last executing test programs: 12.652716306s ago: executing program 4 (id=3064): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x1019838, 0x0) 12.369729912s ago: executing program 4 (id=3068): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000004c0)) 12.0735655s ago: executing program 4 (id=3071): sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x0, 0x5, 0x2d, {0x2d, 0x10, "236e2d04e808d4db31f555a1f4100c4722c93d01350a2484f59fb19a96d75a38023c418c7c699f8b1368bf"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1, 0xffffffffffffffff], 0x4000, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x1000006, 0x4002, 0x9, 0x5, 0x2, 0x250, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.889233468s ago: executing program 4 (id=3074): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x81, 0x2, 0x182, 0x1, 0x10, 0xf1, 0x10000000000003, 0x1, 0x5, 0x0, 0x200, 0x0, 0xf48, 0x9, 0xfffffffffffffffa], 0xe000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000480)={[{0x288d, 0xcc, 0x4, 0x8, 0x5, 0x7, 0x0, 0x0, 0x0, 0x7c, 0xe, 0x0, 0xffff}, {0x9, 0x9, 0x0, 0x9, 0xc, 0x7c, 0x2b, 0x9, 0xaf, 0x20, 0x1, 0xfa, 0x7ff}, {0x3a, 0x5, 0x8c, 0x9, 0x2, 0x4, 0x2, 0x2, 0x37, 0x6, 0x3b, 0xd, 0x8}], 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x7529, 0x8000000009, 0x803, 0x0, 0x9, 0x2], 0xeeee8000, 0x306780}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.677352163s ago: executing program 4 (id=3077): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) 10.579313616s ago: executing program 4 (id=3078): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="ff", 0x1, 0x1000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.185596655s ago: executing program 1 (id=3124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000060a010400000000090000000a0000010900010073797a310000000018000480140001800a0001007265646972000000040002800900020073797a320000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$unix(0x1, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6111b712000011ff00000000000000120000000000000001ff02000000000000000000000000000134ca5305caaebc6e249d8d5f1999de0d397ca0f9dbeb572d5376d7dd"], 0xfdef) 5.120869267s ago: executing program 0 (id=3126): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x40, 0x49) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 4.480039382s ago: executing program 1 (id=3133): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)={0x40, 0x8, 0x11, "6a5aa6fdc81d7b996e196234d92a78151b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340), 0x0}) 4.208069049s ago: executing program 0 (id=3134): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6(0xa, 0x6, 0xffffcc87) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000380)={0x20, 0x3, 0xa7, "28a1e0b5daf706f78e2907b8e8f45c239e0ca2cde547565bf46179da4742a2bae06c0013da129c1459d3a6df85807f85256e43566365cb908dcaa6bd753d2acb8b4c59130f7c5d810da001f1bfec42ddfe8efdba1c70f67e9db3f31b539fd79508a00fbfd950212f09b4a5fddb4d7bd447965e4151edc0efee656ae2198c7f74fccb0986ce19e5b0d7862140fb2b3d0b2d02ef2627d9a44caae4a1927212ee2ce21894a4f7df6a"}, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x2}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002d80)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.780246953s ago: executing program 3 (id=3139): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x28, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) 2.673816696s ago: executing program 3 (id=3140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x801, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x48004) 2.673185726s ago: executing program 0 (id=3141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000003bc0)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001780)=[{&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/221, 0xdd}], 0x3, &(0x7f0000003d80)=""/230, 0xe6}, 0xff}], 0x1, 0x0, 0x0) 2.449680751s ago: executing program 3 (id=3143): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.283033385s ago: executing program 0 (id=3144): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7001fbdbb45ba767000008000300", @ANYRES32=r1, @ANYBLOB="050034000200000004000801"], 0x28}, 0x1, 0x0, 0x0, 0x40008a5}, 0x4008000) 2.178282028s ago: executing program 2 (id=3145): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) 2.041702431s ago: executing program 0 (id=3146): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001e80)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000020020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008"], 0x64}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 1.421594286s ago: executing program 3 (id=3147): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x75, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000300)="91f8a9848519def38491bbc46110e4e0a3e2c222788694680617", 0x1a}], 0x1}}], 0x1, 0x2090) sendto$inet(r0, &(0x7f0000001080)="f43945ca98acb8a9b3ee48f6f16a864918caf5375823337eb7c72fc5b6b5161a2ce6e88a00a5000000000000004b1b3cdcb28fd85496523b195bda9430cfbcad76b5cee9b66a06ef4297ec9f702ab73353ba1b855ee0a82dce61ad54871cbe6d457fc54dfcffffff95318b02fd4a21807e0fd41f3ec3516fc52943fe9eebdfa052e8c6d0eccc7c6c63fddaf55802b9761767841feb96e012de72eb4e74ae565ab68b45000eebfe7585c156ceb22b76886b5ca630032da03f45562116ba97363da2fabe3dc0918799e023d788e86530343d8b15e5d5816f1411d3b215910bb77787cbcee78413c9ccc1d3e03f6a55fb84b0014539bcff9e7c2c7bc01baf11e4f1", 0x2000, 0x0, 0x0, 0x0) 1.342553348s ago: executing program 2 (id=3148): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x180000000) 1.100643624s ago: executing program 3 (id=3149): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x8913, &(0x7f00000001c0)={'veth0_to_batadv\x00', @ifru_data=&(0x7f0000000180)="3451214051ada8d3a4455f0e7013cc6f4554f7510af7317829996635c7426c5a"}) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 917.117798ms ago: executing program 3 (id=3150): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f00000001c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40100) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x3ff}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x7, 0x9, 0x0, 0x1, 0x3]}, &(0x7f00000003c0)=0x54) socket$inet_udp(0x2, 0x2, 0x0) 708.120013ms ago: executing program 2 (id=3151): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0806450000140000000001170000010203040506070800000c00020006002000080000000c0003000800170004"]}, 0x58}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x24000052) 622.874785ms ago: executing program 1 (id=3152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004080}, 0x8) 509.662728ms ago: executing program 2 (id=3153): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x1) 347.084022ms ago: executing program 1 (id=3154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x4c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) 296.018653ms ago: executing program 2 (id=3155): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) 162.470876ms ago: executing program 1 (id=3156): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x75, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581", 0x74}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fd", 0x2}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001080)="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", 0x2000, 0x0, 0x0, 0x0) 120.326357ms ago: executing program 2 (id=3157): syz_usb_connect$uac2(0x2, 0x9d, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 116.445347ms ago: executing program 0 (id=3158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x1, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 0s ago: executing program 1 (id=3159): bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000001100)={0x18, 0x0, {0x4, @remote, 'ipvlan0\x00'}}, 0x1e) sendmsg(r0, &(0x7f0000002b00)={0x0, 0x0, 0x0}, 0x800) kernel console output (not intermixed with test programs): 1): Quotacheck needed: Please wait. [ 1213.688492][T17671] XFS (loop1): Quotacheck: Done. [ 1213.804106][T17689] netlink: 'syz.2.2681': attribute type 72 has an invalid length. [ 1214.517870][ T26] audit: type=1800 audit(1788431286.652:195): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2678" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1214.705536][ T4186] XFS (loop1): Unmounting Filesystem [ 1214.775752][T17698] loop3: detected capacity change from 0 to 512 [ 1214.815893][T17695] loop4: detected capacity change from 0 to 32768 [ 1214.949275][T17698] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2676: invalid indirect mapped block 10 (level 1) [ 1215.009883][T17698] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2676: invalid indirect mapped block 8 (level 1) [ 1215.036358][T17698] EXT4-fs (loop3): 1 truncate cleaned up [ 1215.048237][T17695] XFS (loop4): Mounting V5 Filesystem [ 1215.054755][T17698] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1215.161386][T17695] XFS (loop4): Ending clean mount [ 1215.187276][T17695] XFS (loop4): Quotacheck needed: Please wait. [ 1215.257401][T17695] XFS (loop4): Quotacheck: Done. [ 1215.687144][T17715] loop2: detected capacity change from 0 to 32768 [ 1215.963429][ T26] audit: type=1800 audit(1788431288.332:196): pid=17718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2677" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 1216.260769][ T4198] XFS (loop4): Unmounting Filesystem [ 1216.337560][T17716] loop0: detected capacity change from 0 to 32768 [ 1216.383940][T17715] XFS (loop2): Mounting V5 Filesystem [ 1216.517188][T17716] XFS (loop0): Mounting V5 Filesystem [ 1216.578054][T17715] XFS (loop2): Ending clean mount [ 1216.585923][T17715] XFS (loop2): Quotacheck needed: Please wait. [ 1216.753598][T17727] loop3: detected capacity change from 0 to 32768 [ 1216.839121][T17716] XFS (loop0): Ending clean mount [ 1216.847104][T17716] XFS (loop0): Quotacheck needed: Please wait. [ 1216.892845][T17716] XFS (loop0): Quotacheck: Done. [ 1216.894246][T17736] loop1: detected capacity change from 0 to 32768 [ 1216.905927][T17715] XFS (loop2): Quotacheck: Done. [ 1217.600524][ T26] audit: type=1800 audit(1788431290.212:197): pid=17739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2680" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 1217.910459][ T4190] XFS (loop0): Unmounting Filesystem [ 1217.918809][ T4191] XFS (loop2): Unmounting Filesystem [ 1218.052981][T17727] XFS (loop3): Mounting V5 Filesystem [ 1218.060415][T17736] XFS (loop1): Mounting V5 Filesystem [ 1218.073175][ T26] audit: type=1800 audit(1788431290.212:198): pid=17740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2685" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1218.142060][T17736] XFS (loop1): Ending clean mount [ 1218.151109][T17736] XFS (loop1): Quotacheck needed: Please wait. [ 1218.269275][T17736] XFS (loop1): Quotacheck: Done. [ 1218.276485][T17727] XFS (loop3): Ending clean mount [ 1218.284421][T17727] XFS (loop3): Quotacheck needed: Please wait. [ 1218.434571][T17727] XFS (loop3): Quotacheck: Done. [ 1218.450591][ T26] audit: type=1800 audit(1788431291.062:199): pid=17727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2687" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 1218.583289][ T4185] XFS (loop3): Unmounting Filesystem [ 1219.286374][T17759] loop4: detected capacity change from 0 to 32768 [ 1219.293692][ T26] audit: type=1800 audit(1788431291.262:200): pid=17760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2683" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1219.365635][ T4186] XFS (loop1): Unmounting Filesystem [ 1219.546795][T17759] XFS (loop4): Mounting V5 Filesystem [ 1219.795761][T17759] XFS (loop4): Ending clean mount [ 1219.803844][T17759] XFS (loop4): Quotacheck needed: Please wait. [ 1219.919795][T17773] loop0: detected capacity change from 0 to 128 [ 1219.931875][T17759] XFS (loop4): Quotacheck: Done. [ 1220.166146][ T26] audit: type=1800 audit(1788431292.782:201): pid=17759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2686" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 1220.272743][T17778] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2692'. [ 1220.883703][T17773] EXT4-fs (loop0): Ignoring removed bh option [ 1221.063902][T17773] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,bh,,errors=continue. Quota mode: writeback. [ 1221.120505][T17773] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1221.151296][T17785] loop1: detected capacity change from 0 to 128 [ 1221.169834][T17782] loop2: detected capacity change from 0 to 32768 [ 1221.267065][T17785] EXT4-fs (loop1): Ignoring removed bh option [ 1221.320307][T17785] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,bh,,errors=continue. Quota mode: writeback. [ 1221.386374][T17785] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1221.421847][T17782] XFS (loop2): Mounting V5 Filesystem [ 1221.546053][ T4198] XFS (loop4): Unmounting Filesystem [ 1221.578080][T17782] XFS (loop2): Ending clean mount [ 1221.692875][T17782] XFS (loop2): Quotacheck needed: Please wait. [ 1221.804729][T17801] loop0: detected capacity change from 0 to 512 [ 1221.890201][T17782] XFS (loop2): Quotacheck: Done. [ 1221.937361][T17798] loop1: detected capacity change from 0 to 32768 [ 1222.354061][T17804] loop3: detected capacity change from 0 to 32768 [ 1222.918002][ T26] audit: type=1800 audit(1788431294.982:202): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2693" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4428 res=0 errno=0 [ 1223.025645][T17806] syz.2.2693 (17806) used greatest stack depth: 20416 bytes left [ 1223.139416][ T4191] XFS (loop2): Unmounting Filesystem [ 1223.156217][T17798] XFS (loop1): Mounting V5 Filesystem [ 1223.220876][T17801] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2697: invalid indirect mapped block 10 (level 1) [ 1223.248386][T17801] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2697: invalid indirect mapped block 8 (level 1) [ 1223.347209][T17801] EXT4-fs (loop0): 1 truncate cleaned up [ 1223.392689][T17801] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1223.408732][T17804] XFS (loop3): Mounting V5 Filesystem [ 1223.416124][T17798] XFS (loop1): Ending clean mount [ 1223.432427][T17798] XFS (loop1): Quotacheck needed: Please wait. [ 1223.571553][T17804] XFS (loop3): Ending clean mount [ 1223.582823][T17804] XFS (loop3): Quotacheck needed: Please wait. [ 1223.605155][T17798] XFS (loop1): Quotacheck: Done. [ 1223.723502][T17804] XFS (loop3): Quotacheck: Done. [ 1223.986105][ T26] audit: type=1800 audit(1788431296.592:203): pid=17825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2696" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 1224.374858][ T26] audit: type=1800 audit(1788431296.972:204): pid=17827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2690" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4428 res=0 errno=0 [ 1224.584250][ T4185] XFS (loop3): Unmounting Filesystem [ 1224.622395][ T4186] XFS (loop1): Unmounting Filesystem [ 1224.751865][T17829] loop4: detected capacity change from 0 to 128 [ 1224.859901][T17833] loop0: detected capacity change from 0 to 128 [ 1225.004332][T17835] loop2: detected capacity change from 0 to 32768 [ 1225.049706][T17833] EXT4-fs (loop0): Ignoring removed bh option [ 1225.182852][T17833] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,bh,,errors=continue. Quota mode: writeback. [ 1225.221936][T17833] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1225.230197][T17835] XFS (loop2): Mounting V5 Filesystem [ 1225.369391][T17835] XFS (loop2): Ending clean mount [ 1225.377081][T17835] XFS (loop2): Quotacheck needed: Please wait. [ 1225.480158][T17835] XFS (loop2): Quotacheck: Done. [ 1226.230021][T17855] loop3: detected capacity change from 0 to 2048 [ 1226.547717][ T26] audit: type=1800 audit(1788431298.582:205): pid=17853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2698" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1226.720189][ T4191] XFS (loop2): Unmounting Filesystem [ 1226.743573][T17855] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1226.979423][T17859] loop1: detected capacity change from 0 to 32768 [ 1227.062428][T17860] loop0: detected capacity change from 0 to 32768 [ 1227.077871][ T26] audit: type=1800 audit(1788431299.652:206): pid=17854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2700" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 1227.249658][T17860] XFS (loop0): Mounting V5 Filesystem [ 1227.332375][T17859] XFS (loop1): Mounting V5 Filesystem [ 1227.546861][T17859] XFS (loop1): Ending clean mount [ 1227.554656][T17859] XFS (loop1): Quotacheck needed: Please wait. [ 1227.590789][T17860] XFS (loop0): Ending clean mount [ 1227.598886][T17860] XFS (loop0): Quotacheck needed: Please wait. [ 1227.768732][T17883] loop3: detected capacity change from 0 to 2048 [ 1228.425732][T17883] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1228.472076][T17859] XFS (loop1): Quotacheck: Done. [ 1228.478411][T17860] XFS (loop0): Quotacheck: Done. [ 1229.073387][ T26] audit: type=1800 audit(1788431301.422:207): pid=17886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2701" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1229.539037][ T4186] XFS (loop1): Unmounting Filesystem [ 1230.098410][ T4190] XFS (loop0): Unmounting Filesystem [ 1230.588848][T17904] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2709'. [ 1230.627711][T17904] cgroup: fork rejected by pids controller in /syz2 [ 1230.790123][T17903] loop4: detected capacity change from 0 to 128 [ 1231.319703][T18011] loop1: detected capacity change from 0 to 32768 [ 1231.472898][T18011] XFS (loop1): Mounting V5 Filesystem [ 1231.814355][T18026] loop2: detected capacity change from 0 to 32768 [ 1231.840496][T18023] loop0: detected capacity change from 0 to 32768 [ 1231.877726][T18011] XFS (loop1): Ending clean mount [ 1231.892277][T18011] XFS (loop1): Quotacheck needed: Please wait. [ 1231.919591][T18026] XFS (loop2): Mounting V5 Filesystem [ 1232.034874][T18011] XFS (loop1): Quotacheck: Done. [ 1232.042624][T18026] XFS (loop2): Ending clean mount [ 1232.051011][T18026] XFS (loop2): Quotacheck needed: Please wait. [ 1232.088703][T18023] XFS (loop0): Mounting V5 Filesystem [ 1232.213882][T18034] loop3: detected capacity change from 0 to 128 [ 1232.318773][T18026] XFS (loop2): Quotacheck: Done. [ 1232.947370][ T26] audit: type=1800 audit(1788431305.182:208): pid=18048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2706" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 1233.056655][T18034] sysv_free_block: trying to free block not in datazone [ 1233.103310][T18034] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1233.140791][ T4186] XFS (loop1): Unmounting Filesystem [ 1233.151527][T18023] XFS (loop0): Ending clean mount [ 1233.158293][ T4191] XFS (loop2): Unmounting Filesystem [ 1233.172353][T18023] XFS (loop0): Quotacheck needed: Please wait. [ 1233.315479][T18023] XFS (loop0): Quotacheck: Done. [ 1233.930517][T18154] loop4: detected capacity change from 0 to 32768 [ 1234.096682][ T4190] XFS (loop0): Unmounting Filesystem [ 1234.145062][T18154] XFS (loop4): Mounting V5 Filesystem [ 1234.308486][T18154] XFS (loop4): Ending clean mount [ 1234.316115][T18154] XFS (loop4): Quotacheck needed: Please wait. [ 1234.421861][T18154] XFS (loop4): Quotacheck: Done. [ 1235.848141][ T26] audit: type=1800 audit(1788431307.862:209): pid=18174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2718" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 1236.309077][ T4198] XFS (loop4): Unmounting Filesystem [ 1236.413788][T18179] loop3: detected capacity change from 0 to 128 [ 1236.521479][T18179] EXT4-fs (loop3): Ignoring removed bh option [ 1236.721480][T18188] loop2: detected capacity change from 0 to 256 [ 1236.729273][T18179] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,bh,,errors=continue. Quota mode: writeback. [ 1236.833514][T18186] loop1: detected capacity change from 0 to 32768 [ 1236.916708][T18179] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1237.203635][T18186] XFS (loop1): Mounting V5 Filesystem [ 1237.419909][T18203] loop4: detected capacity change from 0 to 256 [ 1237.902761][T18206] loop2: detected capacity change from 0 to 32768 [ 1237.944735][T18186] XFS (loop1): Ending clean mount [ 1237.952226][T18186] XFS (loop1): Quotacheck needed: Please wait. [ 1238.004455][T18186] XFS (loop1): Quotacheck: Done. [ 1238.901943][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.908577][ T26] audit: type=1800 audit(1788431311.102:210): pid=18312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2716" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4428 res=0 errno=0 [ 1238.959238][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.309486][T18315] loop0: detected capacity change from 0 to 32768 [ 1239.329949][T18206] XFS (loop2): Mounting V5 Filesystem [ 1239.350797][ T4186] XFS (loop1): Unmounting Filesystem [ 1239.531406][T18329] loop3: detected capacity change from 0 to 2048 [ 1239.593865][T18329] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1239.814781][T18315] XFS (loop0): Mounting V5 Filesystem [ 1240.079366][T18315] XFS (loop0): Ending clean mount [ 1240.089491][T18315] XFS (loop0): Quotacheck needed: Please wait. [ 1240.102897][T18206] XFS (loop2): Ending clean mount [ 1240.111319][T18206] XFS (loop2): Quotacheck needed: Please wait. [ 1240.266334][T18315] XFS (loop0): Quotacheck: Done. [ 1240.278523][T18206] XFS (loop2): Quotacheck: Done. [ 1240.529374][T18338] loop4: detected capacity change from 0 to 512 [ 1241.204185][ T26] audit: type=1800 audit(1788431313.202:211): pid=18337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2726" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1241.343053][ T26] audit: type=1800 audit(1788431313.242:212): pid=18340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2728" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 1241.348805][T18338] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2729: invalid indirect mapped block 10 (level 1) [ 1241.441429][ T4191] XFS (loop2): Unmounting Filesystem [ 1241.461197][ T4190] XFS (loop0): Unmounting Filesystem [ 1241.469670][T18338] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2729: invalid indirect mapped block 8 (level 1) [ 1241.571458][T18338] EXT4-fs (loop4): 1 truncate cleaned up [ 1241.577278][T18338] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1241.718271][T18344] loop3: detected capacity change from 0 to 128 [ 1242.420393][T18353] loop2: detected capacity change from 0 to 32768 [ 1242.776738][T18361] loop4: detected capacity change from 0 to 32768 [ 1242.903437][T18353] XFS (loop2): Mounting V5 Filesystem [ 1242.991252][T18374] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2733'. [ 1243.586783][T18361] XFS (loop4): Mounting V5 Filesystem [ 1243.639604][T18353] XFS (loop2): Ending clean mount [ 1243.659218][T18353] XFS (loop2): Quotacheck needed: Please wait. [ 1243.910372][T18361] XFS (loop4): Ending clean mount [ 1243.918200][T18361] XFS (loop4): Quotacheck needed: Please wait. [ 1244.010698][T18383] loop0: detected capacity change from 0 to 32768 [ 1244.101135][T18385] loop1: detected capacity change from 0 to 2048 [ 1244.112547][T18353] XFS (loop2): Quotacheck: Done. [ 1244.761675][ T26] audit: type=1800 audit(1788431317.072:213): pid=18387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2732" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1245.037982][T18361] XFS (loop4): Quotacheck: Done. [ 1245.131503][ T4191] XFS (loop2): Unmounting Filesystem [ 1245.168098][T18385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1245.291913][T18383] XFS (loop0): Mounting V5 Filesystem [ 1246.127793][ T26] audit: type=1800 audit(1788431318.002:214): pid=18400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2735" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 1246.265266][T18383] XFS (loop0): Ending clean mount [ 1246.274237][T18383] XFS (loop0): Quotacheck needed: Please wait. [ 1246.370119][ T4198] XFS (loop4): Unmounting Filesystem [ 1246.377157][T18383] XFS (loop0): Quotacheck: Done. [ 1246.792908][T18405] loop1: detected capacity change from 0 to 32768 [ 1247.028581][ T26] audit: type=1800 audit(1788431319.432:215): pid=18407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2737" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 1247.433358][T18405] XFS (loop1): Mounting V5 Filesystem [ 1247.444310][ T4190] XFS (loop0): Unmounting Filesystem [ 1247.654616][T18405] XFS (loop1): Ending clean mount [ 1247.669776][T18405] XFS (loop1): Quotacheck needed: Please wait. [ 1247.771859][T18405] XFS (loop1): Quotacheck: Done. [ 1248.007564][T18422] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2744'. [ 1248.591802][ T26] audit: type=1800 audit(1788431320.922:216): pid=18424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2740" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 1248.810626][ T4186] XFS (loop1): Unmounting Filesystem [ 1249.096650][T18428] loop3: detected capacity change from 0 to 32768 [ 1249.245239][T18428] XFS (loop3): Mounting V5 Filesystem [ 1249.292971][T18428] XFS (loop3): Ending clean mount [ 1249.314560][T18428] XFS (loop3): Quotacheck needed: Please wait. [ 1249.517217][T18442] loop1: detected capacity change from 0 to 128 [ 1249.585301][T18428] XFS (loop3): Quotacheck: Done. [ 1250.229714][ T26] audit: type=1800 audit(1788431322.542:217): pid=18444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2746" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 1250.616549][ T4185] XFS (loop3): Unmounting Filesystem [ 1251.217400][T18451] loop4: detected capacity change from 0 to 2048 [ 1251.274591][T18451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1251.901968][T18461] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2748'. [ 1252.653830][T18468] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2750'. [ 1253.247203][T18573] loop0: detected capacity change from 0 to 2048 [ 1253.285027][T18573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1253.446101][T18575] loop4: detected capacity change from 0 to 32768 [ 1253.483320][T18577] loop1: detected capacity change from 0 to 128 [ 1254.294901][T18589] loop3: detected capacity change from 0 to 2048 [ 1254.336960][T18587] loop2: detected capacity change from 0 to 2048 [ 1254.395002][T18587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1254.485322][T18575] XFS (loop4): Mounting V5 Filesystem [ 1254.493767][T18577] EXT4-fs (loop1): Ignoring removed bh option [ 1254.512444][T18589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1254.571799][T18577] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,bh,,errors=continue. Quota mode: writeback. [ 1254.600887][T18575] XFS (loop4): Ending clean mount [ 1254.611705][T18575] XFS (loop4): Quotacheck needed: Please wait. [ 1254.728106][T18577] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1254.857943][T18575] XFS (loop4): Quotacheck: Done. [ 1255.339107][ T26] audit: type=1800 audit(1788431327.762:218): pid=18598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2753" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 1255.441393][T18604] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2756'. [ 1255.689698][ T4198] XFS (loop4): Unmounting Filesystem [ 1255.767022][T18706] loop3: detected capacity change from 0 to 128 [ 1256.284656][T18710] loop2: detected capacity change from 0 to 32768 [ 1256.369575][T18713] loop1: detected capacity change from 0 to 2048 [ 1256.561399][T18713] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1256.919250][T18710] XFS (loop2): Mounting V5 Filesystem [ 1257.002833][T18710] XFS (loop2): Ending clean mount [ 1257.196794][T18710] XFS (loop2): Quotacheck needed: Please wait. [ 1257.244845][T18727] loop1: detected capacity change from 0 to 128 [ 1257.360397][T18710] XFS (loop2): Quotacheck: Done. [ 1257.637178][ T26] audit: type=1800 audit(1788431330.252:219): pid=18728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2760" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1258.027968][ T4191] XFS (loop2): Unmounting Filesystem [ 1258.180319][T18730] loop0: detected capacity change from 0 to 128 [ 1258.253993][T18730] EXT4-fs (loop0): Ignoring removed bh option [ 1258.541931][T18733] loop4: detected capacity change from 0 to 32768 [ 1258.705229][T18730] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,bh,,errors=continue. Quota mode: writeback. [ 1259.024539][T18744] loop3: detected capacity change from 0 to 4096 [ 1259.072940][T18730] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1259.231435][T18744] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1259.254113][T18744] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1259.280834][T18744] ntfs: volume version 3.1. [ 1259.302920][T18744] ntfs: (device loop3): map_mft_record_page(): Mft record 0x9 is corrupt. Run chkdsk. [ 1259.312765][T18744] ntfs: (device loop3): map_mft_record(): Failed with error code 5. [ 1259.321254][T18744] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x9 as bad. Run chkdsk. [ 1259.334566][T18744] ntfs: (device loop3): load_system_files(): Failed to load $Secure. [ 1259.361132][T18744] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 1259.658406][T18733] XFS (loop4): Mounting V5 Filesystem [ 1259.854848][T18733] XFS (loop4): Ending clean mount [ 1259.864305][T18733] XFS (loop4): Quotacheck needed: Please wait. [ 1259.950739][T18754] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2763'. [ 1260.316472][T18733] XFS (loop4): Quotacheck: Done. [ 1260.345140][ T26] audit: type=1800 audit(1788431332.962:220): pid=18733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2759" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 1260.509698][ T4198] XFS (loop4): Unmounting Filesystem [ 1260.798784][T18863] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2767'. [ 1261.142579][T18864] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2766'. [ 1261.523394][T18872] loop2: detected capacity change from 0 to 128 [ 1261.727431][T18868] loop3: detected capacity change from 0 to 32768 [ 1261.933811][T18877] loop0: detected capacity change from 0 to 128 [ 1262.079196][T18884] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2772'. [ 1262.562280][T18868] XFS (loop3): Mounting V5 Filesystem [ 1262.710695][T18868] XFS (loop3): Ending clean mount [ 1262.719798][T18868] XFS (loop3): Quotacheck needed: Please wait. [ 1262.768071][T18868] XFS (loop3): Quotacheck: Done. [ 1262.883425][T18897] loop1: detected capacity change from 0 to 128 [ 1263.115363][ T26] audit: type=1800 audit(1788431335.672:221): pid=18871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2770" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 1263.433582][ T4185] XFS (loop3): Unmounting Filesystem [ 1264.051862][T19004] loop4: detected capacity change from 0 to 128 [ 1264.451070][T19008] loop3: detected capacity change from 0 to 32768 [ 1264.565124][T19008] XFS (loop3): Mounting V5 Filesystem [ 1264.621640][T19008] XFS (loop3): Ending clean mount [ 1264.629745][T19008] XFS (loop3): Quotacheck needed: Please wait. [ 1264.668579][T19008] XFS (loop3): Quotacheck: Done. [ 1265.137768][T19019] loop2: detected capacity change from 0 to 32768 [ 1265.241410][ T26] audit: type=1800 audit(1788431337.772:222): pid=19021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2774" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 1265.487576][ T4185] XFS (loop3): Unmounting Filesystem [ 1265.513207][T19019] XFS (loop2): Mounting V5 Filesystem [ 1265.559603][T19028] loop0: detected capacity change from 0 to 128 [ 1265.604653][T19019] XFS (loop2): Ending clean mount [ 1265.613563][T19019] XFS (loop2): Quotacheck needed: Please wait. [ 1265.653825][T19028] EXT4-fs (loop0): Ignoring removed bh option [ 1265.698391][T19028] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,bh,,errors=continue. Quota mode: writeback. [ 1265.711259][T19028] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1265.806046][T19019] XFS (loop2): Quotacheck: Done. [ 1266.036876][ T26] audit: type=1800 audit(1788431338.652:223): pid=19019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2776" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1266.305067][ T4191] XFS (loop2): Unmounting Filesystem [ 1266.836904][T19049] loop1: detected capacity change from 0 to 2048 [ 1267.105925][T19049] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1267.494059][T19047] loop3: detected capacity change from 0 to 128 [ 1268.702644][T19055] loop2: detected capacity change from 0 to 4096 [ 1269.940043][T19059] loop4: detected capacity change from 0 to 32768 [ 1270.805133][T19055] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1270.826841][T19055] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1270.840918][T19055] ntfs: volume version 3.1. [ 1270.850114][T19055] ntfs: (device loop2): map_mft_record_page(): Mft record 0x9 is corrupt. Run chkdsk. [ 1270.860106][T19055] ntfs: (device loop2): map_mft_record(): Failed with error code 5. [ 1270.868225][T19055] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x9 as bad. Run chkdsk. [ 1270.881309][T19055] ntfs: (device loop2): load_system_files(): Failed to load $Secure. [ 1270.893903][T19055] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 1271.322470][T19067] loop1: detected capacity change from 0 to 32768 [ 1271.335649][T19059] XFS (loop4): Mounting V5 Filesystem [ 1271.479716][T19074] loop3: detected capacity change from 0 to 32768 [ 1271.957924][T19059] XFS (loop4): Ending clean mount [ 1271.965623][T19059] XFS (loop4): Quotacheck needed: Please wait. [ 1272.014565][T19067] XFS (loop1): Mounting V5 Filesystem [ 1272.103332][T19059] XFS (loop4): Quotacheck: Done. [ 1272.314299][T19098] loop0: detected capacity change from 0 to 128 [ 1272.325733][T19074] XFS (loop3): Mounting V5 Filesystem [ 1272.747571][ T26] audit: type=1800 audit(1788431345.072:224): pid=19102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2785" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 1272.970178][T19067] XFS (loop1): Ending clean mount [ 1272.978484][T19067] XFS (loop1): Quotacheck needed: Please wait. [ 1273.162489][T19074] XFS (loop3): Ending clean mount [ 1273.170425][T19074] XFS (loop3): Quotacheck needed: Please wait. [ 1273.246534][ T4198] XFS (loop4): Unmounting Filesystem [ 1273.353866][T19067] XFS (loop1): Quotacheck: Done. [ 1273.920730][ T26] audit: type=1800 audit(1788431346.272:225): pid=19106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2786" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 1274.048532][T19074] XFS (loop3): Quotacheck: Done. [ 1274.115601][ T5825] attempt to access beyond end of device [ 1274.115601][ T5825] loop0: rw=1, want=250, limit=128 [ 1274.339076][ T26] audit: type=1800 audit(1788431346.942:226): pid=19072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2788" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 1274.405316][ T4186] XFS (loop1): Unmounting Filesystem [ 1275.005921][ T4185] XFS (loop3): Unmounting Filesystem [ 1275.128619][T19111] loop0: detected capacity change from 0 to 4096 [ 1275.176004][T19111] ntfs: volume version 3.1. [ 1275.381331][T19113] loop2: detected capacity change from 0 to 32768 [ 1275.661919][T19113] XFS (loop2): Mounting V5 Filesystem [ 1275.768332][T19113] XFS (loop2): Ending clean mount [ 1275.914382][T19113] XFS (loop2): Quotacheck needed: Please wait. [ 1276.015337][T19123] loop4: detected capacity change from 0 to 32768 [ 1276.025574][T19113] XFS (loop2): Quotacheck: Done. [ 1276.046184][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 1276.046201][ T26] audit: type=1800 audit(1788431348.662:227): pid=19113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2795" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1276.310279][ T4191] XFS (loop2): Unmounting Filesystem [ 1276.354456][T19123] XFS (loop4): Mounting V5 Filesystem [ 1276.458470][T19129] loop3: detected capacity change from 0 to 32768 [ 1276.510609][T19123] XFS (loop4): Ending clean mount [ 1276.519629][T19123] XFS (loop4): Quotacheck needed: Please wait. [ 1276.643522][T19123] XFS (loop4): Quotacheck: Done. [ 1276.649159][T19129] XFS (loop3): Mounting V5 Filesystem [ 1276.668491][ T26] audit: type=1800 audit(1788431349.282:228): pid=19123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2791" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 1276.813612][T19129] XFS (loop3): Ending clean mount [ 1276.823105][T19129] XFS (loop3): Quotacheck needed: Please wait. [ 1276.907260][ T4198] XFS (loop4): Unmounting Filesystem [ 1276.916793][T19129] XFS (loop3): Quotacheck: Done. [ 1277.482096][ T26] audit: type=1800 audit(1788431349.882:229): pid=19145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2794" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 1277.935518][ T4185] XFS (loop3): Unmounting Filesystem [ 1278.231570][T19149] loop1: detected capacity change from 0 to 32768 [ 1278.331893][T19153] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2796'. [ 1278.854983][T19156] loop2: detected capacity change from 0 to 4096 [ 1278.941109][T19156] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1278.962485][T19156] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1279.005948][T19156] ntfs: volume version 3.1. [ 1279.098808][T19156] ntfs: (device loop2): map_mft_record_page(): Mft record 0x9 is corrupt. Run chkdsk. [ 1279.108644][T19156] ntfs: (device loop2): map_mft_record(): Failed with error code 5. [ 1279.116670][T19156] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x9 as bad. Run chkdsk. [ 1279.129816][T19156] ntfs: (device loop2): load_system_files(): Failed to load $Secure. [ 1279.139805][T19156] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 1279.167125][T19149] XFS (loop1): Mounting V5 Filesystem [ 1279.561807][T19168] loop0: detected capacity change from 0 to 4096 [ 1280.020971][T19168] ntfs: volume version 3.1. [ 1280.038823][T19149] XFS (loop1): Ending clean mount [ 1280.046494][T19149] XFS (loop1): Quotacheck needed: Please wait. [ 1280.124090][T19149] XFS (loop1): Quotacheck: Done. [ 1280.543328][T19170] loop2: detected capacity change from 0 to 32768 [ 1280.617804][T19174] loop4: detected capacity change from 0 to 32768 [ 1280.991164][T19177] loop0: detected capacity change from 0 to 32768 [ 1281.108603][ T4186] XFS (loop1): Unmounting Filesystem [ 1281.192099][T19170] XFS (loop2): Mounting V5 Filesystem [ 1281.199791][T19177] XFS (loop0): Mounting V5 Filesystem [ 1281.217477][T19174] XFS (loop4): Mounting V5 Filesystem [ 1281.409941][T19170] XFS (loop2): Ending clean mount [ 1281.417352][T19174] XFS (loop4): Ending clean mount [ 1281.420291][T19170] XFS (loop2): Quotacheck needed: Please wait. [ 1281.439015][T19174] XFS (loop4): Quotacheck needed: Please wait. [ 1281.448413][T19177] XFS (loop0): Ending clean mount [ 1281.457499][T19177] XFS (loop0): Quotacheck needed: Please wait. [ 1281.579593][T19170] XFS (loop2): Quotacheck: Done. [ 1281.623575][T19174] XFS (loop4): Quotacheck: Done. [ 1281.695236][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1281.695253][ T26] audit: type=1800 audit(1788431354.262:230): pid=19174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2800" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 1281.885211][ T4198] XFS (loop4): Unmounting Filesystem [ 1281.927907][ T26] audit: type=1800 audit(1788431354.462:231): pid=19170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2802" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1282.071703][T19177] XFS (loop0): Quotacheck: Done. [ 1282.089494][ T4191] XFS (loop2): Unmounting Filesystem [ 1282.438246][ T26] audit: type=1800 audit(1788431355.032:232): pid=19206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2803" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 1282.909983][ T4190] XFS (loop0): Unmounting Filesystem [ 1282.984243][T19203] loop3: detected capacity change from 0 to 32768 [ 1283.142834][T19203] XFS (loop3): Mounting V5 Filesystem [ 1283.400269][T19215] loop1: detected capacity change from 0 to 32768 [ 1283.490984][T19218] loop2: detected capacity change from 0 to 32768 [ 1283.607416][T19203] XFS (loop3): Ending clean mount [ 1283.647226][T19203] XFS (loop3): Quotacheck needed: Please wait. [ 1283.739485][T19215] XFS (loop1): Mounting V5 Filesystem [ 1283.746875][T19218] XFS (loop2): Mounting V5 Filesystem [ 1283.756481][T19203] XFS (loop3): Quotacheck: Done. [ 1283.938651][T19215] XFS (loop1): Ending clean mount [ 1283.945747][T19218] XFS (loop2): Ending clean mount [ 1283.950131][T19215] XFS (loop1): Quotacheck needed: Please wait. [ 1283.963934][T19243] loop0: detected capacity change from 0 to 128 [ 1283.973119][T19218] XFS (loop2): Quotacheck needed: Please wait. [ 1284.013570][T19243] sysv_free_block: trying to free block not in datazone [ 1284.046861][T19243] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1284.111598][T19215] XFS (loop1): Quotacheck: Done. [ 1284.304529][T19218] XFS (loop2): Quotacheck: Done. [ 1285.267864][ T26] audit: type=1800 audit(1788431357.182:233): pid=19245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2804" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 1285.351205][ T4186] XFS (loop1): Unmounting Filesystem [ 1285.433407][ T26] audit: type=1800 audit(1788431357.412:234): pid=19247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2808" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1285.494931][ T4191] XFS (loop2): Unmounting Filesystem [ 1285.591237][T19223] loop4: detected capacity change from 0 to 32768 [ 1285.687742][T19223] XFS (loop4): Mounting V5 Filesystem [ 1285.792340][T19223] XFS (loop4): Ending clean mount [ 1285.842905][ T4185] XFS (loop3): Unmounting Filesystem [ 1285.853803][T19223] XFS (loop4): Quotacheck needed: Please wait. [ 1286.051213][T19223] XFS (loop4): Quotacheck: Done. [ 1286.635854][T19259] loop1: detected capacity change from 0 to 32768 [ 1286.866045][T19261] loop2: detected capacity change from 0 to 4096 [ 1286.992188][T19261] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1287.014076][T19261] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1287.032235][T19261] ntfs: volume version 3.1. [ 1287.049129][T19261] ntfs: (device loop2): map_mft_record_page(): Mft record 0x9 is corrupt. Run chkdsk. [ 1287.058968][T19261] ntfs: (device loop2): map_mft_record(): Failed with error code 5. [ 1287.067673][T19261] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x9 as bad. Run chkdsk. [ 1287.081679][T19261] ntfs: (device loop2): load_system_files(): Failed to load $Secure. [ 1287.108090][T19261] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 1287.384822][T19259] XFS (loop1): Mounting V5 Filesystem [ 1287.653653][T19268] loop3: detected capacity change from 0 to 32768 [ 1287.779898][T19272] loop0: detected capacity change from 0 to 32768 [ 1287.793198][T19259] XFS (loop1): Ending clean mount [ 1287.800988][T19259] XFS (loop1): Quotacheck needed: Please wait. [ 1287.941780][T19259] XFS (loop1): Quotacheck: Done. [ 1288.008935][T19275] loop2: detected capacity change from 0 to 32768 [ 1288.148858][T19268] XFS (loop3): Mounting V5 Filesystem [ 1288.197743][T19272] XFS (loop0): Mounting V5 Filesystem [ 1288.218043][T19275] XFS (loop2): Mounting V5 Filesystem [ 1288.618292][ T26] audit: type=1800 audit(1788431360.912:235): pid=19299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2809" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 1288.799707][ T4198] XFS (loop4): Unmounting Filesystem [ 1288.960845][T19272] XFS (loop0): Ending clean mount [ 1288.969343][T19272] XFS (loop0): Quotacheck needed: Please wait. [ 1288.992535][ T4186] XFS (loop1): Unmounting Filesystem [ 1288.999605][T19275] XFS (loop2): Ending clean mount [ 1289.007855][T19268] XFS (loop3): Ending clean mount [ 1289.007829][T19275] XFS (loop2): Quotacheck needed: Please wait. [ 1289.027140][T19268] XFS (loop3): Quotacheck needed: Please wait. [ 1289.175256][T19275] XFS (loop2): Quotacheck: Done. [ 1289.175634][T19272] XFS (loop0): Quotacheck: Done. [ 1289.412139][ T26] audit: type=1800 audit(1788431362.032:236): pid=19275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2813" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1290.271072][ T4191] XFS (loop2): Unmounting Filesystem [ 1290.301167][ T4190] XFS (loop0): Unmounting Filesystem [ 1290.328914][ T26] audit: type=1800 audit(1788431362.142:237): pid=19304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2812" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 1290.411987][T19268] XFS (loop3): Quotacheck: Done. [ 1290.484234][ T4185] XFS (loop3): Unmounting Filesystem [ 1291.006077][T19306] loop0: detected capacity change from 0 to 128 [ 1291.137252][T19312] loop1: detected capacity change from 0 to 128 [ 1291.256314][T19313] loop4: detected capacity change from 0 to 2048 [ 1291.393465][T19313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1292.103948][ T5825] attempt to access beyond end of device [ 1292.103948][ T5825] loop1: rw=1, want=250, limit=128 [ 1292.995557][T19332] loop4: detected capacity change from 0 to 4096 [ 1293.632903][T19332] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1293.653763][T19332] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1293.665900][T19332] ntfs: volume version 3.1. [ 1293.669616][T19329] loop1: detected capacity change from 0 to 128 [ 1293.681336][T19332] ntfs: (device loop4): map_mft_record_page(): Mft record 0x9 is corrupt. Run chkdsk. [ 1293.691227][T19332] ntfs: (device loop4): map_mft_record(): Failed with error code 5. [ 1293.699446][T19332] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x9 as bad. Run chkdsk. [ 1293.712541][T19332] ntfs: (device loop4): load_system_files(): Failed to load $Secure. [ 1293.729138][T19332] ntfs: (device loop4): ntfs_fill_super(): Failed to load system files. [ 1294.686312][T19335] loop0: detected capacity change from 0 to 128 [ 1295.397489][T19337] loop2: detected capacity change from 0 to 32768 [ 1295.751150][T19337] XFS (loop2): Mounting V5 Filesystem [ 1295.824675][T19337] XFS (loop2): Ending clean mount [ 1295.834409][T19337] XFS (loop2): Quotacheck needed: Please wait. [ 1296.182549][T19337] XFS (loop2): Quotacheck: Done. [ 1297.007859][ T26] audit: type=1800 audit(1788431369.102:238): pid=19353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2816" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1297.172068][ T4191] XFS (loop2): Unmounting Filesystem [ 1297.493784][T19365] loop3: detected capacity change from 0 to 2048 [ 1299.379088][T19365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1300.102571][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.110133][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.314974][T19367] loop4: detected capacity change from 0 to 128 [ 1300.733032][T19373] loop1: detected capacity change from 0 to 128 [ 1300.854293][T19379] loop3: detected capacity change from 0 to 128 [ 1300.896813][T19380] loop0: detected capacity change from 0 to 32768 [ 1300.973316][T19379] EXT4-fs (loop3): Ignoring removed bh option [ 1301.149935][T19380] XFS (loop0): Mounting V5 Filesystem [ 1301.227559][T19382] loop2: detected capacity change from 0 to 32768 [ 1301.234393][T19379] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,bh,,errors=continue. Quota mode: writeback. [ 1301.282899][T19379] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1301.346165][T19380] XFS (loop0): Ending clean mount [ 1301.357136][T19380] XFS (loop0): Quotacheck needed: Please wait. [ 1301.441267][T19382] XFS (loop2): Mounting V5 Filesystem [ 1301.510128][T19380] XFS (loop0): Quotacheck: Done. [ 1301.749917][T19382] XFS (loop2): Ending clean mount [ 1301.758685][T19382] XFS (loop2): Quotacheck needed: Please wait. [ 1302.347948][ T26] audit: type=1800 audit(1788431374.472:239): pid=19403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2832" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 1302.436460][T19382] XFS (loop2): Quotacheck: Done. [ 1302.584254][ T4190] XFS (loop0): Unmounting Filesystem [ 1302.873909][T19406] loop4: detected capacity change from 0 to 128 [ 1302.881283][ T26] audit: type=1800 audit(1788431375.412:240): pid=19407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2826" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1303.569143][ T4191] XFS (loop2): Unmounting Filesystem [ 1303.905340][T17089] attempt to access beyond end of device [ 1303.905340][T17089] loop4: rw=1, want=250, limit=128 [ 1304.299781][T19521] loop2: detected capacity change from 0 to 128 [ 1305.037995][T19409] loop3: detected capacity change from 0 to 32768 [ 1305.346236][T19409] XFS (loop3): Mounting V5 Filesystem [ 1305.383699][T19517] loop0: detected capacity change from 0 to 32768 [ 1305.409865][T19642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2845'. [ 1305.440515][T19643] syz.2.2844 uses obsolete (PF_INET,SOCK_PACKET) [ 1305.473199][T19642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2845'. [ 1305.523361][T19409] XFS (loop3): Ending clean mount [ 1305.531846][T19409] XFS (loop3): Quotacheck needed: Please wait. [ 1305.541679][T19642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2845'. [ 1305.553579][T19642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2845'. [ 1305.564299][T19642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2845'. [ 1305.662576][T19517] XFS (loop0): Mounting V5 Filesystem [ 1305.699589][T19513] loop1: detected capacity change from 0 to 32768 [ 1305.736322][T19409] XFS (loop3): Quotacheck: Done. [ 1305.884832][T19517] XFS (loop0): Ending clean mount [ 1305.892577][T19513] XFS (loop1): Mounting V5 Filesystem [ 1305.897217][T19517] XFS (loop0): Quotacheck needed: Please wait. [ 1306.061518][T19513] XFS (loop1): Ending clean mount [ 1306.099505][T19513] XFS (loop1): Quotacheck needed: Please wait. [ 1306.106517][T19517] XFS (loop0): Quotacheck: Done. [ 1306.246578][T19513] XFS (loop1): Quotacheck: Done. [ 1306.448893][ T26] audit: type=1800 audit(1788431379.072:241): pid=19677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2835" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 1306.631550][T19685] netlink: 'syz.2.2857': attribute type 1 has an invalid length. [ 1306.683400][T19685] netlink: 'syz.2.2857': attribute type 2 has an invalid length. [ 1307.552810][ T26] audit: type=1800 audit(1788431380.072:242): pid=19690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2833" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 1307.756012][ T4185] XFS (loop3): Unmounting Filesystem [ 1307.821327][ T26] audit: type=1800 audit(1788431380.112:243): pid=19692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2837" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 1308.193042][ T4190] XFS (loop0): Unmounting Filesystem [ 1308.235263][T19714] netlink: 'syz.2.2870': attribute type 11 has an invalid length. [ 1308.257932][T19714] netlink: 448 bytes leftover after parsing attributes in process `syz.2.2870'. [ 1308.330600][ T4186] XFS (loop1): Unmounting Filesystem [ 1308.644333][T19725] netlink: 'syz.2.2874': attribute type 1 has an invalid length. [ 1308.652938][T19725] netlink: 'syz.2.2874': attribute type 2 has an invalid length. [ 1309.203295][T19754] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2886'. [ 1309.574626][T19779] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2900'. [ 1309.607984][T19779] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1309.669681][T19781] netlink: 'syz.1.2901': attribute type 10 has an invalid length. [ 1309.770022][T19781] team0: Port device syz_tun added [ 1309.810031][T19792] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2906'. [ 1309.828022][T19789] netlink: 65043 bytes leftover after parsing attributes in process `syz.2.2905'. [ 1309.994953][T19800] udc-core: couldn't find an available UDC or it's busy [ 1310.018046][T19798] FAULT_INJECTION: forcing a failure. [ 1310.018046][T19798] name failslab, interval 1, probability 0, space 0, times 1 [ 1310.055809][T19800] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1310.094236][T19798] CPU: 0 PID: 19798 Comm: syz.2.2909 Not tainted syzkaller #0 [ 1310.101786][T19798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1310.112100][T19798] Call Trace: [ 1310.115460][T19798] [ 1310.118673][T19798] dump_stack_lvl+0x188/0x250 [ 1310.123917][T19798] ? show_regs_print_info+0x20/0x20 [ 1310.129239][T19798] ? load_image+0x410/0x410 [ 1310.133906][T19798] ? __might_sleep+0xf0/0xf0 [ 1310.138983][T19798] ? __lock_acquire+0x7b50/0x7b50 [ 1310.144171][T19798] should_fail+0x383/0x4b0 [ 1310.148747][T19798] should_failslab+0x5/0x20 [ 1310.153585][T19798] slab_pre_alloc_hook+0x51/0xc0 [ 1310.158732][T19798] kmem_cache_alloc_trace+0x47/0x290 [ 1310.164078][T19798] ? __list_lru_init+0x535/0xac0 [ 1310.169146][T19798] __list_lru_init+0x535/0xac0 [ 1310.174066][T19798] alloc_super+0x787/0x970 [ 1310.178642][T19798] ? kernfs_get_tree+0x6b0/0x6b0 [ 1310.183690][T19798] sget_fc+0x2d4/0x6f0 [ 1310.187806][T19798] ? kernfs_test_super+0x100/0x100 [ 1310.193179][T19798] kernfs_get_tree+0x15c/0x6b0 [ 1310.198432][T19798] ? apparmor_capable+0x12c/0x190 [ 1310.203637][T19798] sysfs_get_tree+0x42/0x110 [ 1310.208404][T19798] vfs_get_tree+0x88/0x270 [ 1310.213061][T19798] do_new_mount+0x247/0xa40 [ 1310.217792][T19798] __se_sys_mount+0x2e3/0x3d0 [ 1310.222538][T19798] ? __x64_sys_mount+0xc0/0xc0 [ 1310.227357][T19798] ? lockdep_hardirqs_on+0x94/0x140 [ 1310.232886][T19798] ? __x64_sys_mount+0x1c/0xc0 [ 1310.237727][T19798] do_syscall_64+0x4c/0xa0 [ 1310.242249][T19798] ? clear_bhb_loop+0x30/0x80 [ 1310.247121][T19798] ? clear_bhb_loop+0x30/0x80 [ 1310.251851][T19798] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1310.258151][T19798] RIP: 0033:0x7fbf7bde4159 [ 1310.262668][T19798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1310.282996][T19798] RSP: 002b:00007fbf7a03c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1310.291569][T19798] RAX: ffffffffffffffda RBX: 00007fbf7c06bfa0 RCX: 00007fbf7bde4159 [ 1310.299600][T19798] RDX: 0000200000000600 RSI: 0000200000000400 RDI: 0000000000000000 [ 1310.307811][T19798] RBP: 00007fbf7be7b024 R08: 0000000000000000 R09: 0000000000000000 [ 1310.315832][T19798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1310.323879][T19798] R13: 00007fbf7c06c038 R14: 00007fbf7c06bfa0 R15: 00007fff34610518 [ 1310.332096][T19798] [ 1311.147164][T19815] binder: BINDER_SET_CONTEXT_MGR already set [ 1311.242878][T19815] binder: 19814:19815 ioctl 4018620d 200000000040 returned -16 [ 1311.776241][T19937] udc-core: couldn't find an available UDC or it's busy [ 1311.841246][ T26] audit: type=1800 audit(1788431384.462:244): pid=19936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2923" name="(" dev="sda1" ino=2048 res=0 errno=0 [ 1311.854898][T19937] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1311.950484][ T4229] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1311.995224][ T4229] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1312.077776][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1312.241098][T19931] chnl_net:caif_netlink_parms(): no params data found [ 1312.437909][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.463610][T19931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.471120][T19931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.479910][T19931] device bridge_slave_0 entered promiscuous mode [ 1312.487932][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.491116][T19931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.505312][T19931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.518662][T19931] device bridge_slave_1 entered promiscuous mode [ 1312.539475][ T1108] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1312.554598][T19931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.569059][T19931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.601801][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.638487][T19964] udc-core: couldn't find an available UDC or it's busy [ 1312.648324][ T1108] usb 2-1: config 0 descriptor?? [ 1312.658731][T19931] team0: Port device team_slave_0 added [ 1312.676232][T19931] team0: Port device team_slave_1 added [ 1312.682940][T19964] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1312.746570][T19931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.777638][T19931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.834920][T19931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.851644][T19931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.880595][T19931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.908217][T19931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.003373][T19931] device hsr_slave_0 entered promiscuous mode [ 1313.025360][T19931] device hsr_slave_1 entered promiscuous mode [ 1313.044693][ T4275] Bluetooth: hci5: Frame reassembly failed (-84) [ 1313.066646][T19931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1313.082050][T19931] Cannot create hsr debugfs directory [ 1313.217852][ T1108] usbhid 2-1:0.0: can't add hid device: -71 [ 1313.230122][ T1108] usbhid: probe of 2-1:0.0 failed with error -71 [ 1313.269921][ T1108] usb 2-1: USB disconnect, device number 2 [ 1313.345439][T19975] udc-core: couldn't find an available UDC or it's busy [ 1313.373914][T19975] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1313.406267][T19931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.518859][T19931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.602746][T19931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.690715][T19931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.778384][T12067] Bluetooth: hci1: command 0x0409 tx timeout [ 1314.011641][T19931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1314.045360][T19931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1314.067245][T19931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1314.090667][T19931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1314.231894][T19931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.249248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1314.269216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1314.284838][T19931] 8021q: adding VLAN 0 to HW filter on device team0 [ 1314.309556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1314.328741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1314.349250][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.356494][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1314.435493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1314.446150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1314.468560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1314.518918][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.526189][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1314.548805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1314.589023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1314.625878][T19998] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1314.638467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1314.646361][T19998] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1314.696981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1314.714711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1314.738868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1314.766767][T19931] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1314.778783][T19931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1314.795103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1314.805787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1314.816419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1314.832112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1314.841595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1314.891082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1314.993983][T20008] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1315.006416][T20008] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1315.058156][T17395] Bluetooth: hci5: command 0x1003 tx timeout [ 1315.067822][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 1315.228410][T20021] udc-core: couldn't find an available UDC or it's busy [ 1315.251217][T20021] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1315.330130][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1315.348339][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1315.367083][T19931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1315.425606][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1315.449582][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1315.505060][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1315.514826][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1315.554778][T19931] device veth0_vlan entered promiscuous mode [ 1315.562990][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1315.572866][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1315.604446][T19931] device veth1_vlan entered promiscuous mode [ 1315.708257][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1315.727147][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1315.800851][T19931] device veth0_macvtap entered promiscuous mode [ 1315.820278][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1315.830635][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1315.858728][T17371] Bluetooth: hci1: command 0x041b tx timeout [ 1315.869093][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1315.887083][T19931] device veth1_macvtap entered promiscuous mode [ 1315.978219][T19931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.023301][T19931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.083586][T19931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.104356][T19931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.125646][T19931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.147695][T19931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.167629][T19931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.197909][T19931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.259762][T19931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.297648][T19931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.329758][T19931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1316.339494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1316.377144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1316.438659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1316.490974][T19931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.529735][T19931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.573158][T19931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.585248][T19931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.596093][T19931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.608286][T19931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.619508][T19931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.633081][T19931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.667739][T19931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.689269][T19931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.708726][T19931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.737518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1316.779276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1316.813966][T19931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.833692][T19931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.839609][T20060] udc-core: couldn't find an available UDC or it's busy [ 1316.858297][T19931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.900886][T19931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.908481][T20060] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1317.126973][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.139542][T17395] Bluetooth: hci5: command 0x1001 tx timeout [ 1317.145701][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 1317.152941][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.167271][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1317.195703][ T5711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.205318][ T5711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.214493][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1317.297981][T17395] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1317.619826][ T9407] ODEBUG: Out of memory. ODEBUG disabled [ 1318.023265][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 1318.163175][T20073] fuse: root generation should be zero [ 1318.250427][T18885] team0: Port device syz_tun removed [ 1318.277773][T17395] usb 5-1: too many endpoints for config 0 interface 0 altsetting 32: 248, using maximum allowed: 30 [ 1318.299923][T17395] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x2 has an invalid bInterval 77, changing to 10 [ 1318.327736][T17395] usb 5-1: config 0 interface 0 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 248 [ 1318.362293][T17395] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1318.377793][T17395] usb 5-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 1318.397465][T17395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.438892][T17395] usb 5-1: config 0 descriptor?? [ 1318.748809][T20081] chnl_net:caif_netlink_parms(): no params data found [ 1318.904563][T20081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.914783][T20081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.931660][T20081] device bridge_slave_0 entered promiscuous mode [ 1318.941599][T17395] wacom 0003:056A:00DD.0002: unknown main item tag 0x3 [ 1318.949622][T17395] wacom 0003:056A:00DD.0002: ignoring exceeding usage max [ 1318.958652][T20100] device pim6reg1 entered promiscuous mode [ 1318.965529][T20081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.972990][T17395] wacom 0003:056A:00DD.0002: Unknown device_type for 'HID 056a:00dd'. Assuming pen. [ 1318.976970][T20081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.006725][T17395] wacom 0003:056A:00DD.0002: hidraw0: USB HID v0.09 Device [HID 056a:00dd] on usb-dummy_hcd.4-1/input0 [ 1319.011542][T20081] device bridge_slave_1 entered promiscuous mode [ 1319.054619][T17395] input: Wacom Bamboo Connect Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00DD.0002/input/input6 [ 1319.146026][T20081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1319.159220][T20081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.207939][T17395] usb 5-1: USB disconnect, device number 2 [ 1319.240622][T20081] team0: Port device team_slave_0 added [ 1319.263909][T20081] team0: Port device team_slave_1 added [ 1319.280690][ T1108] Bluetooth: hci5: command 0x1009 tx timeout [ 1319.338342][T20081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.354729][T20081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.421916][T20081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.452604][T20081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.477836][T20081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.545697][T20081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.664529][T20081] device hsr_slave_0 entered promiscuous mode [ 1319.682241][T20081] device hsr_slave_1 entered promiscuous mode [ 1319.722633][T20081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1319.736608][T20081] Cannot create hsr debugfs directory [ 1319.933267][T20081] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.078188][T20081] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.098194][T12609] Bluetooth: hci1: command 0x0419 tx timeout [ 1320.153516][T20081] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.164161][ T4264] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1320.296548][T20081] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.368915][T20132] udc-core: couldn't find an available UDC or it's busy [ 1320.387690][T20132] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1320.498798][T12609] Bluetooth: hci0: command 0x0409 tx timeout [ 1320.538289][T20081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1320.568613][ T4264] usb 5-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 1320.581186][T20081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1320.597725][ T4264] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.613112][T20136] binder: BINDER_SET_CONTEXT_MGR already set [ 1320.622903][T20081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1320.628064][T20136] binder: 20135:20136 ioctl 4018620d 200000000040 returned -16 [ 1320.637821][ T4264] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1320.657102][T20081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1320.676773][ T4264] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1320.690917][ T4264] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1320.701359][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.716317][ T4264] usb 5-1: config 0 descriptor?? [ 1320.847267][T20081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.877473][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1320.887208][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1320.907487][T20081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.948908][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1320.966070][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1320.989218][T17089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.996352][T17089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.026454][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1321.030700][T20141] udc-core: couldn't find an available UDC or it's busy [ 1321.039480][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1321.055255][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1321.068096][T17089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.075209][T17089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.085187][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1321.089745][T20141] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1321.118380][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1321.155715][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1321.200260][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1321.218666][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1321.227499][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1321.237116][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1321.248979][ T4264] steelseries_srws1 0003:1038:1410.0003: unknown main item tag 0x0 [ 1321.257138][ T4264] steelseries_srws1 0003:1038:1410.0003: unknown main item tag 0x0 [ 1321.270492][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1321.279776][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1321.288421][ T4264] steelseries_srws1 0003:1038:1410.0003: unknown main item tag 0x0 [ 1321.312425][T20081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1321.323136][ T4264] steelseries_srws1 0003:1038:1410.0003: unknown main item tag 0x0 [ 1321.332147][T20081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1321.342609][ T4264] steelseries_srws1 0003:1038:1410.0003: collection stack underflow [ 1321.362247][ T4264] steelseries_srws1 0003:1038:1410.0003: item 0 0 0 12 parsing failed [ 1321.379341][ T4264] steelseries_srws1 0003:1038:1410.0003: parse failed [ 1321.396442][ T4264] steelseries_srws1: probe of 0003:1038:1410.0003 failed with error -22 [ 1321.432787][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1321.453907][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1321.462498][ T4264] usb 5-1: USB disconnect, device number 3 [ 1321.767700][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1321.777004][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1321.808877][T20081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.854017][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1321.870167][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1321.904044][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1321.919634][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1321.932055][T20081] device veth0_vlan entered promiscuous mode [ 1321.940904][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1321.969785][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1322.003591][T20081] device veth1_vlan entered promiscuous mode [ 1322.090822][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1322.111070][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1322.143174][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1322.173047][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1322.222837][T20081] device veth0_macvtap entered promiscuous mode [ 1322.269993][T20081] device veth1_macvtap entered promiscuous mode [ 1322.309754][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.337617][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.357666][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.363691][T20165] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1322.377721][T20165] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1322.386455][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.417962][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.437624][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.457618][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.478525][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.509271][T10576] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1322.517844][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.538722][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.557753][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.577739][T12609] Bluetooth: hci0: command 0x041b tx timeout [ 1322.578944][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.618762][T20081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.645345][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1322.664518][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1322.678544][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1322.697906][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1322.728172][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.747648][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.767655][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.787924][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.819878][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.853327][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.873960][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.895326][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.914226][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.936013][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.966653][T20081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.987416][T20081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.009985][T20081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.022641][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1323.054276][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1323.100440][T20081] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.127850][T20081] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.177882][T10576] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1323.206296][T20081] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.225512][T20081] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.318091][T10576] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1323.325893][T10576] usb 5-1: can't read configurations, error -71 [ 1323.508041][ T5711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.515922][ T5711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.550259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1323.609182][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.617066][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.669251][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1323.951603][T20200] using random self ethernet address [ 1323.978604][T20200] using random host ethernet address [ 1324.341135][T20215] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1324.367141][ T26] audit: type=1800 audit(1788431396.982:245): pid=20213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3012" name="westwood" dev="sda1" ino=2052 res=0 errno=0 [ 1325.394215][T17395] Bluetooth: hci0: command 0x040f tx timeout [ 1325.428097][T20224] udc-core: couldn't find an available UDC or it's busy [ 1325.458095][T20224] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1327.010756][T20249] FAULT_INJECTION: forcing a failure. [ 1327.010756][T20249] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.064680][T20249] CPU: 0 PID: 20249 Comm: syz.4.3024 Not tainted syzkaller #0 [ 1327.072702][T20249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1327.082831][T20249] Call Trace: [ 1327.086166][T20249] [ 1327.089452][T20249] dump_stack_lvl+0x188/0x250 [ 1327.094448][T20249] ? show_regs_print_info+0x20/0x20 [ 1327.099790][T20249] ? load_image+0x410/0x410 [ 1327.104491][T20249] ? __might_sleep+0xf0/0xf0 [ 1327.109496][T20249] ? __lock_acquire+0x7b50/0x7b50 [ 1327.114588][T20249] should_fail+0x383/0x4b0 [ 1327.119078][T20249] should_failslab+0x5/0x20 [ 1327.123634][T20249] slab_pre_alloc_hook+0x51/0xc0 [ 1327.128624][T20249] kmem_cache_alloc_trace+0x47/0x290 [ 1327.134199][T20249] ? raw_ioctl+0x19a0/0x3750 [ 1327.139479][T20249] raw_ioctl+0x19a0/0x3750 [ 1327.143964][T20249] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 1327.149728][T20249] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1327.155344][T20249] ? make_qualifier+0x3b0/0x3b0 [ 1327.160293][T20249] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1327.165509][T20249] ? security_file_ioctl+0x7c/0xa0 [ 1327.170791][T20249] ? make_qualifier+0x3b0/0x3b0 [ 1327.175739][T20249] __se_sys_ioctl+0xfa/0x170 [ 1327.180646][T20249] do_syscall_64+0x4c/0xa0 [ 1327.185231][T20249] ? clear_bhb_loop+0x30/0x80 [ 1327.189998][T20249] ? clear_bhb_loop+0x30/0x80 [ 1327.194919][T20249] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1327.200878][T20249] RIP: 0033:0x7f7a61f36deb [ 1327.205342][T20249] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1327.225090][T20249] RSP: 002b:00007f7a6018cf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1327.233684][T20249] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f7a61f36deb [ 1327.241722][T20249] RDX: 00007f7a6018dfd0 RSI: 0000000041015500 RDI: 0000000000000005 [ 1327.249810][T20249] RBP: 00007f7a6018dfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 1327.258088][T20249] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7a6018cfa0 [ 1327.266122][T20249] R13: 0000200000000000 R14: 0000000000000003 R15: 0000000000000000 [ 1327.274395][T20249] [ 1327.457789][T12609] Bluetooth: hci0: command 0x0419 tx timeout [ 1327.480242][T20259] udc-core: couldn't find an available UDC or it's busy [ 1327.520377][T20259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1327.753307][T20261] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1327.786126][T20247] chnl_net:caif_netlink_parms(): no params data found [ 1327.797803][T20261] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1328.023453][T20279] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 1328.124889][T20247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.182514][T20247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.209320][T20247] device bridge_slave_0 entered promiscuous mode [ 1328.224551][T20247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.241069][T20247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.260418][T20247] device bridge_slave_1 entered promiscuous mode [ 1328.356798][T20247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1328.405570][T20247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1328.507138][ T4240] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1328.520195][T20247] team0: Port device team_slave_0 added [ 1328.544496][T20247] team0: Port device team_slave_1 added [ 1328.617854][T20247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.627407][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.649088][T20296] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1328.706520][T20247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.760054][T20247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.767062][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.827902][ T4240] usb 4-1: Using ep0 maxpacket: 16 [ 1328.851797][T20247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.978175][ T4240] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.005006][T20247] device hsr_slave_0 entered promiscuous mode [ 1329.011585][ T4240] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1329.024930][T20290] mmap: syz.1.3038 (20290) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 1329.041916][T20247] device hsr_slave_1 entered promiscuous mode [ 1329.051447][T20247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1329.058137][T12067] Bluetooth: hci3: command 0x0409 tx timeout [ 1329.067638][T20247] Cannot create hsr debugfs directory [ 1329.208036][ T4240] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1329.237693][ T4240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.263997][ T4240] usb 4-1: Product: syz [ 1329.274135][ T4240] usb 4-1: Manufacturer: syz [ 1329.284284][ T4240] usb 4-1: SerialNumber: syz [ 1329.357055][T20247] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.479545][T20247] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.590204][T20247] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.630928][T20320] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1329.649873][T20320] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1329.650909][ T4240] usb 4-1: 0:2 : does not exist [ 1329.730887][ T4240] usb 4-1: USB disconnect, device number 2 [ 1329.740316][T20247] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.990221][T20247] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1330.025354][T20247] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1330.071440][T20247] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1330.081873][ T4286] udevd[4286]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1330.118567][T20247] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1330.278468][T12067] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1330.359757][T20247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1330.388542][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1330.404194][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1330.429842][T20247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1330.442446][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1330.454222][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1330.468846][T17089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.477546][T17089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.504995][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1330.526529][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1330.558652][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1330.573610][T17089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.580903][T17089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.608253][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1330.639817][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1330.649929][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1330.662724][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1330.672640][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1330.685980][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1330.693252][T12067] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.711699][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1330.721398][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1330.731965][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1330.756608][T20247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1330.808511][T20247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1330.821376][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1330.848352][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1330.878161][T12067] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1330.888267][T12067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.907651][T12067] usb 5-1: Product: syz [ 1330.911912][T12067] usb 5-1: Manufacturer: syz [ 1330.937475][T12067] usb 5-1: SerialNumber: syz [ 1330.944609][T12067] usb 5-1: config 0 descriptor?? [ 1330.997288][ T26] audit: type=1804 audit(1788431403.612:246): pid=20351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3056" name="/newroot/592/mnt/syzkaller0" dev="sda1" ino=2055 res=1 errno=0 [ 1331.140273][T12609] Bluetooth: hci3: command 0x041b tx timeout [ 1331.199946][T20353] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1331.227813][T20353] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1331.228850][ T4240] usb 5-1: USB disconnect, device number 6 [ 1331.244910][ T26] audit: type=1800 audit(1788431403.862:247): pid=20359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3058" name="syzkaller0" dev="sda1" ino=2055 res=0 errno=0 [ 1331.401558][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1331.416695][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1331.442051][T20247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.521259][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1331.557137][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1331.651584][T20247] device veth0_vlan entered promiscuous mode [ 1331.690409][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1331.699906][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1331.719844][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1331.728842][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1331.744268][T20247] device veth1_vlan entered promiscuous mode [ 1331.872067][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1331.888594][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1331.917471][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1331.946993][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1331.983786][T20247] device veth0_macvtap entered promiscuous mode [ 1332.007042][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1332.032517][T20247] device veth1_macvtap entered promiscuous mode [ 1332.106252][T20247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.155373][T20247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.207954][T20247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.248391][T20247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.283869][T20247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.320990][T20247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.357715][T20247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.371080][T20389] FAULT_INJECTION: forcing a failure. [ 1332.371080][T20389] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.384727][T20247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.441413][T20389] CPU: 0 PID: 20389 Comm: syz.0.3070 Not tainted syzkaller #0 [ 1332.448967][T20389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1332.459159][T20389] Call Trace: [ 1332.462472][T20389] [ 1332.465436][T20389] dump_stack_lvl+0x188/0x250 [ 1332.470246][T20389] ? show_regs_print_info+0x20/0x20 [ 1332.475579][T20389] ? load_image+0x410/0x410 [ 1332.480139][T20389] ? __might_sleep+0xf0/0xf0 [ 1332.484766][T20389] ? __lock_acquire+0x7b50/0x7b50 [ 1332.489827][T20389] ? ida_alloc_range+0x821/0x860 [ 1332.494877][T20389] should_fail+0x383/0x4b0 [ 1332.499335][T20389] should_failslab+0x5/0x20 [ 1332.503877][T20389] slab_pre_alloc_hook+0x51/0xc0 [ 1332.508854][T20389] kmem_cache_alloc_trace+0x47/0x290 [ 1332.514179][T20389] ? wakeup_source_sysfs_add+0x53/0x2b0 [ 1332.519846][T20389] wakeup_source_sysfs_add+0x53/0x2b0 [ 1332.525255][T20389] wakeup_source_register+0x15f/0x230 [ 1332.530718][T20389] ep_insert+0xe66/0x1990 [ 1332.535177][T20389] ? ep_loop_check+0x180/0x180 [ 1332.540153][T20389] ? bpf_lsm_capable+0x5/0x10 [ 1332.544856][T20389] ? security_capable+0x85/0xb0 [ 1332.549743][T20389] do_epoll_ctl+0x88b/0xeb0 [ 1332.554292][T20389] __x64_sys_epoll_ctl+0x162/0x1b0 [ 1332.559445][T20389] ? ep_modify+0xa80/0xa80 [ 1332.563902][T20389] ? lockdep_hardirqs_on+0x94/0x140 [ 1332.569137][T20389] do_syscall_64+0x4c/0xa0 [ 1332.573625][T20389] ? clear_bhb_loop+0x30/0x80 [ 1332.578471][T20389] ? clear_bhb_loop+0x30/0x80 [ 1332.584473][T20389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1332.590587][T20389] RIP: 0033:0x7f0e775c3159 [ 1332.595043][T20389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.614971][T20389] RSP: 002b:00007f0e7581b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1332.623424][T20389] RAX: ffffffffffffffda RBX: 00007f0e7784afa0 RCX: 00007f0e775c3159 [ 1332.631640][T20389] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003 [ 1332.639792][T20389] RBP: 00007f0e7765a024 R08: 0000000000000000 R09: 0000000000000000 [ 1332.648115][T20389] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 1332.656252][T20389] R13: 00007f0e7784b038 R14: 00007f0e7784afa0 R15: 00007ffe09429238 [ 1332.664280][T20389] [ 1332.679638][T20247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.692670][T20247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.714939][T20247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.736029][T20247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.753567][T20247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.768582][T20247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.793807][T20247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1332.817859][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1332.831609][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1332.882095][T20247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.913280][T20247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.949960][T20247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1332.979921][T20247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.006787][T20247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.022560][T20247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.033162][T20247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.069309][T20247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.090637][T20247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.112651][T20247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.143245][T20247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.175637][T20247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.188985][T20247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.217775][T17395] Bluetooth: hci3: command 0x040f tx timeout [ 1333.243184][T20247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.286974][T20247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1333.325690][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1333.340847][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1333.372466][T20247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.398044][T20247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.419428][T20247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.422944][T20396] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1333.447632][T20247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.472631][T20402] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1333.498518][T20396] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1333.625267][T20400] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1333.659389][T20400] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1333.684885][ T5254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.700902][ T5254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.749010][T20239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1333.799011][T20239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.817152][T20239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.853306][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1335.301240][T12067] Bluetooth: hci3: command 0x0419 tx timeout [ 1335.402411][T20438] kvm: emulating exchange as write [ 1335.567938][ T4264] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1335.768289][T20439] chnl_net:caif_netlink_parms(): no params data found [ 1335.797753][T12067] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1335.837747][ T4264] usb 4-1: Using ep0 maxpacket: 16 [ 1335.968022][ T4264] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.003497][ T4264] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1336.035980][T20453] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1336.049298][T20453] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1336.082267][T20439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.090145][T20439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.099108][T20439] device bridge_slave_0 entered promiscuous mode [ 1336.123106][T20439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.161828][T20439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.171362][T20439] device bridge_slave_1 entered promiscuous mode [ 1336.193544][T20466] device syzkaller1 entered promiscuous mode [ 1336.198533][ T4264] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1336.208115][T12067] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1336.227653][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.251634][ T4264] usb 4-1: Product: syz [ 1336.258016][T12067] usb 3-1: not running at top speed; connect to a high speed hub [ 1336.259485][ T4264] usb 4-1: Manufacturer: syz [ 1336.270963][ T4264] usb 4-1: SerialNumber: syz [ 1336.280146][T20439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1336.294404][T20439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.331971][T20439] team0: Port device team_slave_0 added [ 1336.349432][T12067] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.361922][T20439] team0: Port device team_slave_1 added [ 1336.367875][T12067] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1336.377026][T12067] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1336.435817][T20439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.446598][T20439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1336.502236][T20439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1336.545331][T20439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1336.573209][T20439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1336.617889][T12067] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1336.617897][ T4264] usb 4-1: 0:2 : does not exist [ 1336.617922][T12067] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.658563][T12067] usb 3-1: Product: syz [ 1336.663019][T20439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1336.673882][T12067] usb 3-1: Manufacturer: syz [ 1336.678899][T12067] usb 3-1: SerialNumber: syz [ 1336.692056][ T4264] usb 4-1: USB disconnect, device number 3 [ 1336.778313][T20439] device hsr_slave_0 entered promiscuous mode [ 1336.800814][T20439] device hsr_slave_1 entered promiscuous mode [ 1336.816797][T20439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1336.825834][T20439] Cannot create hsr debugfs directory [ 1336.928841][ T4535] udevd[4535]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1337.077891][T12067] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 1337.092582][T12067] usb 3-1: 1:1 : sample bitwidth 190 in over sample bytes 3 [ 1337.119293][T12067] usb 3-1: 1:1 : unsupported format bits 0xc86b167e [ 1337.132704][T12067] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1337.180348][T20439] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.211496][T12067] usb 3-1: unit 2 not found! [ 1337.216392][T12067] usb 3-1: unit 0 not found! [ 1337.296142][T20439] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.369016][T12067] usb 3-1: USB disconnect, device number 2 [ 1337.510501][T20439] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.538080][T12609] Bluetooth: hci4: command 0x0409 tx timeout [ 1337.700237][ T4853] udevd[4853]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1337.825352][T20439] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.938192][T20505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3106'. [ 1338.118183][T20505] device veth0_to_bond entered promiscuous mode [ 1338.240496][T20505] syz.3.3106 (20505) used greatest stack depth: 19344 bytes left [ 1338.281800][T20439] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1338.301273][T20517] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3109'. [ 1338.322376][T20439] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1338.369104][T20439] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1338.430817][T20439] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1338.565735][T20532] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3114'. [ 1338.675688][T20531] tipc: Started in network mode [ 1338.688567][T20531] tipc: Node identity 26eb3772e738, cluster identity 4711 [ 1338.725749][T20531] tipc: Enabled bearer , priority 1 [ 1338.792332][T20529] tipc: Resetting bearer [ 1338.889578][T20529] tipc: Disabling bearer [ 1338.942099][T20439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.042681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1339.058921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1339.111787][T20439] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.154049][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1339.178461][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1339.224152][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.231486][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.308855][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1339.328540][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1339.363435][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1339.393685][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.400934][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1339.442056][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1339.499282][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1339.539369][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1339.577438][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1339.616344][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1339.625006][ T4704] Bluetooth: hci4: command 0x041b tx timeout [ 1339.653254][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1339.694178][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1339.715667][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1339.761010][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1339.781882][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1339.813520][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1339.860042][T20439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1340.323394][T20605] udc-core: couldn't find an available UDC or it's busy [ 1340.442236][ T4264] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1341.207816][T20605] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1341.459024][T20618] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3137'. [ 1341.500989][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1341.509499][T17089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1341.517685][ T4264] usb 2-1: Using ep0 maxpacket: 8 [ 1341.526541][T20439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1341.638014][ T4264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.677622][ T4264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.697910][T12067] Bluetooth: hci4: command 0x040f tx timeout [ 1341.708372][ T4264] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1341.747163][ T4264] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1341.777273][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.809508][ T4264] usb 2-1: config 0 descriptor?? [ 1342.075268][T20645] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 1342.245105][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1342.265682][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1342.409042][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1342.418856][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1342.447200][T20439] device veth0_vlan entered promiscuous mode [ 1342.462275][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1342.483270][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1342.525297][T20439] device veth1_vlan entered promiscuous mode [ 1342.550428][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1342.602945][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1342.617210][ T5836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1342.641627][T20439] device veth0_macvtap entered promiscuous mode [ 1342.662908][T20439] device veth1_macvtap entered promiscuous mode [ 1342.723181][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.744391][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.767376][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.812336][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.851035][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.887729][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.927684][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.957744][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.979243][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.983151][ T4264] sony 0003:054C:042F.0004: can't set operational mode: step 3, ignoring [ 1343.003421][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.026115][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.042777][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.052955][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.064789][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.094056][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.136395][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.152603][T20439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1343.165588][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1343.180740][ T4264] input: HID 054c:042f as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:042F.0004/input/input10 [ 1343.196783][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1343.218837][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1343.248831][ T4264] sony 0003:054C:042F.0004: input,hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.1-1/input0 [ 1343.264414][ T5711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1343.281004][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.303718][ T4264] usb 2-1: USB disconnect, device number 3 [ 1343.327667][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.353302][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.390021][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.443145][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3149'. [ 1343.454276][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.475709][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.496144][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.527305][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.546009][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.567065][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.609971][T20680] fido_id[20680]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1343.615678][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.657656][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.667547][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.693248][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.727728][T20439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.738590][T20439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.778121][T12609] Bluetooth: hci4: command 0x0419 tx timeout [ 1343.799746][T20439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1343.817090][T20661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1343.865566][T20661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1343.945635][T20239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1343.962732][T20239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1344.002084][T20439] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.038051][T20439] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.056107][T20439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.066617][T20439] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.288347][T20239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.314629][T20239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.364161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1344.453605][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.468656][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.501443][T20705] device syzkaller0 entered promiscuous mode [ 1344.520925][T20239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1344.541670][T20705] [ 1344.544059][T20705] ============================================ [ 1344.550232][T20705] WARNING: possible recursive locking detected [ 1344.556554][T20705] syzkaller #0 Not tainted [ 1344.561059][T20705] -------------------------------------------- [ 1344.567317][T20705] syz.0.3158/20705 is trying to acquire lock: [ 1344.573681][T20705] ffff888065860108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 1344.583281][T20705] [ 1344.583281][T20705] but task is already holding lock: [ 1344.590800][T20705] ffff888065860108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 1344.600376][T20705] [ 1344.600376][T20705] other info that might help us debug this: [ 1344.608772][T20705] Possible unsafe locking scenario: [ 1344.608772][T20705] [ 1344.616256][T20705] CPU0 [ 1344.619568][T20705] ---- [ 1344.623267][T20705] lock(&sch->q.lock); [ 1344.627569][T20705] lock(&sch->q.lock); [ 1344.631923][T20705] [ 1344.631923][T20705] *** DEADLOCK *** [ 1344.631923][T20705] [ 1344.640094][T20705] May be due to missing lock nesting notation [ 1344.640094][T20705] [ 1344.648623][T20705] 3 locks held by syz.0.3158/20705: [ 1344.653848][T20705] #0: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 1344.664283][T20705] #1: ffff888065860108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 1344.674216][T20705] #2: ffffffff8c31efc0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 1344.684010][T20705] [ 1344.684010][T20705] stack backtrace: [ 1344.689972][T20705] CPU: 1 PID: 20705 Comm: syz.0.3158 Not tainted syzkaller #0 [ 1344.697481][T20705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1344.707667][T20705] Call Trace: [ 1344.710982][T20705] [ 1344.714022][T20705] dump_stack_lvl+0x188/0x250 [ 1344.718828][T20705] ? show_regs_print_info+0x20/0x20 [ 1344.724071][T20705] ? load_image+0x410/0x410 [ 1344.728640][T20705] __lock_acquire+0x1247/0x7b50 [ 1344.733710][T20705] ? stack_trace_snprint+0xe0/0xe0 [ 1344.738953][T20705] ? lockdep_unlock+0x143/0x2e0 [ 1344.743929][T20705] ? verify_lock_unused+0x140/0x140 [ 1344.749174][T20705] ? add_lock_to_list+0x18d/0x280 [ 1344.754237][T20705] ? __lock_acquire+0x2844/0x7b50 [ 1344.759316][T20705] lock_acquire+0x19e/0x400 [ 1344.763857][T20705] ? __dev_queue_xmit+0xa2b/0x2e50 [ 1344.769092][T20705] ? read_lock_is_recursive+0x10/0x10 [ 1344.774686][T20705] ? rcu_read_lock_bh_held+0x76/0xf0 [ 1344.780177][T20705] ? rcu_read_lock_held+0x40/0x40 [ 1344.785284][T20705] _raw_spin_lock+0x2a/0x40 [ 1344.789922][T20705] ? __dev_queue_xmit+0xa2b/0x2e50 [ 1344.795345][T20705] __dev_queue_xmit+0xa2b/0x2e50 [ 1344.800428][T20705] ? dev_queue_xmit+0x20/0x20 [ 1344.805262][T20705] ? __kernel_text_address+0x9a/0x100 [ 1344.810799][T20705] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1344.817041][T20705] ? lockdep_hardirqs_on+0x94/0x140 [ 1344.822376][T20705] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1344.828320][T20705] ? _raw_spin_unlock+0x40/0x40 [ 1344.833226][T20705] ? stack_trace_save+0xa6/0xf0 [ 1344.838153][T20705] ? netdev_core_pick_tx+0x300/0x300 [ 1344.843626][T20705] sch_frag_xmit_hook+0x2d8/0x1be0 [ 1344.848980][T20705] ? __kasan_slab_alloc+0xa9/0xc0 [ 1344.854135][T20705] ? __kasan_slab_alloc+0x92/0xc0 [ 1344.859284][T20705] ? slab_post_alloc_hook+0x4c/0x380 [ 1344.864614][T20705] ? kmem_cache_alloc+0x15d/0x280 [ 1344.869701][T20705] ? skb_clone+0x1bd/0x350 [ 1344.874187][T20705] ? tcf_mirred_act+0x5b0/0x1640 [ 1344.879239][T20705] ? tcf_action_exec+0x177/0x570 [ 1344.884301][T20705] ? basic_classify+0x1ae/0x2c0 [ 1344.889279][T20705] ? tcf_classify+0x218/0xad0 [ 1344.894011][T20705] ? qfq_enqueue+0x31b/0x1310 [ 1344.898881][T20705] ? dev_qdisc_enqueue+0x48/0x210 [ 1344.904029][T20705] ? __dev_queue_xmit+0xbde/0x2e50 [ 1344.909461][T20705] ? packet_sendmsg+0x3b4f/0x4de0 [ 1344.914936][T20705] ? mq_dump_class_stats+0x430/0x430 [ 1344.920548][T20705] ? do_syscall_64+0x4c/0xa0 [ 1344.926026][T20705] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1344.932170][T20705] ? __copy_skb_header+0x3ba/0x4f0 [ 1344.937351][T20705] ? memcpy+0x3c/0x60 [ 1344.941372][T20705] ? __copy_skb_header+0x3ba/0x4f0 [ 1344.946564][T20705] ? __skb_clone+0x446/0x6c0 [ 1344.951192][T20705] ? skb_clone+0x1f1/0x350 [ 1344.955667][T20705] ? tcf_mirred_act+0x59a/0x1640 [ 1344.960642][T20705] tcf_mirred_act+0xc5a/0x1640 [ 1344.965454][T20705] tcf_action_exec+0x177/0x570 [ 1344.970260][T20705] basic_classify+0x1ae/0x2c0 [ 1344.974986][T20705] tcf_classify+0x218/0xad0 [ 1344.979546][T20705] qfq_enqueue+0x31b/0x1310 [ 1344.984097][T20705] ? sch_tree_lock+0x110/0x110 [ 1344.988906][T20705] ? do_raw_spin_lock+0x128/0x2f0 [ 1344.994154][T20705] ? __rwlock_init+0x140/0x140 [ 1345.000002][T20705] ? __alloc_skb+0x473/0x750 [ 1345.004658][T20705] dev_qdisc_enqueue+0x48/0x210 [ 1345.009557][T20705] __dev_queue_xmit+0xbde/0x2e50 [ 1345.014579][T20705] ? dev_queue_xmit+0x20/0x20 [ 1345.019301][T20705] ? virtio_net_hdr_to_skb+0xb8c/0x11e0 [ 1345.024898][T20705] ? packet_cached_dev_get+0x270/0x270 [ 1345.030755][T20705] ? skb_put+0x10e/0x200 [ 1345.035042][T20705] packet_sendmsg+0x3b4f/0x4de0 [ 1345.040289][T20705] ? sched_move_task+0x2c0/0x4f0 [ 1345.045574][T20705] ? aa_sk_perm+0x7dc/0x910 [ 1345.050308][T20705] ? packet_getsockopt+0x9a0/0x9a0 [ 1345.056202][T20705] ? unpack_rlimits+0x88e/0x1230 [ 1345.061192][T20705] ? apparmor_socket_sendmsg+0x88/0x230 [ 1345.066779][T20705] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1345.072127][T20705] ? security_socket_sendmsg+0x7c/0xa0 [ 1345.077639][T20705] ? packet_getsockopt+0x9a0/0x9a0 [ 1345.079835][T20711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3161'. [ 1345.082968][T20705] ____sys_sendmsg+0x5be/0x8f0 [ 1345.096788][T20705] ? __sys_sendmsg_sock+0x30/0x30 [ 1345.101893][T20705] ? import_iovec+0x6f/0xa0 [ 1345.106475][T20705] ___sys_sendmsg+0x236/0x2e0 [ 1345.111225][T20705] ? __sys_sendmsg+0x290/0x290 [ 1345.116045][T20705] __se_sys_sendmsg+0x1b7/0x2a0 [ 1345.120939][T20705] ? __x64_sys_sendmsg+0x80/0x80 [ 1345.125905][T20705] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1345.131978][T20705] ? lockdep_hardirqs_on+0x94/0x140 [ 1345.137271][T20705] do_syscall_64+0x4c/0xa0 [ 1345.141730][T20705] ? clear_bhb_loop+0x30/0x80 [ 1345.144974][T20711] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1345.146446][T20705] ? clear_bhb_loop+0x30/0x80 [ 1345.146476][T20705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1345.155723][T20711] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1345.159926][T20705] RIP: 0033:0x7f0e775c3159 [ 1345.159950][T20705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1345.159968][T20705] RSP: 002b:00007f0e7581b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1345.159996][T20705] RAX: ffffffffffffffda RBX: 00007f0e7784afa0 RCX: 00007f0e775c3159 [ 1345.160012][T20705] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006 [ 1345.160025][T20705] RBP: 00007f0e7765a024 R08: 0000000000000000 R09: 0000000000000000 [ 1345.160038][T20705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1345.160050][T20705] R13: 00007f0e7784b038 R14: 00007f0e7784afa0 R15: 00007ffe09429238 [ 1345.160071][T20705] [ 1345.165984][T20711] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1345.261564][T20711] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1345.411519][T20711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3161'.