last executing test programs: 2m42.05907103s ago: executing program 0 (id=202): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x2, 0xfec00000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, &(0x7f0000000500)="f2dee80f01c8b831018ec00f20e06635000400000f22e00f01c30f01cb0f30660f3881935cd266b8010000000f01c1440f20c0663509000000440f22c0", 0xff8f}], 0x1, 0x81, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) 2m41.133189524s ago: executing program 0 (id=207): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000040)={[], [{@context={'context', 0x3d, 'user_u'}}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x7) getpid() ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000740)={@desc={0x1, 0x0, @auto="883155e010f80108"}, 0x40, 0x0, '\x00', @b}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20014054}}], 0x1, 0x20040001) prctl$PR_GET_DUMPABLE(0x3) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbefa, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000800)=ANY=[], 0x5000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r5, &(0x7f0000000000)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000580), 0x1000a) sendfile(r5, r6, &(0x7f00000005c0)=0x11, 0x7ffff000) 2m38.170127296s ago: executing program 0 (id=214): syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x2, &(0x7f0000000b80)=ANY=[], 0x1, 0x5b1, &(0x7f0000000bc0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000800)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 2m37.706962398s ago: executing program 0 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x50011, &(0x7f00000003c0), 0x1, 0x793, &(0x7f0000000400)="$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") getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c80), 0x651, 0x0) capset(&(0x7f0000000cc0)={0x20080522}, &(0x7f0000000d00)={0x200002, 0x200003, 0x801, 0x4, 0x7}) recvmmsg(r1, &(0x7f0000000d40), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x18000, &(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000e40)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200), 0x1003}, 0x38) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001240)={'veth0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = open(&(0x7f0000001340)='./bus\x00', 0x1c1242, 0x0) ftruncate(r4, 0x2007ffb) ftruncate(r4, 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) 2m32.627432663s ago: executing program 0 (id=226): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0xe, 0x12}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000318000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x20) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x4b, 0x21, 0xfffffffffffffffe}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x20, {{0x2, 0x4e21, @private=0xa010102}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}}, 0x108) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000540)=""/246, 0x8a, 0xf6, 0x1}, 0x28) 2m31.54267906s ago: executing program 0 (id=231): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 2m16.433602892s ago: executing program 32 (id=231): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 1m16.352350961s ago: executing program 4 (id=640): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x40, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0xfff8, 0x0, 0x1, 0x2f, 0x0, @empty, @multicast2}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1m16.324131451s ago: executing program 4 (id=641): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000015c0)={&(0x7f0000000380)="1d", 0x0, 0x0, 0x0, 0x80000000, 0xffffffffffffffff, 0x4}, 0x38) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x8, 0xfe, 0x0, 0x6ed, 0x2, 0xe, 0xd, 0x9, 0x2, 0xe8, 0x26, 0x0, 0xe5, 0x74, 0x7, 0x2, 0xd, 0x9, '\x00', 0x2, 0x4000000b}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m16.166912665s ago: executing program 4 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r0 = socket(0xa, 0x7, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/trace_marker\x00', 0x1, 0x5a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x54, &(0x7f0000000400)=0x1, 0x4) close(0x3) recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}, 0x62) write(r1, &(0x7f0000000340)="2d2519e72bd5b93dc2547dfbde71febae03d46fdca85c1a1862b9b160500aaca9ccf1cb8ff5b9b11d9d54bd8714bdef1c9fa253595f944123f1c9c5e4ee16a1d71f8876bd9dd3961e263a6c4342810c491870ca22d74fbba136b98e54d390eb52ff3e5", 0x63) 1m15.800789884s ago: executing program 4 (id=649): socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x181) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000844, &(0x7f0000000240)={[{@fat=@nfs_nostale_ro}, {@fat=@dos1xfloppy}, {@fat=@showexec}, {@fat=@discard}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@fat=@nfs_stale_rw}, {@fat=@fmask={'fmask', 0x3d, 0x54fcfa75}}, {@fat=@dmask={'dmask', 0x3d, 0x8}}, {@dots}, {@dots}, {@fat=@flush}]}, 0x1, 0x25a, &(0x7f0000000a40)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000008c0)='./bus\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000900)='./bus\x00') io_uring_setup(0x3249, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0x1480e, &(0x7f0000000400)=ANY=[], 0xfd, 0x745, &(0x7f0000001500)="$eJzs3V1v3Fj9B/DvmedM//9sBahaVdnmNAUpFWHWM9lONQpIGM+ZxDAzHtkTSCSkVaHJKuqkQFskOjdtbmCR4I4r7vaGC17ESlwgLvZdwBVIKxASYgVCRvax59GeJG36sOz3E+2Ox/6dB9sj/+oZ+xhEREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREQEYTUNoyrQtru7ezKd1XSdTvwmi7nlurY8buqJm4vazAftAiL4D6US3tSz3/zCOORK8L81rOh3KygFLyUML125vPX5XCYuv6DDzwJpFQokt/Xw8fDencHg4MEZKs8itfrXETLpy3LxxLbq2p5jd8xtJW3PkY163Xh7p+XJlt1W3r7XVx1puSrTd1y5bt2U1UZjU6rK/o1loGm2VTzz9ldqhlGX3yzqHQ2g4lk7drttd7fDmGBxEHNb/uK7OkCZHSkPjwYHmxMde5K0jYOgasJaZCaDg6DaadukZtRq1WqtVq3faty6bRi5uRlGQBgjmIu48A8tfcpc7AGc6DlkrOa/jT8KoI0SutjFHmTin4UmXDjopCyPxPk/A7Ww3cn8vwIEyXElP158FWH+v6bfXUvL/yl9kZBhgYm+ifi9wIJSZ/7Lhz2SeIjHGOIe7mCAAQ7w4ALqlpCrz11DwYi25Px+mtxj4/mllPjFf9tQ6MKGBwc2OjCxjf+HjOZINFBHHQbexQ5a8CDRgo02FDzsw0MfKvhEFYKWFUz04cCFxDos3IREFQ00sAkJhQr24WAXXWyjCRP/9H3/EEfhdt+M+vM0YS0QB1VTVqKIXPy5O0Btwdqm5f/vPdGlo/xvMP9/VunPQVG/fLQohug14Efn/+e0+mJ6Q0REREREREQvggh/Yxfhr/JvAfDRstvKmIopvrLeEREREREREdFFEPCLWIHQV+XjLYj5838iIiIiIiIi+nQT4T12AkA5vKhfjG+Xmv4SIJtYPHkuEREREREREb1Wwjv/rxUAP7zKfxUi5fx/JPdyO0hEREREREREz+39iTH2c1k9xm7Jj3/WzwBY/VNRfPjXIty8OOntfVEcm8ES8ziKmbsCoN+6KpajgXrDl8JHBb3EUisiak0C/4i/fQh8fJg81v9TXxNCuDMdKGQnK0jpgMCVy1v13PBS/K3FdV3kejTc7d1hBkFcNCJxuWW3VcVy2ltVmOZypq/2+j++f/QTwB2t5+HR4KDy/R8M7oZ9OQlmnRwHlT6Z6k4meWPUc9E7PArHWwjvuUga3XgJrbjJn3c7ZRG2a8Trn4V5nJlsaNEOqC8Bei1/ijW9z9Z8HVsejgb+FcBqOPhDtbIV7LCptXfzYtyL6uyaJ+2IlDUvhb24oWNurN/QL/E2CerJiNKXs0CtMr8PpnpRm+zF6dtC/G1m+y/uBUQp2BabQS9+F1Q004vvfKgLb/b24uExztKLuU8BEdGrcjjOQuEg5nNj7MfpIT6oJeSdX+mX2aMcckB0lNPZ/f30J/n4Uf6Is/ujX/s6Q2WBXPTbRHIrcV5BcERfF2E9Bf0jRe5qwhHdqHzi+765XMLkEf0/vh+vkLE4u03l9RPf92eP6L8dPwMp6vZcL/7l+/5WNcwkv5zJqh8EBT5Izapeu5ZFCUU8Ov5hOAB+4L2D9w7u12qbdeMdw7hVQz78p0L0kgVzDxERzTn9GTthRGZBhHgH13Ud1+/+5Ut6airjfS66pCD0NjDAXWxgNTjHDc45E2st4xBf+7u+DGFDn7UCa2X9Wh7KK5e3gtKj2CORC5/wspF6VhfmUh0bXt5QG8X+4Y24yHSmHsduvoQ9QURE9PKsxY/ymcnDwFT+x3T+L03l/w2s64j1q4nn3eWJSwo34rPj0Sn98NJJYmz19M5//YI3BhER0WeEcj8W5f7Psq5r996tNhpVs7+jpOtY35Ku3dxW0u72lWvtmN1tJXuu03cspy17Lor2kvKkt9vrOW5fthxX9hzP3guf/C6jR79Hv/vD67WV6SlpOd2+afVl0/Ys2dv9Rtv2dpQbFvZ6yrJbtmX2bacrPWfXtVRFSk+piUC7qbp9u2UHk13Zc+2O6e7Lbzvt3Y6STeVZrt3rO7rCuC2723LcTlhtBf65H3RIRET0v+jh4+G9O4PBwYPZiaXg1FzPOUFKzPxEIaFCjhFERET0mhmn63MUKr3ADhERERERERERERERERERERERERERERER0ZykO/me4Ix3+01OCKEn8kk3CwKjOT9ajubgKca3GM5VKHCu1hMmPnF/nw9aeJbimfM2Gt8SMcwCSA1eGs2JN/9kzMlsqXiE3qRGcRl45u3z5/8DLoVzoOfkzrt9op4tiFlasHOfcSLeHokxXz3UC9OKhwsTFxVH+yKXfjvs/IT/xllX8P5v5heJYC183/cXFy9ON1E4++c52FgPCgt6uHTK5+dlHH2I6FX6bwAAAP//ZSon7Q==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001c80)='.\x00', 0x1c3080, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000001d40)=""/4096, 0x1000) 1m14.952011815s ago: executing program 4 (id=654): add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0xfffffffffffffcd2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000680)=[{&(0x7f00000006c0)='w', 0x1}], 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000700)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1m14.471084207s ago: executing program 4 (id=659): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000380)=0xffffff16, 0xfe7e) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/224, 0xe0}, 0x8}], 0x1, 0x45833af92e4b39ff, 0x0) 1m14.366147829s ago: executing program 33 (id=659): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000380)=0xffffff16, 0xfe7e) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/224, 0xe0}, 0x8}], 0x1, 0x45833af92e4b39ff, 0x0) 10.022938363s ago: executing program 6 (id=1289): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x200, 0x6, '9P2000'}, 0x13) 7.424853857s ago: executing program 6 (id=1301): socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/conf/all/proxy_arp\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="7644b3", 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000440)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000004c0)="13", 0x1}], 0x1}, 0x48043) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f00000005c0)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r1, 0x0, 0xffff, 0x2) 5.071169215s ago: executing program 6 (id=1312): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='mtd0\x00', &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000001540)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f00000015c0)='2', 0xfdef, 0xe7c) writev(r0, &(0x7f0000001e80)=[{&(0x7f0000001f00)="13ee597c480bac743ed025a20dfe079048a76a6fe7130ca162cf1e90c041bd466e4781ab33b6dc7989c25c29c1d7f1630ec97bd08aae0b3410436e4354a68e96d3199cbf40149389ef5f50923f1e0790b227dc59b413e897caab60f4927205c7eeb5f862b264f6b2e1e7a7a5b5b2f51cb58bff785246fb9f9c5edb4bfdc12ec61c7e6bd092e944838a5166410e812014c29578a1", 0x94}, {&(0x7f0000002080)="0ec1", 0x2}], 0x2) write$binfmt_script(r0, &(0x7f0000002200)={'#! ', 'mtd0'}, 0x8) 5.018993076s ago: executing program 2 (id=1313): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000040)={[], [{@context={'context', 0x3d, 'user_u'}}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x7) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000740)={@desc={0x1, 0x0, @auto="883155e010f80108"}, 0x40, 0x0, '\x00', @b}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20014054}}], 0x1, 0x20040001) prctl$PR_GET_DUMPABLE(0x3) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x4000087, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000580), 0x1000a) sendfile(r4, r5, &(0x7f00000005c0)=0x11, 0x7ffff000) 3.779850417s ago: executing program 2 (id=1315): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xc}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000005}, 0x20000040) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x1000000000, 0x7}, 0x0, 0x0, 0x0, 0x0) 3.779607266s ago: executing program 6 (id=1316): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x501, 0x1001, 0xffffffff, {0x0, 0x0, 0x0, 0x1, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="08800000084400001c0012800b00010067656e65766500000c00028005000c000100000008000a00", @ANYRES32=r2, @ANYBLOB="cc49d81a0bdeff2ccb6974740e7f9bfb0dca4f50010b26cdd494e5a423e78ed56501ba378a43c678205c7a9209806c268a0ae1d3ece6c563da6a21a1f9ecf91fe72372f3bb1d220933689713c86a2b6eec08c6158f3288ec71f2b5483eb21e29f4c1314f"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.538946033s ago: executing program 3 (id=1322): socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/conf/all/proxy_arp\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="7644b3", 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000440)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000004c0)="13", 0x1}], 0x1}, 0x48043) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f00000005c0)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r1, 0x0, 0xffff, 0x2) 3.366254547s ago: executing program 2 (id=1325): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000040)={[], [{@context={'context', 0x3d, 'user_u'}}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x7) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000740)={@desc={0x1, 0x0, @auto="883155e010f80108"}, 0x40, 0x0, '\x00', @b}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20014054}}], 0x1, 0x20040001) prctl$PR_GET_DUMPABLE(0x3) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x4000087, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000580), 0x1000a) sendfile(r4, r5, &(0x7f00000005c0)=0x11, 0x7ffff000) 3.315186578s ago: executing program 1 (id=1326): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x1, 0xfffe, 0x0, 0x9, 0x8a}, 0x9c) sendto$inet6(r0, &(0x7f0000000340)="19", 0x1, 0x2004c101, &(0x7f0000000380)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x5}, 0x1c) 3.315018368s ago: executing program 6 (id=1327): setrlimit(0xf, &(0x7f0000000240)={0x0, 0xff}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000240)=ANY=[], 0x46) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0) 3.275167879s ago: executing program 5 (id=1328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f00000066c0)={&(0x7f0000006700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000006780)={0x0, 0x0, &(0x7f00000067c0)={&(0x7f0000006940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}}, 0x24000000) 3.23823725s ago: executing program 5 (id=1329): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0xe, 0x12}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000318000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="26137dbfa230", @ANYRES32, @ANYRES64=0x0], 0x20) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x4b, 0x21, 0xfffffffffffffffe}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x20, {{0x2, 0x4e21, @private=0xa010102}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}}, 0x108) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000540)=""/246, 0x8a, 0xf6, 0x1}, 0x28) 2.133163968s ago: executing program 2 (id=1330): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f47000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.093359288s ago: executing program 3 (id=1331): socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x6615, &(0x7f0000000080)={0x0, 0xf14a, 0x80, 0x1, 0x100}, &(0x7f0000000100), &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r3, 0x45145}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x32}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008043}, 0x4) sendto$packet(r1, &(0x7f00000003c0)="8b", 0x1, 0x20000081, &(0x7f0000000200)={0x11, 0x9900, r3, 0x1, 0x4, 0x6, @local}, 0x14) 2.051239849s ago: executing program 1 (id=1332): fsopen(&(0x7f0000000340)='exfat\x00', 0x0) 2.051100229s ago: executing program 6 (id=1333): timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r0, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") 2.012816541s ago: executing program 1 (id=1334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3, 0xa}, {0xa, 0xfff1}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041000) 1.980363361s ago: executing program 5 (id=1335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000012c0)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x5, 0x2c, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x3a) 1.775200006s ago: executing program 3 (id=1336): r0 = syz_open_dev$mtd(&(0x7f00000001c0), 0x0, 0x400) ioctl$MEMREAD(r0, 0xc0404d1a, &(0x7f00000003c0)={0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', {0x59, 0x81, 0xf7d}}) 1.774935486s ago: executing program 1 (id=1337): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mkdir(&(0x7f0000000700)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x8, &(0x7f00000007c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.736537587s ago: executing program 3 (id=1338): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000180)=""/152, 0x98, 0x6) 1.734751137s ago: executing program 5 (id=1339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) 1.63113339s ago: executing program 1 (id=1340): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000040)={[], [{@context={'context', 0x3d, 'user_u'}}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x7) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000740)={@desc={0x1, 0x0, @auto="883155e010f80108"}, 0x40, 0x0, '\x00', @b}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20014054}}], 0x1, 0x20040001) prctl$PR_GET_DUMPABLE(0x3) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x4000087, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000580), 0x1000a) sendfile(r4, r5, &(0x7f00000005c0)=0x11, 0x7ffff000) 1.631006279s ago: executing program 3 (id=1341): socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/conf/all/proxy_arp\x00', 0x1, 0x0) rseq(0x0, 0x0, 0x40000000, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000440)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000004c0)="13", 0x1}], 0x1}, 0x48043) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000540)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f00000005c0)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) 1.514314723s ago: executing program 5 (id=1342): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_test\x00', [0x140, 0xc1, 0x5, 0xfffffffe, 0x5, 0x5, 0x8002, 0x1000, 0xa, 0xc72d, 0x4, 0xf7ffffff, 0x3, 0x3, 0x4ce, 0x80000000, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x4, 0x34, 0xc000b, 0xffe, 0x4, 0x9, 0x0, 0x1000009, 0x1, 0x30a]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.21952074s ago: executing program 5 (id=1343): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendto$inet(r0, &(0x7f0000000900)="df90d4", 0x3, 0x20000890, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x540) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.155230551s ago: executing program 2 (id=1344): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000040)=[{r0, 0x401}], 0x1, 0x7) 1.149156032s ago: executing program 2 (id=1345): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0xe, 0x12}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000318000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="26137dbfa230", @ANYRES32, @ANYRES64=0x0], 0x20) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x4b, 0x21, 0xfffffffffffffffe}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x20, {{0x2, 0x4e21, @private=0xa010102}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}}, 0x108) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000540)=""/246, 0x8a, 0xf6, 0x1}, 0x28) 276.28µs ago: executing program 1 (id=1346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="bfe666358906"}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 0s ago: executing program 3 (id=1347): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r0, 0x80045430, 0x3e) kernel console output (not intermixed with test programs): 115.177518][ T4829] EXT4-fs (loop3): mount failed [ 115.658538][ T4845] loop1: detected capacity change from 0 to 2048 [ 116.863272][ T4831] loop4: detected capacity change from 0 to 128 [ 117.467597][ T4852] loop1: detected capacity change from 0 to 128 [ 117.755623][ T4854] loop3: detected capacity change from 0 to 128 [ 117.851697][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.585011][ T4867] FAULT_INJECTION: forcing a failure. [ 118.585011][ T4867] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 118.604441][ T4867] CPU: 0 PID: 4867 Comm: syz.2.182 Not tainted syzkaller #0 [ 118.611760][ T4867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.621819][ T4867] Call Trace: [ 118.625101][ T4867] [ 118.628033][ T4867] dump_stack_lvl+0x188/0x250 [ 118.632719][ T4867] ? show_regs_print_info+0x20/0x20 [ 118.638013][ T4867] ? load_image+0x410/0x410 [ 118.642526][ T4867] ? __lock_acquire+0x7d40/0x7d40 [ 118.647577][ T4867] should_fail+0x383/0x4b0 [ 118.652006][ T4867] prepare_alloc_pages+0x1e3/0x5b0 [ 118.657129][ T4867] __alloc_pages+0x11b/0x480 [ 118.661726][ T4867] ? zone_statistics+0x170/0x170 [ 118.666689][ T4867] ? alloc_pages+0x452/0x560 [ 118.671287][ T4867] __vmalloc_node_range+0x4b1/0x8b0 [ 118.676492][ T4867] bpf_map_area_mmapable_alloc+0xad/0xd0 [ 118.682129][ T4867] ? array_map_alloc+0x428/0x6f0 [ 118.687070][ T4867] array_map_alloc+0x428/0x6f0 [ 118.691841][ T4867] map_create+0x481/0x2330 [ 118.696273][ T4867] ? bpf_lsm_bpf+0x5/0x10 [ 118.700621][ T4867] __sys_bpf+0x30a/0x6f0 [ 118.704880][ T4867] ? bpf_link_show_fdinfo+0x380/0x380 [ 118.710277][ T4867] __x64_sys_bpf+0x78/0x90 [ 118.714701][ T4867] do_syscall_64+0x4c/0xa0 [ 118.719119][ T4867] ? clear_bhb_loop+0x30/0x80 [ 118.723813][ T4867] ? clear_bhb_loop+0x30/0x80 [ 118.728523][ T4867] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.734422][ T4867] RIP: 0033:0x7f3422a581d9 [ 118.738849][ T4867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.758460][ T4867] RSP: 002b:00007f3420cb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.766890][ T4867] RAX: ffffffffffffffda RBX: 00007f3422cdffa0 RCX: 00007f3422a581d9 [ 118.774869][ T4867] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 0000000000000000 [ 118.782843][ T4867] RBP: 00007f3422aef888 R08: 0000000000000000 R09: 0000000000000000 [ 118.790817][ T4867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.798791][ T4867] R13: 00007f3422ce0038 R14: 00007f3422cdffa0 R15: 00007fff001863d8 [ 118.806786][ T4867] [ 119.101877][ T13] usb 2-1: unable to read config index 0 descriptor/all [ 119.124120][ T13] usb 2-1: can't read configurations, error -71 [ 119.785339][ T4884] loop3: detected capacity change from 0 to 256 [ 119.793021][ T4883] loop1: detected capacity change from 0 to 128 [ 119.812850][ T4886] overlayfs: overlapping lowerdir path [ 119.867963][ T4883] EXT4-fs (loop1): Unrecognized mount option "context=user_u" or missing value [ 119.868020][ T4884] FAT-fs (loop3): Directory bread(block 64) failed [ 119.907930][ T4884] FAT-fs (loop3): Directory bread(block 65) failed [ 119.938785][ T4884] FAT-fs (loop3): Directory bread(block 66) failed [ 119.952451][ T4884] FAT-fs (loop3): Directory bread(block 67) failed [ 119.959121][ T4884] FAT-fs (loop3): Directory bread(block 68) failed [ 119.970909][ T4884] FAT-fs (loop3): Directory bread(block 69) failed [ 119.979064][ T4884] FAT-fs (loop3): Directory bread(block 70) failed [ 119.991930][ T4884] FAT-fs (loop3): Directory bread(block 71) failed [ 119.998542][ T4884] FAT-fs (loop3): Directory bread(block 72) failed [ 120.014660][ T4884] FAT-fs (loop3): Directory bread(block 73) failed [ 120.096664][ T4879] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 120.105699][ T4879] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 120.251151][ T4884] process 'syz.3.177' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 120.552647][ T4884] attempt to access beyond end of device [ 120.552647][ T4884] loop3: rw=524288, want=1772, limit=256 [ 120.760190][ T4884] attempt to access beyond end of device [ 120.760190][ T4884] loop3: rw=0, want=1772, limit=256 [ 121.985306][ T4919] loop3: detected capacity change from 0 to 2048 [ 122.028693][ T4923] overlayfs: overlapping lowerdir path [ 122.038323][ T4923] loop1: detected capacity change from 0 to 256 [ 123.622240][ T4936] loop3: detected capacity change from 0 to 128 [ 125.132079][ T4938] loop1: detected capacity change from 0 to 512 [ 125.178964][ T4938] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 125.229488][ T4938] EXT4-fs (loop1): mount failed [ 127.388470][ T4968] overlayfs: overlapping lowerdir path [ 127.397779][ T4968] loop4: detected capacity change from 0 to 256 [ 127.441301][ T4972] loop1: detected capacity change from 0 to 2048 [ 128.941586][ T4986] loop1: detected capacity change from 0 to 128 [ 132.132940][ T5001] loop4: detected capacity change from 0 to 512 [ 132.473511][ T5001] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 132.485719][ T5001] EXT4-fs (loop4): mount failed [ 132.653669][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.660047][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.929892][ T5012] overlayfs: overlapping lowerdir path [ 133.949778][ T5012] loop1: detected capacity change from 0 to 256 [ 135.261397][ T5040] loop1: detected capacity change from 0 to 2048 [ 135.508585][ T5047] loop3: detected capacity change from 0 to 2048 [ 135.624274][ T5050] loop1: detected capacity change from 0 to 128 [ 136.395142][ T5052] loop3: detected capacity change from 0 to 128 [ 137.221586][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.642813][ T4232] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.811631][ T4232] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.825884][ T4232] usb 4-1: config 0 interface 0 has no altsetting 0 [ 137.846321][ T4232] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 137.915618][ T5057] loop4: detected capacity change from 0 to 128 [ 137.918795][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.946511][ T5057] EXT4-fs (loop4): Unrecognized mount option "context=user_u" or missing value [ 137.979496][ T4232] usb 4-1: config 0 descriptor?? [ 140.243516][ T25] audit: type=1326 audit(1791634995.290:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.1.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f65271d9 code=0x7ffc0000 [ 140.341609][ T25] audit: type=1326 audit(1791634995.290:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.1.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f65271d9 code=0x7ffc0000 [ 140.491189][ T25] audit: type=1326 audit(1791634995.300:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.1.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f09f65271d9 code=0x7ffc0000 [ 140.603064][ T25] audit: type=1326 audit(1791634995.300:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.1.246" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f09f65271d9 code=0x7ffc0000 [ 141.526905][ T5109] loop4: detected capacity change from 0 to 512 [ 141.874080][ T5109] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 141.914996][ T5109] EXT4-fs (loop4): mount failed [ 143.150835][ T5113] loop1: detected capacity change from 0 to 128 [ 143.385170][ T5113] EXT4-fs (loop1): Unrecognized mount option "context=user_u" or missing value [ 144.012010][ T4232] usbhid 4-1:0.0: can't add hid device: -32 [ 144.020828][ T4232] usbhid: probe of 4-1:0.0 failed with error -32 [ 145.450712][ T5122] overlayfs: overlapping lowerdir path [ 145.504159][ T5123] loop4: detected capacity change from 0 to 256 [ 146.107763][ T5127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.260'. [ 146.151855][ T5127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.260'. [ 146.737515][ T5144] loop1: detected capacity change from 0 to 512 [ 147.070301][ T5144] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 147.197531][ T5144] EXT4-fs (loop1): mount failed [ 147.417243][ T26] usb 4-1: USB disconnect, device number 3 [ 147.660795][ T5158] loop4: detected capacity change from 0 to 2048 [ 150.228468][ T5172] overlayfs: overlapping lowerdir path [ 150.273426][ T5172] loop1: detected capacity change from 0 to 256 [ 151.681018][ T5199] loop3: detected capacity change from 0 to 512 [ 151.685690][ T5181] chnl_net:caif_netlink_parms(): no params data found [ 151.697314][ T5202] loop1: detected capacity change from 0 to 128 [ 151.764414][ T5202] EXT4-fs (loop1): Unrecognized mount option "context=user_u" or missing value [ 151.855753][ T5199] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 151.876743][ T5199] EXT4-fs (loop3): mount failed [ 152.471754][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 154.130186][ T4232] Bluetooth: hci5: command 0x0409 tx timeout [ 154.518886][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.537108][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.559634][ T5181] device bridge_slave_0 entered promiscuous mode [ 154.566546][ T26] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.608110][ T26] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.648931][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.729956][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.741695][ T26] usb 3-1: config 0 interface 0 has no altsetting 0 [ 154.775320][ T26] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 154.785058][ T5181] device bridge_slave_1 entered promiscuous mode [ 154.821296][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.934781][ T5222] overlayfs: overlapping lowerdir path [ 154.977704][ T5181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.013083][ T26] usb 3-1: config 0 descriptor?? [ 155.031787][ T26] usb 3-1: can't set config #0, error -71 [ 155.052843][ T5181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.086631][ T26] usb 3-1: USB disconnect, device number 2 [ 155.252115][ T5181] team0: Port device team_slave_0 added [ 155.417817][ T5181] team0: Port device team_slave_1 added [ 155.996188][ T5249] loop4: detected capacity change from 0 to 2048 [ 156.006041][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.036041][ T5253] loop3: detected capacity change from 0 to 512 [ 156.078119][ T5181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.117064][ T5253] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 156.127150][ T5253] EXT4-fs (loop3): mount failed [ 156.203568][ T5181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.238186][ T4231] Bluetooth: hci5: command 0x041b tx timeout [ 156.283429][ T5181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.394575][ T5261] overlayfs: overlapping lowerdir path [ 156.575020][ T5181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.669307][ T5181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.811631][ T5267] loop1: detected capacity change from 0 to 2048 [ 156.846856][ T5181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.775799][ T5270] loop1: detected capacity change from 0 to 128 [ 158.321734][ T4190] Bluetooth: hci5: command 0x040f tx timeout [ 158.401847][ T4231] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 159.130528][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.401647][ T4190] Bluetooth: hci5: command 0x0419 tx timeout [ 160.560724][ T5181] device hsr_slave_0 entered promiscuous mode [ 160.601159][ T5181] device hsr_slave_1 entered promiscuous mode [ 160.679064][ T5181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.708731][ T5181] Cannot create hsr debugfs directory [ 160.716459][ T5285] loop1: detected capacity change from 0 to 128 [ 160.841186][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.997477][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.013978][ T5287] ip_tables: iptables: counters copy to user failed while replacing table [ 161.600805][ T25] audit: type=1326 audit(1791635016.670:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f65271d9 code=0x7ffc0000 [ 161.765166][ T25] audit: type=1326 audit(1791635016.720:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f65271d9 code=0x7ffc0000 [ 161.864014][ T25] audit: type=1326 audit(1791635016.720:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f65271d9 code=0x7ffc0000 [ 161.897754][ T5306] overlayfs: overlapping lowerdir path [ 161.908014][ T5306] loop3: detected capacity change from 0 to 256 [ 161.914633][ T25] audit: type=1326 audit(1791635016.720:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f09f65271d9 code=0x7ffc0000 [ 161.993297][ T25] audit: type=1326 audit(1791635016.720:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f65271d9 code=0x7ffc0000 [ 162.054874][ T5181] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.085918][ T25] audit: type=1326 audit(1791635016.720:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f65271d9 code=0x7ffc0000 [ 162.137093][ T25] audit: type=1326 audit(1791635016.720:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f65271d9 code=0x7ffc0000 [ 162.177482][ T5181] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.194288][ T5181] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.226397][ T25] audit: type=1326 audit(1791635016.720:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f65271d9 code=0x7ffc0000 [ 162.252083][ T5181] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.294060][ T25] audit: type=1326 audit(1791635016.740:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f09f65271d9 code=0x7ffc0000 [ 162.336647][ T25] audit: type=1326 audit(1791635016.740:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09f65271d9 code=0x7ffc0000 [ 162.489929][ T5315] loop4: detected capacity change from 0 to 2048 [ 162.507345][ T5181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.121623][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.129578][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.145417][ T5181] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.697273][ T5181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.761802][ T5181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.129635][ T5353] loop1: detected capacity change from 0 to 16 [ 165.900070][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.950088][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.986152][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.993312][ T4262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.021128][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.030726][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.041251][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.048396][ T4262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.058915][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.068300][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.077767][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.087090][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.096995][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.108749][ T5368] overlayfs: overlapping lowerdir path [ 166.108829][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.126922][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.138124][ T5368] loop1: detected capacity change from 0 to 256 [ 166.140688][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.160140][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.170901][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.186193][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.197245][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.215069][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.436383][ T9] device hsr_slave_0 left promiscuous mode [ 166.459109][ T9] device hsr_slave_1 left promiscuous mode [ 166.478139][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.504325][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.534396][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.553667][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.566395][ T9] device bridge_slave_1 left promiscuous mode [ 166.579831][ T5382] loop3: detected capacity change from 0 to 128 [ 166.587729][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.661015][ T9] device bridge_slave_0 left promiscuous mode [ 166.680834][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.740049][ T9] device veth1_macvtap left promiscuous mode [ 166.750842][ T9] device veth0_macvtap left promiscuous mode [ 166.761284][ T9] device veth1_vlan left promiscuous mode [ 166.773179][ T9] device veth0_vlan left promiscuous mode [ 166.904992][ T5389] loop3: detected capacity change from 0 to 128 [ 166.965233][ T5389] EXT4-fs (loop3): Unrecognized mount option "context=user_u" or missing value [ 167.668932][ T9] team0 (unregistering): Port device team_slave_1 removed [ 167.704538][ T9] team0 (unregistering): Port device team_slave_0 removed [ 167.729156][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.840250][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.899303][ T9] bond0 (unregistering): Released all slaves [ 167.938980][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.947387][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.963744][ T1325] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.991173][ T5181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.324106][ T5434] overlayfs: overlapping lowerdir path [ 168.333493][ T5434] loop4: detected capacity change from 0 to 256 [ 168.465078][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.505876][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.554062][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.573576][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.595149][ T5181] device veth0_vlan entered promiscuous mode [ 168.602643][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.620839][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.646270][ T5181] device veth1_vlan entered promiscuous mode [ 168.707996][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.731111][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.739906][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.748806][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.774176][ T5181] device veth0_macvtap entered promiscuous mode [ 168.815629][ T5181] device veth1_macvtap entered promiscuous mode [ 168.859838][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.890854][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.916494][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.969465][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.061611][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.072215][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.082203][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.104882][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.139312][ T5181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.185020][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.230349][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.270973][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.303820][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.316951][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.327463][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.337337][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.347922][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.359589][ T5181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.371061][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.390450][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.408230][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.421403][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.456738][ T5460] loop4: detected capacity change from 0 to 128 [ 169.457045][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.497045][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.521149][ T5181] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.525087][ T5460] EXT4-fs (loop4): Unrecognized mount option "context=user_u" or missing value [ 169.556996][ T5181] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.586879][ T5181] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.601758][ T5181] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.621184][ T5467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 170.014300][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.024173][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.059980][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.091748][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.099599][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.128022][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.587201][ T5506] overlayfs: overlapping lowerdir path [ 171.262128][ T25] kauditd_printk_skb: 104 callbacks suppressed [ 171.262141][ T25] audit: type=1326 audit(1791635026.340:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.2.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3422a581d9 code=0x7ffc0000 [ 171.334495][ T5538] loop3: detected capacity change from 0 to 128 [ 171.366223][ T5540] FAULT_INJECTION: forcing a failure. [ 171.366223][ T5540] name failslab, interval 1, probability 0, space 0, times 0 [ 171.401587][ T25] audit: type=1326 audit(1791635026.340:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.2.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3422a581d9 code=0x7ffc0000 [ 171.425958][ T5538] EXT4-fs (loop3): Unrecognized mount option "context=user_u" or missing value [ 171.491316][ T5540] CPU: 1 PID: 5540 Comm: syz.5.366 Not tainted syzkaller #0 [ 171.498655][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 171.508725][ T5540] Call Trace: [ 171.512020][ T5540] [ 171.514965][ T5540] dump_stack_lvl+0x188/0x250 [ 171.519666][ T5540] ? show_regs_print_info+0x20/0x20 [ 171.524884][ T5540] ? load_image+0x410/0x410 [ 171.529408][ T5540] ? __might_sleep+0xf0/0xf0 [ 171.534022][ T5540] ? __lock_acquire+0x7d40/0x7d40 [ 171.539071][ T5540] should_fail+0x383/0x4b0 [ 171.543520][ T5540] should_failslab+0x5/0x20 [ 171.548039][ T5540] slab_pre_alloc_hook+0x51/0xc0 [ 171.553010][ T5540] __kmalloc+0x6b/0x340 [ 171.557191][ T5540] ? __list_lru_init+0xb6/0xac0 [ 171.562067][ T5540] __list_lru_init+0xb6/0xac0 [ 171.566771][ T5540] ? __raw_spin_lock_init+0x41/0x100 [ 171.572081][ T5540] alloc_super+0x787/0x970 [ 171.576527][ T5540] ? kill_litter_super+0xa0/0xa0 [ 171.581481][ T5540] sget_fc+0x2d4/0x6f0 [ 171.585572][ T5540] ? kill_litter_super+0xa0/0xa0 [ 171.590530][ T5540] ? mqueue_get_tree+0xe0/0xe0 [ 171.595309][ T5540] get_tree_nodev+0x26/0x160 [ 171.599923][ T5540] vfs_get_tree+0x88/0x270 [ 171.604362][ T5540] fc_mount+0x18/0xa0 [ 171.608365][ T5540] mq_init_ns+0x39d/0x510 [ 171.612703][ T5540] copy_ipcs+0x2ea/0x4b0 [ 171.616944][ T5540] create_new_namespaces+0x212/0x700 [ 171.622237][ T5540] unshare_nsproxy_namespaces+0x116/0x160 [ 171.627951][ T5540] ksys_unshare+0x4f6/0x8e0 [ 171.632443][ T5540] ? __lock_acquire+0x7d40/0x7d40 [ 171.637464][ T5540] ? sighand_ctor+0x40/0x40 [ 171.641959][ T5540] ? lock_chain_count+0x20/0x20 [ 171.646817][ T5540] ? syscall_enter_from_user_mode+0x21/0x70 [ 171.652707][ T5540] __x64_sys_unshare+0x34/0x40 [ 171.657465][ T5540] do_syscall_64+0x4c/0xa0 [ 171.661874][ T5540] ? clear_bhb_loop+0x30/0x80 [ 171.666543][ T5540] ? clear_bhb_loop+0x30/0x80 [ 171.671224][ T5540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.677108][ T5540] RIP: 0033:0x7f8fc31a01d9 [ 171.681532][ T5540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.701131][ T5540] RSP: 002b:00007f8fc13f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 171.709545][ T5540] RAX: ffffffffffffffda RBX: 00007f8fc3427fa0 RCX: 00007f8fc31a01d9 [ 171.717522][ T5540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028040480 [ 171.725498][ T5540] RBP: 00007f8fc3237888 R08: 0000000000000000 R09: 0000000000000000 [ 171.733472][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.741528][ T5540] R13: 00007f8fc3428038 R14: 00007f8fc3427fa0 R15: 00007ffdd105b1f8 [ 171.749516][ T5540] [ 171.765566][ T25] audit: type=1326 audit(1791635026.340:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.2.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3422a581d9 code=0x7ffc0000 [ 171.988096][ T5557] overlayfs: overlapping lowerdir path [ 172.285264][ T25] audit: type=1326 audit(1791635026.340:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.2.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f3422a581d9 code=0x7ffc0000 [ 172.313090][ T25] audit: type=1326 audit(1791635026.340:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.2.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3422a581d9 code=0x7ffc0000 [ 172.338774][ T25] audit: type=1326 audit(1791635026.340:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.2.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3422a581d9 code=0x7ffc0000 [ 172.363399][ T25] audit: type=1326 audit(1791635026.340:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5533 comm="syz.2.365" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3422a581d9 code=0x7ffc0000 [ 172.411933][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.590729][ T5585] loop1: detected capacity change from 0 to 128 [ 172.648170][ T5590] block device autoloading is deprecated and will be removed. [ 172.663911][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 172.704910][ T5585] FAT-fs (loop1): Filesystem has been set read-only [ 172.740326][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 172.782447][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 172.798446][ T5599] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 172.817945][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 172.837171][ T5602] loop3: detected capacity change from 0 to 128 [ 172.843689][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 172.909150][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 172.923902][ T5602] EXT4-fs (loop3): Unrecognized mount option "context=user_u" or missing value [ 172.951307][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 172.997625][ T5611] ip_tables: iptables: counters copy to user failed while replacing table [ 173.026425][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.093567][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.131318][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.221689][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.237064][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.285882][ T5621] loop5: detected capacity change from 0 to 128 [ 173.307340][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.327595][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.344257][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.370091][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.434036][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.449428][ T5621] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 173.450955][ T25] audit: type=1800 audit(1791635028.530:140): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.390" name="file1" dev="loop5" ino=1048675 res=0 errno=0 [ 173.475810][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.532491][ T5621] FAT-fs (loop5): Filesystem has been set read-only [ 173.548821][ T5621] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 173.603356][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.621817][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.657716][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.696581][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.735891][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.747455][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.792836][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.802989][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.811453][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.820426][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.829151][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.838019][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.846919][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.855665][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.871043][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.911783][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.956129][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.984120][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 174.010082][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 174.038326][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 174.181718][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 174.232141][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 174.274094][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 174.336070][ T5585] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 174.382902][ T25] audit: type=1800 audit(1791635029.450:141): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.381" name="file1" dev="loop1" ino=1048674 res=0 errno=0 [ 174.674482][ T5681] loop4: detected capacity change from 0 to 128 [ 174.716427][ T5681] EXT4-fs (loop4): Unrecognized mount option "context=user_u" or missing value [ 176.123974][ T5718] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 176.161791][ T5718] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 176.388678][ T5747] loop1: detected capacity change from 0 to 128 [ 176.424921][ T5749] 8021q: VLANs not supported on ip_vti0 [ 176.514254][ T5747] EXT4-fs (loop1): Unrecognized mount option "context=user_u" or missing value [ 178.871900][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 179.282498][ T21] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.439934][ T21] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.789018][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 179.963417][ T21] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 180.141637][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.322874][ T21] usb 3-1: config 0 descriptor?? [ 181.282053][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.650508][ T5834] loop4: detected capacity change from 0 to 256 [ 182.461774][ T21] usbhid 3-1:0.0: can't add hid device: -71 [ 182.467785][ T21] usbhid: probe of 3-1:0.0 failed with error -71 [ 182.505315][ T21] usb 3-1: USB disconnect, device number 3 [ 185.154524][ T5883] loop4: detected capacity change from 0 to 16 [ 186.051760][ T5884] loop1: detected capacity change from 0 to 256 [ 186.059402][ T5807] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 186.073938][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 186.149730][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 186.159310][ T5883] erofs: (device loop4): mounted with root inode @ nid 36. [ 186.177171][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 186.378424][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 186.477726][ T5883] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.560392][ T5807] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 186.568659][ T5807] usb 3-1: can't read configurations, error -71 [ 187.567780][ T5921] loop4: detected capacity change from 0 to 256 [ 188.401908][ T5933] loop4: detected capacity change from 0 to 16 [ 188.462792][ T5933] erofs: (device loop4): mounted with root inode @ nid 36. [ 188.506139][ T5940] kvm: pic: level sensitive irq not supported [ 188.506525][ T5940] kvm: pic: non byte write [ 188.566902][ T5933] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 188.624085][ T5933] overlayfs: failed to get metacopy (-117) [ 188.653038][ T5933] overlayfs: failed to get metacopy (-117) [ 188.660740][ T5947] ip_tables: iptables: counters copy to user failed while replacing table [ 188.774146][ T5952] xt_hashlimit: max too large, truncated to 1048576 [ 188.792858][ T5952] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 188.835634][ T5959] FAULT_INJECTION: forcing a failure. [ 188.835634][ T5959] name failslab, interval 1, probability 0, space 0, times 0 [ 188.921607][ T5959] CPU: 1 PID: 5959 Comm: syz.4.483 Not tainted syzkaller #0 [ 188.928942][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.939013][ T5959] Call Trace: [ 188.942307][ T5959] [ 188.945249][ T5959] dump_stack_lvl+0x188/0x250 [ 188.949969][ T5959] ? show_regs_print_info+0x20/0x20 [ 188.955186][ T5959] ? load_image+0x410/0x410 [ 188.959723][ T5959] ? __might_sleep+0xf0/0xf0 [ 188.964332][ T5959] ? __lock_acquire+0x7d40/0x7d40 [ 188.969373][ T5959] should_fail+0x383/0x4b0 [ 188.973805][ T5959] should_failslab+0x5/0x20 [ 188.978313][ T5959] slab_pre_alloc_hook+0x51/0xc0 [ 188.983261][ T5959] ? getname_flags+0xb7/0x4f0 [ 188.987951][ T5959] kmem_cache_alloc+0x3d/0x280 [ 188.992734][ T5959] getname_flags+0xb7/0x4f0 [ 188.997257][ T5959] __x64_sys_execveat+0xa9/0xe0 [ 189.002126][ T5959] do_syscall_64+0x4c/0xa0 [ 189.006556][ T5959] ? clear_bhb_loop+0x30/0x80 [ 189.011255][ T5959] ? clear_bhb_loop+0x30/0x80 [ 189.015951][ T5959] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.021870][ T5959] RIP: 0033:0x7f297a4e11d9 [ 189.026298][ T5959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.045919][ T5959] RSP: 002b:00007f2978739028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 189.054365][ T5959] RAX: ffffffffffffffda RBX: 00007f297a768fa0 RCX: 00007f297a4e11d9 [ 189.062346][ T5959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 189.070329][ T5959] RBP: 00007f297a578888 R08: 0000000000001400 R09: 0000000000000000 [ 189.078313][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.086300][ T5959] R13: 00007f297a769038 R14: 00007f297a768fa0 R15: 00007fff9adc8e78 [ 189.094298][ T5959] [ 189.206742][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 189.271213][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.311920][ T5979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.370333][ T25] audit: type=1326 audit(1791635044.440:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.4.492" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297a4e11d9 code=0x7ffc0000 [ 189.463806][ T25] audit: type=1326 audit(1791635044.450:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.4.492" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f297a4e11d9 code=0x7ffc0000 [ 189.498558][ T25] audit: type=1326 audit(1791635044.450:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.4.492" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297a4e11d9 code=0x7ffc0000 [ 189.568324][ T25] audit: type=1326 audit(1791635044.450:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.4.492" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297a4e11d9 code=0x7ffc0000 [ 189.647300][ T25] audit: type=1326 audit(1791635044.450:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.4.492" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f297a4e11d9 code=0x7ffc0000 [ 189.696860][ T25] audit: type=1326 audit(1791635044.450:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.4.492" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297a4e11d9 code=0x7ffc0000 [ 189.756447][ T25] audit: type=1326 audit(1791635044.450:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.4.492" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297a4e11d9 code=0x7ffc0000 [ 189.807611][ T25] audit: type=1326 audit(1791635044.450:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.4.492" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f297a4e11d9 code=0x7ffc0000 [ 189.899539][ T25] audit: type=1326 audit(1791635044.450:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.4.492" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297a4e11d9 code=0x7ffc0000 [ 189.937837][ T25] audit: type=1326 audit(1791635044.450:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.4.492" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297a4e11d9 code=0x7ffc0000 [ 190.307555][ T6030] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.385804][ T6062] loop1: detected capacity change from 0 to 2048 [ 191.626886][ T6067] netlink: 'syz.4.521': attribute type 1 has an invalid length. [ 191.700095][ T6068] loop1: detected capacity change from 0 to 128 [ 191.718214][ T6066] bond1: (slave veth0_to_bond): making interface the new active one [ 191.765186][ T6066] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 191.780079][ T6067] device macvlan2 entered promiscuous mode [ 191.803849][ T6067] device bond1 entered promiscuous mode [ 191.810042][ T6067] device veth0_to_bond entered promiscuous mode [ 191.822873][ T6067] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 191.831753][ T6067] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 191.858680][ T6067] device bond1 left promiscuous mode [ 191.868811][ T6067] device veth0_to_bond left promiscuous mode [ 191.948959][ T6066] syz.4.521 (6066) used greatest stack depth: 19568 bytes left [ 192.081747][ T4231] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 192.441804][ T4231] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.458427][ T4231] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.484615][ T4231] usb 2-1: config 0 interface 0 has no altsetting 0 [ 192.499065][ T4231] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 192.526955][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.549661][ T4231] usb 2-1: config 0 descriptor?? [ 193.580922][ T6106] ip_tables: iptables: counters copy to user failed while replacing table [ 193.823358][ T6116] capability: warning: `syz.5.535' uses deprecated v2 capabilities in a way that may be insecure [ 194.003730][ T6124] ip_tables: iptables: counters copy to user failed while replacing table [ 194.093761][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.103483][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.551799][ T4231] usbhid 2-1:0.0: can't add hid device: -71 [ 194.557856][ T4231] usbhid: probe of 2-1:0.0 failed with error -71 [ 194.597026][ T4231] usb 2-1: USB disconnect, device number 6 [ 194.776600][ T6155] loop1: detected capacity change from 0 to 128 [ 194.805895][ T6155] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.848250][ T6155] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.991125][ T1278] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.362324][ T6178] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 195.402249][ T6178] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 195.526864][ T6193] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 195.544036][ T6193] EXT4-fs (loop9): unable to read superblock [ 195.571784][ T1325] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 195.765647][ T6204] loop1: detected capacity change from 0 to 128 [ 196.012916][ T1325] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.024548][ T1325] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.049987][ T1325] usb 3-1: config 0 interface 0 has no altsetting 0 [ 196.057476][ T1325] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 196.066838][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.093907][ T1325] usb 3-1: config 0 descriptor?? [ 196.328293][ T6229] overlayfs: missing 'lowerdir' [ 198.132940][ T1325] usbhid 3-1:0.0: can't add hid device: -71 [ 198.138947][ T1325] usbhid: probe of 3-1:0.0 failed with error -71 [ 198.169205][ T1325] usb 3-1: USB disconnect, device number 6 [ 198.397862][ T6283] overlayfs: missing 'lowerdir' [ 199.051072][ T6281] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 199.075424][ T6281] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 199.193864][ T6299] loop1: detected capacity change from 0 to 2048 [ 199.214147][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.598446][ T6310] loop1: detected capacity change from 0 to 128 [ 202.339820][ T6336] loop4: detected capacity change from 0 to 16 [ 204.131874][ T6336] erofs: (device loop4): mounted with root inode @ nid 36. [ 204.438103][ T6351] netlink: 'syz.1.596': attribute type 49 has an invalid length. [ 204.633950][ T6354] overlayfs: missing 'lowerdir' [ 205.145968][ T6356] loop5: detected capacity change from 0 to 128 [ 205.304770][ T6356] EXT4-fs (loop5): Unrecognized mount option "context=user_u" or missing value [ 205.335064][ T6365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'. [ 205.348275][ T6368] fuse: Bad value for 'fd' [ 205.381686][ T6365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'. [ 205.771095][ T6393] netlink: 'syz.4.612': attribute type 4 has an invalid length. [ 205.985024][ T6399] device lo entered promiscuous mode [ 206.046358][ T6399] device tunl0 entered promiscuous mode [ 206.090765][ T6399] device gre0 entered promiscuous mode [ 206.199485][ T6399] device gretap0 entered promiscuous mode [ 206.268336][ T6399] device erspan0 entered promiscuous mode [ 206.311664][ T6399] device ip_vti0 entered promiscuous mode [ 206.330195][ T6399] device ip6_vti0 entered promiscuous mode [ 206.405330][ T6399] device sit0 entered promiscuous mode [ 206.473922][ T6399] device ip6tnl0 entered promiscuous mode [ 206.537229][ T6412] overlayfs: unrecognized mount option "/" or missing value [ 207.053054][ T6399] device ip6gre0 entered promiscuous mode [ 207.171689][ T6399] device syz_tun entered promiscuous mode [ 207.246820][ T6399] device ip6gretap0 entered promiscuous mode [ 207.285548][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.294300][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.347311][ T6399] device bridge0 entered promiscuous mode [ 207.401181][ T6399] device vcan0 entered promiscuous mode [ 207.408962][ T6432] loop1: detected capacity change from 0 to 128 [ 207.430017][ T6399] device bond0 entered promiscuous mode [ 207.435879][ T6399] device bond_slave_0 entered promiscuous mode [ 207.443005][ T6399] device bond_slave_1 entered promiscuous mode [ 207.461148][ T6432] EXT4-fs (loop1): Unrecognized mount option "context=user_u" or missing value [ 207.475595][ T6399] device team0 entered promiscuous mode [ 207.481292][ T6399] device team_slave_0 entered promiscuous mode [ 207.489660][ T6399] device team_slave_1 entered promiscuous mode [ 207.509704][ T6399] device dummy0 entered promiscuous mode [ 207.528770][ T6399] device nlmon0 entered promiscuous mode [ 207.540194][ T6399] device caif0 entered promiscuous mode [ 207.546507][ T6399] device batadv0 entered promiscuous mode [ 207.586533][ T6399] device vxcan0 entered promiscuous mode [ 207.598563][ T6399] device vxcan1 entered promiscuous mode [ 207.616310][ T6399] device veth0 entered promiscuous mode [ 207.634753][ T6399] device veth1 entered promiscuous mode [ 207.653655][ T6399] device wg0 entered promiscuous mode [ 207.667000][ T6399] device wg1 entered promiscuous mode [ 207.680164][ T6399] device wg2 entered promiscuous mode [ 207.694909][ T6399] device veth0_to_bridge entered promiscuous mode [ 207.725706][ T6399] device veth1_to_bridge entered promiscuous mode [ 207.752829][ T6399] device veth0_to_bond entered promiscuous mode [ 207.776997][ T6399] device veth1_to_bond entered promiscuous mode [ 207.801755][ T6399] device veth0_to_team entered promiscuous mode [ 207.829424][ T6399] device veth1_to_team entered promiscuous mode [ 207.858840][ T6399] device veth0_to_batadv entered promiscuous mode [ 207.867249][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.885748][ T6399] device batadv_slave_0 entered promiscuous mode [ 207.905314][ T6399] device veth1_to_batadv entered promiscuous mode [ 207.920046][ T6399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.930995][ T6399] device batadv_slave_1 entered promiscuous mode [ 207.950925][ T6399] device xfrm0 entered promiscuous mode [ 207.968745][ T6399] device veth0_to_hsr entered promiscuous mode [ 207.995013][ T6399] device veth1_to_hsr entered promiscuous mode [ 208.023602][ T6399] device hsr0 entered promiscuous mode [ 208.041371][ T6399] device veth1_virt_wifi entered promiscuous mode [ 208.061068][ T6399] device veth0_virt_wifi entered promiscuous mode [ 208.069368][ T6399] device virt_wifi0 entered promiscuous mode [ 208.117323][ T6399] device vlan0 entered promiscuous mode [ 208.131901][ T6399] device vlan1 entered promiscuous mode [ 208.148062][ T6399] device macvlan0 entered promiscuous mode [ 208.174284][ T6399] device macvlan1 entered promiscuous mode [ 208.182196][ T6399] device ipvlan0 entered promiscuous mode [ 208.188054][ T6399] device ipvlan1 entered promiscuous mode [ 208.229501][ T6399] device macvtap0 entered promiscuous mode [ 208.251448][ T6399] device macsec0 entered promiscuous mode [ 208.273917][ T6439] EXT4-fs warning (device sda1): ext4_group_extend:1831: need to use ext2online to resize further [ 208.299278][ T6399] device geneve0 entered promiscuous mode [ 208.318899][ T6399] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.328972][ T6399] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.338351][ T6399] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.347759][ T6399] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.360337][ T6399] device geneve1 entered promiscuous mode [ 208.385385][ T6399] device netdevsim0 entered promiscuous mode [ 208.410116][ T6399] device netdevsim1 entered promiscuous mode [ 208.438601][ T6399] device netdevsim2 entered promiscuous mode [ 208.454720][ T6399] device netdevsim3 entered promiscuous mode [ 208.491193][ T6399] device wlan0 entered promiscuous mode [ 208.505464][ T6449] md/raid0:md0: chunk size must be set. [ 208.511880][ T6449] md: pers->run() failed ... [ 208.519904][ T6399] device wlan1 entered promiscuous mode [ 208.669189][ T6460] overlayfs: unrecognized mount option "/" or missing value [ 209.309444][ T6467] loop1: detected capacity change from 0 to 256 [ 209.355834][ T6471] loop4: detected capacity change from 0 to 128 [ 209.438193][ T6467] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 209.456718][ T6471] EXT4-fs (loop4): Unrecognized mount option "context=user_u" or missing value [ 209.514765][ T6467] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.306852][ T6509] kvm: pic: non byte write [ 210.649368][ T6528] overlayfs: unrecognized mount option "/" or missing value [ 211.297019][ T6532] loop4: detected capacity change from 0 to 512 [ 211.333404][ T6532] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 211.473639][ T6541] loop1: detected capacity change from 0 to 128 [ 211.512521][ T6541] EXT4-fs (loop1): Unrecognized mount option "context=user_u" or missing value [ 211.621135][ T4185] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 211.650642][ T4185] FAT-fs (loop4): Filesystem has been set read-only [ 211.679958][ T4185] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 211.708353][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.717465][ T6552] device bridge_slave_0 left promiscuous mode [ 211.725296][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.959709][ T6559] overlayfs: failed to clone upperpath [ 211.967457][ T6559] overlayfs: failed to clone upperpath [ 211.992616][ T6545] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 212.055457][ T4284] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.111435][ T4284] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.178541][ T4284] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.259170][ T4284] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.493577][ T6571] overlayfs: failed to clone lowerpath [ 213.524272][ T6567] chnl_net:caif_netlink_parms(): no params data found [ 213.685879][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.693778][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.702166][ T6567] device bridge_slave_0 entered promiscuous mode [ 213.718683][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.725975][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.734681][ T6567] device bridge_slave_1 entered promiscuous mode [ 213.736595][ T6608] loop1: detected capacity change from 0 to 128 [ 213.843955][ T6608] EXT4-fs (loop1): Unrecognized mount option "context=user_u" or missing value [ 213.892362][ T6567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.910785][ T6567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.006936][ T6567] team0: Port device team_slave_0 added [ 214.076992][ T6567] team0: Port device team_slave_1 added [ 214.163505][ T6621] overlayfs: failed to clone upperpath [ 214.188030][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.205366][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.263831][ T6567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.297925][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.326845][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.364791][ T6628] raw_sendmsg: syz.3.676 forgot to set AF_INET. Fix it! [ 214.376031][ T6567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.414954][ T4284] device hsr_slave_0 left promiscuous mode [ 214.428200][ T4284] device hsr_slave_1 left promiscuous mode [ 214.436157][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.456834][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.479051][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.505619][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.525980][ T4284] device bridge_slave_1 left promiscuous mode [ 214.583362][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.611482][ T6639] fuse: Bad value for 'fd' [ 214.622887][ T4284] device bridge_slave_0 left promiscuous mode [ 214.629111][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.698092][ T4284] device veth1_macvtap left promiscuous mode [ 214.721800][ T4403] Bluetooth: hci0: command 0x0409 tx timeout [ 214.732970][ T4284] device veth0_macvtap left promiscuous mode [ 214.739100][ T4284] device veth1_vlan left promiscuous mode [ 214.770178][ T6649] loop5: detected capacity change from 0 to 2048 [ 214.785523][ T4284] device veth0_vlan left promiscuous mode [ 215.060891][ T6660] loop5: detected capacity change from 0 to 128 [ 215.711826][ T4231] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 216.102513][ T4231] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.123963][ T4231] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.148395][ T4231] usb 6-1: config 0 interface 0 has no altsetting 0 [ 216.155949][ T4231] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 216.166394][ T4231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.190601][ T4231] usb 6-1: config 0 descriptor?? [ 216.213758][ T4284] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 216.282801][ T6663] syz.1.684 uses obsolete (PF_INET,SOCK_PACKET) [ 216.803387][ T4403] Bluetooth: hci0: command 0x041b tx timeout [ 217.127948][ T4284] bond1 (unregistering): Released all slaves [ 217.625064][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 217.639702][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 217.651471][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.669533][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.729009][ T4284] bond0 (unregistering): Released all slaves [ 217.748918][ T6654] device veth0 entered promiscuous mode [ 217.755699][ T6657] bridge0: port 3(veth0) entered blocking state [ 217.771173][ T6657] bridge0: port 3(veth0) entered disabled state [ 217.785364][ T6657] bridge0: port 3(veth0) entered blocking state [ 217.791976][ T6657] bridge0: port 3(veth0) entered forwarding state [ 217.938949][ T6567] device hsr_slave_0 entered promiscuous mode [ 217.958415][ T6567] device hsr_slave_1 entered promiscuous mode [ 217.981473][ T6567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.001948][ T6567] Cannot create hsr debugfs directory [ 218.098163][ T6686] RGB/YUV Input: ================= START STATUS ================= [ 218.119774][ T6686] RGB/YUV Input: Test Pattern: 75% Colorbar [ 218.151384][ T6686] RGB/YUV Input: Show Information: All [ 218.157777][ T6686] RGB/YUV Input: Vertical Flip: false [ 218.164161][ T6686] RGB/YUV Input: Horizontal Flip: false [ 218.169919][ T6686] RGB/YUV Input: Brightness: 128 [ 218.175635][ T6686] RGB/YUV Input: Contrast: 128 [ 218.180620][ T6686] RGB/YUV Input: Hue: 0 [ 218.186699][ T6686] RGB/YUV Input: Saturation: 128 [ 218.192300][ T6686] RGB/YUV Input: ================== END STATUS ================== [ 218.275736][ T6567] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 218.308181][ T6567] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 218.340964][ T6696] netlink: 'syz.1.694': attribute type 2 has an invalid length. [ 218.356631][ T6567] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 218.371820][ T6567] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 218.410190][ T6700] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 218.539760][ T6567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.573278][ T6567] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.589618][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.628543][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.705697][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.715107][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.730051][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.737176][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.745309][ T4231] usbhid 6-1:0.0: can't add hid device: -71 [ 218.783608][ T4231] usbhid: probe of 6-1:0.0 failed with error -71 [ 218.810091][ T4231] usb 6-1: USB disconnect, device number 2 [ 218.841972][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.864964][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.881868][ T4403] Bluetooth: hci0: command 0x040f tx timeout [ 218.902433][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.909538][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.943925][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.989704][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.007067][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.019417][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.037338][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.048639][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.067754][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.078719][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.110796][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.134552][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.157730][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.177768][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.195279][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.549523][ T6740] loop1: detected capacity change from 0 to 2048 [ 219.572835][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.580848][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.620448][ T6567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.904678][ T6747] loop1: detected capacity change from 0 to 128 [ 220.721893][ T4403] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 220.963598][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 221.131845][ T4403] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.165565][ T4403] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.342241][ T4403] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.410848][ T4403] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 221.517567][ T4403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.675615][ T4403] usb 2-1: config 0 descriptor?? [ 222.632286][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.639095][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.710'. [ 222.644765][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.691235][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.711320][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.732671][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.750430][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.787022][ T6567] device veth0_vlan entered promiscuous mode [ 222.830434][ T6567] device veth1_vlan entered promiscuous mode [ 222.876783][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.897240][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 222.923144][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.942341][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.966646][ T6567] device veth0_macvtap entered promiscuous mode [ 223.010773][ T6567] device veth1_macvtap entered promiscuous mode [ 223.056847][ T6567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.080269][ T6567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.098779][ T6567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.109600][ T6567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.126382][ T6567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.139221][ T6567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.157455][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.171687][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.197945][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.222335][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.241316][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.265535][ T6567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.282522][ T4231] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 223.296388][ T6567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.307787][ T6567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.320313][ T6567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.330468][ T6567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.341163][ T6567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.352864][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.372433][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.391343][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.409023][ T6567] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.418680][ T6567] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.428070][ T6567] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.438889][ T6567] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.642009][ T4403] usbhid 2-1:0.0: can't add hid device: -71 [ 223.648580][ T4403] usbhid: probe of 2-1:0.0 failed with error -71 [ 223.656726][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.662119][ T4231] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.671551][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.727493][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 223.736411][ T4403] usb 2-1: USB disconnect, device number 7 [ 223.751925][ T4231] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 223.789967][ T4231] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.791721][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.800330][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.841462][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.842895][ T6781] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 223.849786][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.053225][ T6828] netlink: 'syz.6.723': attribute type 4 has an invalid length. [ 224.792931][ T6871] loop1: detected capacity change from 0 to 2048 [ 225.155478][ T6884] loop1: detected capacity change from 0 to 128 [ 225.891888][ T4403] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 226.282571][ T4403] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.569705][ T4403] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.872446][ T4403] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.897984][ T6893] ip_tables: iptables: counters copy to user failed while replacing table [ 226.987443][ T4403] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 227.146121][ T4403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.232055][ T4403] usb 2-1: config 0 descriptor?? [ 227.406093][ T21] usb 3-1: USB disconnect, device number 7 [ 227.857374][ T6912] netlink: 32 bytes leftover after parsing attributes in process `syz.2.739'. [ 228.131720][ T26] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 228.381995][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 228.398003][ T6932] netlink: 'syz.3.746': attribute type 4 has an invalid length. [ 228.501879][ T26] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 228.510489][ T26] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 228.527893][ T26] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 228.538441][ T26] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 228.555823][ T26] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 228.571144][ T26] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.602272][ T26] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.611458][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.867685][ T4403] usbhid 2-1:0.0: can't add hid device: -71 [ 228.880000][ T4403] usbhid: probe of 2-1:0.0 failed with error -71 [ 228.891769][ T26] usb 6-1: GET_CAPABILITIES returned 0 [ 228.899350][ T26] usbtmc 6-1:16.0: can't read capabilities [ 228.928465][ T4403] usb 2-1: USB disconnect, device number 8 [ 229.111670][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.121581][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.130904][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.140174][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.149447][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.158730][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.168004][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.177278][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.186680][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.195946][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.205227][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.214501][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.223777][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.233056][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.242335][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.251633][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 229.277638][ T6895] usbtmc 6-1:16.0: Unable to send data, error -71 [ 229.292847][ T4403] usb 6-1: USB disconnect, device number 3 [ 229.401960][ T6962] netlink: 'syz.2.757': attribute type 4 has an invalid length. [ 229.584990][ T6968] jffs2: notice: (6968) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 229.996217][ T6991] netlink: 'syz.5.769': attribute type 4 has an invalid length. [ 230.125198][ T6997] loop1: detected capacity change from 0 to 2048 [ 230.152252][ T6999] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 230.423399][ T7003] loop1: detected capacity change from 0 to 128 [ 230.441546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 230.451546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 230.461542][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 230.471543][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 230.491540][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 230.501539][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 230.511543][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 230.541539][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 230.561539][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 230.571540][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!! [ 231.306301][ T7013] batman_adv: batadv0: Adding interface: veth0 [ 231.318713][ T7013] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.386637][ T7013] batman_adv: batadv0: Interface activated: veth0 [ 231.404330][ T7020] batman_adv: batadv0: Interface deactivated: veth0 [ 231.416882][ T7020] batman_adv: batadv0: Removing interface: veth0 [ 231.424288][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.437903][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.497584][ T7019] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 231.991004][ T7046] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 232.014712][ T4228] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 232.219014][ T7051] i2c i2c-0: delete_device: Can't find device in list [ 232.431806][ T4228] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 232.442888][ T4228] usb 3-1: config 0 has no interface number 0 [ 232.448987][ T4228] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.484876][ T7057] "syz.3.794" (7057) uses obsolete ecb(arc4) skcipher [ 232.551788][ T4233] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 232.632111][ T4228] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 232.641302][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.649849][ T4228] usb 3-1: Product: syz [ 232.654561][ T4228] usb 3-1: Manufacturer: syz [ 232.659164][ T4228] usb 3-1: SerialNumber: syz [ 232.669918][ T4228] usb 3-1: config 0 descriptor?? [ 232.747009][ T4228] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 232.801850][ T4233] usb 6-1: Using ep0 maxpacket: 8 [ 232.941754][ T4233] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 232.950132][ T4233] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.960356][ T4233] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.970168][ T4233] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.980182][ T4233] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.993608][ T4233] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.002807][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.016532][ T4403] usb 3-1: USB disconnect, device number 8 [ 233.029891][ T4403] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 233.271721][ T4233] usb 6-1: usb_control_msg returned -32 [ 233.277524][ T4233] usbtmc 6-1:16.0: can't read capabilities [ 233.572721][ T7100] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 233.587206][ T7100] VFS: Can't find a romfs filesystem on dev nullb0. [ 233.587206][ T7100] [ 233.635241][ T7104] loop1: detected capacity change from 0 to 2048 [ 233.671869][ T7102] usbtmc 6-1:16.0: control status returned 0 [ 233.874929][ T7104] loop1: detected capacity change from 0 to 128 [ 233.883248][ T4233] usb 6-1: USB disconnect, device number 4 [ 234.349549][ T7116] kvm: pic: level sensitive irq not supported [ 234.349681][ T7116] kvm: pic: non byte write [ 234.603200][ T7129] FAULT_INJECTION: forcing a failure. [ 234.603200][ T7129] name failslab, interval 1, probability 0, space 0, times 0 [ 234.621429][ T7129] CPU: 1 PID: 7129 Comm: syz.6.821 Not tainted syzkaller #0 [ 234.628747][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 234.638810][ T7129] Call Trace: [ 234.642093][ T7129] [ 234.645017][ T7129] dump_stack_lvl+0x188/0x250 [ 234.649685][ T7129] ? show_regs_print_info+0x20/0x20 [ 234.654871][ T7129] ? load_image+0x410/0x410 [ 234.659387][ T7129] ? __might_sleep+0xf0/0xf0 [ 234.663969][ T7129] ? __lock_acquire+0x7d40/0x7d40 [ 234.669000][ T7129] should_fail+0x383/0x4b0 [ 234.673419][ T7129] should_failslab+0x5/0x20 [ 234.677921][ T7129] slab_pre_alloc_hook+0x51/0xc0 [ 234.682857][ T7129] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 234.688562][ T7129] ? mempool_create+0x5a/0xc0 [ 234.693226][ T7129] ? mempool_init_node+0x3c0/0x480 [ 234.698369][ T7129] ? msgpool_alloc+0x1b0/0x1b0 [ 234.703121][ T7129] ? ceph_msgpool_init+0x180/0x180 [ 234.708222][ T7129] mempool_create+0x5a/0xc0 [ 234.712717][ T7129] ceph_msgpool_init+0xa3/0x180 [ 234.717562][ T7129] ceph_osdc_init+0x52c/0x8a0 [ 234.722235][ T7129] ceph_create_client+0x242/0x300 [ 234.727253][ T7129] ceph_get_tree+0xf6/0x1290 [ 234.731835][ T7129] ? bpf_lsm_capable+0x5/0x10 [ 234.736505][ T7129] ? security_capable+0x85/0xb0 [ 234.741349][ T7129] vfs_get_tree+0x88/0x270 [ 234.745865][ T7129] vfs_fsconfig_locked+0x22f/0x400 [ 234.750972][ T7129] __se_sys_fsconfig+0x69e/0x7e0 [ 234.755904][ T7129] ? __x64_sys_fsconfig+0xc0/0xc0 [ 234.760923][ T7129] ? lockdep_hardirqs_on+0x94/0x140 [ 234.766121][ T7129] ? __x64_sys_fsconfig+0x1c/0xc0 [ 234.771147][ T7129] do_syscall_64+0x4c/0xa0 [ 234.775562][ T7129] ? clear_bhb_loop+0x30/0x80 [ 234.780227][ T7129] ? clear_bhb_loop+0x30/0x80 [ 234.784896][ T7129] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.790781][ T7129] RIP: 0033:0x7f9a36bf81d9 [ 234.795190][ T7129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.814783][ T7129] RSP: 002b:00007f9a34e50028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 234.823185][ T7129] RAX: ffffffffffffffda RBX: 00007f9a36e7ffa0 RCX: 00007f9a36bf81d9 [ 234.831141][ T7129] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 234.839098][ T7129] RBP: 00007f9a36c8f888 R08: 0000000000000000 R09: 0000000000000000 [ 234.847055][ T7129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.855010][ T7129] R13: 00007f9a36e80038 R14: 00007f9a36e7ffa0 R15: 00007ffdcf4e86d8 [ 234.862980][ T7129] [ 234.866288][ T4233] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 235.111699][ T4233] usb 6-1: Using ep0 maxpacket: 32 [ 235.231788][ T4233] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 235.240167][ T4233] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 235.271735][ T4233] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 235.280751][ T4233] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 235.308934][ T4233] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 235.318745][ T4233] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 235.338345][ T4233] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 235.348379][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.364314][ T4233] usb 6-1: config 0 descriptor?? [ 235.389873][ T7156] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 235.404203][ T9] Bluetooth: hci3: Frame reassembly failed (-84) [ 235.411209][ T9] Bluetooth: hci3: Frame reassembly failed (-84) [ 235.521717][ T4228] Bluetooth: hci0: command 0x1405 tx timeout [ 235.624916][ T4233] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 235.945222][ T7160] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 236.121349][ T4403] usb 6-1: USB disconnect, device number 5 [ 236.145791][ T4403] usblp0: removed [ 236.156849][ T7180] jffs2: notice: (7180) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 236.202985][ T7180] jffs2: warning: (7180) jffs2_sum_write_data: Not enough space for summary, padsize = -2 [ 236.362053][ T7197] loop6: detected capacity change from 0 to 2048 [ 236.369286][ T26] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 236.450243][ T7201] device syzkaller0 entered promiscuous mode [ 236.611637][ T7197] loop6: detected capacity change from 0 to 128 [ 236.731676][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 236.931788][ T26] usb 3-1: unable to get BOS descriptor or descriptor too short [ 237.294242][ T26] usb 3-1: string descriptor 0 read error: -22 [ 237.302759][ T26] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 237.348447][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.441922][ T4233] Bluetooth: hci3: command 0x1003 tx timeout [ 237.448045][ T4196] Bluetooth: hci3: sending frame failed (-49) [ 237.457196][ T26] dw2102: su3000_identify_state [ 237.465234][ T26] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 237.473948][ T26] dw2102: su3000_power_ctrl: 1, initialized 0 [ 237.480805][ T26] dvb-usb: bulk message failed: -22 (2/0) [ 237.503233][ T26] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.542309][ T26] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 237.556730][ T26] usb 3-1: media controller created [ 237.574995][ T26] dvb-usb: bulk message failed: -22 (6/0) [ 237.586341][ T26] dw2102: i2c transfer failed. [ 237.596827][ T26] dvb-usb: bulk message failed: -22 (6/0) [ 237.605442][ T26] dw2102: i2c transfer failed. [ 237.612860][ T26] dvb-usb: bulk message failed: -22 (6/0) [ 237.619661][ T26] dw2102: i2c transfer failed. [ 237.628177][ T26] dvb-usb: bulk message failed: -22 (6/0) [ 237.634598][ T26] dw2102: i2c transfer failed. [ 237.639510][ T26] dvb-usb: bulk message failed: -22 (6/0) [ 237.656408][ T26] dw2102: i2c transfer failed. [ 237.665411][ T26] dvb-usb: bulk message failed: -22 (6/0) [ 237.677864][ T26] dw2102: i2c transfer failed. [ 237.690931][ T26] dvb-usb: MAC address: 02:02:02:02:02:02 [ 237.730743][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.747770][ T4403] Bluetooth: hci0: command 0x0c2d tx timeout [ 237.790976][ T26] dvb-usb: bulk message failed: -22 (3/0) [ 237.805613][ T26] dw2102: command 0x0e transfer failed. [ 237.819379][ T26] dvb-usb: bulk message failed: -22 (3/0) [ 237.831975][ T26] dw2102: command 0x0e transfer failed. [ 238.007297][ T7267] loop5: detected capacity change from 0 to 2048 [ 238.025754][ T7270] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 238.094247][ T7270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.127952][ T7270] bond1: (slave dummy0): making interface the new active one [ 238.140819][ T7270] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 238.158422][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 238.166203][ T26] dvb-usb: bulk message failed: -22 (3/0) [ 238.208738][ T7280] loop5: detected capacity change from 0 to 128 [ 238.291081][ T26] dw2102: command 0x0e transfer failed. [ 238.362921][ T26] dvb-usb: bulk message failed: -22 (3/0) [ 238.406396][ T26] dw2102: command 0x0e transfer failed. [ 238.450248][ T26] dvb-usb: bulk message failed: -22 (1/0) [ 238.491053][ T26] dw2102: command 0x51 transfer failed. [ 238.665035][ T26] DVB: Unable to find symbol ds3000_attach() [ 238.686578][ T26] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 238.911912][ T26] rc_core: IR keymap rc-su3000 not found [ 238.917594][ T26] Registered IR keymap rc-empty [ 238.954672][ T26] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 239.043271][ T26] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input6 [ 239.141956][ T26] dvb-usb: schedule remote query interval to 150 msecs. [ 239.170822][ T26] dw2102: su3000_power_ctrl: 0, initialized 1 [ 239.200129][ T26] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 239.271116][ T26] usb 3-1: USB disconnect, device number 9 [ 239.528537][ T26] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 239.605803][ T4403] Bluetooth: hci3: command 0x1001 tx timeout [ 239.619009][ T4196] Bluetooth: hci3: sending frame failed (-49) [ 239.780781][ T21] Bluetooth: hci0: command 0x0c2d tx timeout [ 239.830345][ T7326] netlink: 52 bytes leftover after parsing attributes in process `syz.5.884'. [ 240.038975][ T7339] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 240.091371][ T7339] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 240.322210][ T7349] loop6: detected capacity change from 0 to 2048 [ 240.445153][ T7356] jffs2: notice: (7356) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 240.531588][ T4231] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 240.552566][ T7359] loop6: detected capacity change from 0 to 128 [ 241.682292][ T26] Bluetooth: hci3: command 0x1009 tx timeout [ 243.540189][ T7399] TC_ACT_REPEAT abuse ? [ 243.558043][ T7399] netlink: 20 bytes leftover after parsing attributes in process `syz.5.906'. [ 243.857225][ T7418] FAULT_INJECTION: forcing a failure. [ 243.857225][ T7418] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 243.888885][ T7418] CPU: 1 PID: 7418 Comm: syz.5.909 Not tainted syzkaller #0 [ 243.896216][ T7418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.906295][ T7418] Call Trace: [ 243.909588][ T7418] [ 243.912523][ T7418] dump_stack_lvl+0x188/0x250 [ 243.917220][ T7418] ? show_regs_print_info+0x20/0x20 [ 243.922433][ T7418] ? load_image+0x410/0x410 [ 243.926960][ T7418] ? __lock_acquire+0x7d40/0x7d40 [ 243.932008][ T7418] ? zswap_cpu_comp_prepare+0xde/0x3c0 [ 243.937479][ T7418] ? cpuhp_invoke_callback+0x481/0x7e0 [ 243.942955][ T7418] should_fail+0x383/0x4b0 [ 243.947399][ T7418] prepare_alloc_pages+0x1e3/0x5b0 [ 243.952536][ T7418] __alloc_pages+0x11b/0x480 [ 243.957143][ T7418] ? zone_statistics+0x170/0x170 [ 243.962112][ T7418] __vmalloc_node_range+0x4b1/0x8b0 [ 243.967341][ T7418] ? lz4hc_alloc_ctx+0xf/0x20 [ 243.972031][ T7418] vmalloc+0x75/0x80 [ 243.975938][ T7418] ? lz4hc_alloc_ctx+0xf/0x20 [ 243.980633][ T7418] lz4hc_alloc_ctx+0xf/0x20 [ 243.985142][ T7418] crypto_acomp_scomp_alloc_ctx+0x90/0xe0 [ 243.990877][ T7418] zswap_cpu_comp_prepare+0xde/0x3c0 [ 243.996173][ T7418] ? zswap_dstmem_dead+0x200/0x200 [ 244.001284][ T7418] cpuhp_invoke_callback+0x481/0x7e0 [ 244.006566][ T7418] ? mutex_lock_io_nested+0x60/0x60 [ 244.011754][ T7418] ? zswap_dstmem_dead+0x200/0x200 [ 244.016872][ T7418] cpuhp_issue_call+0x3d3/0x760 [ 244.021734][ T7418] __cpuhp_state_add_instance_cpuslocked+0x24b/0x6c0 [ 244.028411][ T7418] ? cpus_read_lock+0xcb/0x150 [ 244.033167][ T7418] __cpuhp_state_add_instance+0x21/0x30 [ 244.038706][ T7418] zswap_pool_create+0x24d/0x5e0 [ 244.043638][ T7418] ? __zswap_param_set+0x7f0/0x7f0 [ 244.048735][ T7418] ? do_raw_spin_lock+0x128/0x2f0 [ 244.053756][ T7418] ? __rwlock_init+0x140/0x140 [ 244.058511][ T7418] ? do_raw_spin_unlock+0x11d/0x230 [ 244.063697][ T7418] __zswap_param_set+0x284/0x7f0 [ 244.068629][ T7418] param_attr_store+0x20a/0x300 [ 244.073466][ T7418] ? param_attr_show+0x170/0x170 [ 244.078387][ T7418] ? sysfs_kf_read+0x350/0x350 [ 244.083133][ T7418] module_attr_store+0x5b/0x80 [ 244.087887][ T7418] kernfs_fop_write_iter+0x3a8/0x500 [ 244.093168][ T7418] vfs_write+0x748/0xd70 [ 244.097402][ T7418] ? file_end_write+0x250/0x250 [ 244.102322][ T7418] ? mutex_lock_nested+0x17/0x20 [ 244.107242][ T7418] ? __fdget_pos+0x2bf/0x370 [ 244.111815][ T7418] ? ksys_write+0x70/0x260 [ 244.116219][ T7418] ksys_write+0x153/0x260 [ 244.120537][ T7418] ? __ia32_sys_read+0x80/0x80 [ 244.125288][ T7418] ? lockdep_hardirqs_on+0x94/0x140 [ 244.130474][ T7418] do_syscall_64+0x4c/0xa0 [ 244.134878][ T7418] ? clear_bhb_loop+0x30/0x80 [ 244.139542][ T7418] ? clear_bhb_loop+0x30/0x80 [ 244.144216][ T7418] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 244.150095][ T7418] RIP: 0033:0x7f8fc31a01d9 [ 244.154527][ T7418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.174121][ T7418] RSP: 002b:00007f8fc13f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.182526][ T7418] RAX: ffffffffffffffda RBX: 00007f8fc3427fa0 RCX: 00007f8fc31a01d9 [ 244.190490][ T7418] RDX: 0000000000000005 RSI: 0000200000000280 RDI: 0000000000000005 [ 244.198450][ T7418] RBP: 00007f8fc3237888 R08: 0000000000000000 R09: 0000000000000000 [ 244.206409][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.214368][ T7418] R13: 00007f8fc3428038 R14: 00007f8fc3427fa0 R15: 00007ffdd105b1f8 [ 244.222344][ T7418] [ 244.232376][ T7418] zswap: could not alloc crypto acomp_request lz4hc [ 244.295442][ T7431] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 244.796777][ T7468] jffs2: notice: (7468) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 244.852128][ T7473] 9pnet_virtio: no channels available for device syz [ 245.061180][ T7499] CacheFiles: No cache directory specified [ 245.127959][ T7504] comedi comedi0: adq12b: a I/O base address must be specified [ 245.266099][ T4231] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 245.541840][ T4231] usb 3-1: Using ep0 maxpacket: 8 [ 245.671680][ T4231] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 245.781981][ T4231] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.798375][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 245.806969][ T7553] Debayer A: ================= START STATUS ================= [ 245.811334][ T7556] netlink: 64 bytes leftover after parsing attributes in process `syz.3.956'. [ 245.821263][ T4231] usb 3-1: SerialNumber: syz [ 245.828638][ T7553] Debayer A: Debayer Mean Window Size: 3 [ 245.839022][ T7553] Debayer A: ================== END STATUS ================== [ 246.095334][ T4403] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 246.118718][ T4403] wiimote 0005:057E:0306.0001: New device registered [ 246.235999][ T7590] netlink: 36 bytes leftover after parsing attributes in process `syz.1.963'. [ 246.431723][ T4403] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 246.544214][ T4231] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 246.580285][ T7620] jffs2: notice: (7620) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 246.721884][ T4403] usb 7-1: Using ep0 maxpacket: 8 [ 246.842150][ T4403] usb 7-1: config 0 has no interfaces? [ 246.871969][ T4190] usb 3-1: USB disconnect, device number 10 [ 246.928799][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.027397][ T4190] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 247.040126][ T4231] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 247.058032][ T4403] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 247.076800][ T4403] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.090768][ T4403] usb 7-1: Product: syz [ 247.096573][ T4403] usb 7-1: Manufacturer: syz [ 247.101174][ T4403] usb 7-1: SerialNumber: syz [ 247.119293][ T4403] usb 7-1: config 0 descriptor?? [ 247.212097][ T26] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 247.286793][ T26] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input8 [ 247.301918][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 247.330648][ T26] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input9 [ 247.380900][ T26] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 247.412901][ T7573] wiimote 0005:057E:0306.0001: Device removed [ 247.493971][ T1107] usb 7-1: USB disconnect, device number 2 [ 247.719192][ T7630] udc-core: couldn't find an available UDC or it's busy [ 247.735856][ T7630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 247.847323][ T4231] usb 2-1: unable to get BOS descriptor or descriptor too short [ 247.880087][ T3851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.955290][ T7682] 9pnet_virtio: no channels available for device syz [ 247.971723][ T4231] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 247.979305][ T4231] usb 2-1: can't read configurations, error -71 [ 248.188978][ T7693] xt_hashlimit: size too large, truncated to 1048576 [ 248.392306][ T7701] netlink: 'syz.1.990': attribute type 4 has an invalid length. [ 248.793074][ T1107] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 249.071737][ T1107] usb 6-1: Using ep0 maxpacket: 32 [ 249.357200][ T7706] udc-core: couldn't find an available UDC or it's busy [ 249.370016][ T7706] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 249.459757][ T1107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 249.526315][ T1107] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 249.535825][ T1107] usb 6-1: can't read configurations, error -71 [ 249.963434][ T7769] program syz.5.1005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.148691][ T7779] netlink: 'syz.3.1010': attribute type 4 has an invalid length. [ 250.417973][ T7793] FAULT_INJECTION: forcing a failure. [ 250.417973][ T7793] name failslab, interval 1, probability 0, space 0, times 0 [ 250.431063][ T7793] CPU: 0 PID: 7793 Comm: syz.2.1016 Not tainted syzkaller #0 [ 250.438711][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 250.448773][ T7793] Call Trace: [ 250.452038][ T7793] [ 250.454954][ T7793] dump_stack_lvl+0x188/0x250 [ 250.459629][ T7793] ? show_regs_print_info+0x20/0x20 [ 250.464804][ T7793] ? load_image+0x410/0x410 [ 250.469290][ T7793] ? __lock_acquire+0x7d40/0x7d40 [ 250.474294][ T7793] ? lockdep_softirqs_off+0x430/0x430 [ 250.479649][ T7793] should_fail+0x383/0x4b0 [ 250.484049][ T7793] should_failslab+0x5/0x20 [ 250.488550][ T7793] slab_pre_alloc_hook+0x51/0xc0 [ 250.493482][ T7793] ? ceph_msg_new2+0x3c/0x4a0 [ 250.498138][ T7793] kmem_cache_alloc+0x3d/0x280 [ 250.503231][ T7793] ceph_msg_new2+0x3c/0x4a0 [ 250.507723][ T7793] ceph_monc_init+0x4f9/0xa00 [ 250.512383][ T7793] ceph_create_client+0x221/0x300 [ 250.517417][ T7793] ceph_get_tree+0xf6/0x1290 [ 250.521999][ T7793] ? bpf_lsm_capable+0x5/0x10 [ 250.526693][ T7793] ? security_capable+0x85/0xb0 [ 250.531537][ T7793] vfs_get_tree+0x88/0x270 [ 250.535946][ T7793] vfs_fsconfig_locked+0x22f/0x400 [ 250.541051][ T7793] __se_sys_fsconfig+0x69e/0x7e0 [ 250.545988][ T7793] ? __x64_sys_fsconfig+0xc0/0xc0 [ 250.550994][ T7793] ? lockdep_hardirqs_on+0x94/0x140 [ 250.556188][ T7793] ? __x64_sys_fsconfig+0x1c/0xc0 [ 250.561194][ T7793] do_syscall_64+0x4c/0xa0 [ 250.565586][ T7793] ? clear_bhb_loop+0x30/0x80 [ 250.570242][ T7793] ? clear_bhb_loop+0x30/0x80 [ 250.574919][ T7793] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 250.580796][ T7793] RIP: 0033:0x7f3422a581d9 [ 250.585194][ T7793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.604778][ T7793] RSP: 002b:00007f3420cb0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 250.613175][ T7793] RAX: ffffffffffffffda RBX: 00007f3422cdffa0 RCX: 00007f3422a581d9 [ 250.621127][ T7793] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 250.629079][ T7793] RBP: 00007f3422aef888 R08: 0000000000000000 R09: 0000000000000000 [ 250.637031][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.645001][ T7793] R13: 00007f3422ce0038 R14: 00007f3422cdffa0 R15: 00007fff001863d8 [ 250.652983][ T7793] [ 250.702000][ T1107] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 250.951374][ T7814] jffs2: notice: (7814) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 251.073251][ T7823] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1028'. [ 251.102117][ T1107] usb 6-1: not running at top speed; connect to a high speed hub [ 251.168601][ T7830] block2mtd: parameter too long [ 251.191795][ T4190] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 251.199542][ T1107] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 251.210987][ T1107] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 251.220585][ T1107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.261977][ T7784] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 251.282762][ T1107] cyberjack 6-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 251.299073][ T1107] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 251.471995][ T4190] usb 2-1: Using ep0 maxpacket: 16 [ 251.524607][ T4231] usb 6-1: USB disconnect, device number 8 [ 251.545594][ T4231] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 251.558740][ T4231] cyberjack 6-1:1.0: device disconnected [ 251.603021][ T4190] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 251.615387][ T4190] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.790459][ T7840] netlink: 'syz.2.1036': attribute type 4 has an invalid length. [ 251.802119][ T4190] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 251.811420][ T4190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.831848][ T4190] usb 2-1: Product: syz [ 251.836045][ T4190] usb 2-1: Manufacturer: syz [ 251.840641][ T4190] usb 2-1: SerialNumber: syz [ 251.862835][ T4190] usb 2-1: config 0 descriptor?? [ 252.126263][ T4190] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 252.187088][ T7870] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 252.441935][ T4190] rc_core: IR keymap rc-imon-pad not found [ 252.449872][ T4190] Registered IR keymap rc-empty [ 252.469799][ T4190] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 252.485164][ T4190] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 252.572929][ T4190] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 252.595350][ T4190] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 252.607912][ T4190] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:11> initialized [ 252.652537][ T7897] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 252.934466][ T7920] netlink: 'syz.2.1073': attribute type 4 has an invalid length. [ 253.698877][ T4230] usb 2-1: USB disconnect, device number 11 [ 253.711801][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 253.910547][ T7953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.371627][ T4230] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 254.611617][ T4230] usb 7-1: Using ep0 maxpacket: 16 [ 254.733582][ T4230] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.744567][ T4230] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 254.765844][ T4230] usb 7-1: config 0 interface 0 has no altsetting 0 [ 254.773053][ T4230] usb 7-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 254.782379][ T4230] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.797574][ T4230] usb 7-1: config 0 descriptor?? [ 255.321835][ T4230] input: HID 04f3:074d as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:04F3:074D.0002/input/input12 [ 255.409167][ T4230] elan 0003:04F3:074D.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.6-1/input0 [ 255.524624][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.530996][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.653460][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 255.669303][ T4233] usb 7-1: USB disconnect, device number 3 [ 255.687025][ T8033] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.695993][ T8033] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.704234][ T8033] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.712462][ T8033] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.720644][ T8033] netdevsim netdevsim4 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.729268][ T8033] netdevsim netdevsim4 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.737610][ T8033] netdevsim netdevsim4 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.745831][ T8033] netdevsim netdevsim4 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.818737][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 255.866148][ T8033] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.874711][ T8033] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.883604][ T8033] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.892017][ T8033] netdevsim netdevsim0 eth4: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.900377][ T8033] netdevsim netdevsim4 eth5: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.908802][ T8033] netdevsim netdevsim4 eth6: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.917198][ T8033] netdevsim netdevsim4 eth7: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.925593][ T8033] netdevsim netdevsim4 eth8: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.946711][ T8043] overlayfs: empty lowerdir [ 256.007250][ T8049] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1127'. [ 256.077234][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 256.096647][ T8033] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.104936][ T8033] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.113139][ T8033] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.121481][ T8033] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.129737][ T8033] netdevsim netdevsim4 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.138314][ T8033] netdevsim netdevsim4 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.146638][ T8033] netdevsim netdevsim4 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.154859][ T8033] netdevsim netdevsim4 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.174234][ T8033] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 256.190053][ T8033] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.198597][ T8033] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.207100][ T8033] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.215684][ T8033] netdevsim netdevsim0 eth4: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.224103][ T8033] netdevsim netdevsim4 eth5: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.232532][ T8033] netdevsim netdevsim4 eth6: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.241240][ T8033] netdevsim netdevsim4 eth7: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.249833][ T8033] netdevsim netdevsim4 eth8: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.390109][ T8066] ip_tables: iptables: counters copy to user failed while replacing table [ 257.031814][ T21] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 257.067871][ T8123] netlink: 'syz.5.1154': attribute type 4 has an invalid length. [ 257.381647][ T26] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 257.391800][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 257.407686][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 257.417615][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 257.435035][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 257.455321][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1158'. [ 257.651163][ T8143] netlink: 'syz.6.1162': attribute type 3 has an invalid length. [ 257.721702][ T21] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 257.735849][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 257.741785][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.749803][ T21] usb 2-1: Product: syz [ 257.765049][ T21] usb 2-1: Manufacturer: syz [ 257.770377][ T21] usb 2-1: SerialNumber: syz [ 257.790069][ T21] usb 2-1: config 0 descriptor?? [ 257.851861][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.863439][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 257.872996][ T26] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.884288][ T26] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 257.907078][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.946540][ T8156] ip_tables: iptables: counters copy to user failed while replacing table [ 257.952743][ T26] hub 3-1:1.0: bad descriptor, ignoring hub [ 257.966876][ T26] hub: probe of 3-1:1.0 failed with error -5 [ 257.973931][ T26] cdc_wdm 3-1:1.0: skipping garbage [ 257.980811][ T26] cdc_wdm 3-1:1.0: skipping garbage [ 257.991241][ T26] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 257.997381][ T26] cdc_wdm 3-1:1.0: Unknown control protocol [ 258.058108][ T21] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 258.091914][ T4231] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 258.219245][ T8168] device syzkaller0 entered promiscuous mode [ 258.228281][ T8168] tipc: Started in network mode [ 258.234024][ T8168] tipc: Node identity fedb2d73c294, cluster identity 4711 [ 258.244903][ T8168] tipc: Enabled bearer , priority 0 [ 258.262000][ T8168] tipc: Resetting bearer [ 258.273100][ T8167] tipc: Resetting bearer [ 258.290027][ T8167] tipc: Disabling bearer [ 258.331866][ T4231] usb 7-1: Using ep0 maxpacket: 8 [ 258.451880][ T4231] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 258.460077][ T4231] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.481908][ T4231] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.492849][ T4231] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.507243][ T4231] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.520574][ T4231] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 258.533888][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.702740][ T8181] netlink: 'syz.5.1176': attribute type 4 has an invalid length. [ 258.811937][ T4231] usb 7-1: GET_CAPABILITIES returned 0 [ 258.817474][ T4231] usbtmc 7-1:16.0: can't read capabilities [ 259.186992][ T8099] cdc_wdm 3-1:1.0: Error autopm - -16 [ 259.187199][ T4228] usb 3-1: USB disconnect, device number 11 [ 259.201156][ T8152] cdc_wdm 3-1:1.0: Error autopm - -16 [ 259.213520][ T4233] usb 2-1: USB disconnect, device number 12 [ 259.244620][ T4230] usb 7-1: USB disconnect, device number 4 [ 259.421617][ T4228] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 259.649547][ T8190] autofs4:pid:8190:autofs_fill_super: called with bogus options [ 259.685391][ T8192] IPVS: Error connecting to the multicast addr [ 259.717442][ T8194] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1181'. [ 259.794198][ T4228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.809377][ T4228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 259.822387][ T4228] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 259.838424][ T4228] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 259.850912][ T4228] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 259.864788][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.901946][ T8169] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 259.923844][ T4228] hub 3-1:1.0: bad descriptor, ignoring hub [ 259.933015][ T4228] hub: probe of 3-1:1.0 failed with error -5 [ 259.941079][ T8208] netlink: 'syz.6.1187': attribute type 4 has an invalid length. [ 259.949902][ T4228] cdc_wdm 3-1:1.0: skipping garbage [ 259.956644][ T4228] cdc_wdm 3-1:1.0: skipping garbage [ 259.964906][ T4228] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 259.971262][ T4228] cdc_wdm 3-1:1.0: Unknown control protocol [ 260.011378][ T4231] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 260.232812][ T8217] bond0: option slaves: interface -bond_s does not exist! [ 260.252659][ T4230] usb 3-1: USB disconnect, device number 12 [ 260.265597][ T4231] usb 2-1: Using ep0 maxpacket: 8 [ 260.385958][ T4231] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 260.395534][ T4231] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 260.427944][ T4231] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 260.453362][ T4231] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 260.476608][ T4231] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 260.505194][ T4231] usb 2-1: config 168 interface 0 has no altsetting 0 [ 260.631794][ T4231] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 260.639795][ T4231] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 260.653916][ T8225] binder: 8224:8225 ioctl c0306201 200000000480 returned -14 [ 260.691679][ T4231] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 260.742038][ T4231] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 260.814063][ T4231] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 260.889780][ T4231] usb 2-1: config 168 interface 0 has no altsetting 0 [ 261.002056][ T4231] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 261.012598][ T4231] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 261.040929][ T4228] wacom 0003:056A:003F.0003: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 261.055853][ T4231] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 261.111017][ T4231] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 261.180480][ T4231] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 261.208403][ T8248] fido_id[8248]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 261.248918][ T4231] usb 2-1: config 168 interface 0 has no altsetting 0 [ 261.438001][ T4200] Bluetooth: Unknown LE signaling command 0x99 [ 261.444889][ T4200] Bluetooth: Wrong link type (-22) [ 261.482211][ T8269] netlink: 'syz.3.1208': attribute type 4 has an invalid length. [ 261.511722][ T4231] usb 2-1: string descriptor 0 read error: -22 [ 261.518392][ T4231] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 261.537484][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.603074][ T4231] adutux 2-1:168.0: interrupt endpoints not found [ 261.904252][ T8283] smpboot: CPU 1 is now offline [ 262.128205][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 262.199605][ T8293] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.208636][ T8293] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.217375][ T8293] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.226101][ T8293] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.507033][ T1325] usb 2-1: USB disconnect, device number 13 [ 262.760298][ T8321] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 262.767114][ T8321] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 262.997645][ T8321] vhci_hcd vhci_hcd.0: Device attached [ 263.046522][ T8341] netlink: 'syz.3.1226': attribute type 4 has an invalid length. [ 263.096813][ T8343] md: array md0 already has disks! [ 263.103518][ T8324] vhci_hcd: connection closed [ 263.107951][ T1278] vhci_hcd: stop threads [ 263.181668][ T4228] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 263.189872][ T1278] vhci_hcd: release socket [ 263.230334][ T1278] vhci_hcd: disconnect device [ 263.237734][ T1325] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 263.295570][ T8343] md/raid0:md0: chunk size must be set. [ 263.335479][ T8343] md: pers->run() failed ... [ 263.613182][ T4228] usb 3-1: unable to get BOS descriptor or descriptor too short [ 263.712453][ T4228] usb 3-1: config 142 has an invalid interface number: 251 but max is 0 [ 263.744410][ T4228] usb 3-1: config 142 has no interface number 0 [ 263.784431][ T4228] usb 3-1: config 142 interface 251 altsetting 11 has an invalid endpoint with address 0x9F, skipping [ 263.839124][ T4228] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 263.904594][ T4228] usb 3-1: config 142 interface 251 has no altsetting 0 [ 264.025036][ T8376] Cannot find set identified by id 0 to match [ 264.054008][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 264.184002][ T4228] usb 3-1: string descriptor 0 read error: -22 [ 264.195475][ T4228] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 265.312921][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.411769][ T8336] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 265.445218][ T8336] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 265.512540][ T4228] cypress_m8 3-1:142.251: HID->COM RS232 Adapter converter detected [ 265.558158][ T4228] cyphidcom ttyUSB0: required endpoint is missing [ 265.637247][ T8400] netlink: 'syz.5.1246': attribute type 4 has an invalid length. [ 266.114382][ T8416] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1223'. [ 266.176688][ T8417] device syzkaller1 entered promiscuous mode [ 267.797906][ T8445] loop1: detected capacity change from 0 to 128 [ 267.831498][ T8447] netlink: 'syz.3.1266': attribute type 4 has an invalid length. [ 267.876206][ T8445] EXT4-fs (loop1): Unrecognized mount option "context=user_u" or missing value [ 267.987123][ T13] usb 3-1: USB disconnect, device number 13 [ 268.024690][ T13] cypress_m8 3-1:142.251: device disconnected [ 270.104288][ T1325] vhci_hcd: vhci_device speed not set [ 272.425365][ T8484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead [ 272.484118][ T8484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead [ 272.530812][ T8487] netlink: 'syz.1.1282': attribute type 4 has an invalid length. [ 272.546059][ T8484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead [ 274.108190][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 274.150057][ T8484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead [ 275.147298][ T8484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead [ 276.137049][ T8500] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input16 [ 276.537613][ T8484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead [ 276.642405][ T8484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead [ 276.722086][ T8484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead [ 276.783679][ T8484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead [ 276.856858][ T8484] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead [ 276.920437][ T8484] jffs2: Further such events for this erase block will not be printed [ 276.974319][ T8484] jffs2: notice: (8484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 277.075098][ T8484] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 277.126130][ T8532] loop5: detected capacity change from 0 to 128 [ 277.185670][ T8532] EXT4-fs (loop5): Unrecognized mount option "context=user_u" or missing value [ 280.149866][ T8539] netlink: 'syz.6.1301': attribute type 4 has an invalid length. [ 281.378315][ T8553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x0050 instead [ 281.417513][ T8553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0007 instead [ 281.470272][ T8553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x002d instead [ 281.501023][ T8563] device syzkaller0 entered promiscuous mode [ 281.521290][ T8553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0003 instead [ 281.549544][ T8553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2000 instead [ 281.563186][ T8553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8000 instead [ 281.576995][ T8553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x0002 instead [ 281.600716][ T8553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x0003 instead [ 281.641346][ T8553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x0008 instead [ 281.658319][ T8553] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x0005 instead [ 281.669075][ T8553] jffs2: Further such events for this erase block will not be printed [ 281.680414][ T8553] jffs2: notice: (8553) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 282.795093][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 282.856002][ T8581] netlink: 'syz.6.1316': attribute type 1 has an invalid length. [ 282.941873][ T8581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 282.954553][ T8586] kvm: MONITOR instruction emulated as NOP! [ 283.039396][ T8581] bond1: (slave geneve2): making interface the new active one [ 283.090017][ T8581] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 283.108330][ T8599] md: array md0 already has disks! [ 283.122968][ T8599] md: could not open device unknown-block(1,0). [ 283.134344][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 283.170632][ T8597] netlink: 'syz.3.1322': attribute type 4 has an invalid length. [ 283.181416][ T8599] md: error, md_import_device() returned -16 [ 283.257814][ T8603] md/raid0:md0: chunk size must be set. [ 283.263646][ T8603] md: pers->run() failed ... [ 284.525865][ T8625] device gre1 entered promiscuous mode [ 284.624727][ T8631] ip_tables: iptables: counters copy to user failed while replacing table [ 284.799627][ T8638] overlayfs: missing 'lowerdir' [ 284.990475][ T8646] loop1: detected capacity change from 0 to 128 [ 285.031344][ T8647] netlink: 'syz.3.1341': attribute type 4 has an invalid length. [ 285.071008][ T8646] EXT4-fs (loop1): Unrecognized mount option "context=user_u" or missing value [ 285.113306][ T8651] comedi comedi2: comedi_test: 320 microvolt, 193 microsecond waveform attached [ 285.173334][ T8653] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 286.605672][ T8666] [ 286.608006][ T8666] ============================================ [ 286.614126][ T8666] WARNING: possible recursive locking detected [ 286.620340][ T8666] syzkaller #0 Not tainted [ 286.624738][ T8666] -------------------------------------------- [ 286.630866][ T8666] syz.1.1346/8666 is trying to acquire lock: [ 286.636903][ T8666] ffff888060cfc108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 286.646002][ T8666] [ 286.646002][ T8666] but task is already holding lock: [ 286.653355][ T8666] ffff888060cfc108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 286.662449][ T8666] [ 286.662449][ T8666] other info that might help us debug this: [ 286.670480][ T8666] Possible unsafe locking scenario: [ 286.670480][ T8666] [ 286.677899][ T8666] CPU0 [ 286.681150][ T8666] ---- [ 286.684398][ T8666] lock(&sch->q.lock); [ 286.688528][ T8666] lock(&sch->q.lock); [ 286.692656][ T8666] [ 286.692656][ T8666] *** DEADLOCK *** [ 286.692656][ T8666] [ 286.700768][ T8666] May be due to missing lock nesting notation [ 286.700768][ T8666] [ 286.709056][ T8666] 3 locks held by syz.1.1346/8666: [ 286.714134][ T8666] #0: ffffffff8d11f000 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 286.723666][ T8666] #1: ffff888060cfc108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50 [ 286.733192][ T8666] #2: ffffffff8d11f000 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 286.742722][ T8666] [ 286.742722][ T8666] stack backtrace: [ 286.748579][ T8666] CPU: 0 PID: 8666 Comm: syz.1.1346 Not tainted syzkaller #0 [ 286.755918][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 286.765947][ T8666] Call Trace: [ 286.769206][ T8666] [ 286.772115][ T8666] dump_stack_lvl+0x188/0x250 [ 286.776772][ T8666] ? show_regs_print_info+0x20/0x20 [ 286.781945][ T8666] ? print_deadlock_bug+0x435/0x5d0 [ 286.787127][ T8666] ? _find_first_zero_bit+0xd1/0xf0 [ 286.792301][ T8666] __lock_acquire+0x67eb/0x7d40 [ 286.797131][ T8666] ? __lock_acquire+0x12df/0x7d40 [ 286.802129][ T8666] ? verify_lock_unused+0x140/0x140 [ 286.807299][ T8666] ? mark_lock+0x94/0x320 [ 286.811600][ T8666] ? __lock_acquire+0x13b3/0x7d40 [ 286.816600][ T8666] ? rcu_lock_release+0x5/0x20 [ 286.821340][ T8666] lock_acquire+0x19f/0x400 [ 286.825840][ T8666] ? __dev_queue_xmit+0xa2b/0x2e50 [ 286.830926][ T8666] ? read_lock_is_recursive+0x10/0x10 [ 286.836281][ T8666] ? rcu_read_lock_bh_held+0x76/0xf0 [ 286.841555][ T8666] ? rcu_read_lock_held+0x40/0x40 [ 286.846572][ T8666] _raw_spin_lock+0x2a/0x40 [ 286.851083][ T8666] ? __dev_queue_xmit+0xa2b/0x2e50 [ 286.856176][ T8666] __dev_queue_xmit+0xa2b/0x2e50 [ 286.861100][ T8666] ? dev_queue_xmit+0x20/0x20 [ 286.865771][ T8666] ? __kernel_text_address+0x9a/0x100 [ 286.871143][ T8666] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 286.877016][ T8666] ? lockdep_hardirqs_on+0x94/0x140 [ 286.882190][ T8666] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 286.888074][ T8666] ? _raw_spin_unlock+0x40/0x40 [ 286.892905][ T8666] ? stack_trace_save+0xa6/0xf0 [ 286.897733][ T8666] ? netdev_core_pick_tx+0x300/0x300 [ 286.903003][ T8666] sch_frag_xmit_hook+0x2d8/0x1be0 [ 286.908109][ T8666] ? __kasan_slab_alloc+0xa9/0xc0 [ 286.913114][ T8666] ? __kasan_slab_alloc+0x92/0xc0 [ 286.918117][ T8666] ? slab_post_alloc_hook+0x4c/0x380 [ 286.923384][ T8666] ? kmem_cache_alloc+0x15d/0x280 [ 286.928383][ T8666] ? skb_clone+0x1bd/0x350 [ 286.932779][ T8666] ? tcf_mirred_act+0x5b0/0x1640 [ 286.937709][ T8666] ? tcf_action_exec+0x177/0x570 [ 286.942621][ T8666] ? basic_classify+0x1ae/0x2c0 [ 286.947459][ T8666] ? tcf_classify+0x218/0xad0 [ 286.952107][ T8666] ? qfq_enqueue+0x31b/0x1310 [ 286.956756][ T8666] ? dev_qdisc_enqueue+0x48/0x210 [ 286.961755][ T8666] ? __dev_queue_xmit+0xbde/0x2e50 [ 286.966842][ T8666] ? packet_sendmsg+0x3b4f/0x4de0 [ 286.971846][ T8666] ? mq_dump_class_stats+0x430/0x430 [ 286.977124][ T8666] ? do_syscall_64+0x4c/0xa0 [ 286.981685][ T8666] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.987745][ T8666] ? __copy_skb_header+0x3ba/0x4f0 [ 286.992830][ T8666] ? memcpy+0x3c/0x60 [ 286.996786][ T8666] ? __copy_skb_header+0x3ba/0x4f0 [ 287.001873][ T8666] ? __skb_clone+0x446/0x6c0 [ 287.006438][ T8666] ? skb_clone+0x1f1/0x350 [ 287.010827][ T8666] ? tcf_mirred_act+0x59a/0x1640 [ 287.015745][ T8666] tcf_mirred_act+0xc5a/0x1640 [ 287.020485][ T8666] tcf_action_exec+0x177/0x570 [ 287.025224][ T8666] basic_classify+0x1ae/0x2c0 [ 287.029882][ T8666] tcf_classify+0x218/0xad0 [ 287.034380][ T8666] qfq_enqueue+0x31b/0x1310 [ 287.038862][ T8666] ? sch_tree_lock+0x110/0x110 [ 287.043620][ T8666] ? do_raw_spin_lock+0x128/0x2f0 [ 287.048629][ T8666] ? __rwlock_init+0x140/0x140 [ 287.053369][ T8666] ? __alloc_skb+0x473/0x750 [ 287.057943][ T8666] dev_qdisc_enqueue+0x48/0x210 [ 287.062772][ T8666] __dev_queue_xmit+0xbde/0x2e50 [ 287.067685][ T8666] ? dev_queue_xmit+0x20/0x20 [ 287.072336][ T8666] ? virtio_net_hdr_to_skb+0xca1/0x1260 [ 287.077857][ T8666] ? packet_cached_dev_get+0x270/0x270 [ 287.083289][ T8666] ? skb_put+0x10e/0x200 [ 287.087504][ T8666] packet_sendmsg+0x3b4f/0x4de0 [ 287.092345][ T8666] ? aa_sk_perm+0x7dc/0x910 [ 287.096825][ T8666] ? packet_getsockopt+0x9a0/0x9a0 [ 287.101910][ T8666] ? aa_setprocattr_changehat+0x31e/0x580 [ 287.107600][ T8666] ? apparmor_socket_sendmsg+0x88/0x230 [ 287.113118][ T8666] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 287.118377][ T8666] ? security_socket_sendmsg+0x7c/0xa0 [ 287.123809][ T8666] ? packet_getsockopt+0x9a0/0x9a0 [ 287.128896][ T8666] ____sys_sendmsg+0x5be/0x8f0 [ 287.133640][ T8666] ? __sys_sendmsg_sock+0x30/0x30 [ 287.138637][ T8666] ? import_iovec+0x6f/0xa0 [ 287.143113][ T8666] ___sys_sendmsg+0x236/0x2e0 [ 287.147762][ T8666] ? __sys_sendmsg+0x290/0x290 [ 287.152507][ T8666] __se_sys_sendmsg+0x1b7/0x2a0 [ 287.157331][ T8666] ? __x64_sys_sendmsg+0x80/0x80 [ 287.162242][ T8666] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 287.168199][ T8666] ? lockdep_hardirqs_on+0x94/0x140 [ 287.173371][ T8666] do_syscall_64+0x4c/0xa0 [ 287.177770][ T8666] ? clear_bhb_loop+0x30/0x80 [ 287.182433][ T8666] ? clear_bhb_loop+0x30/0x80 [ 287.187091][ T8666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.192965][ T8666] RIP: 0033:0x7f09f65271d9 [ 287.197367][ T8666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.216950][ T8666] RSP: 002b:00007f09f477f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.225343][ T8666] RAX: ffffffffffffffda RBX: 00007f09f67aefa0 RCX: 00007f09f65271d9 [ 287.233299][ T8666] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000006 [ 287.241249][ T8666] RBP: 00007f09f65be888 R08: 0000000000000000 R09: 0000000000000000 [ 287.249213][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.257158][ T8666] R13: 00007f09f67af038 R14: 00007f09f67aefa0 R15: 00007ffc3c434568 [ 287.265114][ T8666]