34: padding at end of block bitmap is not set [ 255.701117][ C1] net_ratelimit: 62 callbacks suppressed [ 255.701239][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.701283][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.879591][ T7528] Quota error (device loop6): write_blk: dquota write failed [ 255.926501][ T7528] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 255.983219][ T7528] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.895: Failed to acquire dquot type 1 [ 256.109399][ T7528] EXT4-fs (loop6): 1 truncate cleaned up [ 256.150804][ T7528] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 256.329686][ T7528] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 256.623955][ T5048] EXT4-fs (loop6): unmounting filesystem. [ 256.910898][ T7525] chnl_net:caif_netlink_parms(): no params data found [ 257.146947][ T7558] Bluetooth: MGMT ver 1.22 [ 257.203211][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 257.458406][ T7525] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.483320][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.492170][ T7525] device bridge_slave_0 entered promiscuous mode [ 257.542829][ T7525] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.564865][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.598158][ T7525] device bridge_slave_1 entered promiscuous mode [ 257.888336][ T7525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.905698][ T7525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.195278][ T7525] team0: Port device team_slave_0 added [ 258.247044][ T7525] team0: Port device team_slave_1 added [ 258.455793][ T7525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.462836][ T7525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.576573][ T7525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.616408][ T7525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.663116][ T7525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.787755][ T7525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.840765][ T7591] device bridge0 entered promiscuous mode [ 259.126041][ T7525] device hsr_slave_0 entered promiscuous mode [ 259.162450][ T7525] device hsr_slave_1 entered promiscuous mode [ 259.181683][ T7525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.223158][ T7525] Cannot create hsr debugfs directory [ 259.283282][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 260.084612][ T7608] loop9: detected capacity change from 0 to 131072 [ 260.106283][ T7608] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0) [ 260.114503][ T7608] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 260.143661][ T7608] F2FS-fs (loop9): invalid crc value [ 260.199480][ T7608] F2FS-fs (loop9): Found nat_bits in checkpoint [ 260.259437][ T7608] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 260.266794][ T7608] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 260.323398][ T4680] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 260.513373][ T4680] usb 7-1: Using ep0 maxpacket: 16 [ 260.520915][ T4680] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.574011][ T4680] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.626632][ T4680] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.688189][ T4680] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 260.784278][ T4680] usb 7-1: config 0 interface 0 has no altsetting 0 [ 260.791040][ T4680] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 260.863093][ T4680] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.924941][ T4680] usb 7-1: config 0 descriptor?? [ 260.979541][ T7633] overlayfs: failed to clone upperpath [ 261.123102][ C1] net_ratelimit: 54 callbacks suppressed [ 261.363265][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 261.383970][ T4680] logitech-djreceiver 0003:046D:C53A.000C: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0 [ 261.634242][ T4680] usb 7-1: USB disconnect, device number 4 [ 261.851054][ T7647] device bridge1 entered promiscuous mode [ 261.989256][ T7640] fido_id[7640]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 263.047563][ T26] audit: type=1326 audit(1790654228.686:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.7.935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519679e159 code=0x7ffc0000 [ 263.152456][ T26] audit: type=1326 audit(1790654228.716:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.7.935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519679e159 code=0x7ffc0000 [ 263.270537][ T26] audit: type=1326 audit(1790654228.716:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.7.935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519679e159 code=0x7ffc0000 [ 263.366731][ T26] audit: type=1326 audit(1790654228.716:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.7.935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519679e159 code=0x7ffc0000 [ 263.443987][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 263.480110][ T7687] loop6: detected capacity change from 0 to 1024 [ 263.522917][ T26] audit: type=1326 audit(1790654228.716:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.7.935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f519679e159 code=0x7ffc0000 [ 263.648592][ T26] audit: type=1326 audit(1790654228.716:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.7.935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519679e159 code=0x7ffc0000 [ 263.729540][ T26] audit: type=1326 audit(1790654228.716:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.7.935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519679e159 code=0x7ffc0000 [ 263.785027][ T26] audit: type=1326 audit(1790654228.716:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.7.935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519679e159 code=0x7ffc0000 [ 263.892313][ T7525] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 263.944384][ T26] audit: type=1326 audit(1790654228.716:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.7.935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519679e159 code=0x7ffc0000 [ 263.994582][ T7525] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 264.094480][ T7525] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 264.101773][ T26] audit: type=1326 audit(1790654228.716:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.7.935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f519679e159 code=0x7ffc0000 [ 264.162397][ T7525] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 264.248589][ T57] hfsplus: b-tree write err: -5, ino 25 [ 264.282635][ T57] hfsplus: b-tree write err: -5, ino 4 [ 264.313985][ T57] hfsplus: b-tree write err: -5, ino 2 [ 264.319845][ T57] hfsplus: b-tree write err: -5, ino 26 [ 264.395280][ T57] hfsplus: b-tree write err: -5, ino 27 [ 264.724922][ T7525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.790788][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.822610][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.848554][ T7525] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.896236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.937833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.988747][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.995970][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.065650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.110637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.151711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.195945][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.203183][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.253932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.324595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.359378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.373185][ T3600] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 265.415755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.571307][ T3600] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 265.600493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.617425][ T3600] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 265.666507][ T3600] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 265.710626][ T3600] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.755856][ T3600] usb 10-1: Product: syz [ 265.770285][ T3600] usb 10-1: Manufacturer: syz [ 265.787769][ T3600] usb 10-1: SerialNumber: syz [ 266.036730][ T3600] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 266.163100][ C0] net_ratelimit: 55 callbacks suppressed [ 266.261222][ T7727] loop6: detected capacity change from 0 to 131072 [ 266.269046][ T7727] XFS: ikeep mount option is deprecated. [ 266.304016][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.347037][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.437158][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.445763][ T7727] XFS (loop6): Mounting V5 Filesystem [ 266.458163][ T4376] usb 10-1: USB disconnect, device number 6 [ 266.474496][ T4376] usblp0: removed [ 266.508898][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.566662][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.575597][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.589286][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.639822][ T7727] XFS (loop6): Starting recovery (logdev: internal) [ 266.667643][ T7727] XFS (loop6): Ending recovery (logdev: internal) [ 266.951853][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.958'. [ 267.132284][ T5048] XFS (loop6): Unmounting Filesystem [ 267.231216][ T7766] input: syz1 as /devices/virtual/input/input14 [ 267.714268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.721933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.769766][ T7525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.875433][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.898484][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.005089][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.022468][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.062444][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.100535][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.248930][ T7525] device veth0_vlan entered promiscuous mode [ 268.296760][ T7525] device veth1_vlan entered promiscuous mode [ 268.427066][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.456881][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.541855][ T7525] device veth0_macvtap entered promiscuous mode [ 268.574999][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.600465][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.655276][ T7525] device veth1_macvtap entered promiscuous mode [ 268.673941][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.693862][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.765955][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.819584][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.863552][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.913126][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.953285][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.993173][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.023093][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.053732][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.093259][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.121433][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.159532][ T7525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.188905][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.226958][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.276650][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.313227][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.373107][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.409664][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.430163][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.471423][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.502090][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.530833][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.567853][ T7525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.592002][ T7525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.659795][ T7525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.698542][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.728691][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.742416][ T7815] "syz.6.973" (7815) uses obsolete ecb(arc4) skcipher [ 269.761731][ T7525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.783477][ T7525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.815406][ T7525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.844423][ T7525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.220036][ T7833] loop9: detected capacity change from 0 to 16 [ 270.275724][ T7833] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 270.370092][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.411360][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.472130][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.646912][ T5007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.669484][ T5007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.725102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 271.363120][ C0] net_ratelimit: 85 callbacks suppressed [ 271.415950][ T7871] overlayfs: failed to clone upperpath [ 272.463147][ T14] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 272.683947][ T14] usb 10-1: not running at top speed; connect to a high speed hub [ 272.734744][ T14] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.784949][ T14] usb 10-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 272.835751][ T14] usb 10-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 272.870221][ T14] usb 10-1: Product: syz [ 272.913143][ T14] usb 10-1: Manufacturer: syz [ 272.942333][ T14] usb 10-1: Found UVC 1.00 device syz (225a:e1d4) [ 273.151889][ T14] usb 10-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 273.174536][ T14] uvcvideo 10-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 273.213460][ T14] uvcvideo 10-1:1.1: Failed to initialize the device (-5). [ 273.292546][ T14] usb 10-1: USB disconnect, device number 7 [ 273.355176][ T7893] loop0: detected capacity change from 0 to 32768 [ 273.461937][ T7893] XFS (loop0): Mounting V5 Filesystem [ 273.611405][ T7893] XFS (loop0): Ending clean mount [ 274.165416][ T7925] fuse: Bad value for 'fd' [ 274.341867][ T7918] loop6: detected capacity change from 0 to 131072 [ 274.401300][ T7918] F2FS-fs (loop6): invalid crc value [ 274.432368][ T7918] F2FS-fs (loop6): Found nat_bits in checkpoint [ 274.472653][ T7918] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 274.493217][ T7918] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 274.583527][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 274.583543][ T26] audit: type=1800 audit(1790654240.226:244): pid=7918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.994" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 274.651654][ T7525] XFS (loop0): Unmounting Filesystem [ 276.403087][ C1] net_ratelimit: 63 callbacks suppressed [ 277.312513][ T7998] loop9: detected capacity change from 0 to 8192 [ 277.396732][ T7998] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 278.093382][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 278.681888][ T8037] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 278.822135][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054ff4400: rx timeout, send abort [ 279.322401][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055574800: rx timeout, send abort [ 279.331051][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054ff4400: abort rx timeout. Force session deactivation [ 279.705729][ T8062] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1046'. [ 279.830936][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055574800: abort rx timeout. Force session deactivation [ 280.131452][ T8069] loop0: detected capacity change from 0 to 8192 [ 280.381092][ T8069] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.416003][ C0] net_ratelimit: 71 callbacks suppressed [ 281.784650][ T26] audit: type=1326 audit(1790654247.426:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.6.1043" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d9d19e159 code=0x0 [ 281.941075][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 282.009200][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 282.134055][ T8099] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.142854][ T8099] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.152037][ T8099] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.160865][ T8099] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.274999][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 282.295191][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 282.883350][ T14] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 282.951418][ T8119] loop6: detected capacity change from 0 to 8192 [ 282.991109][ T8119] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 283.083448][ T14] usb 10-1: Using ep0 maxpacket: 8 [ 283.109161][ T14] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 283.146265][ T14] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.176299][ T14] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.242432][ T14] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.292007][ T14] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.305973][ T8132] loop6: detected capacity change from 8192 to 0 [ 283.333517][ T14] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 283.389573][ T14] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.644831][ T14] usb 10-1: usb_control_msg returned -32 [ 283.650594][ T14] usbtmc 10-1:16.0: can't read capabilities [ 284.432952][ T8142] loop0: detected capacity change from 0 to 131072 [ 284.452290][ T8142] F2FS-fs (loop0): invalid crc value [ 284.479016][ T8142] F2FS-fs (loop0): Found nat_bits in checkpoint [ 284.518687][ T8142] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 284.570697][ T8142] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 284.687740][ T26] audit: type=1800 audit(1790654250.326:246): pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1058" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 284.739769][ T956] usb 10-1: USB disconnect, device number 8 [ 285.443966][ T8161] capability: warning: `syz.6.1063' uses 32-bit capabilities (legacy support in use) [ 285.589316][ T26] audit: type=1326 audit(1790654251.226:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8163 comm="syz.9.1065" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa59d79e159 code=0x0 [ 286.483087][ C1] net_ratelimit: 86 callbacks suppressed [ 286.996526][ T8193] loop0: detected capacity change from 0 to 2048 [ 287.119906][ T8193] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 287.221499][ T8193] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.819870][ T8205] device gretap0 entered promiscuous mode [ 287.858328][ T8205] device vlan2 entered promiscuous mode [ 287.926685][ T8192] loop9: detected capacity change from 0 to 32768 [ 288.117230][ T8192] XFS (loop9): Mounting V5 Filesystem [ 288.415130][ T8192] XFS (loop9): Ending clean mount [ 288.682939][ T5952] XFS (loop9): Unmounting Filesystem [ 289.683541][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 290.333958][ T8265] loop0: detected capacity change from 0 to 512 [ 290.383810][ T8265] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 290.545265][ T8265] EXT4-fs (loop0): 1 truncate cleaned up [ 290.552723][ T8265] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 290.623771][ T26] audit: type=1800 audit(1790654256.256:248): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1094" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 290.882032][ T7525] EXT4-fs (loop0): unmounting filesystem. [ 291.305403][ T8272] syz.3.1097 (8272) used greatest stack depth: 17248 bytes left [ 291.313319][ T8274] syz.3.1097 (8274) used greatest stack depth: 16784 bytes left [ 291.524572][ C1] net_ratelimit: 73 callbacks suppressed [ 291.741209][ T8288] 9pnet_fd: Insufficient options for proto=fd [ 292.388532][ T8300] FAULT_INJECTION: forcing a failure. [ 292.388532][ T8300] name failslab, interval 1, probability 0, space 0, times 0 [ 292.442711][ T8300] CPU: 0 PID: 8300 Comm: syz.0.1104 Not tainted syzkaller #0 [ 292.450191][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 292.460312][ T8300] Call Trace: [ 292.463641][ T8300] [ 292.466630][ T8300] dump_stack_lvl+0x188/0x24e [ 292.471378][ T8300] ? show_regs_print_info+0x12/0x12 [ 292.476641][ T8300] ? load_image+0x410/0x410 [ 292.481216][ T8300] ? __might_sleep+0xd0/0xd0 [ 292.485869][ T8300] ? __lock_acquire+0x7c40/0x7c40 [ 292.490994][ T8300] should_fail_ex+0x390/0x4c0 [ 292.495747][ T8300] should_failslab+0x5/0x20 [ 292.500316][ T8300] slab_pre_alloc_hook+0x59/0x300 [ 292.505440][ T8300] ? kvmalloc_node+0x6c/0x180 [ 292.510185][ T8300] __kmem_cache_alloc_node+0x4f/0x270 [ 292.515626][ T8300] ? kvmalloc_node+0x6c/0x180 [ 292.520372][ T8300] __kmalloc_node+0xa2/0x240 [ 292.525035][ T8300] kvmalloc_node+0x6c/0x180 [ 292.529615][ T8300] bpf_test_run_xdp_live+0x206/0x1a90 [ 292.535058][ T8300] ? verify_lock_unused+0x140/0x140 [ 292.540326][ T8300] ? kasan_set_track+0x60/0x70 [ 292.545156][ T8300] ? __kasan_kmalloc+0x8e/0xa0 [ 292.549984][ T8300] ? __kmalloc+0xb3/0x240 [ 292.554383][ T8300] ? bpf_test_init+0x9f/0x140 [ 292.559125][ T8300] ? bpf_prog_test_run_xdp+0x488/0xf80 [ 292.564652][ T8300] ? __sys_bpf+0x62b/0x780 [ 292.569129][ T8300] ? __x64_sys_bpf+0x78/0x90 [ 292.573780][ T8300] ? do_syscall_64+0x4c/0xa0 [ 292.578429][ T8300] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.584576][ T8300] ? xdp_convert_md_to_buff+0x330/0x330 [ 292.590212][ T8300] ? __lock_acquire+0x7c40/0x7c40 [ 292.595322][ T8300] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 292.601644][ T8300] ? bpf_test_init+0x119/0x140 [ 292.606478][ T8300] ? xdp_convert_md_to_buff+0x5b/0x330 [ 292.612005][ T8300] bpf_prog_test_run_xdp+0x757/0xf80 [ 292.617361][ T8300] ? __lock_acquire+0x7c40/0x7c40 [ 292.622463][ T8300] ? dev_put+0x80/0x80 [ 292.626617][ T8300] ? dev_put+0x80/0x80 [ 292.630764][ T8300] bpf_prog_test_run+0x31c/0x390 [ 292.635781][ T8300] __sys_bpf+0x62b/0x780 [ 292.640103][ T8300] ? bpf_link_show_fdinfo+0x380/0x380 [ 292.645556][ T8300] ? lock_chain_count+0x20/0x20 [ 292.650484][ T8300] __x64_sys_bpf+0x78/0x90 [ 292.654974][ T8300] do_syscall_64+0x4c/0xa0 [ 292.659461][ T8300] ? clear_bhb_loop+0x60/0xb0 [ 292.664213][ T8300] ? clear_bhb_loop+0x60/0xb0 [ 292.668952][ T8300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.674952][ T8300] RIP: 0033:0x7f085c79e159 [ 292.679456][ T8300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.699210][ T8300] RSP: 002b:00007f085d604028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.707695][ T8300] RAX: ffffffffffffffda RBX: 00007f085ca25fa0 RCX: 00007f085c79e159 [ 292.715749][ T8300] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 292.723815][ T8300] RBP: 00007f085c83506b R08: 0000000000000000 R09: 0000000000000000 [ 292.731845][ T8300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.739880][ T8300] R13: 00007f085ca26038 R14: 00007f085ca25fa0 R15: 00007ffd1362e868 [ 292.747927][ T8300] [ 294.765357][ T8340] loop9: detected capacity change from 0 to 128 [ 294.796474][ T8330] loop6: detected capacity change from 0 to 40427 [ 294.847581][ T8340] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 294.897430][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1126'. [ 294.909418][ T8330] F2FS-fs (loop6): invalid crc value [ 294.950694][ T8330] F2FS-fs (loop6): Found nat_bits in checkpoint [ 295.049695][ T8340] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 295.093757][ T8340] ext2 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 295.311352][ T8340] EXT4-fs error (device loop9): dx_make_map:1328: inode #2: block 33: comm syz.9.1117: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 295.356993][ T8330] F2FS-fs (loop6): Start checkpoint disabled! [ 295.370019][ T8340] EXT4-fs (loop9): Remounting filesystem read-only [ 295.408454][ T8340] EXT4-fs error (device loop9) in do_split:2097: Corrupt filesystem [ 295.436853][ T8330] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 295.444999][ T8340] EXT4-fs (loop9): Remounting filesystem read-only [ 295.454748][ T8344] device hsr_slave_1 left promiscuous mode [ 295.469283][ T8352] EXT4-fs error (device loop9): dx_make_map:1328: inode #2: block 33: comm syz.9.1117: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 295.492734][ T8352] EXT4-fs (loop9): Remounting filesystem read-only [ 295.518080][ T8352] EXT4-fs error (device loop9) in do_split:2097: Corrupt filesystem [ 295.539837][ T8352] EXT4-fs (loop9): Remounting filesystem read-only [ 295.550038][ T8343] device gretap0 entered promiscuous mode [ 295.563236][ T8343] device vlan2 entered promiscuous mode [ 295.570645][ T8346] loop0: detected capacity change from 0 to 32768 [ 295.593918][ T8346] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1118 (8346) [ 295.667054][ T8346] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 295.682109][ T8346] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 295.700790][ T8346] BTRFS info (device loop0): using free space tree [ 295.817266][ T5952] EXT4-fs (loop9): unmounting filesystem. [ 296.065981][ T8346] BTRFS info (device loop0): enabling ssd optimizations [ 296.456828][ T11] kworker/u4:1: attempt to access beyond end of device [ 296.456828][ T11] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 296.581004][ T11] net_ratelimit: 74 callbacks suppressed [ 296.598672][ T8384] device vlan0 entered promiscuous mode [ 296.637332][ T8383] device vlan0 left promiscuous mode [ 296.802637][ T7525] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 298.391057][ T8400] loop6: detected capacity change from 0 to 32768 [ 298.489814][ T8400] XFS (loop6): Mounting V5 Filesystem [ 298.621079][ T8400] XFS (loop6): Ending clean mount [ 298.699490][ T8432] device gretap0 entered promiscuous mode [ 298.705601][ T26] audit: type=1800 audit(1790654264.356:249): pid=8400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1121" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 298.731539][ T8432] device vlan2 entered promiscuous mode [ 298.748489][ T8441] FAULT_INJECTION: forcing a failure. [ 298.748489][ T8441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.763395][ T8441] CPU: 0 PID: 8441 Comm: syz.9.1134 Not tainted syzkaller #0 [ 298.770845][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 298.780952][ T8441] Call Trace: [ 298.784282][ T8441] [ 298.787300][ T8441] dump_stack_lvl+0x188/0x24e [ 298.792067][ T8441] ? show_regs_print_info+0x12/0x12 [ 298.797596][ T8441] ? load_image+0x410/0x410 [ 298.802165][ T8441] ? __lock_acquire+0x7c40/0x7c40 [ 298.807390][ T8441] should_fail_ex+0x390/0x4c0 [ 298.812166][ T8441] _copy_from_user+0x2c/0x170 [ 298.816910][ T8441] get_itimerspec64+0x1c7/0x310 [ 298.821829][ T8441] ? put_old_timespec32+0x120/0x120 [ 298.827129][ T8441] ? __ia32_sys_get_robust_list+0x100/0x100 [ 298.833075][ T8441] __x64_sys_timerfd_settime+0x146/0x240 [ 298.838794][ T8441] ? __ia32_sys_timerfd_create+0x60/0x60 [ 298.844480][ T8441] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 298.850529][ T8441] ? lock_chain_count+0x20/0x20 [ 298.855440][ T8441] ? lockdep_hardirqs_on+0x94/0x140 [ 298.860684][ T8441] do_syscall_64+0x4c/0xa0 [ 298.865137][ T8441] ? clear_bhb_loop+0x60/0xb0 [ 298.869885][ T8441] ? clear_bhb_loop+0x60/0xb0 [ 298.874634][ T8441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.880577][ T8441] RIP: 0033:0x7fa59d79e159 [ 298.885041][ T8441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.904700][ T8441] RSP: 002b:00007fa59b9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 298.913158][ T8441] RAX: ffffffffffffffda RBX: 00007fa59da25fa0 RCX: 00007fa59d79e159 [ 298.921165][ T8441] RDX: 0000200000000380 RSI: 0000000000000005 RDI: 0000000000000003 [ 298.929189][ T8441] RBP: 00007fa59d83506b R08: 0000000000000000 R09: 0000000000000000 [ 298.937383][ T8441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.945410][ T8441] R13: 00007fa59da26038 R14: 00007fa59da25fa0 R15: 00007ffed1424fc8 [ 298.953446][ T8441] [ 298.999481][ T26] audit: type=1800 audit(1790654264.386:250): pid=8400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1121" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 299.249525][ T5048] XFS (loop6): Unmounting Filesystem [ 299.735213][ C0] Unknown status report in ack skb [ 299.917861][ T8466] device geneve1 entered promiscuous mode [ 299.963501][ T8467] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1146'. [ 299.987321][ T8468] FAULT_INJECTION: forcing a failure. [ 299.987321][ T8468] name failslab, interval 1, probability 0, space 0, times 0 [ 300.093498][ T8468] CPU: 1 PID: 8468 Comm: syz.0.1147 Not tainted syzkaller #0 [ 300.100999][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 300.111113][ T8468] Call Trace: [ 300.114442][ T8468] [ 300.117426][ T8468] dump_stack_lvl+0x188/0x24e [ 300.122208][ T8468] ? show_regs_print_info+0x12/0x12 [ 300.127466][ T8468] ? load_image+0x410/0x410 [ 300.132033][ T8468] ? __might_sleep+0xd0/0xd0 [ 300.136741][ T8468] ? __lock_acquire+0x7c40/0x7c40 [ 300.141830][ T8468] ? memset+0x1e/0x40 [ 300.145869][ T8468] should_fail_ex+0x390/0x4c0 [ 300.150620][ T8468] should_failslab+0x5/0x20 [ 300.155184][ T8468] slab_pre_alloc_hook+0x59/0x300 [ 300.160293][ T8468] ? __kthread_create_on_node+0x129/0x540 [ 300.166084][ T8468] __kmem_cache_alloc_node+0x4f/0x270 [ 300.171530][ T8468] ? __kthread_create_on_node+0x129/0x540 [ 300.177327][ T8468] kmalloc_trace+0x26/0xe0 [ 300.181796][ T8468] ? numa_pwq_tbl_install+0x3f0/0x3f0 [ 300.187242][ T8468] __kthread_create_on_node+0x129/0x540 [ 300.192889][ T8468] ? kthread_create_on_node+0x140/0x140 [ 300.198532][ T8468] ? alloc_workqueue+0xf00/0x14a0 [ 300.203640][ T8468] ? numa_pwq_tbl_install+0x3f0/0x3f0 [ 300.209072][ T8468] ? numa_pwq_tbl_install+0x3f0/0x3f0 [ 300.214511][ T8468] kthread_create_on_node+0xe8/0x140 [ 300.219878][ T8468] ? tsk_fork_get_node+0x60/0x60 [ 300.224921][ T8468] ? rcu_is_watching+0x11/0xa0 [ 300.229767][ T8468] init_rescuer+0x1a6/0x290 [ 300.234327][ T8468] alloc_workqueue+0xf00/0x14a0 [ 300.239237][ T8468] ? vsnprintf+0x1b22/0x1c20 [ 300.243907][ T8468] ? snprintf+0xe5/0x140 [ 300.248215][ T8468] ? lockdep_init_map_type+0x98/0x8d0 [ 300.253685][ T8468] ? apply_workqueue_attrs+0x180/0x180 [ 300.259197][ T8468] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 300.265182][ T8468] nci_register_device+0x3fc/0x9f0 [ 300.270345][ T8468] ? nci_free_device+0x90/0x90 [ 300.275227][ T8468] ? nci_hci_allocate+0x1dd/0x2a0 [ 300.280329][ T8468] ? nci_allocate_device+0x241/0x350 [ 300.285684][ T8468] virtual_ncidev_open+0x55/0xc0 [ 300.290699][ T8468] ? virtual_ncidev_ioctl+0x90/0x90 [ 300.295947][ T8468] misc_open+0x31f/0x390 [ 300.295991][ T8468] chrdev_open+0x585/0x5f0 [ 300.300610][ T8468] ? cd_forget+0x160/0x160 [ 300.309701][ T8468] ? fsnotify_perm+0x39b/0x550 [ 300.309737][ T8468] ? cd_forget+0x160/0x160 [ 300.318928][ T8468] do_dentry_open+0x7dd/0x10b0 [ 300.323760][ T8468] path_openat+0x2674/0x2f10 [ 300.323810][ T8468] ? verify_lock_unused+0x140/0x140 [ 300.333667][ T8468] ? do_sys_openat2+0xdd/0x4f0 [ 300.333707][ T8468] ? do_filp_open+0x420/0x420 [ 300.333769][ T8468] do_filp_open+0x1ee/0x420 [ 300.343195][ T8468] ? vfs_tmpfile+0x470/0x470 [ 300.343250][ T8468] ? _raw_spin_unlock+0x24/0x40 [ 300.352408][ T8468] ? alloc_fd+0x590/0x640 [ 300.352452][ T8468] do_sys_openat2+0x14b/0x4f0 [ 300.361671][ T8468] ? do_sys_open+0xe0/0xe0 [ 300.370787][ T8468] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 300.370838][ T8468] ? lock_chain_count+0x20/0x20 [ 300.382093][ T8468] __x64_sys_openat+0x135/0x160 [ 300.382139][ T8468] do_syscall_64+0x4c/0xa0 [ 300.391550][ T8468] ? clear_bhb_loop+0x60/0xb0 [ 300.396286][ T8468] ? clear_bhb_loop+0x60/0xb0 [ 300.400996][ T8468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.401044][ T8468] RIP: 0033:0x7f085c79e159 [ 300.407311][ T8468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.407332][ T8468] RSP: 002b:00007f085d604028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 300.407355][ T8468] RAX: ffffffffffffffda RBX: 00007f085ca25fa0 RCX: 00007f085c79e159 [ 300.407371][ T8468] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 300.407386][ T8468] RBP: 00007f085c83506b R08: 0000000000000000 R09: 0000000000000000 [ 300.407401][ T8468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.440156][ T8468] R13: 00007f085ca26038 R14: 00007f085ca25fa0 R15: 00007ffd1362e868 [ 300.456192][ T8468] [ 300.968619][ T8484] device vlan0 entered promiscuous mode [ 300.982157][ T8483] device vlan0 left promiscuous mode [ 301.391350][ T8479] loop9: detected capacity change from 0 to 32768 [ 301.490363][ T8479] XFS (loop9): Mounting V5 Filesystem [ 301.578248][ T8479] XFS (loop9): Ending clean mount [ 301.603174][ C1] net_ratelimit: 61 callbacks suppressed [ 301.643609][ T26] audit: type=1800 audit(1790654267.286:251): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1151" name="file1" dev="loop9" ino=6150 res=0 errno=0 [ 301.694225][ T26] audit: type=1800 audit(1790654267.306:252): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1151" name="file1" dev="loop9" ino=6150 res=0 errno=0 [ 302.041887][ T8521] device gretap0 entered promiscuous mode [ 302.092613][ T8521] device vlan2 entered promiscuous mode [ 302.158398][ T5952] XFS (loop9): Unmounting Filesystem [ 302.395888][ T8528] device geneve1 entered promiscuous mode [ 303.035307][ T8540] overlayfs: failed to clone upperpath [ 303.413216][ T4364] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 303.605515][ T4364] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.626975][ T4364] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.670983][ T4364] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 303.755637][ T4364] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.796249][ T4364] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.845586][ T4364] usb 10-1: config 0 descriptor?? [ 304.301949][ T4364] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 304.341045][ T4364] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 304.540975][ T8578] device geneve1 entered promiscuous mode [ 306.512876][ T4324] usb 10-1: USB disconnect, device number 9 [ 306.883470][ C1] net_ratelimit: 77 callbacks suppressed [ 307.416298][ T8616] loop9: detected capacity change from 0 to 40427 [ 307.462028][ T8616] F2FS-fs (loop9): invalid crc value [ 307.495417][ T8616] F2FS-fs (loop9): Found nat_bits in checkpoint [ 307.579649][ T8616] F2FS-fs (loop9): Start checkpoint disabled! [ 307.611802][ T8616] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 308.423872][ T5007] kworker/u4:9: attempt to access beyond end of device [ 308.423872][ T5007] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 308.963822][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 309.304479][ T8669] device geneve1 entered promiscuous mode [ 309.744039][ T8664] loop0: detected capacity change from 0 to 32768 [ 309.802911][ T8664] XFS (loop0): Mounting V5 Filesystem [ 309.945798][ T8664] XFS (loop0): Ending clean mount [ 309.977338][ T26] audit: type=1800 audit(1790654275.616:253): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1192" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 310.052525][ T26] audit: type=1800 audit(1790654275.646:254): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1192" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 310.399726][ T7525] XFS (loop0): Unmounting Filesystem [ 310.902429][ C0] Unknown status report in ack skb [ 311.323298][ T8719] loop9: detected capacity change from 0 to 16 [ 311.408996][ T8719] erofs: (device loop9): mounted with root inode @ nid 36. [ 312.003444][ C0] net_ratelimit: 72 callbacks suppressed [ 312.981493][ T8759] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1218'. [ 313.038485][ T8759] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1218'. [ 313.804916][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.816510][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.827088][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.851530][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.861291][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 313.874997][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.223117][ T956] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 314.413137][ T956] usb 1-1: Using ep0 maxpacket: 16 [ 314.420778][ T956] usb 1-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.498613][ T956] usb 1-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.549298][ T956] usb 1-1: config 0 interface 0 has no altsetting 0 [ 314.583149][ T956] usb 1-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00 [ 314.622938][ T956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.668144][ T956] usb 1-1: config 0 descriptor?? [ 314.698821][ T956] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 315.134235][ T956] wacom 0003:056A:00E6.000E: hidraw0: USB HID v0.05 Device [HID 056a:00e6] on usb-dummy_hcd.0-1/input0 [ 315.317759][ T14] usb 1-1: USB disconnect, device number 5 [ 315.365703][ T8810] loop6: detected capacity change from 0 to 64 [ 315.507281][ T8783] chnl_net:caif_netlink_parms(): no params data found [ 315.687483][ T8808] fido_id[8808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 315.923256][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 316.107969][ T8821] Bluetooth: MGMT ver 1.22 [ 316.201841][ T8783] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.238541][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.276798][ T8783] device bridge_slave_0 entered promiscuous mode [ 316.317811][ T8783] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.333932][ T4324] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 316.347653][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.389382][ T8783] device bridge_slave_1 entered promiscuous mode [ 316.535189][ T4324] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 316.556877][ T4324] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 316.598079][ T4324] usb 7-1: config 4 has no interface number 0 [ 316.618080][ T8783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.631249][ T8830] loop0: detected capacity change from 0 to 4096 [ 316.639563][ T4324] usb 7-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 316.664094][ T8783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.680126][ T4324] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 316.701970][ T8830] EXT4-fs: Ignoring removed nobh option [ 316.728062][ T8830] EXT4-fs: Ignoring removed bh option [ 316.735150][ T4324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.764822][ T4324] usb 7-1: Product: syz [ 316.777219][ T8830] EXT4-fs (loop0): Test dummy encryption mode enabled [ 316.791241][ T4324] usb 7-1: Manufacturer: syz [ 316.822594][ T4324] usb 7-1: SerialNumber: syz [ 316.833253][ T8830] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 316.888987][ T8783] team0: Port device team_slave_0 added [ 316.899135][ T8783] team0: Port device team_slave_1 added [ 316.947160][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.954276][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.980831][ T8783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.996362][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.013176][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.088477][ T8830] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 317.124164][ C0] net_ratelimit: 71 callbacks suppressed [ 317.136194][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.142578][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.185909][ T8783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.334138][ T4324] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 317.350865][ T4324] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 317.393258][ T4324] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 317.401525][ T7525] EXT4-fs (loop0): unmounting filesystem. [ 317.414238][ T4324] usb 7-1: media controller created [ 317.450590][ T4324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.521452][ T8783] device hsr_slave_0 entered promiscuous mode [ 317.588699][ T8819] i2c i2c-1: Invalid block size returned: 206 [ 317.627397][ T8783] device hsr_slave_1 entered promiscuous mode [ 317.650973][ T8783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.680503][ T8783] Cannot create hsr debugfs directory [ 317.767851][ T4324] DVB: Unable to find symbol dib7000p_attach() [ 317.783137][ T4324] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 318.003120][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 318.073339][ T4324] rc_core: IR keymap rc-dib0700-rc5 not found [ 318.073355][ T4324] Registered IR keymap rc-empty [ 318.118193][ T4324] dvb-usb: could not initialize remote control. [ 318.146172][ T4324] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 318.233120][ T4324] usb 7-1: USB disconnect, device number 5 [ 318.334414][ T4324] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 319.697358][ T8783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.722782][ T8783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.776685][ T8783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.792289][ T8783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 319.987500][ T8783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.010860][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 320.029438][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.042937][ T8783] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.068007][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.084507][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 320.095150][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.114328][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.121531][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.140941][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.158079][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 320.170360][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.181750][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.188966][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.207708][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.217256][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.249631][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.265998][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.276503][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.286899][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.309281][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.319117][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.338341][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.348667][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.358045][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.369719][ T8783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.739153][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.762109][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.785035][ T8783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.830974][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.850474][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.886364][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 320.904908][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.922697][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.932591][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.942269][ T8783] device veth0_vlan entered promiscuous mode [ 320.959047][ T8783] device veth1_vlan entered promiscuous mode [ 321.012320][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 321.031607][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 321.041172][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 321.050701][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 321.064408][ T8783] device veth0_macvtap entered promiscuous mode [ 321.079628][ T8783] device veth1_macvtap entered promiscuous mode [ 321.110981][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.124149][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.137382][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.148210][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.158327][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.169493][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.179742][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.191313][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.209441][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.223788][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.241442][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.259999][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.272062][ T8783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.283353][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.313093][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.322983][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.342689][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.353916][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.382967][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.405742][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.422913][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.442612][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.460853][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.481777][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.500514][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.524956][ T8783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.544985][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 321.560893][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.570634][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.588826][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.601742][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.631576][ T8783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.642624][ T8783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.651864][ T8783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.662887][ T8783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.829761][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.842955][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.881223][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 321.942593][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.952846][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.969506][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 322.157464][ T8914] input: syz0 as /devices/virtual/input/input19 [ 322.163483][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 322.164349][ C1] net_ratelimit: 131 callbacks suppressed [ 323.669778][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1260'. [ 323.683975][ T8970] loop0: detected capacity change from 0 to 64 [ 324.522353][ T8986] loop0: detected capacity change from 0 to 1024 [ 324.918306][ T47] hfsplus: b-tree write err: -5, ino 25 [ 324.924500][ T47] hfsplus: b-tree write err: -5, ino 4 [ 324.930174][ T47] hfsplus: b-tree write err: -5, ino 2 [ 324.973467][ T47] hfsplus: b-tree write err: -5, ino 26 [ 324.979211][ T47] hfsplus: b-tree write err: -5, ino 27 [ 327.003524][ T9065] input: syz0 as /devices/virtual/input/input20 [ 327.203207][ C0] net_ratelimit: 83 callbacks suppressed [ 327.549603][ T9056] loop0: detected capacity change from 0 to 32768 [ 327.636411][ T9056] JBD2: Ignoring recovery information on journal [ 327.781782][ T9056] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 328.130626][ T26] audit: type=1804 audit(1790654293.766:255): pid=9094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1272" name="/newroot/60/file1/file1" dev="loop0" ino=17059 res=1 errno=0 [ 328.391968][ T7525] ocfs2: Unmounting device (7,0) on (node local) [ 329.473431][ T3600] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 329.715828][ T3600] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 329.736075][ T3600] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.752883][ T3600] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.778256][ T3600] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 329.829632][ T3600] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 329.877890][ T3600] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 329.910438][ T3600] usb 1-1: Manufacturer: syz [ 329.933944][ T3600] usb 1-1: config 0 descriptor?? [ 330.331253][ T9136] input: syz1 as /devices/virtual/input/input21 [ 330.365591][ T3600] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 330.391964][ T3600] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 330.497644][ T3600] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 331.230807][ T4364] usb 1-1: USB disconnect, device number 6 [ 331.999002][ T9158] overlayfs: failed to clone upperpath [ 332.379141][ T26] audit: type=1326 audit(1790654298.016:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.7.1304" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f519679e159 code=0x0 [ 332.486999][ T11] net_ratelimit: 106 callbacks suppressed [ 332.573811][ T9171] netlink: 'syz.6.1305': attribute type 21 has an invalid length. [ 332.611225][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1305'. [ 332.643700][ T9171] netlink: 'syz.6.1305': attribute type 21 has an invalid length. [ 332.725266][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1305'. [ 334.130485][ T9202] loop0: detected capacity change from 0 to 4096 [ 334.267737][ T9206] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1316'. [ 334.464780][ T9208] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 335.729298][ T26] audit: type=1326 audit(1790654301.366:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.1.1323" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd7fb9e159 code=0x0 [ 336.791976][ T9272] loop6: detected capacity change from 0 to 512 [ 336.969622][ T9272] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 337.319535][ T5048] EXT4-fs (loop6): unmounting filesystem. [ 337.523221][ C0] net_ratelimit: 93 callbacks suppressed [ 338.886174][ T9331] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1355'. [ 339.267214][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 339.287860][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 339.316167][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 339.362702][ T9347] device bridge_slave_0 left promiscuous mode [ 339.392140][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.422019][ T9347] device bridge_slave_1 left promiscuous mode [ 339.463664][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.499606][ T9347] bond0: (slave bond_slave_0): Releasing backup interface [ 339.591713][ T9347] bond0: (slave bond_slave_1): Releasing backup interface [ 339.785496][ T9347] team0: Port device team_slave_0 removed [ 339.854842][ T9347] team0: Port device team_slave_1 removed [ 339.884771][ T9347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.910728][ T9347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.944717][ T9347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.981349][ T9347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.225718][ T9351] team0: Port device xfrm0 added [ 340.333905][ T9366] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1363'. [ 340.648574][ T9370] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 340.915194][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1367'. [ 341.490476][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 341.763810][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 342.196649][ T9414] hugetlbfs: syz.7.1377 (9414): Using mlock ulimits for SHM_HUGETLB is obsolete [ 342.382745][ T9417] loop0: detected capacity change from 0 to 2048 [ 342.482669][ T9417] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.563147][ C1] net_ratelimit: 77 callbacks suppressed [ 342.739252][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 342.787867][ T26] audit: type=1800 audit(1790654308.426:258): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1379" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 343.128708][ T9430] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1381'. [ 343.425769][ T7525] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 343.479198][ T7525] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 344.574970][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.644204][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.020704][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.072018][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.532241][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.602304][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.947723][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.961020][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.975767][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 346.000171][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 346.010656][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 346.018656][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 347.086351][ T9477] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.094121][ T9477] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.681922][ T9477] net_ratelimit: 57 callbacks suppressed [ 348.083395][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 348.545424][ T9477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.669940][ T9477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.305025][ T9477] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.314478][ T9477] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.323759][ T9477] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.332919][ T9477] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.551708][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.562810][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.183511][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 350.679066][ T9512] loop1: detected capacity change from 0 to 32768 [ 350.784572][ T9512] XFS (loop1): Mounting V5 Filesystem [ 350.887198][ T9512] XFS (loop1): Ending clean mount [ 351.230891][ T8783] XFS (loop1): Unmounting Filesystem [ 351.634809][ T11] team0: Port device xfrm0 removed [ 351.746694][ T9480] chnl_net:caif_netlink_parms(): no params data found [ 352.243157][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 352.646183][ T9585] device dummy0 entered promiscuous mode [ 352.673717][ T9585] device dummy0 left promiscuous mode [ 352.723047][ C0] net_ratelimit: 60 callbacks suppressed [ 353.107603][ T9480] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.120894][ T9480] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.156833][ T9480] device bridge_slave_0 entered promiscuous mode [ 353.233547][ T9480] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.240739][ T9480] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.282708][ T9480] device bridge_slave_1 entered promiscuous mode [ 353.867351][ T11] device hsr_slave_0 left promiscuous mode [ 353.889011][ T11] device hsr_slave_1 left promiscuous mode [ 353.900995][ T9591] loop1: detected capacity change from 0 to 32768 [ 354.113201][ T11] device veth1_macvtap left promiscuous mode [ 354.144692][ T11] device veth0_macvtap left promiscuous mode [ 354.150932][ T11] device veth1_vlan left promiscuous mode [ 354.186957][ T11] device veth0_vlan left promiscuous mode [ 354.207921][ T9594] loop6: detected capacity change from 0 to 32768 [ 354.323154][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 354.337351][ T9594] XFS (loop6): Mounting V5 Filesystem [ 354.441513][ T9594] XFS (loop6): Ending clean mount [ 354.490849][ T26] audit: type=1800 audit(1790654320.126:259): pid=9594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1425" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 354.950363][ T5048] XFS (loop6): Unmounting Filesystem [ 357.645730][ T9657] loop1: detected capacity change from 0 to 2048 [ 357.716963][ T9657] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.852490][ C0] net_ratelimit: 54 callbacks suppressed [ 358.049276][ T8783] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 358.092872][ T8783] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 358.517507][ T11] bond0 (unregistering): Released all slaves [ 358.667707][ T9480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.691748][ T9480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.429136][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.443437][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.452772][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.462415][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.471321][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 360.481835][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.128576][ T9661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.206820][ T9661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.563254][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 363.043093][ C0] net_ratelimit: 48 callbacks suppressed [ 363.330440][ T9661] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.339576][ T9661] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.348687][ T9661] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.357767][ T9661] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.544954][ T9661] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.554038][ T9661] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.565524][ T9661] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.574696][ T9661] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.647340][ T9480] team0: Port device team_slave_0 added [ 363.728165][ T9480] team0: Port device team_slave_1 added [ 363.988154][ T9786] netlink: 'syz.3.1456': attribute type 4 has an invalid length. [ 364.052084][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.077545][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.214476][ T9480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.264928][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.271941][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.357310][ T9480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.643121][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 364.667556][ T9480] device hsr_slave_0 entered promiscuous mode [ 364.741495][ T9480] device hsr_slave_1 entered promiscuous mode [ 364.769281][ T9480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.797298][ T9480] Cannot create hsr debugfs directory [ 364.803501][ T9803] FAULT_INJECTION: forcing a failure. [ 364.803501][ T9803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.883698][ T9803] CPU: 0 PID: 9803 Comm: syz.6.1459 Not tainted syzkaller #0 [ 364.891178][ T9803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 364.901280][ T9803] Call Trace: [ 364.904607][ T9803] [ 364.907582][ T9803] dump_stack_lvl+0x188/0x24e [ 364.912316][ T9803] ? show_regs_print_info+0x12/0x12 [ 364.917572][ T9803] ? load_image+0x410/0x410 [ 364.922227][ T9803] ? __lock_acquire+0x7c40/0x7c40 [ 364.927500][ T9803] should_fail_ex+0x390/0x4c0 [ 364.932244][ T9803] _copy_from_user+0x2c/0x170 [ 364.936985][ T9803] copy_clone_args_from_user+0x1d8/0x6d0 [ 364.942684][ T9803] ? futex_wait_setup+0x270/0x270 [ 364.947746][ T9803] ? __delayed_free_task+0x20/0x20 [ 364.952931][ T9803] __se_sys_clone3+0x13f/0x3f0 [ 364.957736][ T9803] ? __x64_sys_clone3+0x60/0x60 [ 364.962617][ T9803] ? do_futex+0x310/0x320 [ 364.967000][ T9803] ? lockdep_hardirqs_on+0x94/0x140 [ 364.972251][ T9803] do_syscall_64+0x4c/0xa0 [ 364.976696][ T9803] ? clear_bhb_loop+0x60/0xb0 [ 364.981405][ T9803] ? clear_bhb_loop+0x60/0xb0 [ 364.986205][ T9803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.992139][ T9803] RIP: 0033:0x7f9d9d19e159 [ 364.996601][ T9803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.016245][ T9803] RSP: 002b:00007f9d9df9cef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 365.024697][ T9803] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9d9d19e159 [ 365.032699][ T9803] RDX: 00007f9d9df9cf10 RSI: 0000000000000058 RDI: 00007f9d9df9cf10 [ 365.040708][ T9803] RBP: 00007f9d9d23506b R08: 0000000000000000 R09: 0000000000000058 [ 365.048707][ T9803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.056708][ T9803] R13: 00007f9d9d426038 R14: 00007f9d9d425fa0 R15: 00007ffd594986f8 [ 365.064718][ T9803] [ 365.630315][ T9810] loop6: detected capacity change from 0 to 256 [ 365.757753][ T9810] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 366.256557][ T9822] FAULT_INJECTION: forcing a failure. [ 366.256557][ T9822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.370240][ T9822] CPU: 1 PID: 9822 Comm: syz.7.1465 Not tainted syzkaller #0 [ 366.377739][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 366.387840][ T9822] Call Trace: [ 366.391170][ T9822] [ 366.394151][ T9822] dump_stack_lvl+0x188/0x24e [ 366.398890][ T9822] ? show_regs_print_info+0x12/0x12 [ 366.404139][ T9822] ? load_image+0x410/0x410 [ 366.408708][ T9822] ? __lock_acquire+0x7c40/0x7c40 [ 366.413799][ T9822] should_fail_ex+0x390/0x4c0 [ 366.418552][ T9822] _copy_to_user+0x2c/0x130 [ 366.423112][ T9822] move_addr_to_user+0x146/0x1e0 [ 366.428117][ T9822] __sys_getsockname+0x216/0x2d0 [ 366.433127][ T9822] ? __ia32_sys_connect+0x80/0x80 [ 366.438227][ T9822] __x64_sys_getsockname+0x77/0x90 [ 366.443400][ T9822] do_syscall_64+0x4c/0xa0 [ 366.447874][ T9822] ? clear_bhb_loop+0x60/0xb0 [ 366.452615][ T9822] ? clear_bhb_loop+0x60/0xb0 [ 366.457455][ T9822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.463410][ T9822] RIP: 0033:0x7f519679e159 [ 366.467880][ T9822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.487715][ T9822] RSP: 002b:00007f519769d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 366.496229][ T9822] RAX: ffffffffffffffda RBX: 00007f5196a25fa0 RCX: 00007f519679e159 [ 366.504257][ T9822] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000000000000003 [ 366.512296][ T9822] RBP: 00007f519683506b R08: 0000000000000000 R09: 0000000000000000 [ 366.520300][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.520318][ T9822] R13: 00007f5196a26038 R14: 00007f5196a25fa0 R15: 00007ffff42fb4c8 [ 366.536787][ T9822] [ 366.733183][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 366.844426][ T9836] sd 0:0:1:0: device reset [ 368.092288][ T9697] chnl_net:caif_netlink_parms(): no params data found [ 368.163075][ C1] net_ratelimit: 44 callbacks suppressed [ 368.393085][ T9890] ip_tables: iptables: counters copy to user failed while replacing table [ 368.803610][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 370.557231][ T9697] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.577031][ T9697] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.614744][ T9697] device bridge_slave_0 entered promiscuous mode [ 370.699624][ T9910] loop6: detected capacity change from 0 to 40427 [ 370.761002][ T9697] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.785817][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.812699][ T9910] F2FS-fs (loop6): invalid crc value [ 370.826430][ T9697] device bridge_slave_1 entered promiscuous mode [ 370.869849][ T9910] F2FS-fs (loop6): Found nat_bits in checkpoint [ 371.104647][ T9910] F2FS-fs (loop6): Start checkpoint disabled! [ 371.238724][ T9910] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 371.610509][ T9697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.839995][ T9697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.063399][ T9745] kworker/u4:19: attempt to access beyond end of device [ 372.063399][ T9745] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 372.431318][ T9697] team0: Port device team_slave_0 added [ 372.492169][ T9697] team0: Port device team_slave_1 added [ 372.946052][ T9480] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.162501][ T9480] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.203057][ C1] net_ratelimit: 34 callbacks suppressed [ 373.219589][ T9697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.235783][ T9697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.270282][ T9697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.286344][ T9480] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.334770][ T9697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.341792][ T9697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.374550][ T9697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.403847][ T11] device hsr_slave_0 left promiscuous mode [ 373.421460][ T11] device hsr_slave_1 left promiscuous mode [ 373.432438][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.459227][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.472020][ T11] device bridge_slave_1 left promiscuous mode [ 373.482759][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.505025][ T11] device bridge_slave_0 left promiscuous mode [ 373.511439][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.874294][ T11] team0 (unregistering): Port device team_slave_1 removed [ 374.953467][ T11] team0 (unregistering): Port device team_slave_0 removed [ 375.036500][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.116148][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.742170][ T11] bond0 (unregistering): Released all slaves [ 375.885824][ T9480] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 376.089466][ T9697] device hsr_slave_0 entered promiscuous mode [ 376.105026][ T9697] device hsr_slave_1 entered promiscuous mode [ 376.112129][ T9697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.120910][ T9697] Cannot create hsr debugfs directory [ 376.541742][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.777805][ T9480] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.808036][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.823965][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.914942][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.924776][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.944429][ T9725] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.951593][ T9725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.983791][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 377.074254][ T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.302356][ T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.513841][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.524223][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.544006][ T9753] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.551189][ T9753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.567896][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 377.586895][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 377.624286][ T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.641723][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 377.667799][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 377.869402][ T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.896314][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 377.907525][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 377.917246][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 377.929376][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 377.941396][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.077157][ T9480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.107071][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 378.136268][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 378.146013][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 378.323068][ C0] net_ratelimit: 34 callbacks suppressed [ 378.572457][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.578913][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.896588][ T9697] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 378.929798][ T9697] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 378.968911][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 378.979787][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 379.045770][ T9697] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 379.071217][ T9480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.108667][ T9697] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 379.207762][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.224978][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.352826][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.367418][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.386273][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.404025][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.416494][ T9480] device veth0_vlan entered promiscuous mode [ 379.579562][ T9480] device veth1_vlan entered promiscuous mode [ 379.699731][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 379.724458][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 379.740501][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 379.749481][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 379.784049][ T9480] device veth0_macvtap entered promiscuous mode [ 379.861794][ T9480] device veth1_macvtap entered promiscuous mode [ 379.955319][ T9697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.971074][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.996545][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.013043][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.031983][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.042088][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.060092][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.070543][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.089829][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.105300][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.218896][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 380.234563][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.246307][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.256352][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.273840][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.288206][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.300009][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.316954][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.328097][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.339164][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.349517][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.360476][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.372668][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.389893][ T9697] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.409857][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.441581][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.454263][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 380.462523][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.567285][ T9480] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.590128][ T9480] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.599919][ T9480] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.609019][ T9480] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.620679][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.644883][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.662964][ T9725] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.670226][ T9725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.679741][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.689892][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.700301][ T9725] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.707540][ T9725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.716395][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.761581][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.782252][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.805475][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.825079][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.841913][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 380.875844][ T11] device hsr_slave_0 left promiscuous mode [ 380.884923][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.892424][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.920090][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.927811][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.936197][ T11] device bridge_slave_1 left promiscuous mode [ 380.942656][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.956872][ T11] device bridge_slave_0 left promiscuous mode [ 380.967671][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.040906][ T11] device bridge0 left promiscuous mode [ 381.066294][ T11] device veth1_macvtap left promiscuous mode [ 381.072487][ T11] device veth0_macvtap left promiscuous mode [ 381.088170][ T11] device veth1_vlan left promiscuous mode [ 381.099837][ T11] device veth0_vlan left promiscuous mode [ 382.304492][ T11] team0 (unregistering): Port device team_slave_1 removed [ 382.376337][ T11] team0 (unregistering): Port device team_slave_0 removed [ 382.451974][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.532797][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.155959][ T11] bond0 (unregistering): Released all slaves [ 383.311185][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.322760][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.351861][ T9697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.391826][ T9697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.406936][ T9480] net_ratelimit: 41 callbacks suppressed [ 383.424084][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 383.438946][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.449378][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 383.465553][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.521008][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.728158][ T9732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.743125][ T9732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.815586][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 383.917247][ T9749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.949132][ T9749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.968702][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 384.464847][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.472602][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 384.534316][ T9697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.051333][T10094] Bluetooth: ISO socket layer initialized [ 385.891486][T10112] netlink: 3568 bytes leftover after parsing attributes in process `syz.2.1501'. [ 386.081417][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 386.110202][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 386.294157][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 386.317334][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 386.407582][ T9697] device veth0_vlan entered promiscuous mode [ 386.440886][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 386.479625][ T9753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 386.544490][ T9697] device veth1_vlan entered promiscuous mode [ 386.786417][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 386.824194][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 386.836498][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 386.845946][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 386.860444][ T9697] device veth0_macvtap entered promiscuous mode [ 386.918239][ T9697] device veth1_macvtap entered promiscuous mode [ 386.992946][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.034160][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.085412][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.131985][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.167355][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.198460][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.240207][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.272009][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.322536][ T9697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.353890][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 387.370931][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 387.413616][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 387.439456][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 387.440036][T10145] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 387.486426][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.507523][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.533305][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.544353][T10145] overlayfs: failed to set xattr on upper [ 387.550156][T10145] overlayfs: ...falling back to index=off,metacopy=off. [ 387.603169][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.624089][T10145] overlayfs: ...falling back to xino=off. [ 387.636162][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.667332][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.709530][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.721796][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.749282][ T9697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.771579][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 387.814419][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 387.848001][ T9697] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.905012][ T9697] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.933374][ T9697] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.981245][ T9697] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.328395][ T9732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.349277][ T9732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.395604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 388.426647][T10172] FAULT_INJECTION: forcing a failure. [ 388.426647][T10172] name failslab, interval 1, probability 0, space 0, times 0 [ 388.531758][T10172] CPU: 1 PID: 10172 Comm: syz.2.1520 Not tainted syzkaller #0 [ 388.539320][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 388.549412][T10172] Call Trace: [ 388.552747][T10172] [ 388.555733][T10172] dump_stack_lvl+0x188/0x24e [ 388.560474][T10172] ? show_regs_print_info+0x12/0x12 [ 388.565742][T10172] ? load_image+0x410/0x410 [ 388.570328][T10172] ? __lock_acquire+0x7c40/0x7c40 [ 388.575430][T10172] should_fail_ex+0x390/0x4c0 [ 388.580183][T10172] should_failslab+0x5/0x20 [ 388.584746][T10172] slab_pre_alloc_hook+0x59/0x300 [ 388.589832][T10172] ? security_sk_alloc+0x47/0x130 [ 388.594940][T10172] __kmem_cache_alloc_node+0x4f/0x270 [ 388.600403][T10172] ? security_sk_alloc+0x47/0x130 [ 388.605505][T10172] __kmalloc+0xa3/0x240 [ 388.609730][T10172] ? sk_prot_alloc+0xe7/0x210 [ 388.614476][T10172] security_sk_alloc+0x47/0x130 [ 388.619403][T10172] sk_prot_alloc+0x101/0x210 [ 388.624033][T10172] ? sk_alloc+0x20/0x330 [ 388.628314][T10172] sk_alloc+0x36/0x330 [ 388.632430][T10172] ? bpf_ctx_init+0x154/0x190 [ 388.632469][T10172] bpf_prog_test_run_skb+0x36d/0x18e0 [ 388.643033][T10172] ? __fget_files+0x28/0x460 [ 388.647704][T10172] ? __fget_files+0x3fc/0x460 [ 388.652487][T10172] ? cpu_online+0xa0/0xa0 [ 388.656895][T10172] bpf_prog_test_run+0x31c/0x390 [ 388.661912][T10172] __sys_bpf+0x62b/0x780 [ 388.666226][T10172] ? bpf_link_show_fdinfo+0x380/0x380 [ 388.671677][T10172] ? lock_chain_count+0x20/0x20 [ 388.676616][T10172] __x64_sys_bpf+0x78/0x90 [ 388.681085][T10172] do_syscall_64+0x4c/0xa0 [ 388.685537][T10172] ? clear_bhb_loop+0x60/0xb0 [ 388.685561][T10172] ? clear_bhb_loop+0x60/0xb0 [ 388.685586][T10172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.685623][T10172] RIP: 0033:0x7f35cef9e159 [ 388.695012][T10172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.695034][T10172] RSP: 002b:00007f35cfedd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.695059][T10172] RAX: ffffffffffffffda RBX: 00007f35cf225fa0 RCX: 00007f35cef9e159 [ 388.705385][T10172] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 388.705403][T10172] RBP: 00007f35cf03506b R08: 0000000000000000 R09: 0000000000000000 [ 388.705416][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.705430][T10172] R13: 00007f35cf226038 R14: 00007f35cf225fa0 R15: 00007fffb5a5fe48 [ 388.705504][T10172] [ 388.778067][ C1] net_ratelimit: 90 callbacks suppressed [ 388.856582][ T9745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.872471][ T9745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.914211][ T9725] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 389.779051][T10206] loop2: detected capacity change from 0 to 1024 [ 390.093070][ T9749] hfsplus: b-tree write err: -5, ino 8 [ 390.107809][T10206] hfsplus: request for non-existent node 211 in B*Tree [ 390.213491][T10206] hfsplus: request for non-existent node 211 in B*Tree [ 390.413471][ T11] hfsplus: b-tree write err: -5, ino 8 [ 390.685325][T10218] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.096334][T10218] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.359609][T10218] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.471559][T10241] fuse: Bad value for 'fd' [ 391.800143][T10218] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.209368][T10218] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.320029][T10218] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.447582][T10218] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.586080][T10218] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.251542][T10264] loop2: detected capacity change from 0 to 32768 [ 393.340296][T10264] XFS (loop2): Mounting V5 Filesystem [ 393.519408][T10264] XFS (loop2): Ending clean mount [ 393.572114][ T26] audit: type=1326 audit(1790654359.206:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.4.1556" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab6919e159 code=0x0 [ 393.609405][T10264] XFS (loop2): Quotacheck needed: Please wait. [ 393.761041][T10264] XFS (loop2): Quotacheck: Done. [ 393.843091][ C0] net_ratelimit: 54 callbacks suppressed [ 394.244296][T10319] loop6: detected capacity change from 0 to 2048 [ 394.404454][T10319] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 394.515313][T10319] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 394.543611][ T9480] XFS (loop2): Unmounting Filesystem [ 394.599924][T10319] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 394.624084][T10319] EXT4-fs (loop6): This should not happen!! Data will be lost [ 394.624084][T10319] [ 394.634368][T10319] EXT4-fs (loop6): Total free blocks count 0 [ 394.640489][T10319] EXT4-fs (loop6): Free/Dirty block details [ 394.647069][T10319] EXT4-fs (loop6): free_blocks=4096 [ 394.652436][T10319] EXT4-fs (loop6): dirty_blocks=64 [ 394.658218][T10319] EXT4-fs (loop6): Block reservation details [ 394.664927][T10319] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 394.954562][ T9725] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 395.583521][ T956] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 395.783089][ T956] usb 7-1: Using ep0 maxpacket: 8 [ 395.791040][ T956] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.815248][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1565'. [ 395.819930][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1572'. [ 395.835325][ T956] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 395.873581][ T956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.896292][T10355] device xfrm1 entered promiscuous mode [ 395.922905][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1565'. [ 395.945349][ T956] usb 7-1: config 0 descriptor?? [ 395.988239][ T956] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 396.081222][T10360] loop5: detected capacity change from 0 to 7 [ 396.105954][T10016] loop5: [POWERTEC] p1 [ 396.129828][T10016] loop5: p1 start 791543808 is beyond EOD, truncated [ 396.167155][T10360] loop5: [POWERTEC] p1 [ 396.177001][T10360] loop5: p1 start 791543808 is beyond EOD, truncated [ 396.729481][T10374] ptp ptp0: new virtual clock ptp1 [ 396.790246][T10374] ptp ptp0: new virtual clock ptp2 [ 396.854383][T10374] ptp ptp0: new virtual clock ptp3 [ 396.897364][T10374] ptp ptp0: new virtual clock ptp4 [ 396.950810][T10374] ptp ptp0: new virtual clock ptp5 [ 396.960996][T10374] ptp ptp0: guarantee physical clock free running [ 397.199988][ T956] gspca_vc032x: reg_w err -71 [ 397.207372][ T956] vc032x: probe of 7-1:0.0 failed with error -71 [ 397.239143][ T956] usb 7-1: USB disconnect, device number 6 [ 397.839160][T10405] loop2: detected capacity change from 0 to 128 [ 397.881661][T10405] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 397.917558][T10405] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 398.219593][ T9480] EXT4-fs (loop2): unmounting filesystem. [ 399.038538][T10444] loop6: detected capacity change from 0 to 4096 [ 399.051903][ C0] net_ratelimit: 53 callbacks suppressed [ 399.177378][T10444] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 399.200535][T10444] ntfs3: loop6: Failed to load $Extend. [ 399.596575][ T5048] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 399.876567][T10465] loop6: detected capacity change from 0 to 4096 [ 399.929929][T10465] EXT4-fs: Ignoring removed mblk_io_submit option [ 399.954925][T10465] EXT4-fs: Ignoring removed orlov option [ 399.974431][T10465] EXT4-fs (loop6): Test dummy encryption mode enabled [ 400.063127][T10465] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 400.438211][ T5048] EXT4-fs (loop6): unmounting filesystem. [ 400.466437][T10483] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 401.100673][T10505] FAULT_INJECTION: forcing a failure. [ 401.100673][T10505] name failslab, interval 1, probability 0, space 0, times 0 [ 401.120159][T10505] CPU: 0 PID: 10505 Comm: syz.4.1620 Not tainted syzkaller #0 [ 401.127713][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 401.137829][T10505] Call Trace: [ 401.141148][T10505] [ 401.144123][T10505] dump_stack_lvl+0x188/0x24e [ 401.148859][T10505] ? show_regs_print_info+0x12/0x12 [ 401.154114][T10505] ? load_image+0x410/0x410 [ 401.158680][T10505] ? __might_sleep+0xd0/0xd0 [ 401.163331][T10505] ? __lock_acquire+0x7c40/0x7c40 [ 401.168439][T10505] should_fail_ex+0x390/0x4c0 [ 401.173252][T10505] should_failslab+0x5/0x20 [ 401.177832][T10505] slab_pre_alloc_hook+0x59/0x300 [ 401.182940][T10505] ? io_ring_ctx_alloc+0x54/0xc85 [ 401.188029][T10505] __kmem_cache_alloc_node+0x4f/0x270 [ 401.193461][T10505] ? io_ring_ctx_alloc+0x54/0xc85 [ 401.198551][T10505] kmalloc_trace+0x26/0xe0 [ 401.203016][T10505] io_ring_ctx_alloc+0x54/0xc85 [ 401.207929][T10505] io_uring_create+0x29f/0xd6c [ 401.212762][T10505] ? __might_fault+0xc2/0x120 [ 401.217499][T10505] ? __might_fault+0xa6/0x120 [ 401.222238][T10505] __x64_sys_io_uring_setup+0x21b/0x230 [ 401.227859][T10505] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 401.233585][T10505] ? lockdep_hardirqs_on+0x94/0x140 [ 401.238860][T10505] do_syscall_64+0x4c/0xa0 [ 401.243369][T10505] ? clear_bhb_loop+0x60/0xb0 [ 401.248198][T10505] ? clear_bhb_loop+0x60/0xb0 [ 401.252943][T10505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.258900][T10505] RIP: 0033:0x7fab6919e159 [ 401.263371][T10505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.283041][T10505] RSP: 002b:00007fab6a034028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 401.291515][T10505] RAX: ffffffffffffffda RBX: 00007fab69425fa0 RCX: 00007fab6919e159 [ 401.299526][T10505] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000162e [ 401.307967][T10505] RBP: 00007fab6923506b R08: 0000000000000000 R09: 0000000000000000 [ 401.315973][T10505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.324008][T10505] R13: 00007fab69426038 R14: 00007fab69425fa0 R15: 00007ffe50d44478 [ 401.332029][T10505] [ 401.949554][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1626'. [ 403.313190][ T4376] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 403.344445][ T33] libceph: connect (1)0.0.0.0:6789 error -22 [ 403.352351][ T33] libceph: mon0 (1)0.0.0.0:6789 connect error [ 403.390636][ T33] libceph: connect (1)0.0.0.0:6789 error -22 [ 403.420133][ T33] libceph: mon0 (1)0.0.0.0:6789 connect error [ 403.529801][ T4376] usb 7-1: unable to get BOS descriptor or descriptor too short [ 403.548420][ T4376] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.600533][ T4376] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 403.640425][ T4376] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 403.669982][ T26] audit: type=1326 audit(1790654369.306:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10581 comm="syz.4.1642" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab6919e159 code=0x0 [ 403.707419][ T4376] usb 7-1: string descriptor 0 read error: -22 [ 403.722954][ T4376] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 403.745309][ T4376] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.785664][ T22] libceph: connect (1)0.0.0.0:6789 error -22 [ 403.791909][ T22] libceph: mon0 (1)0.0.0.0:6789 connect error [ 403.816571][T10586] FAULT_INJECTION: forcing a failure. [ 403.816571][T10586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 403.830428][T10586] CPU: 1 PID: 10586 Comm: syz.7.1643 Not tainted syzkaller #0 [ 403.837959][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 403.848069][T10586] Call Trace: [ 403.851441][T10586] [ 403.854427][T10586] dump_stack_lvl+0x188/0x24e [ 403.859211][T10586] ? show_regs_print_info+0x12/0x12 [ 403.864578][T10586] ? load_image+0x410/0x410 [ 403.869154][T10586] ? __lock_acquire+0x7c40/0x7c40 [ 403.874252][T10586] should_fail_ex+0x390/0x4c0 [ 403.879009][T10586] prepare_alloc_pages+0x1e1/0x5b0 [ 403.884196][T10586] __alloc_pages+0x130/0x4f0 [ 403.888860][T10586] ? zone_statistics+0x170/0x170 [ 403.893933][T10586] alloc_page_interleave+0x24/0x1e0 [ 403.899198][T10586] __get_free_pages+0x8/0x30 [ 403.903901][T10586] kasan_populate_vmalloc_pte+0x31/0xf0 [ 403.909503][T10586] ? __apply_to_page_range+0x97b/0xd10 [ 403.915026][T10586] __apply_to_page_range+0x98d/0xd10 [ 403.920372][T10586] ? kasan_populate_vmalloc+0x70/0x70 [ 403.925815][T10586] alloc_vmap_area+0x179f/0x18d0 [ 403.930813][T10586] ? vm_map_ram+0xab0/0xab0 [ 403.935358][T10586] ? rcu_is_watching+0x11/0xa0 [ 403.940186][T10586] __get_vm_area_node+0x158/0x330 [ 403.945255][T10586] __vmalloc_node_range+0x357/0x1380 [ 403.950584][T10586] ? array_map_alloc+0x286/0x6f0 [ 403.955553][T10586] ? schedule+0xd0/0x180 [ 403.959829][T10586] ? futex_wait_queue+0x23/0x1b0 [ 403.964824][T10586] ? free_vm_area+0x50/0x50 [ 403.969364][T10586] ? apparmor_capable+0x12c/0x190 [ 403.974426][T10586] ? bpf_lsm_capable+0x5/0x10 [ 403.979145][T10586] ? security_capable+0x85/0xb0 [ 403.984034][T10586] bpf_map_area_alloc+0xd4/0xe0 [ 403.988920][T10586] ? array_map_alloc+0x286/0x6f0 [ 403.993902][T10586] array_map_alloc+0x286/0x6f0 [ 403.998711][T10586] map_create+0x524/0xff0 [ 404.003106][T10586] ? security_bpf+0x7a/0xa0 [ 404.007648][T10586] __sys_bpf+0x38b/0x780 [ 404.011927][T10586] ? bpf_link_show_fdinfo+0x380/0x380 [ 404.017343][T10586] ? lock_chain_count+0x20/0x20 [ 404.022239][T10586] __x64_sys_bpf+0x78/0x90 [ 404.026690][T10586] do_syscall_64+0x4c/0xa0 [ 404.031133][T10586] ? clear_bhb_loop+0x60/0xb0 [ 404.035843][T10586] ? clear_bhb_loop+0x60/0xb0 [ 404.040550][T10586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.046485][T10586] RIP: 0033:0x7f519679e159 [ 404.050952][T10586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.070688][T10586] RSP: 002b:00007f519769d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.079134][T10586] RAX: ffffffffffffffda RBX: 00007f5196a25fa0 RCX: 00007f519679e159 [ 404.087143][T10586] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 404.095140][T10586] RBP: 00007f519683506b R08: 0000000000000000 R09: 0000000000000000 [ 404.103138][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.111161][T10586] R13: 00007f5196a26038 R14: 00007f5196a25fa0 R15: 00007ffff42fb4c8 [ 404.119182][T10586] [ 404.157104][ T4376] usb 7-1: Can't get UAC3 power state for id 10 [ 404.169519][ T9728] net_ratelimit: 47 callbacks suppressed [ 404.355163][ T33] libceph: connect (1)0.0.0.0:6789 error -22 [ 404.361435][ T33] libceph: mon0 (1)0.0.0.0:6789 connect error [ 404.415659][T10568] ceph: No mds server is up or the cluster is laggy [ 404.621727][ T4376] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 404.662923][ T4376] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 404.762774][T10597] loop4: detected capacity change from 0 to 256 [ 404.858528][ T4376] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 404.921921][ T4376] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 404.982636][ T4376] usb 7-1: USB disconnect, device number 7 [ 406.292203][ T4277] Bluetooth: Wrong link type (-22) [ 406.687801][ T26] audit: type=1326 audit(1790654372.326:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10653 comm="syz.7.1664" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f519679e159 code=0x0 [ 407.923271][ T14] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 408.127141][ T14] usb 7-1: not running at top speed; connect to a high speed hub [ 408.154727][ T14] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 14385, setting to 64 [ 408.176684][ T14] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 408.203143][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.251869][T10692] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 408.262590][ T14] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 408.315503][ T14] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 408.524775][T10714] loop4: detected capacity change from 0 to 1024 [ 408.601638][ T14] usb 7-1: USB disconnect, device number 8 [ 408.627795][ T14] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 408.680801][ T14] cyberjack 7-1:1.0: device disconnected [ 409.119971][ T26] audit: type=1326 audit(1790654374.756:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10723 comm="syz.3.1684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6aed79e159 code=0x0 [ 409.284979][ C0] net_ratelimit: 57 callbacks suppressed [ 409.551960][T10745] ================================================================== [ 409.560124][T10745] BUG: KASAN: slab-out-of-bounds in string+0x204/0x290 [ 409.567055][T10745] Read of size 1 at addr ffff888020665c59 by task syz.4.1688/10745 [ 409.574995][T10745] [ 409.577367][T10745] CPU: 1 PID: 10745 Comm: syz.4.1688 Not tainted syzkaller #0 [ 409.584880][T10745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 409.594985][T10745] Call Trace: [ 409.598318][T10745] [ 409.601332][T10745] dump_stack_lvl+0x188/0x24e [ 409.606048][T10745] ? __lock_acquire+0x7c40/0x7c40 [ 409.611117][T10745] ? show_regs_print_info+0x12/0x12 [ 409.611146][T10745] ? load_image+0x410/0x410 [ 409.616380][T10745] ? __virt_addr_valid+0x467/0x540 [ 409.616416][T10745] ? string+0x204/0x290 [ 409.616441][T10745] print_report+0xa8/0x210 [ 409.616474][T10745] kasan_report+0x10b/0x140 [ 409.626148][T10745] ? string+0x204/0x290 [ 409.635186][T10745] string+0x204/0x290 [ 409.643872][T10745] vsnprintf+0x10db/0x1c20 [ 409.643912][T10745] pointer+0x870/0xfe0 [ 409.652338][T10745] ? string+0x290/0x290 [ 409.660584][T10745] ? format_decode+0x8b1/0x1330 [ 409.660623][T10745] vsnprintf+0xd7c/0x1c20 [ 409.669824][T10745] vprintk_store+0x3d7/0xcf0 [ 409.669867][T10745] ? printk_parse_prefix+0x310/0x310 [ 409.679835][T10745] ? mark_lock+0x94/0x320 [ 409.684235][T10745] ? __lock_acquire+0x1465/0x7c40 [ 409.689336][T10745] ? __kernel_text_address+0x9/0x30 [ 409.694597][T10745] ? verify_lock_unused+0x140/0x140 [ 409.699858][T10745] ? arch_stack_walk+0xf2/0x140 [ 409.704773][T10745] vprintk_emit+0x114/0x6a0 [ 409.709337][T10745] ? printk_sprint+0x460/0x460 [ 409.714162][T10745] ? stack_trace_save+0xa6/0xf0 [ 409.719064][T10745] ? stack_trace_snprint+0xe0/0xe0 [ 409.724239][T10745] _printk+0xda/0x130 [ 409.728285][T10745] ? load_image+0x410/0x410 [ 409.732848][T10745] ? __mutex_trylock_common+0x15c/0x260 [ 409.738455][T10745] ? trace_raw_output_contention_end+0xd0/0xd0 [ 409.744677][T10745] __dynamic_pr_debug+0x196/0x240 [ 409.749769][T10745] ? __mutex_lock+0x1ab/0xae0 [ 409.754501][T10745] ? param_get_dyndbg_classes+0x160/0x160 [ 409.760315][T10745] ? nfc_llcp_get_sdp_ssap+0x35/0x3d0 [ 409.765752][T10745] ? mutex_lock_nested+0x10/0x10 [ 409.770746][T10745] ? __kmem_cache_alloc_node+0x19d/0x270 [ 409.776436][T10745] ? llcp_sock_bind+0x35d/0x700 [ 409.781344][T10745] ? rcu_is_watching+0x11/0xa0 [ 409.786168][T10745] nfc_llcp_get_sdp_ssap+0x3a0/0x3d0 [ 409.791523][T10745] llcp_sock_bind+0x3ab/0x700 [ 409.796265][T10745] ? llcp_sock_recvmsg+0xc90/0xc90 [ 409.801419][T10745] ? bpf_lsm_socket_bind+0x5/0x10 [ 409.806474][T10745] ? security_socket_bind+0x7c/0xa0 [ 409.806508][T10745] __sys_bind+0x2e9/0x3e0 [ 409.806543][T10745] ? __ia32_sys_socketpair+0xb0/0xb0 [ 409.806587][T10745] __x64_sys_bind+0x76/0x80 [ 409.806617][T10745] do_syscall_64+0x4c/0xa0 [ 409.812216][T10745] ? clear_bhb_loop+0x60/0xb0 [ 409.812243][T10745] ? clear_bhb_loop+0x60/0xb0 [ 409.812265][T10745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.822271][T10745] RIP: 0033:0x7fab6919e159 [ 409.822297][T10745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.822316][T10745] RSP: 002b:00007fab6a034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 409.831892][T10745] RAX: ffffffffffffffda RBX: 00007fab69425fa0 RCX: 00007fab6919e159 [ 409.841269][T10745] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 409.851610][T10745] RBP: 00007fab6923506b R08: 0000000000000000 R09: 0000000000000000 [ 409.851627][T10745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.879661][T10745] R13: 00007fab69426038 R14: 00007fab69425fa0 R15: 00007ffe50d44478 [ 409.879691][T10745] [ 409.879700][T10745] [ 409.879705][T10745] Allocated by task 10745: [ 409.879715][T10745] kasan_set_track+0x4b/0x70 [ 409.895699][T10745] __kasan_kmalloc+0x8e/0xa0 [ 409.895734][T10745] __kmalloc_node_track_caller+0xb0/0x240 [ 409.895768][T10745] kmemdup+0x27/0x60 [ 409.911770][T10745] llcp_sock_bind+0x35d/0x700 [ 409.922787][T10745] __sys_bind+0x2e9/0x3e0 [ 409.929552][T10745] __x64_sys_bind+0x76/0x80 [ 409.938752][T10745] do_syscall_64+0x4c/0xa0 [ 409.948380][T10745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.957427][T10745] [ 409.957434][T10745] The buggy address belongs to the object at ffff888020665c58 [ 409.957434][T10745] which belongs to the cache kmalloc-8 of size 8 [ 409.966397][T10745] The buggy address is located 1 bytes inside of [ 409.966397][T10745] 8-byte region [ffff888020665c58, ffff888020665c60) [ 409.966418][T10745] [ 409.966423][T10745] The buggy address belongs to the physical page: [ 409.966450][T10745] page:ffffea0000819940 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20665 [ 409.974716][T10745] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 409.974745][T10745] raw: 00fff00000000200 0000000000000000 dead000000000001 ffff888017441280 [ 409.974765][T10745] raw: 0000000000000000 0000000080660066 00000001ffffffff 0000000000000000 [ 410.001435][T10745] page dumped because: kasan: bad access detected [ 410.001449][T10745] page_owner tracks the page as allocated [ 410.001457][T10745] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 2620706723, free_ts 0 [ 410.010254][T10745] post_alloc_hook+0x173/0x1a0 [ 410.028401][T10745] get_page_from_freelist+0x206b/0x2180 [ 410.028439][T10745] __alloc_pages+0x1ec/0x4f0 [ 410.045619][T10745] alloc_page_interleave+0x24/0x1e0 [ 410.057792][T10745] alloc_slab_page+0x5d/0x180 [ 410.057821][T10745] new_slab+0x87/0x2d0 [ 410.099290][T10745] ___slab_alloc+0xbc5/0x1240 [ 410.108386][T10745] __kmem_cache_alloc_node+0x126/0x270 [ 410.113895][T10745] __kmalloc_node_track_caller+0xa0/0x240 [ 410.119691][T10745] kstrdup_const+0x56/0x90 [ 410.124197][T10745] kobject_set_name_vargs+0x5d/0x110 [ 410.129536][T10745] kobject_init_and_add+0xeb/0x190 [ 410.134798][T10745] lookup_or_create_module_kobject+0xdf/0x160 [ 410.140924][T10745] kernel_add_sysfs_param+0x1f/0x11b [ 410.146266][T10745] param_sysfs_builtin+0x20d/0x2ae [ 410.151453][T10745] param_sysfs_init+0x66/0x6a [ 410.156181][T10745] page_owner free stack trace missing [ 410.161583][T10745] [ 410.163934][T10745] Memory state around the buggy address: [ 410.169590][T10745] ffff888020665b00: fc fc fc 05 fc fc fc fc fb fc fc fc fc fa fc fc [ 410.177674][T10745] ffff888020665b80: fc fc fa fc fc fc fc 06 fc fc fc fc 06 fc fc fc [ 410.185759][T10745] >ffff888020665c00: fc fa fc fc fc fc fa fc fc fc fc 01 fc fc fc fc [ 410.193858][T10745] ^ [ 410.200815][T10745] ffff888020665c80: 05 fc fc fc fc 05 fc fc fc fc fa fc fc fc fc fa [ 410.208903][T10745] ffff888020665d00: fc fc fc fc 07 fc fc fc fc 07 fc fc fc fc fa fc [ 410.217012][T10745] ================================================================== [ 410.225106][T10745] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 410.232323][T10745] CPU: 1 PID: 10745 Comm: syz.4.1688 Not tainted syzkaller #0 [ 410.239802][T10745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 410.249876][T10745] Call Trace: [ 410.253189][T10745] [ 410.256156][T10745] dump_stack_lvl+0x188/0x24e [ 410.260877][T10745] ? memcpy+0x3c/0x60 [ 410.264890][T10745] ? show_regs_print_info+0x12/0x12 [ 410.270112][T10745] ? load_image+0x410/0x410 [ 410.274650][T10745] panic+0x2d3/0x710 [ 410.278574][T10745] ? bpf_jit_dump+0xd0/0xd0 [ 410.283108][T10745] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 410.289033][T10745] ? _raw_spin_unlock+0x40/0x40 [ 410.293910][T10745] ? print_memory_metadata+0x314/0x400 [ 410.299403][T10745] check_panic_on_warn+0x80/0xa0 [ 410.304365][T10745] ? string+0x204/0x290 [ 410.308544][T10745] end_report+0x66/0x110 [ 410.312818][T10745] kasan_report+0x118/0x140 [ 410.317356][T10745] ? string+0x204/0x290 [ 410.321536][T10745] string+0x204/0x290 [ 410.325551][T10745] vsnprintf+0x10db/0x1c20 [ 410.330000][T10745] pointer+0x870/0xfe0 [ 410.334099][T10745] ? string+0x290/0x290 [ 410.338289][T10745] ? format_decode+0x8b1/0x1330 [ 410.343172][T10745] vsnprintf+0xd7c/0x1c20 [ 410.347529][T10745] vprintk_store+0x3d7/0xcf0 [ 410.352170][T10745] ? printk_parse_prefix+0x310/0x310 [ 410.357484][T10745] ? mark_lock+0x94/0x320 [ 410.361849][T10745] ? __lock_acquire+0x1465/0x7c40 [ 410.366915][T10745] ? __kernel_text_address+0x9/0x30 [ 410.372161][T10745] ? verify_lock_unused+0x140/0x140 [ 410.377406][T10745] ? arch_stack_walk+0xf2/0x140 [ 410.382282][T10745] vprintk_emit+0x114/0x6a0 [ 410.386823][T10745] ? printk_sprint+0x460/0x460 [ 410.391617][T10745] ? stack_trace_save+0xa6/0xf0 [ 410.396499][T10745] ? stack_trace_snprint+0xe0/0xe0 [ 410.401645][T10745] _printk+0xda/0x130 [ 410.405662][T10745] ? load_image+0x410/0x410 [ 410.410189][T10745] ? __mutex_trylock_common+0x15c/0x260 [ 410.415769][T10745] ? trace_raw_output_contention_end+0xd0/0xd0 [ 410.421954][T10745] __dynamic_pr_debug+0x196/0x240 [ 410.427007][T10745] ? __mutex_lock+0x1ab/0xae0 [ 410.431710][T10745] ? param_get_dyndbg_classes+0x160/0x160 [ 410.437472][T10745] ? nfc_llcp_get_sdp_ssap+0x35/0x3d0 [ 410.442879][T10745] ? mutex_lock_nested+0x10/0x10 [ 410.447842][T10745] ? __kmem_cache_alloc_node+0x19d/0x270 [ 410.453518][T10745] ? llcp_sock_bind+0x35d/0x700 [ 410.458389][T10745] ? rcu_is_watching+0x11/0xa0 [ 410.463207][T10745] nfc_llcp_get_sdp_ssap+0x3a0/0x3d0 [ 410.468535][T10745] llcp_sock_bind+0x3ab/0x700 [ 410.473241][T10745] ? llcp_sock_recvmsg+0xc90/0xc90 [ 410.478387][T10745] ? bpf_lsm_socket_bind+0x5/0x10 [ 410.483443][T10745] ? security_socket_bind+0x7c/0xa0 [ 410.488678][T10745] __sys_bind+0x2e9/0x3e0 [ 410.493069][T10745] ? __ia32_sys_socketpair+0xb0/0xb0 [ 410.498394][T10745] __x64_sys_bind+0x76/0x80 [ 410.502930][T10745] do_syscall_64+0x4c/0xa0 [ 410.507375][T10745] ? clear_bhb_loop+0x60/0xb0 [ 410.512073][T10745] ? clear_bhb_loop+0x60/0xb0 [ 410.516776][T10745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.522708][T10745] RIP: 0033:0x7fab6919e159 [ 410.527145][T10745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.546779][T10745] RSP: 002b:00007fab6a034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 410.555226][T10745] RAX: ffffffffffffffda RBX: 00007fab69425fa0 RCX: 00007fab6919e159 [ 410.563221][T10745] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 410.571221][T10745] RBP: 00007fab6923506b R08: 0000000000000000 R09: 0000000000000000 [ 410.579235][T10745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.587229][T10745] R13: 00007fab69426038 R14: 00007fab69425fa0 R15: 00007ffe50d44478 [ 410.595238][T10745] [ 410.598451][T10745] Kernel Offset: disabled [ 410.602791][T10745] Rebooting in 86400 seconds..