last executing test programs: 1m44.660944821s ago: executing program 4 (id=612): setns(0xc9, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\"\x00\x00'], 0x225c}, 0x1, 0x0, 0x0, 0x20004855}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 1m44.530621804s ago: executing program 4 (id=614): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x9) sendfile(r0, r1, 0x0, 0x7ffff004) 1m44.384945108s ago: executing program 4 (id=615): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000540)="$eJzs3MtvVNUfAPDvvX3xbn8/8QGCVjGR+GhpeS7cYDRxoYmJLjCualsIUqjSmgghAV3g0pC4Ny5N/Atc4caoKxMTV7o3JMSwEU1Mxtw7984M0xnowMBQ5vNJBs6Ze4ZzvnPOua8zlwD61nj2RxKxKSJ+i4h11eyNBcarf12/dm7272vnZpOoVN76M8nL/XXt3GxZtPzcxmqmUinyIy3qvfhuxMzCwvzpIj+5fPKDyaUzZ188fnLm2Pyx+VPThw7t27tz+MD0/q7EOZq1dSQWd2x77Z1Lb8weufTej99k7d1UbG+Mo1vGq9/uSgPdrqn3Njekk8EeNoSOZEMx666hfP6PxkCsr20bjVc/7WnjgLuqUqlUWh2fCxcqwAMsiV63AOiN8kCfXf+Wr3t06nFfuHo44sOD1fivF6/qlsFIizJDTde33TQeEUcu/PNl9oq7dB8CAKDR5cMR8UKr8780Hmkot6VYQxmLiP9FxP8j4qGI2BoRD0fkZR+NiMc6rL95hWTl+U965bYCW6Xs/O+lYm2rdv73byWPvzA2UOQ25/EPJUePL8zvKb6T3TE0kuWnblLHd6/88nm7bY3nf9krq788F6xKrww23aCbm1meucOwa65+ErF9sCn+XBLlMk4SEdsiYntH/3L9CuP4c1/vaFeqHv/6iGgV/010YZ2p8lXEs9X+vxBN8ZeStuuTUwcPTO+fXBcL83smy1Gx0k8/X3yzXf237v+7K+v/Dc3jv95757Mhn6yLWDpz9kS+XrvUeR0Xf/+s+Zrmcjk4bnf8Dydv5+nh4r2PZ5aXT09FDCevr3x/uv7ZMl+Wz+LfvavV+E/zfVwU/f94RGSDeGdEPBERTxZ991REPB0Ru24S/w8vP/N+u23N8df2Oi1Xzbsvi3+uRf83jP+xLFXv/84TAye+/7Zd/avr/315anfxzi32f9nleqy2gXf6/QEAAMBakOa/gU/SiVo6TScmqr/h3xob0oXFpeXnjy5+dGqu+lv5sRhKyztdow33Q6eKe8Nlfropv7e4b/zFwPo8PzG7uDDX6+Chz21sM/8zfzyAz6kATTyvBf3L/If+Zf5D/6rP/wM9bQdw7zn+Q/9qNf/P96AdwL3n+A/9y/yH/mX+Q/8y/6Ev3fhI/HDUno1P7+iR/zWb+HXLfdGMNZCItPNPDUYv2zzc09pvOzG46v/MorPEaLELODPSskyPd0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABd8l8AAAD//wcu8Cs=") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x0) 1m44.001216257s ago: executing program 4 (id=617): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000880), 0x80, 0x0) mount$bind(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000700)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000740)='./file0\x00', 0x9000, &(0x7f0000000780)={0x200005, 0xd, 0x80000}, 0x20) 1m43.608648677s ago: executing program 4 (id=619): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xd5e0}]}, 0x10) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000240)={0xc}, 0x8) 1m42.808911915s ago: executing program 4 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) write$tun(r1, 0x0, 0xffe) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001bc0)={r0, &(0x7f0000000000), &(0x7f0000000bc0)=""/4096}, 0x20) 1m42.600279941s ago: executing program 32 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) write$tun(r1, 0x0, 0xffe) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001bc0)={r0, &(0x7f0000000000), &(0x7f0000000bc0)=""/4096}, 0x20) 25.542175398s ago: executing program 5 (id=1395): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='s'], 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004300), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008300)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x18, 0x0, 0x9, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 25.305517214s ago: executing program 5 (id=1397): syz_emit_ethernet(0x102, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff88a840008100180086dd67cb5e1b00c40600fe880000000000000000000000000101fe8800000000000000000000000000016c120409b8404300ff0100000000000000000000000000010000000000000000000000000000000120010000000000000000000000000000fc02000000000000000000000000000020010000000000000000000000000002fe8000000000000000000000000000bbfc02000000000000000000000000000020010000000000000000000000000000ff0200000000000000000000000000010000000000f3004649"], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23.406465799s ago: executing program 5 (id=1418): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r3, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23.264958472s ago: executing program 5 (id=1419): syz_mount_image$exfat(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)={[{@utf8}, {@utf8}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x2}}, {@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@utf8}, {@utf8}, {@dmask={'dmask', 0x3d, 0x9}}]}, 0xff, 0x1535, &(0x7f0000000740)="$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") socket$key(0xf, 0x3, 0x2) pipe(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) 22.96205657s ago: executing program 5 (id=1421): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="9bc02bbd7000ffdbdf250100000008000280"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040100) 22.501426871s ago: executing program 5 (id=1426): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') pread64(r2, &(0x7f0000000280)=""/172, 0xac, 0xdf) 22.068873621s ago: executing program 33 (id=1426): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') pread64(r2, &(0x7f0000000280)=""/172, 0xac, 0xdf) 9.373256096s ago: executing program 0 (id=1473): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="0123456789abcdef0123456789abcdef112233445566778899aabbccddeeff00", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)="000102030405060708090a0b0c0d0e0f", 0x10}], 0x1, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x28, 0x117, 0x2, 0x10, '\x00'/16}], 0x40}, 0x0) read$alg(r1, &(0x7f0000000700)=""/16, 0x10) 9.367444036s ago: executing program 1 (id=1474): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) fcntl$setpipe(r1, 0x407, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f00000024c0)={0x90, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffff, 0x5}}}, 0x90) 9.356978846s ago: executing program 2 (id=1475): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0x439, 0x70bd29, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x28586, 0x4}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4002040) 9.342880376s ago: executing program 3 (id=1476): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = syz_io_uring_setup(0x31bc, &(0x7f0000000540)={0x0, 0xc3af, 0x100, 0x1, 0x278}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x5c26, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x8, 0x0, 0x91a, 0x2}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 7.737594015s ago: executing program 0 (id=1477): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x44) close(r0) inotify_init1(0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x7) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 7.730706095s ago: executing program 1 (id=1478): socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @broadcast, @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x2, 0x24, 0x65, 0x0, 0xd, 0x21, 0x0, @remote, @private=0xa010100}, {{0x4e20, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x5, 0x6, 's&}', 0x1, "c07b04"}}}}}}, 0x0) 7.729775336s ago: executing program 2 (id=1479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.720083645s ago: executing program 3 (id=1480): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x204031, 0xffffffffffffffff, 0x97170000) clock_nanosleep(0x2, 0x0, &(0x7f0000002080)={0x77359400}, &(0x7f0000000040)) 5.958927278s ago: executing program 0 (id=1481): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="ec0600000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000c0060380180000800c00018006000100ff"], 0x6ec}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 5.949788858s ago: executing program 1 (id=1482): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)=',8Zz', 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b", 0x2b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 5.939778748s ago: executing program 2 (id=1483): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040)={0x77359400}, 0x10) accept4(r0, 0x0, 0x0, 0x80800) 5.929849708s ago: executing program 3 (id=1484): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) 4.021299444s ago: executing program 0 (id=1485): syz_open_procfs(0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[], 0x0) 4.021118024s ago: executing program 1 (id=1486): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.020482074s ago: executing program 2 (id=1487): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000500)={0x0, 0x401, 0x1, [0x9]}, 0xa) 4.009513645s ago: executing program 3 (id=1488): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080), 0xfffffe13) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) splice(r0, 0x0, r3, 0x0, 0x1e8640, 0x0) 2.09473001s ago: executing program 0 (id=1489): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0xfffc, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x80257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x1, 0x2, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x81d17, 0x8200, 0x2, 0x367, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff968}, 0x94) 2.09376269s ago: executing program 1 (id=1490): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@routing={0x0, 0x0, 0x2, 0xe4}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 2.09334476s ago: executing program 2 (id=1491): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = eventfd2(0x7, 0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r0, &(0x7f0000000340)="d1", 0x1, 0x6, 0x0, 0x5, r2}]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.09284901s ago: executing program 3 (id=1492): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40000) 1.20667ms ago: executing program 0 (id=1493): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x4, 0x100, 0x0, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xd, &(0x7f0000000540)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x30}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2, 0x6}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r4, 0x4) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 932.56µs ago: executing program 1 (id=1494): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e60, 0x80000, @empty, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x28}, 0x3400c8d4) 215.25µs ago: executing program 2 (id=1495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2d516fba, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 0s ago: executing program 3 (id=1496): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f000018e000/0x3000)=nil, &(0x7f00000da000/0x4000)=nil, 0x3000}) kernel console output (not intermixed with test programs): C6.0006: unknown main item tag 0x0 [ 121.367450][ T5691] Dead loop on virtual device ip6_vti0, fix it urgently! [ 121.386249][ T4390] hid-generic 0003:0B05:18C6.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.2-1/input0 [ 122.155092][ T4347] usb 3-1: USB disconnect, device number 4 [ 122.748641][ T5742] loop2: detected capacity change from 0 to 512 [ 122.761222][ T4347] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.828612][ T5742] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.892995][ T5742] EXT4-fs (loop2): 1 truncate cleaned up [ 122.899563][ T5742] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.973260][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.025171][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.052678][ T26] audit: type=1800 audit(1792106035.709:8): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.478" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 123.059529][ T5748] bond0: (slave vlan1): Enslaving as an active interface with an up link [ 123.107269][ T4347] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 123.126738][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.146295][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 123.163442][ T4347] usb 1-1: config 0 descriptor?? [ 123.235387][ T5749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.288011][ T5749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.338621][ T5749] bond0 (unregistering): (slave vlan1): Releasing backup interface [ 123.376453][ T5749] bond0 (unregistering): Released all slaves [ 123.567665][ T5765] loop4: detected capacity change from 0 to 256 [ 123.635679][ T26] audit: type=1804 audit(1792106036.299:9): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.485" name="/newroot/116/bus/bus" dev="loop4" ino=1048641 res=1 errno=0 [ 123.717061][ T5771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 123.823908][ T4347] hid-led: probe of 0003:27B8:01ED.0007 failed with error -71 [ 123.859369][ T4347] usb 1-1: USB disconnect, device number 5 [ 124.451241][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 124.458539][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 125.459247][ T5829] FAULT_INJECTION: forcing a failure. [ 125.459247][ T5829] name failslab, interval 1, probability 0, space 0, times 0 [ 125.479307][ T5829] CPU: 0 PID: 5829 Comm: syz.0.508 Not tainted syzkaller #0 [ 125.487195][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.498583][ T5829] Call Trace: [ 125.502072][ T5829] [ 125.505758][ T5829] dump_stack_lvl+0x188/0x24e [ 125.513097][ T5829] ? show_regs_print_info+0x12/0x12 [ 125.518367][ T5829] ? load_image+0x410/0x410 [ 125.523478][ T5829] ? __might_sleep+0xd0/0xd0 [ 125.528634][ T5829] ? __lock_acquire+0x7ea0/0x7ea0 [ 125.534232][ T5829] should_fail_ex+0x390/0x4c0 [ 125.539780][ T5829] should_failslab+0x5/0x20 [ 125.545894][ T5829] slab_pre_alloc_hook+0x59/0x300 [ 125.552289][ T5829] ? current_time+0x19b/0x2c0 [ 125.557336][ T5829] kmem_cache_alloc_lru+0x49/0x2e0 [ 125.563446][ T5829] ? __d_alloc+0x2e/0x6e0 [ 125.569657][ T5829] __d_alloc+0x2e/0x6e0 [ 125.574074][ T5829] d_make_root+0x46/0xd0 [ 125.580015][ T5829] proc_fill_super+0x4b4/0x730 [ 125.585532][ T5829] ? proc_reconfigure+0x370/0x370 [ 125.592033][ T5829] get_tree_nodev+0xb0/0x160 [ 125.596845][ T5829] vfs_get_tree+0x88/0x270 [ 125.602356][ T5829] do_new_mount+0x247/0xa40 [ 125.607294][ T5829] __se_sys_mount+0x2e3/0x3d0 [ 125.611121][ T4347] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.612437][ T5829] ? __x64_sys_mount+0xc0/0xc0 [ 125.624830][ T5829] ? lockdep_hardirqs_on+0x94/0x140 [ 125.630286][ T5829] ? __x64_sys_mount+0x1c/0xc0 [ 125.635284][ T5829] do_syscall_64+0x4c/0xa0 [ 125.639917][ T5829] ? clear_bhb_loop+0x60/0xb0 [ 125.644729][ T5829] ? clear_bhb_loop+0x60/0xb0 [ 125.649466][ T5829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.655664][ T5829] RIP: 0033:0x7f858399e559 [ 125.660106][ T5829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.679934][ T5829] RSP: 002b:00007f858492d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.689259][ T5829] RAX: ffffffffffffffda RBX: 00007f8583c25fa0 RCX: 00007f858399e559 [ 125.697411][ T5829] RDX: 00002000000007c0 RSI: 0000200000000780 RDI: 0000000000000000 [ 125.705438][ T5829] RBP: 00007f8583a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 125.713786][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.722306][ T5829] R13: 00007f8583c26038 R14: 00007f8583c25fa0 R15: 00007ffc4a4b75d8 [ 125.730342][ T5829] [ 125.789376][ T26] audit: type=1326 audit(1792106038.449:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5832 comm="syz.2.510" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b7899e559 code=0x0 [ 125.790642][ T5829] proc_fill_super: allocate dentry failed [ 125.854551][ T4347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.881091][ T4347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.907599][ T4347] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 125.930228][ T4347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.951464][ T4347] usb 5-1: config 0 descriptor?? [ 126.147262][ T5843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.513'. [ 126.423495][ T5848] loop0: detected capacity change from 0 to 8192 [ 126.596786][ T4347] hid-led: probe of 0003:27B8:01ED.0008 failed with error -71 [ 126.635088][ T4347] usb 5-1: USB disconnect, device number 5 [ 127.218575][ T5873] bond0: (slave vlan1): Enslaving as an active interface with an up link [ 127.347731][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.385037][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.425270][ T5880] bond0 (unregistering): (slave vlan1): Releasing backup interface [ 127.461100][ T5880] bond0 (unregistering): Released all slaves [ 128.780720][ T5914] IPVS: Scheduler module ip_vs_ not found [ 129.521138][ T4340] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 129.635545][ T5952] loop0: detected capacity change from 0 to 128 [ 129.669387][ T5952] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 129.682801][ T5952] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.712826][ T4340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.731154][ T4340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.761126][ T4340] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 129.777721][ T4340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.805741][ T4340] usb 5-1: config 0 descriptor?? [ 129.891050][ T4390] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.924873][ T5960] loop2: detected capacity change from 0 to 128 [ 129.952488][ T5960] EXT4-fs: Ignoring removed nobh option [ 129.987445][ T5960] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 130.035329][ T5960] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.107604][ T4390] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 130.128464][ T4390] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 130.143685][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 130.149863][ T4390] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 130.160745][ T4390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.193991][ T4390] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 130.209870][ T4390] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 130.457388][ T4340] usb 5-1: language id specifier not provided by device, defaulting to English [ 130.571516][ T5950] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 130.601750][ T5950] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 130.635577][ T5950] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 130.708483][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 130.783217][ T5949] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 130.807968][ T4357] usb 4-1: USB disconnect, device number 5 [ 130.837399][ T4357] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 130.849688][ T4357] spcp8x5 4-1:1.0: device disconnected [ 130.879095][ T4340] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0009/input/input16 [ 130.979287][ T4340] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0009/input/input17 [ 130.992102][ T5984] device wlan0 entered promiscuous mode [ 131.010358][ T4340] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0009/input/input18 [ 131.038731][ T4340] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0009/input/input19 [ 131.069638][ T4340] uclogic 0003:256C:006D.0009: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 131.131624][ T4340] usb 5-1: USB disconnect, device number 6 [ 131.357372][ T5991] fido_id[5991]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 131.382016][ T5995] loop2: detected capacity change from 0 to 2048 [ 131.453855][ T5997] kvm: apic: phys broadcast and lowest prio [ 131.458974][ T5995] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 131.552075][ T26] audit: type=1800 audit(1792106044.219:11): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.572" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 131.614228][ T6003] netlink: 'syz.0.574': attribute type 4 has an invalid length. [ 131.636121][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 132.708945][ T6034] cpuidle: using governor haltpoll [ 132.764843][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.771360][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.054635][ T6053] Bluetooth: hci0: service_discovery: too big uuid_count value 8192 [ 133.295145][ T6058] rxe_eth0 speed is unknown, defaulting to 1000 [ 134.580325][ T6093] loop4: detected capacity change from 0 to 512 [ 134.611601][ T6093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.626474][ T6093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.645835][ T6093] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 134.680424][ T6093] EXT4-fs (loop4): 1 truncate cleaned up [ 134.697893][ T6093] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 134.809138][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 135.050524][ T6099] FAULT_INJECTION: forcing a failure. [ 135.050524][ T6099] name failslab, interval 1, probability 0, space 0, times 0 [ 135.071351][ T6099] CPU: 0 PID: 6099 Comm: syz.0.616 Not tainted syzkaller #0 [ 135.078713][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.089239][ T6099] Call Trace: [ 135.092646][ T6099] [ 135.095604][ T6099] dump_stack_lvl+0x188/0x24e [ 135.100329][ T6099] ? show_regs_print_info+0x12/0x12 [ 135.105573][ T6099] ? load_image+0x410/0x410 [ 135.110124][ T6099] ? __might_sleep+0xd0/0xd0 [ 135.114837][ T6099] ? __lock_acquire+0x7ea0/0x7ea0 [ 135.119993][ T6099] should_fail_ex+0x390/0x4c0 [ 135.124719][ T6099] should_failslab+0x5/0x20 [ 135.129281][ T6099] slab_pre_alloc_hook+0x59/0x300 [ 135.134431][ T6099] kmem_cache_alloc+0x56/0x2f0 [ 135.139267][ T6099] ? __proc_create+0x36f/0x8b0 [ 135.144066][ T6099] __proc_create+0x36f/0x8b0 [ 135.148684][ T6099] ? proc_symlink+0x210/0x210 [ 135.153399][ T6099] ? make_kgid+0x1c4/0x650 [ 135.157948][ T6099] ? from_kuid_munged+0x6e0/0x6e0 [ 135.163028][ T6099] ? rcu_is_watching+0x11/0xa0 [ 135.167930][ T6099] _proc_mkdir+0x5f/0x160 [ 135.172304][ T6099] proc_net_ns_init+0x287/0x380 [ 135.177199][ T6099] ops_init+0x360/0x5e0 [ 135.181401][ T6099] setup_net+0x4f2/0xbd0 [ 135.185689][ T6099] ? copy_net_ns+0x5b0/0x5b0 [ 135.190319][ T6099] ? copy_net_ns+0x324/0x5b0 [ 135.194967][ T6099] ? down_read_killable+0x1cc/0x340 [ 135.200239][ T6099] copy_net_ns+0x33e/0x5b0 [ 135.204715][ T6099] create_new_namespaces+0x3ce/0x700 [ 135.210056][ T6099] unshare_nsproxy_namespaces+0x116/0x160 [ 135.215822][ T6099] ksys_unshare+0x4f6/0x8e0 [ 135.220365][ T6099] ? sighand_ctor+0x40/0x40 [ 135.225018][ T6099] ? lock_chain_count+0x20/0x20 [ 135.230188][ T6099] ? syscall_enter_from_user_mode+0x21/0x80 [ 135.236329][ T6099] __x64_sys_unshare+0x34/0x40 [ 135.241216][ T6099] do_syscall_64+0x4c/0xa0 [ 135.245754][ T6099] ? clear_bhb_loop+0x60/0xb0 [ 135.250478][ T6099] ? clear_bhb_loop+0x60/0xb0 [ 135.255281][ T6099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.261214][ T6099] RIP: 0033:0x7f858399e559 [ 135.265662][ T6099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.285404][ T6099] RSP: 002b:00007f858492d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 135.293855][ T6099] RAX: ffffffffffffffda RBX: 00007f8583c25fa0 RCX: 00007f858399e559 [ 135.301859][ T6099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040040400 [ 135.309879][ T6099] RBP: 00007f8583a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 135.317887][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.325890][ T6099] R13: 00007f8583c26038 R14: 00007f8583c25fa0 R15: 00007ffc4a4b75d8 [ 135.333949][ T6099] [ 135.337182][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.659888][ T6109] FAULT_INJECTION: forcing a failure. [ 135.659888][ T6109] name failslab, interval 1, probability 0, space 0, times 0 [ 135.677440][ T6109] CPU: 1 PID: 6109 Comm: syz.0.622 Not tainted syzkaller #0 [ 135.685368][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.695449][ T6109] Call Trace: [ 135.698850][ T6109] [ 135.702152][ T6109] dump_stack_lvl+0x188/0x24e [ 135.707120][ T6109] ? sctp_sendmsg+0x1686/0x2940 [ 135.712072][ T6109] ? __x64_sys_sendto+0xda/0xf0 [ 135.716934][ T6109] ? show_regs_print_info+0x12/0x12 [ 135.722178][ T6109] ? load_image+0x410/0x410 [ 135.726711][ T6109] should_fail_ex+0x390/0x4c0 [ 135.731521][ T6109] should_failslab+0x5/0x20 [ 135.736057][ T6109] slab_pre_alloc_hook+0x59/0x300 [ 135.741384][ T6109] ? sctp_add_bind_addr+0x89/0x350 [ 135.746543][ T6109] __kmem_cache_alloc_node+0x4f/0x270 [ 135.752050][ T6109] ? sctp_add_bind_addr+0x89/0x350 [ 135.757207][ T6109] kmalloc_trace+0x26/0xe0 [ 135.761657][ T6109] sctp_add_bind_addr+0x89/0x350 [ 135.766643][ T6109] sctp_copy_local_addr_list+0x317/0x4d0 [ 135.772546][ T6109] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 135.778485][ T6109] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 135.785139][ T6109] ? sctp_v6_is_any+0x60/0x70 [ 135.789895][ T6109] ? sctp_copy_one_addr+0x93/0x660 [ 135.795040][ T6109] sctp_bind_addr_copy+0xaf/0x3c0 [ 135.800088][ T6109] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 135.806462][ T6109] sctp_connect_new_asoc+0x2f5/0x6a0 [ 135.811773][ T6109] ? __sctp_connect+0xd80/0xd80 [ 135.817100][ T6109] ? __local_bh_enable_ip+0x136/0x1c0 [ 135.822506][ T6109] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 135.828268][ T6109] ? security_sctp_bind_connect+0x85/0xb0 [ 135.834022][ T6109] sctp_sendmsg+0x1686/0x2940 [ 135.838831][ T6109] ? sctp_getsockopt+0x8a0/0x8a0 [ 135.843795][ T6109] ? __lock_acquire+0x7ea0/0x7ea0 [ 135.848833][ T6109] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 135.855256][ T6109] ? aa_sock_msg_perm+0x94/0x150 [ 135.860209][ T6109] ? inet_sendmsg+0xca/0x2a0 [ 135.865161][ T6109] __sys_sendto+0x497/0x650 [ 135.869690][ T6109] ? __ia32_sys_getpeername+0x80/0x80 [ 135.875089][ T6109] ? __lock_acquire+0x7ea0/0x7ea0 [ 135.880164][ T6109] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.886247][ T6109] ? lock_chain_count+0x20/0x20 [ 135.891124][ T6109] __x64_sys_sendto+0xda/0xf0 [ 135.895804][ T6109] do_syscall_64+0x4c/0xa0 [ 135.900220][ T6109] ? clear_bhb_loop+0x60/0xb0 [ 135.906147][ T6109] ? clear_bhb_loop+0x60/0xb0 [ 135.910858][ T6109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.917276][ T6109] RIP: 0033:0x7f858399e559 [ 135.921694][ T6109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.941484][ T6109] RSP: 002b:00007f858492d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 135.949931][ T6109] RAX: ffffffffffffffda RBX: 00007f8583c25fa0 RCX: 00007f858399e559 [ 135.958472][ T6109] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000004 [ 135.966979][ T6109] RBP: 00007f8583a358b0 R08: 00002000000003c0 R09: 000000000000001c [ 135.975146][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.984013][ T6109] R13: 00007f8583c26038 R14: 00007f8583c25fa0 R15: 00007ffc4a4b75d8 [ 135.992090][ T6109] [ 136.780753][ T6134] loop0: detected capacity change from 0 to 128 [ 136.847826][ T6134] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 136.868342][ T6134] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.916712][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.927448][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.940190][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.948467][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.957287][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 136.965553][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.106259][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 137.141459][ T6141] rxe_eth0 speed is unknown, defaulting to 1000 [ 137.283238][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.293846][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.399056][ T6158] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.406303][ T6158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.416749][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.423989][ T6158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.446210][ T6163] loop2: detected capacity change from 0 to 512 [ 137.535766][ T6158] device bridge0 entered promiscuous mode [ 137.878226][ T6141] chnl_net:caif_netlink_parms(): no params data found [ 138.012246][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.020477][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.029572][ T6141] device bridge_slave_0 entered promiscuous mode [ 138.038894][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.046931][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.056318][ T6141] device bridge_slave_1 entered promiscuous mode [ 138.071892][ T6185] netlink: 'syz.1.649': attribute type 4 has an invalid length. [ 138.121082][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 138.141415][ T6141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.196973][ T6141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.316466][ T6141] team0: Port device team_slave_0 added [ 138.336460][ T6141] team0: Port device team_slave_1 added [ 138.405341][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.437789][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.471428][ T6141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.498169][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.526571][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.615934][ T6141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.661630][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 138.732659][ T6141] device hsr_slave_0 entered promiscuous mode [ 138.757730][ T6141] device hsr_slave_1 entered promiscuous mode [ 138.784598][ T6141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.808114][ T6141] Cannot create hsr debugfs directory [ 138.820463][ T6210] input: syz1 as /devices/virtual/input/input20 [ 139.001112][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 139.171152][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 139.277975][ T6141] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.304334][ T6141] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.344784][ T6141] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.366265][ T6228] Invalid ELF header magic: != ELF [ 139.388182][ T6141] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 139.840443][ T6141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.887752][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.899685][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.926462][ T6141] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.955747][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.977365][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.017303][ T4959] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.024525][ T4959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.038363][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.058301][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.077236][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.090247][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.098784][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.118803][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.145084][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.173943][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.209981][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.229311][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.259682][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.279433][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.314127][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.350567][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.370733][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.392896][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.428466][ T6141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.925940][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.946278][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.975420][ T6141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.081545][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 141.505181][ T6286] ip_tables: iptables: counters copy to user failed while replacing table [ 141.756566][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 141.849120][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.868956][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.932625][ T6297] Zero length message leads to an empty skb [ 141.939734][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.957719][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.979463][ T6141] device veth0_vlan entered promiscuous mode [ 141.989865][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.005307][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.036596][ T6141] device veth1_vlan entered promiscuous mode [ 142.095652][ T6299] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.158266][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.175161][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.205210][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.227135][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.257262][ T6141] device veth0_macvtap entered promiscuous mode [ 142.285026][ T6141] device veth1_macvtap entered promiscuous mode [ 142.347274][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.398606][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.485675][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.555064][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.579272][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.601319][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.642095][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.683343][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.705811][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.731084][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.772634][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.832168][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.845794][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.869621][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.912517][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.947332][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.979181][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.000089][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.024737][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.038323][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.056954][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.077478][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.098509][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.129697][ T6141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.150729][ T6141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.162361][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 143.192809][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.264806][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.279629][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.317860][ T6141] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.353695][ T6141] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.389096][ T6141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.438322][ T6141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.766408][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.799009][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.914467][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.937249][ T4959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.964388][ T4959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.015783][ T2974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.240043][ T6341] fuse: Bad value for 'fd' [ 144.259812][ T6341] overlayfs: failed to clone upperpath [ 144.401750][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.706'. [ 145.137638][ T6369] fuse: Bad value for 'fd' [ 145.240557][ T6375] loop2: detected capacity change from 0 to 256 [ 145.248232][ T4350] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 145.251345][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 145.289005][ T26] audit: type=1804 audit(1792106057.949:12): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.719" name="/newroot/140/bus/bus" dev="loop2" ino=1048652 res=1 errno=0 [ 145.443364][ T4350] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 145.454208][ T4350] usb 6-1: config 0 interface 0 has no altsetting 0 [ 145.467088][ T4350] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 145.478600][ T4350] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 145.488522][ T4350] usb 6-1: Product: syz [ 145.498300][ T4350] usb 6-1: Manufacturer: syz [ 145.508479][ T4350] usb 6-1: SerialNumber: syz [ 145.518797][ T4350] usb 6-1: config 0 descriptor?? [ 145.525113][ T6359] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 145.555239][ T4350] usb 6-1: selecting invalid altsetting 0 [ 145.615262][ T6380] FAULT_INJECTION: forcing a failure. [ 145.615262][ T6380] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.641419][ T6380] CPU: 0 PID: 6380 Comm: syz.0.721 Not tainted syzkaller #0 [ 145.648765][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.658832][ T6380] Call Trace: [ 145.662134][ T6380] [ 145.665090][ T6380] dump_stack_lvl+0x188/0x24e [ 145.669845][ T6380] ? show_regs_print_info+0x12/0x12 [ 145.675167][ T6380] ? load_image+0x410/0x410 [ 145.679703][ T6380] ? __might_fault+0xa6/0x120 [ 145.684422][ T6380] should_fail_ex+0x390/0x4c0 [ 145.689146][ T6380] copyin+0x1b/0x120 [ 145.694605][ T6380] _copy_from_iter+0x559/0x1130 [ 145.699527][ T6380] ? copyout_mc+0x110/0x110 [ 145.704079][ T6380] ? __virt_addr_valid+0x188/0x540 [ 145.709239][ T6380] ? __virt_addr_valid+0x188/0x540 [ 145.714385][ T6380] ? __virt_addr_valid+0x467/0x540 [ 145.719632][ T6380] ? __phys_addr_symbol+0x2b/0x70 [ 145.724684][ T6380] ? __check_object_size+0x4f6/0xa70 [ 145.730621][ T6380] netlink_sendmsg+0x755/0xbd0 [ 145.735438][ T6380] ? netlink_getsockopt+0x550/0x550 [ 145.741492][ T6380] ? apparmor_socket_sendmsg+0x8a/0x330 [ 145.747275][ T6380] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 145.752611][ T6380] ? security_socket_sendmsg+0x7c/0xa0 [ 145.758387][ T6380] sock_write_iter+0x2d5/0x3e0 [ 145.763214][ T6380] ? sock_read_iter+0x3a0/0x3a0 [ 145.768206][ T6380] ? common_file_perm+0x171/0x1c0 [ 145.774504][ T6380] do_iter_write+0x638/0xb10 [ 145.779134][ T6380] ? iovec_from_user+0x2dc/0x360 [ 145.784126][ T6380] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 145.790338][ T6380] ? vfs_iter_write+0xa0/0xa0 [ 145.795051][ T6380] ? __import_iovec+0x306/0x510 [ 145.800047][ T6380] ? import_iovec+0x6f/0xa0 [ 145.804619][ T6380] do_writev+0x27b/0x480 [ 145.809012][ T6380] ? do_readv+0x460/0x460 [ 145.813394][ T6380] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 145.819859][ T6380] ? lock_chain_count+0x20/0x20 [ 145.825371][ T6380] ? lockdep_hardirqs_on+0x94/0x140 [ 145.830971][ T6380] do_syscall_64+0x4c/0xa0 [ 145.835611][ T6380] ? clear_bhb_loop+0x60/0xb0 [ 145.840329][ T6380] ? clear_bhb_loop+0x60/0xb0 [ 145.845056][ T6380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.851346][ T6380] RIP: 0033:0x7f858399e559 [ 145.855795][ T6380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.875432][ T6380] RSP: 002b:00007f858492d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 145.883894][ T6380] RAX: ffffffffffffffda RBX: 00007f8583c25fa0 RCX: 00007f858399e559 [ 145.892084][ T6380] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000003 [ 145.900089][ T6380] RBP: 00007f8583a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 145.908210][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.916213][ T6380] R13: 00007f8583c26038 R14: 00007f8583c25fa0 R15: 00007ffc4a4b75d8 [ 145.924233][ T6380] [ 145.989091][ T6359] usb 6-1: BOGUS urb xfer, pipe 0 != type 3 [ 146.738830][ T6395] syz.0.726[6395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.739000][ T6395] syz.0.726[6395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.397880][ T26] audit: type=1326 audit(1792106060.059:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.2.729" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b7899e559 code=0x0 [ 148.030555][ T14] usb 6-1: USB disconnect, device number 2 [ 148.145972][ T6420] FAULT_INJECTION: forcing a failure. [ 148.145972][ T6420] name failslab, interval 1, probability 0, space 0, times 0 [ 148.180590][ T6420] CPU: 1 PID: 6420 Comm: syz.2.737 Not tainted syzkaller #0 [ 148.187948][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.198030][ T6420] Call Trace: [ 148.201335][ T6420] [ 148.204303][ T6420] dump_stack_lvl+0x188/0x24e [ 148.209041][ T6420] ? show_regs_print_info+0x12/0x12 [ 148.214273][ T6420] ? load_image+0x410/0x410 [ 148.218826][ T6420] ? verify_lock_unused+0x140/0x140 [ 148.224089][ T6420] should_fail_ex+0x390/0x4c0 [ 148.228811][ T6420] should_failslab+0x5/0x20 [ 148.233350][ T6420] slab_pre_alloc_hook+0x59/0x300 [ 148.238414][ T6420] kmem_cache_alloc+0x56/0x2f0 [ 148.243210][ T6420] ? skb_clone+0x1e7/0x370 [ 148.247761][ T6420] skb_clone+0x1e7/0x370 [ 148.252056][ T6420] __netlink_deliver_tap+0x3e4/0x7e0 [ 148.257402][ T6420] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.262727][ T6420] netlink_deliver_tap+0x19c/0x1b0 [ 148.267889][ T6420] netlink_unicast+0x777/0x920 [ 148.272701][ T6420] netlink_sendmsg+0x8ad/0xbd0 [ 148.277508][ T6420] ? netlink_getsockopt+0x550/0x550 [ 148.282744][ T6420] ? apparmor_socket_sendmsg+0x8a/0x330 [ 148.288339][ T6420] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 148.293666][ T6420] ? security_socket_sendmsg+0x7c/0xa0 [ 148.299211][ T6420] sock_write_iter+0x2d5/0x3e0 [ 148.304025][ T6420] ? sock_read_iter+0x3a0/0x3a0 [ 148.309020][ T6420] ? common_file_perm+0x171/0x1c0 [ 148.314166][ T6420] do_iter_write+0x638/0xb10 [ 148.319683][ T6420] ? iovec_from_user+0x2dc/0x360 [ 148.324842][ T6420] ? vfs_iter_write+0xa0/0xa0 [ 148.329585][ T6420] ? __import_iovec+0x306/0x510 [ 148.334508][ T6420] ? import_iovec+0x6f/0xa0 [ 148.339065][ T6420] do_writev+0x27b/0x480 [ 148.343346][ T6420] ? do_readv+0x460/0x460 [ 148.347723][ T6420] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 148.353745][ T6420] ? lock_chain_count+0x20/0x20 [ 148.358653][ T6420] ? lockdep_hardirqs_on+0x94/0x140 [ 148.363905][ T6420] do_syscall_64+0x4c/0xa0 [ 148.368373][ T6420] ? clear_bhb_loop+0x60/0xb0 [ 148.373078][ T6420] ? clear_bhb_loop+0x60/0xb0 [ 148.377790][ T6420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.383743][ T6420] RIP: 0033:0x7f6b7899e559 [ 148.388186][ T6420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.408605][ T6420] RSP: 002b:00007f6b7985d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 148.417329][ T6420] RAX: ffffffffffffffda RBX: 00007f6b78c25fa0 RCX: 00007f6b7899e559 [ 148.426029][ T6420] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000003 [ 148.434036][ T6420] RBP: 00007f6b78a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 148.442042][ T6420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.450046][ T6420] R13: 00007f6b78c26038 R14: 00007f6b78c25fa0 R15: 00007ffe3e9f3cb8 [ 148.458069][ T6420] [ 148.642364][ T6433] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.908055][ T6438] loop3: detected capacity change from 0 to 512 [ 149.049368][ T6438] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 149.066991][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.744'. [ 149.309894][ T6452] loop2: detected capacity change from 0 to 512 [ 149.346072][ T6452] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.371430][ T6452] ext4: Unknown parameter 'journal_checksum2' [ 149.492757][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 149.851353][ T6465] FAULT_INJECTION: forcing a failure. [ 149.851353][ T6465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.905842][ T6465] CPU: 1 PID: 6465 Comm: syz.3.751 Not tainted syzkaller #0 [ 149.913197][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.923453][ T6465] Call Trace: [ 149.926743][ T6465] [ 149.929682][ T6465] dump_stack_lvl+0x188/0x24e [ 149.934394][ T6465] ? show_regs_print_info+0x12/0x12 [ 149.939639][ T6465] ? load_image+0x410/0x410 [ 149.944184][ T6465] ? __might_fault+0xa6/0x120 [ 149.948902][ T6465] should_fail_ex+0x390/0x4c0 [ 149.953798][ T6465] copyin+0x1b/0x120 [ 149.957732][ T6465] _copy_from_iter+0x559/0x1130 [ 149.962659][ T6465] ? copyout_mc+0x110/0x110 [ 149.967210][ T6465] ? __virt_addr_valid+0x188/0x540 [ 149.972345][ T6465] ? __virt_addr_valid+0x188/0x540 [ 149.977464][ T6465] ? __virt_addr_valid+0x467/0x540 [ 149.982626][ T6465] ? __phys_addr_symbol+0x2b/0x70 [ 149.987838][ T6465] ? __check_object_size+0x4f6/0xa70 [ 149.993709][ T6465] netlink_sendmsg+0x755/0xbd0 [ 149.998505][ T6465] ? netlink_getsockopt+0x550/0x550 [ 150.003733][ T6465] ? apparmor_socket_sendmsg+0x8a/0x330 [ 150.009583][ T6465] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 150.015017][ T6465] ? security_socket_sendmsg+0x7c/0xa0 [ 150.020496][ T6465] sock_write_iter+0x2d5/0x3e0 [ 150.025277][ T6465] ? sock_read_iter+0x3a0/0x3a0 [ 150.030135][ T6465] ? common_file_perm+0x171/0x1c0 [ 150.035184][ T6465] do_iter_write+0x638/0xb10 [ 150.040591][ T6465] ? iovec_from_user+0x2dc/0x360 [ 150.046268][ T6465] ? vfs_iter_write+0xa0/0xa0 [ 150.050978][ T6465] ? __import_iovec+0x306/0x510 [ 150.055954][ T6465] ? import_iovec+0x6f/0xa0 [ 150.060477][ T6465] do_writev+0x27b/0x480 [ 150.064769][ T6465] ? do_readv+0x460/0x460 [ 150.069148][ T6465] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 150.075187][ T6465] ? lock_chain_count+0x20/0x20 [ 150.080064][ T6465] ? lockdep_hardirqs_on+0x94/0x140 [ 150.085278][ T6465] do_syscall_64+0x4c/0xa0 [ 150.089697][ T6465] ? clear_bhb_loop+0x60/0xb0 [ 150.094478][ T6465] ? clear_bhb_loop+0x60/0xb0 [ 150.099155][ T6465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.105135][ T6465] RIP: 0033:0x7f752639e559 [ 150.109600][ T6465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.129326][ T6465] RSP: 002b:00007f75271d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 150.137769][ T6465] RAX: ffffffffffffffda RBX: 00007f7526625fa0 RCX: 00007f752639e559 [ 150.145838][ T6465] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000003 [ 150.153830][ T6465] RBP: 00007f75264358b0 R08: 0000000000000000 R09: 0000000000000000 [ 150.161911][ T6465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.169896][ T6465] R13: 00007f7526626038 R14: 00007f7526625fa0 R15: 00007ffdbcc15648 [ 150.177882][ T6465] [ 150.797351][ T6488] syz.5.760[6488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.797502][ T6488] syz.5.760[6488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.940491][ T6525] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.961378][ T6525] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.970195][ T6525] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.978969][ T6525] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.982083][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.779'. [ 152.130041][ T6525] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.139242][ T6525] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.148318][ T6525] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.157385][ T6525] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.370919][ T6525] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.380320][ T6525] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.389147][ T6525] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.397926][ T6525] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.451624][ T6525] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.460696][ T6525] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.470175][ T6525] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.479105][ T6525] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.020507][ T6594] device veth0_macvtap left promiscuous mode [ 154.696143][ T6618] loop5: detected capacity change from 0 to 512 [ 154.752536][ T6618] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.817: inode has both inline data and extents flags [ 154.802451][ T6618] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.817: couldn't read orphan inode 15 (err -117) [ 154.865894][ T6618] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 155.129846][ T6141] EXT4-fs (loop5): unmounting filesystem. [ 155.489076][ T6639] xt_hashlimit: size too large, truncated to 1048576 [ 155.724586][ T6642] rxe_eth0 speed is unknown, defaulting to 1000 [ 156.910088][ T6677] netlink: 168 bytes leftover after parsing attributes in process `syz.3.837'. [ 157.328606][ T6681] device veth0_macvtap left promiscuous mode [ 157.768338][ T6687] ip_tables: iptables: counters copy to user failed while replacing table [ 158.080892][ T6696] netlink: 27 bytes leftover after parsing attributes in process `syz.1.848'. [ 158.266582][ T4357] libceph: connect (1)[c::]:6789 error -101 [ 158.282853][ T14] libceph: connect (1)[c::]:6789 error -101 [ 158.289569][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 158.296509][ T4357] libceph: mon0 (1)[c::]:6789 connect error [ 158.599220][ T4357] libceph: connect (1)[c::]:6789 error -101 [ 158.608021][ T4357] libceph: mon0 (1)[c::]:6789 connect error [ 158.630122][ T4357] libceph: connect (1)[c::]:6789 error -101 [ 158.644629][ T4357] libceph: mon0 (1)[c::]:6789 connect error [ 158.961177][ T6703] ceph: No mds server is up or the cluster is laggy [ 158.993280][ T6698] ceph: No mds server is up or the cluster is laggy [ 159.149419][ T6711] loop3: detected capacity change from 0 to 32768 [ 159.213844][ T6711] loop3: p1 p3 < > [ 159.468362][ T6731] netlink: 27 bytes leftover after parsing attributes in process `syz.2.861'. [ 159.782726][ T6383] udevd[6383]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 159.808976][ T6312] udevd[6312]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 160.578624][ T6741] loop3: detected capacity change from 0 to 32768 [ 160.685286][ T6741] XFS (loop3): Mounting V5 Filesystem [ 160.836515][ T6741] XFS (loop3): Ending clean mount [ 160.884070][ T6741] XFS (loop3): Quotacheck needed: Please wait. [ 161.031111][ T6741] XFS (loop3): Quotacheck: Done. [ 161.410277][ T4279] XFS (loop3): Unmounting Filesystem [ 161.541501][ T4357] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 161.773909][ T4357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.785365][ T4357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.797263][ T4357] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.812031][ T4352] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 161.819873][ T4357] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.829784][ T4357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.843896][ T4357] usb 6-1: config 0 descriptor?? [ 162.039410][ T4352] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 162.081186][ T4352] usb 3-1: config 0 has no interface number 0 [ 162.087587][ T4352] usb 3-1: config 0 interface 41 has no altsetting 0 [ 162.118863][ T4352] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 162.150230][ T4352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.171091][ T4352] usb 3-1: Product: syz [ 162.181566][ T4352] usb 3-1: Manufacturer: syz [ 162.189260][ T4352] usb 3-1: SerialNumber: syz [ 162.220730][ T4352] usb 3-1: config 0 descriptor?? [ 162.262487][ T4357] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 162.276312][ T4357] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 162.594790][ T4357] usb 6-1: USB disconnect, device number 3 [ 162.796389][ T6832] overlayfs: failed to clone upperpath [ 162.855253][ T6834] loop3: detected capacity change from 0 to 764 [ 162.862465][ T6836] overlayfs: failed to clone upperpath [ 162.906726][ T6834] rock: directory entry would overflow storage [ 162.914196][ T6834] rock: sig=0x5245, size=8, remaining=5 [ 163.052884][ T4352] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 163.279183][ T4352] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 163.303710][ T4352] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 163.320737][ T4352] CoreChips: probe of 3-1:0.41 failed with error -71 [ 163.332881][ T4352] usb 3-1: USB disconnect, device number 5 [ 164.010245][ T6866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.241546][ T6876] loop2: detected capacity change from 0 to 512 [ 164.266080][ T6876] EXT4-fs: inline encryption not supported [ 164.318085][ T6876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.342426][ T6876] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 164.365822][ T6876] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 164.376068][ T6876] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 164.395139][ T6876] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 164.405735][ T6876] EXT4-fs (loop2): orphan cleanup on readonly fs [ 164.420742][ T6876] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.921: bg 0: block 34: padding at end of block bitmap is not set [ 164.440226][ T6876] Quota error (device loop2): write_blk: dquota write failed [ 164.448890][ T6876] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 164.460302][ T6876] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.921: Failed to acquire dquot type 1 [ 164.477852][ T6876] EXT4-fs (loop2): 1 truncate cleaned up [ 164.489108][ T6876] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.515052][ T6876] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 164.541926][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 164.681140][ T14] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 164.892774][ T14] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 164.902829][ T14] usb 4-1: config 0 has no interface number 0 [ 164.909001][ T14] usb 4-1: config 0 interface 41 has no altsetting 0 [ 164.918454][ T14] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 164.928649][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.936736][ T14] usb 4-1: Product: syz [ 164.940935][ T14] usb 4-1: Manufacturer: syz [ 164.945599][ T14] usb 4-1: SerialNumber: syz [ 164.952076][ T14] usb 4-1: config 0 descriptor?? [ 165.387556][ T6892] loop0: detected capacity change from 0 to 2048 [ 165.489281][ T6892] NILFS (loop0): invalid segment: Magic number mismatch [ 165.515068][ T6892] NILFS (loop0): trying rollback from an earlier position [ 165.604300][ T6892] NILFS (loop0): recovery complete [ 165.628842][ T6898] device sit0 entered promiscuous mode [ 165.657299][ T6899] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.664956][ T6898] netlink: 'syz.5.929': attribute type 1 has an invalid length. [ 165.717008][ T6898] netlink: 1 bytes leftover after parsing attributes in process `syz.5.929'. [ 165.770941][ T14] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 166.007874][ T14] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 166.031183][ T14] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 166.061565][ T14] CoreChips: probe of 4-1:0.41 failed with error -71 [ 166.082178][ T14] usb 4-1: USB disconnect, device number 6 [ 166.267722][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.300762][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.322869][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.403025][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.438136][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.452191][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.468249][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.479346][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.490587][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.500784][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.511557][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.521757][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.533243][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.546311][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.557621][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.569784][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.601059][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.633785][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.647805][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.657991][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.675817][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.702315][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.721904][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.820920][ T6923] bridge0: port 3(syz_tun) entered blocking state [ 166.827708][ T6923] bridge0: port 3(syz_tun) entered disabled state [ 166.864605][ T6923] device syz_tun entered promiscuous mode [ 166.881885][ T6923] bridge0: port 3(syz_tun) entered blocking state [ 166.888558][ T6923] bridge0: port 3(syz_tun) entered forwarding state [ 167.147682][ T6942] netlink: 762 bytes leftover after parsing attributes in process `syz.3.947'. [ 167.166267][ T6939] jffs2: notice: (6939) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 167.181613][ T6942] bridge: RTM_DELNEIGH with unconfigured vlan 289 on bridge0 [ 167.551705][ T26] audit: type=1326 audit(1792106080.219:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6963 comm="syz.3.955" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f752639e559 code=0x0 [ 167.642014][ T6968] bridge0: port 3(erspan0) entered blocking state [ 167.680444][ T6968] bridge0: port 3(erspan0) entered disabled state [ 167.703471][ T6968] device erspan0 entered promiscuous mode [ 167.724646][ T6968] bridge0: port 3(erspan0) entered blocking state [ 167.731831][ T6968] bridge0: port 3(erspan0) entered forwarding state [ 167.826012][ T6974] device erspan0 left promiscuous mode [ 167.834734][ T6974] bridge0: port 3(erspan0) entered disabled state [ 167.939804][ T6982] jffs2: notice: (6982) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 168.601390][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 169.273685][ T7017] bridge0: port 3(erspan0) entered blocking state [ 169.307603][ T7017] bridge0: port 3(erspan0) entered disabled state [ 169.325358][ T7017] device erspan0 entered promiscuous mode [ 169.362895][ T7017] bridge0: port 3(erspan0) entered blocking state [ 169.369878][ T7017] bridge0: port 3(erspan0) entered forwarding state [ 169.415433][ T7021] loop5: detected capacity change from 0 to 2048 [ 169.427669][ T7018] device erspan0 left promiscuous mode [ 169.451756][ T7018] bridge0: port 3(erspan0) entered disabled state [ 169.504953][ T7021] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 169.594675][ T7021] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 169.645249][ T7021] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 169.668706][ T7021] EXT4-fs (loop5): This should not happen!! Data will be lost [ 169.668706][ T7021] [ 169.699119][ T7021] EXT4-fs (loop5): Total free blocks count 0 [ 169.719276][ T7021] EXT4-fs (loop5): Free/Dirty block details [ 169.728342][ T7021] EXT4-fs (loop5): free_blocks=4096 [ 169.750069][ T7036] netlink: 'syz.2.983': attribute type 3 has an invalid length. [ 169.761326][ T7021] EXT4-fs (loop5): dirty_blocks=64 [ 169.766502][ T7021] EXT4-fs (loop5): Block reservation details [ 169.781101][ T7021] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 169.816713][ T7019] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 169.849115][ T7034] loop3: detected capacity change from 0 to 4096 [ 169.934683][ T7034] ntfs3: loop3: Failed to load $Extend. [ 170.090014][ T7047] FAULT_INJECTION: forcing a failure. [ 170.090014][ T7047] name failslab, interval 1, probability 0, space 0, times 0 [ 170.110134][ T7047] CPU: 0 PID: 7047 Comm: syz.2.988 Not tainted syzkaller #0 [ 170.117491][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.127673][ T7047] Call Trace: [ 170.130968][ T7047] [ 170.133918][ T7047] dump_stack_lvl+0x188/0x24e [ 170.138634][ T7047] ? show_regs_print_info+0x12/0x12 [ 170.143868][ T7047] ? load_image+0x410/0x410 [ 170.148398][ T7047] ? __might_sleep+0xd0/0xd0 [ 170.153197][ T7047] ? __lock_acquire+0x7ea0/0x7ea0 [ 170.158272][ T7047] should_fail_ex+0x390/0x4c0 [ 170.163030][ T7047] should_failslab+0x5/0x20 [ 170.167577][ T7047] slab_pre_alloc_hook+0x59/0x300 [ 170.172647][ T7047] ? call_usermodehelper_setup+0x8a/0x260 [ 170.178446][ T7047] __kmem_cache_alloc_node+0x4f/0x270 [ 170.183940][ T7047] ? call_usermodehelper_setup+0x8a/0x260 [ 170.189790][ T7047] kmalloc_trace+0x26/0xe0 [ 170.194232][ T7047] call_usermodehelper_setup+0x8a/0x260 [ 170.199812][ T7047] ? __request_module+0xa00/0xa00 [ 170.204877][ T7047] __request_module+0x406/0xa00 [ 170.209769][ T7047] ? copy_regset_to_user+0x1f0/0x1f0 [ 170.215101][ T7047] ? new_inode_pseudo+0xe0/0x1c0 [ 170.220095][ T7047] ? __rwlock_init+0x140/0x140 [ 170.224912][ T7047] ? security_inode_alloc+0xbd/0x110 [ 170.230252][ T7047] ? do_raw_spin_unlock+0x11d/0x230 [ 170.235500][ T7047] __sock_create+0x31f/0x940 [ 170.240128][ T7047] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 170.246171][ T7047] __sys_socket+0xc4/0x190 [ 170.250631][ T7047] __x64_sys_socket+0x76/0x80 [ 170.255356][ T7047] do_syscall_64+0x4c/0xa0 [ 170.259831][ T7047] ? clear_bhb_loop+0x60/0xb0 [ 170.264545][ T7047] ? clear_bhb_loop+0x60/0xb0 [ 170.269258][ T7047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.269614][ T7052] syz.0.990[7052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.275164][ T7047] RIP: 0033:0x7f6b7899e559 [ 170.275191][ T7047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.275205][ T7047] RSP: 002b:00007f6b7985d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 170.275225][ T7047] RAX: ffffffffffffffda RBX: 00007f6b78c25fa0 RCX: 00007f6b7899e559 [ 170.275239][ T7047] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 170.275249][ T7047] RBP: 00007f6b78a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 170.275260][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.275270][ T7047] R13: 00007f6b78c26038 R14: 00007f6b78c25fa0 R15: 00007ffe3e9f3cb8 [ 170.275295][ T7047] [ 170.275349][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.300250][ T7052] syz.0.990[7052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.310869][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.470368][ T7048] ntfs3: loop3: ino=22, "file1" attr_set_size [ 170.583900][ T7061] device veth0 entered promiscuous mode [ 170.592229][ T4279] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 170.599495][ T4279] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 170.620630][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'. [ 170.815736][ T7061] device veth0 left promiscuous mode [ 171.467769][ T7092] loop0: detected capacity change from 0 to 4096 [ 171.532826][ T7092] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 171.557974][ T7092] ntfs3: loop0: Failed to load $BadClus. [ 172.578311][ T7136] loop5: detected capacity change from 0 to 512 [ 172.775517][ T7145] loop3: detected capacity change from 0 to 512 [ 172.789139][ T7136] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 172.808660][ T7136] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.820075][ T7145] EXT4-fs: Ignoring removed i_version option [ 172.859981][ T7145] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.929344][ T7145] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 173.302749][ T6141] EXT4-fs (loop5): unmounting filesystem. [ 173.534376][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 173.820078][ T7154] loop2: detected capacity change from 0 to 131072 [ 173.851332][ T7154] F2FS-fs (loop2): invalid crc value [ 173.968094][ T7154] F2FS-fs (loop2): Found nat_bits in checkpoint [ 174.014628][ T7154] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 174.055709][ T7154] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 174.090606][ T26] audit: type=1800 audit(1792106086.749:15): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1028" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 174.185990][ T7174] loop0: detected capacity change from 0 to 8 [ 174.961498][ T7192] loop0: detected capacity change from 0 to 512 [ 174.982414][ T7190] overlayfs: failed to clone upperpath [ 174.996736][ T7192] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 175.099671][ T7192] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 175.124378][ T7192] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.194521][ T7197] syz.1.1043 sent an empty control message without MSG_MORE. [ 175.375090][ T7199] loop2: detected capacity change from 0 to 8192 [ 175.415573][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 175.429343][ T7199] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.660834][ T7210] xt_hashlimit: size too large, truncated to 1048576 [ 175.910168][ T7215] rxe_eth0 speed is unknown, defaulting to 1000 [ 176.647143][ T7222] loop5: detected capacity change from 0 to 512 [ 176.680117][ T7222] EXT4-fs: Ignoring removed i_version option [ 176.721960][ T7222] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.804847][ T7222] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 176.848274][ T7222] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.991250][ T26] audit: type=1800 audit(1792106089.659:16): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1052" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 177.144082][ T6141] EXT4-fs (loop5): unmounting filesystem. [ 177.313425][ T7232] gadgetfs: bound to dummy_udc driver [ 178.261126][ T4350] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 178.321281][ T4390] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 178.465668][ T4350] usb 3-1: Using ep0 maxpacket: 32 [ 178.477706][ T4350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.497550][ T4350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.508007][ T4350] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 178.522858][ T4390] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.525445][ T4350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.553272][ T4350] usb 3-1: config 0 descriptor?? [ 178.561450][ T4390] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 178.567508][ T4350] hub 3-1:0.0: USB hub found [ 178.596871][ T4390] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.643458][ T4390] as10x_usb: device has been detected [ 178.669685][ T4390] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 178.704550][ T4390] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 178.724023][ T4390] as10x_usb: error during firmware upload part1 [ 178.730752][ T4390] Registered device Abilis Systems DVB-Titan [ 178.766178][ T4350] hub 3-1:0.0: 1 port detected [ 178.951186][ T7261] loop0: detected capacity change from 0 to 512 [ 179.098312][ T7263] FAULT_INJECTION: forcing a failure. [ 179.098312][ T7263] name failslab, interval 1, probability 0, space 0, times 0 [ 179.128063][ T7263] CPU: 1 PID: 7263 Comm: syz.3.1068 Not tainted syzkaller #0 [ 179.135555][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.145649][ T7263] Call Trace: [ 179.148950][ T7263] [ 179.151907][ T7263] dump_stack_lvl+0x188/0x24e [ 179.156631][ T7263] ? show_regs_print_info+0x12/0x12 [ 179.161869][ T7263] ? load_image+0x410/0x410 [ 179.166395][ T7263] ? __lock_acquire+0x7ea0/0x7ea0 [ 179.171446][ T7263] should_fail_ex+0x390/0x4c0 [ 179.176134][ T7263] should_failslab+0x5/0x20 [ 179.180631][ T7263] slab_pre_alloc_hook+0x59/0x300 [ 179.185673][ T7263] ? io_alloc_hash_table+0x2d/0xb0 [ 179.190807][ T7263] __kmem_cache_alloc_node+0x4f/0x270 [ 179.196197][ T7263] ? io_alloc_hash_table+0x2d/0xb0 [ 179.201328][ T7263] __kmalloc+0xa3/0x240 [ 179.205516][ T7263] io_alloc_hash_table+0x2d/0xb0 [ 179.210469][ T7263] io_ring_ctx_alloc+0x130/0xc85 [ 179.215415][ T7263] io_uring_create+0x29f/0xd6c [ 179.220179][ T7263] ? __might_fault+0xc2/0x120 [ 179.224869][ T7263] ? __might_fault+0xa6/0x120 [ 179.229574][ T7263] __x64_sys_io_uring_setup+0x21b/0x230 [ 179.235134][ T7263] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 179.240779][ T7263] ? lockdep_hardirqs_on+0x94/0x140 [ 179.245983][ T7263] do_syscall_64+0x4c/0xa0 [ 179.250396][ T7263] ? clear_bhb_loop+0x60/0xb0 [ 179.255242][ T7263] ? clear_bhb_loop+0x60/0xb0 [ 179.259922][ T7263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.265820][ T7263] RIP: 0033:0x7f752639e559 [ 179.270232][ T7263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.289840][ T7263] RSP: 002b:00007f75271d4fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 179.298262][ T7263] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007f752639e559 [ 179.306232][ T7263] RDX: 0000200000000240 RSI: 0000200000000180 RDI: 0000000000000021 [ 179.314371][ T7263] RBP: 00007f75264358b0 R08: 0000000000000000 R09: 0000000000000000 [ 179.322337][ T7263] R10: 0000200000000280 R11: 0000000000000206 R12: 0000200000000240 [ 179.330305][ T7263] R13: 0000200000000280 R14: 0000200000000200 R15: 00007ffdbcc15648 [ 179.338287][ T7263] [ 179.431967][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 179.440916][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 179.531637][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'. [ 179.545394][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 179.586305][ T4350] hub 3-1:0.0: activate --> -90 [ 179.773427][ T4340] usb 6-1: USB disconnect, device number 4 [ 179.828981][ T4340] Unregistered device Abilis Systems DVB-Titan [ 179.843604][ T4340] as10x_usb: device has been disconnected [ 179.999813][ T4390] usb 3-1: USB disconnect, device number 6 [ 180.161381][ T7286] FAULT_INJECTION: forcing a failure. [ 180.161381][ T7286] name fail_futex, interval 1, probability 0, space 0, times 1 [ 180.194679][ T7286] CPU: 1 PID: 7286 Comm: syz.3.1077 Not tainted syzkaller #0 [ 180.202209][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.212291][ T7286] Call Trace: [ 180.215579][ T7286] [ 180.218561][ T7286] dump_stack_lvl+0x188/0x24e [ 180.223266][ T7286] ? show_regs_print_info+0x12/0x12 [ 180.228483][ T7286] ? load_image+0x410/0x410 [ 180.233010][ T7286] ? cgroup_rstat_updated+0xce/0x350 [ 180.238314][ T7286] ? rcu_read_lock_sched_held+0x86/0x110 [ 180.243976][ T7286] ? sched_slice+0x430/0x430 [ 180.248598][ T7286] should_fail_ex+0x390/0x4c0 [ 180.253310][ T7286] get_futex_key+0x1b1/0x1000 [ 180.258027][ T7286] ? futex_setup_timer+0xc0/0xc0 [ 180.262992][ T7286] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 180.269002][ T7286] ? __lock_acquire+0x7ea0/0x7ea0 [ 180.274056][ T7286] ? lock_chain_count+0x20/0x20 [ 180.278954][ T7286] futex_wait_setup+0xb8/0x270 [ 180.283751][ T7286] ? futex_wait_multiple+0x920/0x920 [ 180.289058][ T7286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 180.294980][ T7286] ? _raw_spin_unlock+0x40/0x40 [ 180.299846][ T7286] futex_wait+0x1b8/0x5c0 [ 180.304183][ T7286] ? futex_wait_setup+0x270/0x270 [ 180.309223][ T7286] do_futex+0x310/0x320 [ 180.313378][ T7286] ? __ia32_sys_get_robust_list+0x100/0x100 [ 180.319276][ T7286] __se_sys_futex+0x381/0x410 [ 180.323981][ T7286] ? __x64_sys_futex+0xf0/0xf0 [ 180.328772][ T7286] ? __x64_sys_futex+0x1d/0xf0 [ 180.333546][ T7286] do_syscall_64+0x4c/0xa0 [ 180.338013][ T7286] ? clear_bhb_loop+0x60/0xb0 [ 180.342793][ T7286] ? clear_bhb_loop+0x60/0xb0 [ 180.347506][ T7286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.353401][ T7286] RIP: 0033:0x7f752639e559 [ 180.357852][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.377470][ T7286] RSP: 002b:00007f75271d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 180.385911][ T7286] RAX: ffffffffffffffda RBX: 00007f7526625fa8 RCX: 00007f752639e559 [ 180.393905][ T7286] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7526625fa8 [ 180.401895][ T7286] RBP: 00007f7526625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 180.409876][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.417848][ T7286] R13: 00007f7526626038 R14: 00007ffdbcc15560 R15: 00007ffdbcc15648 [ 180.425838][ T7286] [ 181.032583][ T7308] loop2: detected capacity change from 0 to 2048 [ 181.072084][ T7311] FAULT_INJECTION: forcing a failure. [ 181.072084][ T7311] name failslab, interval 1, probability 0, space 0, times 0 [ 181.131890][ T7311] CPU: 1 PID: 7311 Comm: syz.3.1083 Not tainted syzkaller #0 [ 181.139358][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.149422][ T7311] Call Trace: [ 181.152725][ T7311] [ 181.155677][ T7311] dump_stack_lvl+0x188/0x24e [ 181.160392][ T7311] ? show_regs_print_info+0x12/0x12 [ 181.165622][ T7311] ? load_image+0x410/0x410 [ 181.170150][ T7311] ? __might_sleep+0xd0/0xd0 [ 181.174768][ T7311] ? __lock_acquire+0x7ea0/0x7ea0 [ 181.179835][ T7311] should_fail_ex+0x390/0x4c0 [ 181.184556][ T7311] should_failslab+0x5/0x20 [ 181.189066][ T7311] slab_pre_alloc_hook+0x59/0x300 [ 181.194185][ T7311] kmem_cache_alloc+0x56/0x2f0 [ 181.198945][ T7311] ? ptlock_alloc+0x1c/0x60 [ 181.203451][ T7311] ptlock_alloc+0x1c/0x60 [ 181.207783][ T7311] pte_alloc_one+0xc0/0x310 [ 181.212378][ T7311] ? pfn_modify_allowed+0x560/0x560 [ 181.217583][ T7311] ? __rwlock_init+0x140/0x140 [ 181.223244][ T7311] ? do_raw_spin_unlock+0x11d/0x230 [ 181.228466][ T7311] __pte_alloc+0x21/0x150 [ 181.232823][ T7311] copy_page_range+0x322f/0x3a60 [ 181.237784][ T7311] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 181.243814][ T7311] ? pfn_valid+0x450/0x450 [ 181.248253][ T7311] copy_mm+0xeb0/0x1680 [ 181.252434][ T7311] ? copy_signal+0x640/0x640 [ 181.257038][ T7311] ? __init_rwsem+0x11e/0x160 [ 181.261717][ T7311] ? copy_signal+0x51f/0x640 [ 181.266306][ T7311] copy_process+0x1952/0x4070 [ 181.270986][ T7311] ? plist_add+0x3d7/0x490 [ 181.275438][ T7311] ? copy_process+0x974/0x4070 [ 181.280222][ T7311] ? futex_wait+0x4a3/0x5c0 [ 181.284737][ T7311] ? idle_dummy+0x10/0x10 [ 181.289085][ T7311] kernel_clone+0x24b/0x900 [ 181.293603][ T7311] ? create_io_thread+0x170/0x170 [ 181.298631][ T7311] ? do_futex+0x310/0x320 [ 181.303050][ T7311] __x64_sys_clone+0x1a7/0x220 [ 181.307822][ T7311] ? __ia32_sys_vfork+0x140/0x140 [ 181.312979][ T7311] ? lock_chain_count+0x20/0x20 [ 181.317859][ T7311] ? lockdep_hardirqs_on+0x94/0x140 [ 181.323099][ T7311] do_syscall_64+0x4c/0xa0 [ 181.327531][ T7311] ? clear_bhb_loop+0x60/0xb0 [ 181.332216][ T7311] ? clear_bhb_loop+0x60/0xb0 [ 181.336898][ T7311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.342804][ T7311] RIP: 0033:0x7f752639e559 [ 181.347226][ T7311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.366965][ T7311] RSP: 002b:00007f75271d4fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 181.375405][ T7311] RAX: ffffffffffffffda RBX: 00007f7526625fa0 RCX: 00007f752639e559 [ 181.383387][ T7311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 181.391384][ T7311] RBP: 00007f75264358b0 R08: 0000000000000000 R09: 0000000000000000 [ 181.399409][ T7311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 181.407416][ T7311] R13: 00007f7526626038 R14: 00007f7526625fa0 R15: 00007ffdbcc15648 [ 181.415562][ T7311] [ 181.509518][ T7308] NILFS (loop2): invalid segment: Magic number mismatch [ 181.561920][ T7308] NILFS (loop2): trying rollback from an earlier position [ 181.605749][ T7308] NILFS (loop2): recovery complete [ 181.645523][ T7322] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.152029][ T7342] loop3: detected capacity change from 0 to 128 [ 182.207615][ T7342] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 182.235266][ T7342] hpfs: filesystem error: improperly stopped [ 182.245121][ T7342] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 182.257539][ T7342] hpfs: You really don't want any checks? You are crazy... [ 182.268337][ T7342] hpfs: Code page index out of array [ 182.288072][ T7342] hpfs: code page support is disabled [ 182.295301][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1104'. [ 182.314529][ T7342] hpfs: hpfs_map_4sectors(): unaligned read [ 182.353273][ T7342] hpfs: hpfs_map_4sectors(): unaligned read [ 182.365996][ T7342] hpfs: filesystem error: unable to find root dir [ 183.111311][ T7378] Set syz1 is full, maxelem 2076 reached [ 183.342354][ T7396] "syz.3.1124" (7396) uses obsolete ecb(arc4) skcipher [ 183.549645][ T7403] loop3: detected capacity change from 0 to 512 [ 183.642659][ T7403] EXT4-fs (loop3): 1 truncate cleaned up [ 183.648381][ T7403] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 183.675212][ T7403] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1127: bg 0: block 465: padding at end of block bitmap is not set [ 183.771787][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 183.780821][ T7414] netlink: 'syz.1.1130': attribute type 19 has an invalid length. [ 183.809440][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'. [ 183.819951][ T7403] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 183.893389][ T7416] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 183.905006][ T7403] EXT4-fs (loop3): This should not happen!! Data will be lost [ 183.905006][ T7403] [ 183.925589][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 183.944951][ T7414] netlink: 'syz.1.1130': attribute type 19 has an invalid length. [ 183.953339][ T7416] EXT4-fs (loop3): This should not happen!! Data will be lost [ 183.953339][ T7416] [ 183.962519][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'. [ 184.005742][ T7403] EXT4-fs (loop3): Total free blocks count 0 [ 184.010138][ T7416] EXT4-fs (loop3): Total free blocks count 0 [ 184.046903][ T7403] EXT4-fs (loop3): Free/Dirty block details [ 184.048999][ T7416] EXT4-fs (loop3): Free/Dirty block details [ 184.095482][ T7403] EXT4-fs (loop3): free_blocks=0 [ 184.222164][ T7423] Set syz1 is full, maxelem 2076 reached [ 184.392134][ T7395] loop2: detected capacity change from 0 to 40427 [ 184.501663][ T7395] F2FS-fs (loop2): invalid crc value [ 184.549175][ T7395] F2FS-fs (loop2): Found nat_bits in checkpoint [ 184.880607][ T7395] F2FS-fs (loop2): Start checkpoint disabled! [ 185.050465][ T7395] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 185.310429][ T7429] loop3: detected capacity change from 0 to 131072 [ 185.327421][ T7429] F2FS-fs (loop3): invalid crc value [ 185.336560][ T7429] F2FS-fs (loop3): Found nat_bits in checkpoint [ 185.375203][ T7429] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 185.397128][ T7429] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 185.507992][ T26] audit: type=1800 audit(1792106098.169:17): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1135" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 185.711119][ T7449] loop5: detected capacity change from 0 to 1024 [ 185.867323][ T7449] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 185.981219][ T7449] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.096853][ T4960] kworker/u4:9: attempt to access beyond end of device [ 186.096853][ T4960] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 186.104381][ T7449] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.1141: lblock 0 mapped to illegal pblock 0 (length 1) [ 186.197760][ T7455] EXT4-fs (loop5): shut down requested (0) [ 186.217627][ T7449] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 186.293420][ T7449] EXT4-fs (loop5): This should not happen!! Data will be lost [ 186.293420][ T7449] [ 186.324334][ T7458] xt_hashlimit: size too large, truncated to 1048576 [ 186.613862][ T6141] EXT4-fs (loop5): unmounting filesystem. [ 186.774739][ T7459] rxe_eth0 speed is unknown, defaulting to 1000 [ 186.819227][ T7467] ip_tables: iptables: counters copy to user failed while replacing table [ 186.861783][ T7468] device bridge0 entered promiscuous mode [ 187.386911][ T7474] capability: warning: `syz.2.1150' uses deprecated v2 capabilities in a way that may be insecure [ 187.771252][ T4347] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 187.951184][ T4347] usb 4-1: Using ep0 maxpacket: 8 [ 187.958294][ T4347] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.985599][ T4347] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 188.005062][ T4347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.031648][ T4347] usb 4-1: config 0 descriptor?? [ 188.050265][ T4347] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 188.634045][ T7501] netlink: 'syz.2.1160': attribute type 13 has an invalid length. [ 188.644267][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'. [ 188.666489][ T7501] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.676824][ T7501] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.687130][ T7501] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.696444][ T7501] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.722761][ T7501] netlink: 'syz.2.1160': attribute type 13 has an invalid length. [ 188.741257][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'. [ 189.001519][ T4281] Bluetooth: hci5: command 0x1003 tx timeout [ 189.010581][ T49] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 189.128467][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1163'. [ 189.268803][ T4347] gspca_vc032x: reg_w err -71 [ 189.287541][ T4347] vc032x: probe of 4-1:0.0 failed with error -71 [ 189.323114][ T4347] usb 4-1: USB disconnect, device number 7 [ 189.909380][ T7529] futex_wake_op: syz.5.1171 tries to shift op by 144; fix this program [ 189.980409][ T7529] futex_wake_op: syz.5.1171 tries to shift op by 144; fix this program [ 190.053126][ T7537] netlink: 'syz.2.1174': attribute type 21 has an invalid length. [ 190.079867][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 190.107369][ T7537] netlink: 'syz.2.1174': attribute type 21 has an invalid length. [ 190.134863][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 190.290673][ T7539] loop3: detected capacity change from 0 to 8192 [ 190.404490][ T7539] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 190.428725][ T7539] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 190.451311][ T7539] REISERFS (device loop3): using ordered data mode [ 190.464567][ T7539] reiserfs: using flush barriers [ 190.512509][ T7539] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.601631][ T7539] REISERFS (device loop3): checking transaction log (loop3) [ 190.835894][ T7539] REISERFS (device loop3): Using tea hash to sort names [ 190.861454][ T7539] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 190.867674][ T7557] netlink: 'syz.2.1181': attribute type 7 has an invalid length. [ 190.904541][ T7557] netlink: 'syz.2.1181': attribute type 7 has an invalid length. [ 190.914651][ T7539] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 191.011581][ T7560] netlink: 'syz.5.1182': attribute type 1 has an invalid length. [ 191.161251][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 191.161262][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 191.209180][ T7560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.262371][ T7571] overlayfs: invalid redirect ((null)) [ 191.431549][ T7576] ip_tables: iptables: counters copy to user failed while replacing table [ 191.840420][ T7593] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1196'. [ 191.999206][ T7601] tipc: Started in network mode [ 192.025591][ T7601] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 192.065746][ T7601] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 192.103810][ T7601] tipc: Enabled bearer , priority 10 [ 192.546894][ T7625] "syz.5.1209" (7625) uses obsolete ecb(arc4) skcipher [ 193.070462][ T7646] rxe_eth0 speed is unknown, defaulting to 1000 [ 193.224658][ T4390] tipc: Node number set to 1 [ 193.339383][ T7651] ip_tables: iptables: counters copy to user failed while replacing table [ 193.442749][ T7651] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.487646][ T7654] ip_tables: iptables: counters copy to user failed while replacing table [ 194.205226][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.211683][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.308456][ T7708] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.1237'. [ 195.365524][ T7708] netlink: zone id is out of range [ 195.399308][ T7708] netlink: zone id is out of range [ 195.429667][ T7708] netlink: get zone limit has 8 unknown bytes [ 195.860920][ T7724] loop3: detected capacity change from 0 to 256 [ 195.930676][ T7724] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 196.194382][ T7734] rxe_eth0 speed is unknown, defaulting to 1000 [ 196.318798][ T4340] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 196.333674][ T53] device offline error, dev sda, sector 721742 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 196.345125][ T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90217) [ 196.358185][ T53] Buffer I/O error on device sda1, logical block 90179 [ 196.366562][ T53] Buffer I/O error on device sda1, logical block 90180 [ 196.375149][ T53] Buffer I/O error on device sda1, logical block 90181 [ 196.382230][ T53] Buffer I/O error on device sda1, logical block 90182 [ 196.389142][ T53] device offline error, dev sda, sector 721782 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 196.399715][ T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90222) [ 196.411294][ T53] Buffer I/O error on device sda1, logical block 90184 [ 196.418333][ T53] device offline error, dev sda, sector 721878 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 196.428934][ T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90234) [ 196.440488][ T53] Buffer I/O error on device sda1, logical block 90196 [ 196.447654][ T53] Buffer I/O error on device sda1, logical block 90197 [ 196.454665][ T53] device offline error, dev sda, sector 721910 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 196.465786][ T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90238) [ 196.477371][ T53] Buffer I/O error on device sda1, logical block 90200 [ 196.484413][ T53] device offline error, dev sda, sector 721926 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 196.495090][ T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90240) [ 196.506686][ T53] Buffer I/O error on device sda1, logical block 90202 [ 196.513706][ T53] device offline error, dev sda, sector 721942 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 196.524313][ T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90242) [ 196.535907][ T53] Buffer I/O error on device sda1, logical block 90204 [ 196.542952][ T53] device offline error, dev sda, sector 722006 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 196.553500][ T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90250) [ 196.566467][ T53] device offline error, dev sda, sector 722038 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 196.577573][ T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90254) [ 196.589291][ T53] device offline error, dev sda, sector 722078 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 196.599847][ T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90259) [ 196.611815][ T53] device offline error, dev sda, sector 722102 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 196.616485][ T4959] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 90417) [ 196.789675][ T3602] Aborting journal on device sda1-8. [ 196.804538][ T53] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 196.814099][ T3602] JBD2: I/O error when updating journal superblock for sda1-8. [ 196.839135][ T7747] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1250: Detected aborted journal [ 196.852823][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 196.883895][ T4340] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 196.915834][ T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 196.942273][ T7747] EXT4-fs (sda1): previous I/O error to superblock detected [ 196.949905][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 196.978895][ T7733] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1248: Detected aborted journal [ 196.996862][ T4260] EXT4-fs (sda1): I/O error while writing superblock [ 197.029597][ T7747] EXT4-fs (sda1): I/O error while writing superblock [ 197.042458][ T7733] EXT4-fs (sda1): previous I/O error to superblock detected [ 197.049946][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 197.065493][ T7747] EXT4-fs (sda1): Remounting filesystem read-only [ 197.080534][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 197.086796][ T7747] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1250: Detected aborted journal [ 197.119578][ T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 197.128417][ T7747] EXT4-fs (sda1): previous I/O error to superblock detected [ 197.151507][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 197.162922][ T4260] EXT4-fs (sda1): previous I/O error to superblock detected [ 197.182351][ T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 197.190876][ T7747] EXT4-fs (sda1): I/O error while writing superblock [ 197.191058][ T7733] EXT4-fs (sda1): I/O error while writing superblock [ 197.204960][ T7733] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1248: Detected aborted journal [ 197.211490][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 197.216716][ T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 197.244801][ T7733] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1248: Detected aborted journal [ 197.274958][ T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 197.285684][ T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 197.294621][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 197.297590][ T7733] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1248: Detected aborted journal [ 197.331191][ T94] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 197.409090][ T4340] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 197.444356][ T7751] Write-error on swap-device (8:0:279342) [ 197.583238][ T7753] loop3: detected capacity change from 0 to 512 [ 197.661686][ T7736] ceph: No mds server is up or the cluster is laggy [ 197.700303][ T7753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 197.712546][ T7753] System zones: 1-12 [ 197.784152][ T7753] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1252: missing EA_INODE flag [ 197.866775][ T7757] device bond1 entered promiscuous mode [ 197.911479][ T7753] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1252: error while reading EA inode 12 err=-117 [ 197.911527][ T7757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.026836][ T7753] EXT4-fs (loop3): 1 orphan inode deleted [ 198.052766][ T7753] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.170610][ T7739] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 198.453329][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 199.035892][ T7772] loop2: detected capacity change from 0 to 8192 [ 199.057746][ T7776] loop0: detected capacity change from 0 to 128 [ 199.105783][ T7772] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 199.176587][ T7776] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 199.185847][ T7772] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 199.197210][ T7772] REISERFS (device loop2): using ordered data mode [ 199.204521][ T7772] reiserfs: using flush barriers [ 199.233075][ T7772] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.348235][ T7772] REISERFS (device loop2): checking transaction log (loop2) [ 199.385931][ T7784] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 199.422734][ T7784] FAT-fs (loop0): Filesystem has been set read-only [ 199.459348][ T7784] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 199.488888][ T7784] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 199.519171][ T7784] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 199.544697][ T7788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1266'. [ 199.611290][ T7772] REISERFS (device loop2): Using tea hash to sort names [ 199.625681][ T7772] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 199.643826][ T4272] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 199.656578][ T7772] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 199.739144][ T26] audit: type=1800 audit(1792106112.399:18): pid=7772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1259" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 199.783769][ T7788] device hsr_slave_1 left promiscuous mode [ 199.996821][ T26] audit: type=1800 audit(1792106112.659:19): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1259" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 199.996918][ T7793] syz.2.1259 (7793) used greatest stack depth: 19648 bytes left [ 200.187446][ T7805] loop2: detected capacity change from 0 to 164 [ 200.258354][ T49] Bluetooth: hci2: ISO packet for unknown connection handle 6 [ 200.549362][ T7817] Write-error on swap-device (8:0:279358) [ 201.401113][ T4281] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 201.401205][ T49] Bluetooth: hci5: command 0x1003 tx timeout [ 202.693588][ T4260] EXT4-fs error: 172 callbacks suppressed [ 202.693609][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 202.711726][ T4260] EXT4-fs: 206 callbacks suppressed [ 202.711739][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 202.723616][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 202.734895][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 202.741488][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 202.752685][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 202.759177][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 202.771159][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 202.777707][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 202.792084][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 202.798663][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 202.810811][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 202.821550][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 202.833516][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 202.840214][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 202.851831][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 202.858415][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 202.869791][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 202.876356][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 202.887589][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 204.881141][ T4340] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 205.082559][ T7888] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1309'. [ 205.097402][ T4340] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 20480, setting to 64 [ 205.118837][ T4340] usb 4-1: config 0 interface 0 has no altsetting 0 [ 205.150325][ T4340] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 205.161462][ T4340] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 205.172449][ T4340] usb 4-1: Product: syz [ 205.176667][ T4340] usb 4-1: Manufacturer: syz [ 205.181819][ T4340] usb 4-1: SerialNumber: syz [ 205.196699][ T4340] usb 4-1: config 0 descriptor?? [ 205.215393][ T4340] usb 4-1: selecting invalid altsetting 0 [ 205.477719][ T7875] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 205.956930][ T7913] loop2: detected capacity change from 0 to 2048 [ 206.019093][ T7913] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 206.070639][ T7913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.315662][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 206.749300][ T7902] loop5: detected capacity change from 0 to 512 [ 206.764104][ T7902] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 206.821526][ T7745] blk_print_req_error: 137 callbacks suppressed [ 206.821541][ T7745] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 207.018998][ T7947] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 207.169693][ T4390] usb 4-1: USB disconnect, device number 8 [ 207.254949][ T7952] rxe_eth0 speed is unknown, defaulting to 1000 [ 207.256552][ T14] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 207.531761][ T14] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 207.647221][ T26] audit: type=1800 audit(1792106120.309:20): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1338" name="alua_access_type" dev="configfs" ino=46033 res=0 errno=0 [ 207.702213][ T7967] EXT4-fs error: 218 callbacks suppressed [ 207.702232][ T7967] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1338: Detected aborted journal [ 207.737987][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 207.758082][ T4260] EXT4-fs: 215 callbacks suppressed [ 207.758108][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 207.770581][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 207.782990][ T7967] EXT4-fs (sda1): Remounting filesystem read-only [ 207.790680][ T7967] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1338: Detected aborted journal [ 207.802211][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 207.809249][ T7967] EXT4-fs (sda1): Remounting filesystem read-only [ 207.836721][ T7969] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1339: Detected aborted journal [ 207.853007][ T7970] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1340: Detected aborted journal [ 207.876162][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 207.884568][ T7970] EXT4-fs (sda1): Remounting filesystem read-only [ 207.889283][ T7969] EXT4-fs (sda1): Remounting filesystem read-only [ 207.902152][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 207.911430][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 207.911628][ T7965] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1337: Detected aborted journal [ 207.944257][ T7969] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1339: Detected aborted journal [ 207.945617][ T7970] EXT4-fs (sda1): Remounting filesystem read-only [ 207.977339][ T7970] EXT4-fs (sda1): Remounting filesystem read-only [ 207.986553][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 207.994066][ T7973] device team0 entered promiscuous mode [ 208.010851][ T7973] device team_slave_0 entered promiscuous mode [ 208.026641][ T7973] device team_slave_1 entered promiscuous mode [ 208.050340][ T7970] device team0 left promiscuous mode [ 208.063205][ T7970] device team_slave_0 left promiscuous mode [ 208.090480][ T7970] device team_slave_1 left promiscuous mode [ 208.098568][ T14] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 208.281484][ T7954] ceph: No mds server is up or the cluster is laggy [ 208.489107][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'. [ 208.501267][ T4347] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 208.522131][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1346'. [ 208.601734][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'. [ 208.617221][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1346'. [ 208.700347][ T4347] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 208.730660][ T4347] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 208.761139][ T4347] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.770245][ T4347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.802696][ T7979] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.937518][ T7990] loop3: detected capacity change from 0 to 32768 [ 209.045088][ T7990] XFS (loop3): Mounting V5 Filesystem [ 209.090462][ T7990] XFS (loop3): Ending clean mount [ 209.690871][ T22] usb 3-1: USB disconnect, device number 7 [ 209.840210][ T4279] XFS (loop3): Unmounting Filesystem [ 210.109402][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.262809][ T8030] device bridge_slave_1 left promiscuous mode [ 210.269017][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.527901][ T8026] loop0: detected capacity change from 0 to 512 [ 210.552473][ T8026] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 211.077170][ T8049] loop5: detected capacity change from 0 to 8192 [ 211.115418][ T8049] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 211.149553][ T8049] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 211.162997][ T8049] REISERFS (device loop5): using ordered data mode [ 211.170205][ T8049] reiserfs: using flush barriers [ 211.177032][ T8049] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 211.196055][ T8049] REISERFS (device loop5): checking transaction log (loop5) [ 211.266664][ T8049] REISERFS (device loop5): Using tea hash to sort names [ 211.276133][ T8049] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 211.291091][ T8049] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 211.473923][ T26] audit: type=1800 audit(1792106124.139:21): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1369" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 211.858796][ T8080] ip_tables: iptables: counters copy to user failed while replacing table [ 211.928653][ T26] audit: type=1800 audit(1792106124.589:22): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1369" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 211.948074][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.321288][ T4340] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 212.542416][ T4340] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 212.561173][ T4340] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 212.579056][ T8093] rxe_eth0 speed is unknown, defaulting to 1000 [ 212.588535][ T4340] usb 3-1: config 4 has no interface number 0 [ 212.603016][ T4340] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.640893][ T4340] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 212.687410][ T4340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.698955][ T4340] usb 3-1: Product: syz [ 212.741750][ T4340] usb 3-1: Manufacturer: syz [ 212.746482][ T4340] usb 3-1: SerialNumber: syz [ 212.754548][ T8097] EXT4-fs error: 199 callbacks suppressed [ 212.754562][ T8097] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1388: Detected aborted journal [ 212.790881][ T8098] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1389: Detected aborted journal [ 212.805398][ T8097] EXT4-fs: 193 callbacks suppressed [ 212.805413][ T8097] EXT4-fs (sda1): Remounting filesystem read-only [ 212.831041][ T8098] EXT4-fs (sda1): Remounting filesystem read-only [ 212.856505][ T8097] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1388: Detected aborted journal [ 212.859927][ T8098] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1389: Detected aborted journal [ 212.888205][ T8097] EXT4-fs (sda1): Remounting filesystem read-only [ 212.909650][ T8098] EXT4-fs (sda1): Remounting filesystem read-only [ 212.918730][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 212.937546][ T8097] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1388: Detected aborted journal [ 212.959338][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 212.961844][ T8092] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1386: Detected aborted journal [ 212.977651][ T8083] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1382: Detected aborted journal [ 212.981197][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 213.006619][ T8097] EXT4-fs (sda1): Remounting filesystem read-only [ 213.009181][ T8083] EXT4-fs (sda1): Remounting filesystem read-only [ 213.016800][ T8097] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.1388: Detected aborted journal [ 213.021494][ T8083] EXT4-fs (sda1): Remounting filesystem read-only [ 213.040596][ T8092] EXT4-fs (sda1): Remounting filesystem read-only [ 213.060037][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 213.289242][ T4340] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 213.332474][ T4340] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 213.356807][ T4340] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 213.364290][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 213.393248][ T4340] usb 3-1: media controller created [ 213.421675][ T4340] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.497908][ T4340] DVB: Unable to find symbol dib7000p_attach() [ 213.524743][ T4340] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 213.558493][ T4340] rc_core: Couldn't load IR keymap rc-dib0700-rc5 [ 213.577222][ T4340] Registered IR keymap rc-empty [ 213.583841][ T4340] dvb-usb: could not initialize remote control. [ 213.590817][ T4340] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 213.608937][ T8088] loop3: detected capacity change from 0 to 512 [ 213.640368][ T8088] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 213.882988][ T4340] usb 3-1: USB disconnect, device number 8 [ 214.019262][ T4340] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 214.078937][ T14] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 214.091574][ T8132] loop0: detected capacity change from 0 to 512 [ 214.110436][ T8132] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.196461][ T8132] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.1400: corrupted in-inode xattr [ 214.225007][ T8132] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1400: couldn't read orphan inode 15 (err -117) [ 214.237993][ T8132] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 214.282017][ T8132] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.1400: Logical block already allocated [ 214.282840][ T14] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 214.321135][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.332046][ T14] usb 6-1: config 0 descriptor?? [ 214.339521][ T14] cp210x 6-1:0.0: cp210x converter detected [ 214.448611][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 214.681635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.741085][ T14] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 214.783304][ T14] usb 6-1: cp210x converter now attached to ttyUSB0 [ 214.968506][ T14] usb 6-1: USB disconnect, device number 5 [ 214.997264][ T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 215.051491][ T14] cp210x 6-1:0.0: device disconnected [ 215.700205][ T8181] loop5: detected capacity change from 0 to 256 [ 215.752178][ T8181] exfat: Deprecated parameter 'utf8' [ 215.757546][ T8181] exfat: Deprecated parameter 'utf8' [ 215.788217][ T8181] exfat: Deprecated parameter 'utf8' [ 215.803018][ T8181] exfat: Deprecated parameter 'namecase' [ 215.821977][ T8181] exfat: Deprecated parameter 'utf8' [ 215.838552][ T8181] exfat: Deprecated parameter 'utf8' [ 215.869827][ T8181] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 216.193504][ T8004] bridge0: port 3(syz_tun) entered disabled state [ 216.247186][ T8004] device syz_tun left promiscuous mode [ 216.254070][ T8004] bridge0: port 3(syz_tun) entered disabled state [ 216.374471][ T4347] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 216.400724][ T4347] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 216.485289][ T8193] udevd[8193]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 216.496694][ T8194] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1425'. [ 216.543354][ T8187] loop3: detected capacity change from 0 to 8192 [ 216.636822][ T8187] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 216.656015][ T8187] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 216.684875][ T8187] REISERFS (device loop3): using ordered data mode [ 216.692758][ T8187] reiserfs: using flush barriers [ 216.741660][ T8187] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 216.827837][ T8187] REISERFS (device loop3): checking transaction log (loop3) [ 217.188074][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 217.198898][ T8187] REISERFS (device loop3): Using tea hash to sort names [ 217.208764][ T8187] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 217.237615][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 217.248061][ T8187] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 217.347778][ T26] audit: type=1800 audit(1792106130.009:23): pid=8187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1423" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 217.739681][ T26] audit: type=1800 audit(1792106130.399:24): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1423" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 218.175173][ T4260] EXT4-fs error: 146 callbacks suppressed [ 218.175189][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 218.192395][ T4260] EXT4-fs: 130 callbacks suppressed [ 218.192407][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 218.199248][ T8214] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0 [ 218.233206][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 218.254104][ T8215] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1433: Detected aborted journal [ 218.259814][ T8216] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1435: Detected aborted journal [ 218.269033][ T8217] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1434: Detected aborted journal [ 218.277395][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 218.281663][ T8215] EXT4-fs (sda1): Remounting filesystem read-only [ 218.297788][ T8217] EXT4-fs (sda1): Remounting filesystem read-only [ 218.311238][ T8216] EXT4-fs (sda1): Remounting filesystem read-only [ 218.318913][ T8215] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1433: Detected aborted journal [ 218.328086][ T8218] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1436: Detected aborted journal [ 218.331437][ T8215] EXT4-fs (sda1): Remounting filesystem read-only [ 218.343870][ T8216] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1435: Detected aborted journal [ 218.374160][ T8218] EXT4-fs (sda1): Remounting filesystem read-only [ 218.375748][ T8217] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1434: Detected aborted journal [ 218.385614][ T8218] EXT4-fs (sda1): Remounting filesystem read-only [ 218.398939][ T8216] EXT4-fs (sda1): Remounting filesystem read-only [ 218.406370][ T8218] EXT4-fs (sda1): Remounting filesystem read-only [ 218.997968][ T8231] loop2: detected capacity change from 0 to 1024 [ 219.027745][ T8231] EXT4-fs: Ignoring removed orlov option [ 219.086880][ T8231] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 219.630913][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 219.780569][ T8245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1443'. [ 220.596884][ T8253] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1445'. [ 221.602906][ T8265] loop3: detected capacity change from 0 to 4096 [ 221.617813][ T8265] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.625092][ T8265] EXT4-fs: Ignoring removed bh option [ 221.652145][ T8265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 221.667528][ T8265] Quota error (device loop3): do_check_range: Getting block 4278190084 out of range 1-5 [ 221.680517][ T8265] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 221.690483][ T8265] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.1452: Failed to acquire dquot type 1 [ 221.750931][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 223.689547][ T4260] EXT4-fs error: 84 callbacks suppressed [ 223.689565][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 223.706606][ T8282] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0 [ 223.729199][ T4260] EXT4-fs: 76 callbacks suppressed [ 223.729215][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 223.741824][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 223.754507][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 223.761124][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 223.772403][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 223.778920][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 223.790261][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 223.796799][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 223.810584][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 223.817837][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 223.835287][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 223.837290][ T8283] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1457: Detected aborted journal [ 223.854352][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 223.855305][ T8283] EXT4-fs (sda1): Remounting filesystem read-only [ 223.879606][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 223.883974][ T8283] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1457: Detected aborted journal [ 223.918788][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 223.918863][ T8285] EXT4-fs (sda1): Remounting filesystem read-only [ 223.935290][ T8284] netlink: 'syz.0.1457': attribute type 7 has an invalid length. [ 223.944329][ T8284] netlink: 'syz.0.1457': attribute type 7 has an invalid length. [ 224.029628][ T8287] loop2: detected capacity change from 0 to 2048 [ 224.062027][ T8287] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.205609][ T8295] loop0: detected capacity change from 0 to 128 [ 225.230143][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 225.242857][ T26] audit: type=1326 audit(1792106137.909:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.1464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752639e559 code=0x7ffc0000 [ 225.275710][ T8295] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 225.289626][ T8295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.303937][ T26] audit: type=1326 audit(1792106137.909:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.1464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752639e559 code=0x7ffc0000 [ 225.328541][ T26] audit: type=1326 audit(1792106137.929:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.1464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f752639e559 code=0x7ffc0000 [ 225.357472][ T26] audit: type=1326 audit(1792106137.929:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.1464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752639e559 code=0x7ffc0000 [ 225.381967][ T26] audit: type=1326 audit(1792106137.929:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.1464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752639e559 code=0x7ffc0000 [ 225.411770][ T26] audit: type=1326 audit(1792106137.929:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.1464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f752639e559 code=0x7ffc0000 [ 225.440925][ T26] audit: type=1326 audit(1792106137.949:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.1464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f752639e559 code=0x7ffc0000 [ 225.468422][ T26] audit: type=1326 audit(1792106138.019:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.1464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f752639e559 code=0x7ffc0000 [ 225.516439][ T26] audit: type=1326 audit(1792106138.079:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.1464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f752639e559 code=0x7ffc0000 [ 225.550462][ T26] audit: type=1326 audit(1792106138.169:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8297 comm="syz.3.1464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752639e559 code=0x7ffc0000 [ 226.627128][ T8307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1468'. [ 226.648839][ T8307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1468'. [ 226.664553][ T8308] rxe_eth0 speed is unknown, defaulting to 1000 [ 229.525260][ T4260] EXT4-fs error: 68 callbacks suppressed [ 229.525276][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 229.541831][ T8322] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0 [ 229.550327][ T4260] EXT4-fs: 63 callbacks suppressed [ 229.550342][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 229.588203][ T8323] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1473: Detected aborted journal [ 229.599759][ T8323] EXT4-fs (sda1): Remounting filesystem read-only [ 229.611997][ T8324] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1475: Detected aborted journal [ 229.626354][ T8323] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1473: Detected aborted journal [ 229.632605][ T8326] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1476: Detected aborted journal [ 229.641949][ T8327] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1474: Detected aborted journal [ 229.662996][ T8326] EXT4-fs (sda1): Remounting filesystem read-only [ 229.667449][ T8324] EXT4-fs (sda1): Remounting filesystem read-only [ 229.673770][ T8326] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1476: Detected aborted journal [ 229.676053][ T8323] EXT4-fs (sda1): Remounting filesystem read-only [ 229.687387][ T8326] EXT4-fs (sda1): Remounting filesystem read-only [ 229.703893][ T8324] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1475: Detected aborted journal [ 229.709757][ T8326] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1476: Detected aborted journal [ 229.722707][ T8327] EXT4-fs (sda1): Remounting filesystem read-only [ 229.727842][ T8326] EXT4-fs (sda1): Remounting filesystem read-only [ 229.739656][ T8324] EXT4-fs (sda1): Remounting filesystem read-only [ 229.746255][ T8327] EXT4-fs (sda1): Remounting filesystem read-only [ 230.041342][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 233.059394][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'. [ 233.069046][ T8350] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.1481'. [ 234.858173][ T4260] EXT4-fs error: 38 callbacks suppressed [ 234.858189][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 234.877699][ T4260] EXT4-fs: 33 callbacks suppressed [ 234.877712][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 234.881726][ T8356] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1265: comm syz-executor: reading directory lblock 0 [ 234.883314][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 234.912554][ T4260] EXT4-fs (sda1): Remounting filesystem read-only [ 234.956506][ T8358] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1487: Detected aborted journal [ 234.957794][ T8359] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1485: Detected aborted journal [ 234.972449][ T8357] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1488: Detected aborted journal [ 234.997239][ T8360] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1486: Detected aborted journal [ 235.008758][ T8358] EXT4-fs (sda1): Remounting filesystem read-only [ 235.015414][ T8357] EXT4-fs (sda1): Remounting filesystem read-only [ 235.023893][ T8359] EXT4-fs (sda1): Remounting filesystem read-only [ 235.026392][ T8358] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1487: Detected aborted journal [ 235.039093][ T8359] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1485: Detected aborted journal [ 235.041444][ T8360] EXT4-fs (sda1): Remounting filesystem read-only [ 235.058593][ T8359] EXT4-fs (sda1): Remounting filesystem read-only [ 235.065663][ T8360] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.1486: Detected aborted journal [ 235.065697][ T8360] EXT4-fs (sda1): Remounting filesystem read-only [ 235.084474][ T8359] EXT4-fs (sda1): Remounting filesystem read-only [ 235.085691][ T8357] EXT4-fs (sda1): Remounting filesystem read-only SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: repeatedly failed to execute the program proc=6 req=1427 state=1 status=67 (errno 9: Bad file descriptor) [ 239.912433][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.930006][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.134490][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.145222][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.189518][ T6357] EXT4-fs error: 55 callbacks suppressed [ 240.189534][ T6357] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.711: Detected aborted journal [ 240.209327][ T6357] EXT4-fs: 42 callbacks suppressed [ 240.209342][ T6357] EXT4-fs (sda1): Remounting filesystem read-only [ 240.223322][ T6357] EXT4-fs error (device sda1) in ext4_evict_inode:256: Journal has aborted [ 240.250087][ T6357] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.711: Detected aborted journal [ 240.261387][ T6357] EXT4-fs (sda1): Remounting filesystem read-only [ 240.265043][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.268160][ T6357] EXT4-fs error (device sda1) in ext4_evict_inode:256: Journal has aborted [ 240.293479][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.314700][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm init: reading directory lblock 0 [ 240.327889][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm init: reading directory lblock 0 [ 240.344088][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm init: reading directory lblock 0 [ 240.406037][ T8266] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1449: Detected aborted journal [ 240.417653][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm init: reading directory lblock 0 [ 240.418479][ T8388] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1496: Detected aborted journal [ 240.434631][ T8266] EXT4-fs (sda1): Remounting filesystem read-only [ 240.440714][ T8388] EXT4-fs (sda1): Remounting filesystem read-only [ 240.448635][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.469549][ T8388] EXT4-fs (sda1): Remounting filesystem read-only [ 240.489406][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.502432][ T8266] EXT4-fs (sda1): Remounting filesystem read-only [ 240.628948][ T8388] EXT4-fs (sda1): Remounting filesystem read-only [ 240.739799][ T11] tipc: Disabling bearer [ 240.755657][ T11] tipc: Left network mode [ 241.820655][ T11] device hsr_slave_0 left promiscuous mode [ 241.827739][ T11] device hsr_slave_1 left promiscuous mode [ 241.835400][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.843080][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.851588][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.859023][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.866963][ T11] device bridge_slave_1 left promiscuous mode [ 241.877411][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.889540][ T11] device bridge_slave_0 left promiscuous mode [ 241.898206][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.937650][ T11] device bridge0 left promiscuous mode [ 241.945626][ T11] device veth1_macvtap left promiscuous mode [ 241.953056][ T11] device veth1_vlan left promiscuous mode [ 241.959120][ T11] device veth0_vlan left promiscuous mode [ 242.700784][ T11] team0 (unregistering): Port device team_slave_1 removed [ 242.765346][ T11] team0 (unregistering): Port device team_slave_0 removed [ 243.708818][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.788635][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.886953][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.957626][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.077589][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.088569][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.178071][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.188597][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.282986][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.294840][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.377466][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.388435][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.191562][ T8473] EXT4-fs error: 161 callbacks suppressed [ 245.191575][ T8473] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 245.218332][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #2001: comm dhcpcd: reading directory lblock 0 [ 245.236075][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 245.289994][ T8475] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 245.305014][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 245.324210][ T8476] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 245.369761][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 245.385074][ T8477] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 245.399889][ T3934] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #116: comm dhcpcd: reading directory lblock 0 [ 245.455540][ T8478] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #265: comm dhcpcd: reading directory lblock 0 [ 246.271989][ T11] device hsr_slave_0 left promiscuous mode [ 246.278729][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.290468][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.300539][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.308294][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.316159][ T11] device bridge_slave_1 left promiscuous mode [ 246.322886][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.333777][ T11] device bridge_slave_0 left promiscuous mode [ 246.340030][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.356235][ T11] device hsr_slave_0 left promiscuous mode [ 246.363624][ T11] device hsr_slave_1 left promiscuous mode [ 246.370072][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.377723][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.385770][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.393396][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.401540][ T11] device bridge_slave_0 left promiscuous mode [ 246.407758][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.449186][ T11] device veth1_macvtap left promiscuous mode [ 246.455506][ T11] device veth0_macvtap left promiscuous mode [ 246.462234][ T11] device veth1_vlan left promiscuous mode [ 246.468105][ T11] device veth0_vlan left promiscuous mode [ 246.476273][ T11] device veth1_macvtap left promiscuous mode [ 246.482776][ T11] device veth1_vlan left promiscuous mode [ 246.489150][ T11] device veth0_vlan left promiscuous mode [ 246.679260][ T11] bond1 (unregistering): (slave geneve2): Releasing active interface [ 246.899905][ T11] bond1 (unregistering): Released all slaves [ 247.450818][ T11] team0 (unregistering): Port device team_slave_1 removed [ 247.503403][ T11] team0 (unregistering): Port device team_slave_0 removed [ 248.604436][ T11] team0 (unregistering): Port device team_slave_1 removed [ 248.659401][ T11] team0 (unregistering): Port device team_slave_0 removed