last executing test programs: 2m53.672829885s ago: executing program 0 (id=753): socket(0xa, 0x3, 0xff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xc5d, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m53.492293149s ago: executing program 0 (id=756): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @local}, 0x10) 2m53.328653943s ago: executing program 0 (id=760): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x16b, 0x8) write$UHID_INPUT(r1, &(0x7f0000000780)={0x8, {"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", 0x1000}}, 0xffffff7e) 2m52.348118607s ago: executing program 0 (id=770): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x1b9047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 2m52.110908743s ago: executing program 2 (id=772): r0 = fsopen(&(0x7f0000000200)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2m52.099200353s ago: executing program 0 (id=773): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @l2={0x1f, 0x2, @none, 0x47, 0x1}, @in={0x2, 0x4e23, @private=0xa010102}, @phonet={0x23, 0x6e, 0xaf, 0x4}, 0x5, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='rose0\x00', 0x1, 0x5b13, 0xd}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb25210000001f000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 2m51.963581816s ago: executing program 2 (id=774): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2m51.846841919s ago: executing program 2 (id=775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000000000)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8c442312e66c3", 0x53}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m51.706178973s ago: executing program 0 (id=776): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x430002d7) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) 2m51.261908993s ago: executing program 32 (id=776): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x430002d7) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002540)={0x2020}, 0x2020) 2m51.253040763s ago: executing program 2 (id=779): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 2m50.318368166s ago: executing program 2 (id=783): r0 = userfaultfd(0x80801) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000380)=[@rdmsr={0x66, 0x18, {0x40000072}}], 0x18}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x500}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 2m49.70877791s ago: executing program 2 (id=786): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0x2, 0x81, 0x3, 0x3e, 0xfffffff9, 0x104, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x1, 0x78, 0x7, 0x9}, [{0x5, 0x35a9, 0x9, 0x7, 0x20000000005, 0x5beb, 0x1, 0x9}]}, 0x78) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2m49.33469235s ago: executing program 33 (id=786): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0x2, 0x81, 0x3, 0x3e, 0xfffffff9, 0x104, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x1, 0x78, 0x7, 0x9}, [{0x5, 0x35a9, 0x9, 0x7, 0x20000000005, 0x5beb, 0x1, 0x9}]}, 0x78) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2m29.561713706s ago: executing program 1 (id=867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc) 2m29.38648378s ago: executing program 1 (id=869): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000280)='1', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000520)='250:1 1', 0x7) 2m28.720702206s ago: executing program 1 (id=873): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000080)='./bus\x00', 0x200002a0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x111000, 0x100) rmdir(&(0x7f0000000100)='./bus\x00') getdents64(r1, 0x0, 0x0) 2m28.538584471s ago: executing program 1 (id=875): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4886, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0x153c, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x1000002, 0x0) 2m28.277563947s ago: executing program 1 (id=877): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_create_resource$futex(&(0x7f0000000000)) futex(r0, 0x6, 0x0, 0x0, 0x0, 0xe18) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) futex(r0, 0x7, 0x2, 0x0, 0x0, 0x2) 2m27.534848255s ago: executing program 1 (id=881): socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x54}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2m26.91549381s ago: executing program 34 (id=881): socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x54}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1m58.376145927s ago: executing program 6 (id=1045): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/245, 0xf5}, 0x1}], 0x1, 0x222, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 1m57.972210037s ago: executing program 6 (id=1048): syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x2008002, &(0x7f0000000500)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x81}}, {@nobh}, {@norecovery}]}, 0x1, 0x560, &(0x7f0000001080)="$eJzs3c9vI1cdAPDvTH42u212oQeogF2gsKDV2htvu6p6abmAUFWpouLEYRsSbxTWXi+xU5oQifRvAAkkTvAncEDigNQTB24ckTgAohyQCkSgDRIHoxlPEjdxWLN2bDb+fKTZ+fFm5vuevTPv+dmZF8DEuhoRuxExGxFvRcRisT0ppni1M2X7PdzbWdnf21lJot1+829Jnp5ti65jMheKc85HxNe+EvHN5GTc5tb2veVarbpRrJdb9Qfl5tb2jfX68lp1rXq/Urm9dPvmS7derAytrFfqP/vgy+uvff2Xv/jk+7/Z/eJ3s2xdLNK6yzFMnaLPHMbJTEfEa2cRbAymivnsmPPB40kj4iMR8Zn8+l+Mqfx/JwBwnrXbi9Fe7F4HAM67NO8DS9JSRKRp0Qgodfrwno2FtNZotq7fbWzeX+30lV2KmfTueq168/Lc776d7zyTZOtLeVqenq9Xjq3fiojLEfGDuafy9dJKo7Y6niYPAEy8C931f0T8cy5NS6W+Du3xrR4A8MSYH3cGAICRU/8DwORR/wPA5Omj/i++7N8987wAAKPh8z8ATB71PwBMHvU/AEyUN15/PZva+8Xzr1ff3tq813j7xmq1ea9U31wprTQ2HpTWGo21/Jk99Uedr9ZoPFh6ITbfKbeqzVa5ubV9p97YvN+6kz/X+051ZiSlAgD+m8tX3vttEhG7Lz+VT9E1loO6Gs63dIh7AU+WqUEO1kCAJ5rRvmBy9VWF542EX595XoDx6Pkw7/meix/2o/8hiN8Zwf+Vax/vv//fGM9wvujZh8n1eP3/rww9H8DoPXb//x+Gmw9g9Nrt5PiY/7OHSd3eGOWoxADAWRrgJ3zt7w2rEQKM1aMG8x7K9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwzlyMiG9FkpbyscDT7N+0VIp4OiIuxUxyd71WvRkRz8SViJiZy9aXxp1pAGBA6V+SYvyva4vPXzyeOpv8ay6fR8R3fvzmD99ZbrU2lrLtfz/cPncwfFjl6LgBxhUEAPr3p352yuvvSjHv+iD/cG9n5WA6wzye8MGXDgcfXdnf28mnTsp0tNvtdsR83pZY+EcS08Ux8xHxXERMDSH+7rsR8bFe5U/yvpFLxcin3fGjiP30SOOnH4qf5mmdefbyfXQIeYFJ8152/3m11/WXxtV83vv6n8/vUIPL73/zEQf3vv2u+NNFpKke8bNr/mq/MV741VdPbGwvdtLejXhuulf85DB+ckr85/uM//tPfOr7r5yS1v5JxLXoHb87VrlVf1Bubm3fWK8vr1XXqvcrldtLt2++dOvFSjnvoy4f9FSf9NeXrz9zWt6y8i+cEr/zzl84Vv7Zw2M/12f5f/rvt77x6aPVuePxv/DZ3u//s/m89+uf1Ymf7zP+8sLPTx2+O4u/ekr5H/X+X+8z/vt/3l7tc1cAYASaW9v3lmu16sZAC9mn0GGc58RClsX+dj5oLg4W9I+RLxy9LEkkMexyZY2xfnaeOatX9cwXpg/bisM44VRnYaE45YiLkw6pFIMtxKVi4eGogo7nfgSMztFFP+6cAAAAAAAAAAAAAAAApxnF3zCNu4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcX/8JAAD//7a0vsc=") r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000005c0), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000600)={0x2, 0x100, 0x0, 0x2, 0x0, 0x42}) 1m54.816995293s ago: executing program 6 (id=1065): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0xa5e438, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRES32=r1, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000040)={{&(0x7f00000000c0)=[{0x9, 0x3, 0x3, {0x100000000002000, 0xfb}, 0x58}], 0x1, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x40}, {0x0, 0x0, 0x28, 0x6, 0xe}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x990, 0x200000000000008}}) 1m53.047332706s ago: executing program 6 (id=1074): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x24000, 0x0) 1m52.560242978s ago: executing program 6 (id=1077): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 1m49.384130044s ago: executing program 6 (id=1092): r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write(r0, 0x0, 0x0) 1m48.578266314s ago: executing program 35 (id=1092): r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write(r0, 0x0, 0x0) 1m11.311772352s ago: executing program 3 (id=1296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 1m10.94772171s ago: executing program 3 (id=1298): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000040)={0x0, 0xc1, 0x1, 0xfffffffd, 0x1f7}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x400, 0x3, 0x91}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x0, 0x26d}}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x8, 0x1000008, 0x6206011, r3, 0x10000000) 1m10.55512254s ago: executing program 3 (id=1301): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e23, @remote}], 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) 1m10.308403496s ago: executing program 3 (id=1302): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x3c5093, 0x0) 1m10.185065729s ago: executing program 3 (id=1304): r0 = gettid() r1 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022f0001010080fa0904000004ff00000007050102000200070581020002"], 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) tkill(r0, 0x7) 1m7.873608284s ago: executing program 3 (id=1314): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000a40)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000180)=ANY=[], 0x1, 0x6e5, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x105042, 0x1da) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="10", 0x600}], 0x1) write$sndseq(r0, &(0x7f0000001bc0)=[{0x8, 0x1, 0x2, 0x8, @time={0x4, 0x400}, {0x5, 0x4}, {0x7, 0x6}, @raw32={[0x7ff, 0x9, 0x9d]}}], 0x1c) getresgid(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m7.271722829s ago: executing program 36 (id=1314): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000a40)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000180)=ANY=[], 0x1, 0x6e5, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x105042, 0x1da) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="10", 0x600}], 0x1) write$sndseq(r0, &(0x7f0000001bc0)=[{0x8, 0x1, 0x2, 0x8, @time={0x4, 0x400}, {0x5, 0x4}, {0x7, 0x6}, @raw32={[0x7ff, 0x9, 0x9d]}}], 0x1c) getresgid(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13.094460345s ago: executing program 7 (id=1537): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xb480, 0x80, 0x2, 0x2e1}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) r4 = eventfd(0xe467) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r4, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x21, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 12.618944976s ago: executing program 4 (id=1369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000880)="8f", 0x1}], 0x1}, 0x40) recvfrom(r0, 0x0, 0xfffffffffffffef2, 0x99bcb88de02507f2, 0x0, 0x0) 10.236133133s ago: executing program 7 (id=1539): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = memfd_create(&(0x7f0000000300)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95', 0x1) fallocate(r1, 0x0, 0x800657, 0x40000b7) 10.003672419s ago: executing program 7 (id=1543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500060008"], 0x4a) 9.899634522s ago: executing program 8 (id=1544): openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "b50631f48a98c55f", "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x2}}, 0x0, 0x0, 0x25, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendto$inet6(r0, 0x0, 0x0, 0x20000090, &(0x7f00000001c0)={0xa, 0x4e1c, 0x3, @empty}, 0x1c) 9.817886454s ago: executing program 7 (id=1545): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = dup2(r1, r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) 9.704680806s ago: executing program 8 (id=1546): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{0x0, 0x0, 0x1800}, {0x2, 0x0, 0x2000}], 0x2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) 9.659214757s ago: executing program 7 (id=1547): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000780)='./file0/../file0\x00') mount$bind(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', 0x0, 0x2a1d804, 0x0) pivot_root(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0/../file0\x00') 9.54585257s ago: executing program 4 (id=1369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000880)="8f", 0x1}], 0x1}, 0x40) recvfrom(r0, 0x0, 0xfffffffffffffef2, 0x99bcb88de02507f2, 0x0, 0x0) 8.74531906s ago: executing program 7 (id=1548): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='task\x00') fchdir(r0) r1 = fanotify_init(0x40, 0x40000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) getdents64(r2, &(0x7f0000000740)=""/163, 0xba974ed140df4995) 8.74518927s ago: executing program 37 (id=1548): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='task\x00') fchdir(r0) r1 = fanotify_init(0x40, 0x40000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) getdents64(r2, &(0x7f0000000740)=""/163, 0xba974ed140df4995) 8.697221541s ago: executing program 8 (id=1550): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0xfe, 0x59c, &(0x7f0000001840)="$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") unshare(0x2c020400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000840), &(0x7f0000000340)=r1}, 0x20) 8.057337166s ago: executing program 8 (id=1554): r0 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) r1 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) shmdt(r1) 7.579435657s ago: executing program 9 (id=1556): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8}) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x57f) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 7.534958849s ago: executing program 4 (id=1369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000880)="8f", 0x1}], 0x1}, 0x40) recvfrom(r0, 0x0, 0xfffffffffffffef2, 0x99bcb88de02507f2, 0x0, 0x0) 5.771876991s ago: executing program 9 (id=1556): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8}) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x57f) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 5.765852021s ago: executing program 8 (id=1559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="0800430506000500000014000000400f"], 0x1200) 5.549912966s ago: executing program 5 (id=1560): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000040), &(0x7f0000000080)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r1], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, &(0x7f0000000800)="00000000000000000a00000011", 0x0}, 0x50) 5.252725224s ago: executing program 5 (id=1561): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x38, r3, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x38}}, 0x2) 4.913277012s ago: executing program 5 (id=1562): pipe2(0x0, 0x4080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xffffffff}, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4622}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4.800061265s ago: executing program 8 (id=1563): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) fcntl$setstatus(r1, 0x4, 0x42000) recvmmsg$unix(r2, &(0x7f0000005280), 0x400018e, 0x10040, 0x0) 4.555234501s ago: executing program 9 (id=1556): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8}) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x57f) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 3.722388221s ago: executing program 4 (id=1369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000880)="8f", 0x1}], 0x1}, 0x40) recvfrom(r0, 0x0, 0xfffffffffffffef2, 0x99bcb88de02507f2, 0x0, 0x0) 2.224034306s ago: executing program 9 (id=1556): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8}) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x57f) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 1.808782267s ago: executing program 5 (id=1564): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000260001031dd77002fadb"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=""/4076, 0xfec}], 0x1}, 0x5dd7}], 0x1, 0x40, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x122b41) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x800000, 0x0, 'queue1\x00', 0x2}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="238292", 0xfff6}], 0x2) 1.621368051s ago: executing program 5 (id=1565): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x18}}}, 0x10, 0x0}, 0x404c0d0) 1.452405045s ago: executing program 5 (id=1566): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 1.411531086s ago: executing program 4 (id=1369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000880)="8f", 0x1}], 0x1}, 0x40) recvfrom(r0, 0x0, 0xfffffffffffffef2, 0x99bcb88de02507f2, 0x0, 0x0) 529.410558ms ago: executing program 9 (id=1556): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8}) shutdown(r1, 0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x57f) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 0s ago: executing program 4 (id=1369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000880)="8f", 0x1}], 0x1}, 0x40) recvfrom(r0, 0x0, 0xfffffffffffffef2, 0x99bcb88de02507f2, 0x0, 0x0) kernel console output (not intermixed with test programs): an0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.675392][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.821688][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.845398][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.986913][ T8230] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 201.169411][ T28] audit: type=1326 audit(1792105354.498:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.4.833" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b60f9e559 code=0x7ffc0000 [ 201.174317][ T8240] netlink: 'syz.5.787': attribute type 16 has an invalid length. [ 201.230067][ T8240] netlink: 'syz.5.787': attribute type 17 has an invalid length. [ 201.252987][ T28] audit: type=1326 audit(1792105354.498:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.4.833" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b60f9e559 code=0x7ffc0000 [ 201.338594][ T28] audit: type=1326 audit(1792105354.548:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.4.833" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b60f9e559 code=0x7ffc0000 [ 201.432130][ T28] audit: type=1326 audit(1792105354.548:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.4.833" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b60f9e559 code=0x7ffc0000 [ 201.472178][ T8247] loop3: detected capacity change from 0 to 512 [ 201.507946][ T8247] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 201.527896][ T28] audit: type=1326 audit(1792105354.548:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.4.833" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b60f9e559 code=0x7ffc0000 [ 201.580878][ T8247] EXT4-fs (loop3): 1 truncate cleaned up [ 201.614701][ T8247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.653587][ T28] audit: type=1326 audit(1792105354.578:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.4.833" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f1b60f9e559 code=0x7ffc0000 [ 201.685791][ T8240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.753694][ T28] audit: type=1326 audit(1792105354.578:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.4.833" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b60f9e559 code=0x7ffc0000 [ 201.792089][ T8247] EXT4-fs error (device loop3): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.3.834: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 201.865252][ T28] audit: type=1326 audit(1792105354.578:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.4.833" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b60f9e559 code=0x7ffc0000 [ 201.919983][ T28] audit: type=1326 audit(1792105354.578:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.4.833" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f1b60f9e559 code=0x7ffc0000 [ 201.971357][ T8247] EXT4-fs (loop3): Remounting filesystem read-only [ 201.989259][ T8247] EXT4-fs warning (device loop3): ext4_rename_delete:3780: inode #2: comm syz.3.834: Deleting old file: nlink 5, error=-117 [ 202.016165][ T28] audit: type=1326 audit(1792105354.578:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.4.833" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b60f9e559 code=0x7ffc0000 [ 202.139609][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.432042][ T8270] netlink: 'syz.1.841': attribute type 11 has an invalid length. [ 202.922785][ T8289] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 203.061537][ T8294] loop1: detected capacity change from 0 to 2048 [ 203.136445][ T8294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.675246][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 203.796042][ T8316] netlink: 'syz.3.856': attribute type 6 has an invalid length. [ 203.875495][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 203.887239][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.908085][ T23] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 203.928060][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.951150][ T23] usb 6-1: config 0 descriptor?? [ 204.237565][ T23] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 204.405069][ T8336] loop3: detected capacity change from 0 to 4096 [ 204.411964][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 204.421519][ T5791] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 204.457604][ T8336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.842105][ T970] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 204.864538][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.881148][ T9] usb 6-1: USB disconnect, device number 2 [ 204.937650][ T970] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 205.118715][ T970] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 205.256336][ T970] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 205.307189][ T8365] FAULT_INJECTION: forcing a failure. [ 205.307189][ T8365] name failslab, interval 1, probability 0, space 0, times 0 [ 205.332184][ T8365] CPU: 1 PID: 8365 Comm: syz.3.868 Not tainted syzkaller #0 [ 205.339580][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 205.350344][ T8365] Call Trace: [ 205.353786][ T8365] [ 205.356805][ T8365] dump_stack_lvl+0x18c/0x250 [ 205.361576][ T8365] ? show_regs_print_info+0x20/0x20 [ 205.366847][ T8365] ? load_image+0x420/0x420 [ 205.371603][ T8365] ? __might_sleep+0xe0/0xe0 [ 205.376964][ T8365] ? __lock_acquire+0x7eb0/0x7eb0 [ 205.382099][ T8365] should_fail_ex+0x394/0x4c0 [ 205.386858][ T8365] should_failslab+0x9/0x20 [ 205.391532][ T8365] slab_pre_alloc_hook+0x59/0x300 [ 205.396624][ T8365] ? lockdep_softirqs_off+0x440/0x440 [ 205.402078][ T8365] kmem_cache_alloc+0x5a/0x2c0 [ 205.407001][ T8365] ? security_inode_alloc+0x34/0x110 [ 205.412541][ T8365] security_inode_alloc+0x34/0x110 [ 205.417751][ T8365] inode_init_always+0x914/0xc90 [ 205.422806][ T8365] new_inode_pseudo+0x95/0x1d0 [ 205.428082][ T8365] new_inode+0x22/0x1d0 [ 205.433112][ T8365] mqueue_get_inode+0x28/0xbe0 [ 205.438048][ T8365] ? do_raw_spin_unlock+0x121/0x230 [ 205.443987][ T8365] mqueue_create_attr+0x20e/0x410 [ 205.449104][ T8365] ? do_mq_open+0x760/0x760 [ 205.453683][ T8365] vfs_mkobj+0xcf/0x240 [ 205.458298][ T8365] do_mq_open+0x600/0x760 [ 205.462840][ T8365] ? mq_clear_sbinfo+0x90/0x90 [ 205.467697][ T8365] __x64_sys_mq_open+0x186/0x1e0 [ 205.472795][ T8365] ? proc_ipc_sem_dointvec+0x180/0x180 [ 205.478433][ T8365] ? lockdep_hardirqs_on+0x98/0x150 [ 205.484003][ T8365] do_syscall_64+0x55/0xb0 [ 205.488694][ T8365] ? clear_bhb_loop+0x40/0x90 [ 205.493706][ T8365] ? clear_bhb_loop+0x40/0x90 [ 205.498462][ T8365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.504444][ T8365] RIP: 0033:0x7f2bd679e559 [ 205.508956][ T8365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.528627][ T8365] RSP: 002b:00007f2bd7723028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 205.537370][ T8365] RAX: ffffffffffffffda RBX: 00007f2bd6a25fa0 RCX: 00007f2bd679e559 [ 205.545493][ T8365] RDX: 00000000000000e8 RSI: 0000000000000040 RDI: 00002000000000c0 [ 205.553524][ T8365] RBP: 00007f2bd68358b0 R08: 0000000000000000 R09: 0000000000000000 [ 205.561580][ T8365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.569721][ T8365] R13: 00007f2bd6a26038 R14: 00007f2bd6a25fa0 R15: 00007ffe47579cf8 [ 205.577783][ T8365] [ 205.655784][ T8349] ceph: No mds server is up or the cluster is laggy [ 205.666232][ T23] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 205.674054][ T8352] ceph: No mds server is up or the cluster is laggy [ 206.203941][ T8387] loop1: detected capacity change from 0 to 256 [ 206.238204][ T8387] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 206.544004][ T8394] loop4: detected capacity change from 0 to 256 [ 206.578429][ T8394] FAT-fs (loop4): Unrecognized mount option "shortð" or missing value [ 206.983863][ T8379] loop3: detected capacity change from 0 to 32768 [ 207.180221][ T8379] JBD2: Ignoring recovery information on journal [ 207.352174][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 207.405279][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.519987][ T8379] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 207.641934][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 207.665621][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 207.696097][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.882149][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 207.895683][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 207.903457][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.928824][ T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 207.943299][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.985258][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.014499][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.040073][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.084622][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 208.105300][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 208.114983][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.133695][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.435360][ T8] usb 5-1: usb_control_msg returned -32 [ 208.441241][ T8] usbtmc 5-1:16.0: can't read capabilities [ 208.460229][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 208.499461][ T49] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.589096][ T49] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.644479][ T49] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.755790][ T49] netdevsim netdevsim1 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.832697][ T8418] loop5: detected capacity change from 0 to 4096 [ 208.908071][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.935410][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.944895][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.961483][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.972896][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.989647][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.003863][ T8418] ntfs3: loop5: Failed to load $Extend (-22). [ 209.014164][ T8418] ntfs3: loop5: Failed to initialize $Extend. [ 209.143063][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 209.143088][ T28] audit: type=1326 audit(1792105362.458:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.3.884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd679e559 code=0x7ffc0000 [ 209.204835][ T28] audit: type=1326 audit(1792105362.458:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.3.884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd679e559 code=0x7ffc0000 [ 209.228617][ T2952] ntfs3: loop5: ino=5, "/" mi_enum_attr [ 209.231554][ T28] audit: type=1800 audit(1792105362.468:228): pid=8418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.885" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 209.257786][ T8427] mmap: syz.3.884 (8427) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 209.302612][ T2929] ntfs3: loop5: ino=5, mi_enum_attr [ 209.314082][ T2929] ntfs3: loop5: ino=1e, "file1" failed to open parent directory r=5 to update [ 209.332224][ T28] audit: type=1326 audit(1792105362.518:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.3.884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2bd679e559 code=0x7ffc0000 [ 209.363753][ T8418] ntfs3: loop5: ino=5, mi_enum_attr [ 209.378297][ T8418] ntfs3: loop5: ino=1e, "file1" failed to open parent directory r=5 to update [ 209.389180][ T8418] ntfs3: loop5: ino=5, mi_enum_attr [ 209.395984][ T8418] ntfs3: loop5: ino=1e, "file1" failed to open parent directory r=5 to write [ 209.413415][ T28] audit: type=1326 audit(1792105362.518:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.3.884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd679e559 code=0x7ffc0000 [ 209.465597][ T970] usb 5-1: USB disconnect, device number 2 [ 209.469257][ T28] audit: type=1326 audit(1792105362.518:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.3.884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2bd675ed8e code=0x7ffc0000 [ 209.550348][ T8418] ntfs3: loop5: ino=5, mi_enum_attr [ 209.571207][ T8432] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 209.598668][ T28] audit: type=1326 audit(1792105362.518:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.3.884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd679e559 code=0x7ffc0000 [ 209.694986][ T28] audit: type=1326 audit(1792105362.528:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.3.884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd679e559 code=0x7ffc0000 [ 209.729051][ T28] audit: type=1326 audit(1792105362.528:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.3.884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2bd679e559 code=0x7ffc0000 [ 209.769605][ T28] audit: type=1326 audit(1792105362.528:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8425 comm="syz.3.884" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd679e559 code=0x7ffc0000 [ 209.991332][ T8423] rxe_eth0 speed is unknown, defaulting to 1000 [ 211.055397][ T51] Bluetooth: hci3: command tx timeout [ 211.066322][ T8440] loop5: detected capacity change from 0 to 32768 [ 211.102538][ T8440] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.887 (8440) [ 211.315592][ T8440] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 211.395920][ T8440] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 211.438049][ T8440] BTRFS info (device loop5): using free space tree [ 211.695196][ T8440] BTRFS info (device loop5): enabling ssd optimizations [ 212.362035][ T8423] chnl_net:caif_netlink_parms(): no params data found [ 212.624016][ T7988] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 212.686049][ T49] hsr_slave_0: left promiscuous mode [ 212.692308][ T49] hsr_slave_1: left promiscuous mode [ 212.716938][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.725028][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.745789][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.765328][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.776659][ T49] bridge_slave_1: left allmulticast mode [ 212.788600][ T49] bridge_slave_1: left promiscuous mode [ 212.809533][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.842640][ T49] bridge_slave_0: left allmulticast mode [ 212.862106][ T49] bridge_slave_0: left promiscuous mode [ 212.869413][ T8520] xt_hashlimit: size too large, truncated to 1048576 [ 212.881623][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.097045][ T49] veth1_macvtap: left promiscuous mode [ 213.102725][ T49] veth0_macvtap: left promiscuous mode [ 213.133806][ T51] Bluetooth: hci3: command tx timeout [ 213.137083][ T49] veth1_vlan: left promiscuous mode [ 213.144761][ T49] veth0_vlan: left promiscuous mode [ 213.599970][ T49] bond1 (unregistering): Released all slaves [ 213.627095][ T8526] loop5: detected capacity change from 0 to 256 [ 213.677944][ T49] pimreg (unregistering): left allmulticast mode [ 213.696125][ T8526] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 214.228613][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 214.415294][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 214.430622][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.465672][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.476608][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.491213][ T23] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 214.500696][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.525964][ T23] usb 4-1: Product: syz [ 214.530322][ T23] usb 4-1: Manufacturer: syz [ 214.535069][ T23] usb 4-1: SerialNumber: syz [ 214.967718][ T49] team0 (unregistering): Port device team_slave_1 removed [ 215.012281][ T23] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 215.127308][ T49] team0 (unregistering): Port device team_slave_0 removed [ 215.142090][ T23] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 215.206971][ T51] Bluetooth: hci3: command tx timeout [ 215.269613][ T23] usb 4-1: USB disconnect, device number 6 [ 215.288966][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.373199][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.224158][ T49] bond0 (unregistering): Released all slaves [ 216.359365][ T8532] netlink: 'syz.5.906': attribute type 4 has an invalid length. [ 216.510553][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.531367][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.559728][ T8423] bridge_slave_0: entered allmulticast mode [ 216.615206][ T8423] bridge_slave_0: entered promiscuous mode [ 216.631003][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.638488][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.656732][ T8423] bridge_slave_1: entered allmulticast mode [ 216.665884][ T8423] bridge_slave_1: entered promiscuous mode [ 216.806914][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.831513][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.950554][ T8423] team0: Port device team_slave_0 added [ 216.974437][ T8423] team0: Port device team_slave_1 added [ 217.112381][ T49] IPVS: stop unused estimator thread 0... [ 217.122298][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.145790][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.233935][ T8423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.254307][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.272985][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.285518][ T51] Bluetooth: hci3: command tx timeout [ 217.305931][ T8423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.538361][ T8423] hsr_slave_0: entered promiscuous mode [ 217.558062][ T8423] hsr_slave_1: entered promiscuous mode [ 217.578296][ T8560] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 217.590902][ T8423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.609616][ T8423] Cannot create hsr debugfs directory [ 218.128913][ T8423] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 218.168862][ T8423] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 218.230031][ T8423] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 218.279922][ T8423] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 218.353224][ T8582] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.361271][ T8582] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.426317][ T8587] netlink: 'syz.5.924': attribute type 1 has an invalid length. [ 218.434486][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.441757][ T8588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.450821][ T8588] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.458525][ T8588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.477423][ T8588] bridge0: entered promiscuous mode [ 218.483232][ T8588] bridge0: entered allmulticast mode [ 218.766476][ T8423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.814541][ T8423] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.847422][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.854646][ T6922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.931461][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.938702][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.741464][ T8423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.208040][ T51] block nbd3: Receive control failed (result -32) [ 221.210287][ T8682] block nbd3: shutting down sockets [ 221.267916][ T8423] veth0_vlan: entered promiscuous mode [ 221.343952][ T8423] veth1_vlan: entered promiscuous mode [ 221.489070][ T8423] veth0_macvtap: entered promiscuous mode [ 221.511110][ T8423] veth1_macvtap: entered promiscuous mode [ 221.563501][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.588365][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.611244][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.633358][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.653921][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.666228][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.705431][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.733480][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.758123][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.782058][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.801984][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.819821][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.831411][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.852154][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.874015][ T8423] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.892610][ T8423] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.913155][ T8423] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.924791][ T8423] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.186353][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.194351][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.277631][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.289346][ T8720] loop4: detected capacity change from 0 to 8192 [ 222.298163][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.365935][ T8720] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 222.461416][ T8720] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 222.486348][ T8720] REISERFS (device loop4): using ordered data mode [ 222.493266][ T8720] reiserfs: using flush barriers [ 222.533562][ T8720] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 222.614076][ T8720] REISERFS (device loop4): checking transaction log (loop4) [ 222.932895][ T8720] REISERFS (device loop4): Using tea hash to sort names [ 222.952982][ T8720] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 224.039256][ T8751] loop6: detected capacity change from 0 to 32768 [ 224.048455][ T8771] warning: `syz.5.960' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 224.117420][ T8751] JBD2: Ignoring recovery information on journal [ 224.167633][ T8751] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 224.228562][ T8769] ALSA: seq fatal error: cannot create timer (-16) [ 224.913510][ T8423] ocfs2: Unmounting device (7,6) on (node local) [ 225.220708][ T8804] loop4: detected capacity change from 0 to 164 [ 226.388092][ T8846] loop6: detected capacity change from 0 to 8 [ 227.544113][ T8880] dccp_invalid_packet: P.Data Offset(80) too large [ 227.918842][ T8888] loop6: detected capacity change from 0 to 4096 [ 228.065444][ T8888] ntfs3: loop6: Failed to load $Extend (-22). [ 228.095184][ T8888] ntfs3: loop6: Failed to initialize $Extend. [ 228.267006][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 228.267023][ T28] audit: type=1800 audit(1792105381.598:242): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.992" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 228.355504][ T6923] ntfs3: loop6: ino=5, "/" mi_enum_attr [ 228.377908][ T8674] ntfs3: loop6: ino=5, mi_enum_attr [ 228.383299][ T8674] ntfs3: loop6: ino=1e, "file1" failed to open parent directory r=5 to update [ 228.441171][ T8888] ntfs3: loop6: ino=5, mi_enum_attr [ 228.482395][ T8888] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 228.538923][ T8888] ntfs3: loop6: ino=1e, "file1" failed to open parent directory r=5 to update [ 228.557818][ T8888] ntfs3: loop6: ino=5, mi_enum_attr [ 228.563494][ T8888] ntfs3: loop6: ino=1e, "file1" failed to open parent directory r=5 to update [ 228.962357][ T8912] loop5: detected capacity change from 0 to 2048 [ 229.033085][ T8897] loop3: detected capacity change from 0 to 32768 [ 229.126073][ T8912] loop5: p4 < > [ 229.140924][ T8923] syz.5.1001: attempt to access beyond end of device [ 229.140924][ T8923] loop11: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 229.197031][ T8897] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 229.353928][ T8923] hfsplus: unable to find HFS+ superblock [ 229.504861][ T5794] udevd[5794]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 229.717825][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 230.203032][ T8956] loop6: detected capacity change from 0 to 2048 [ 230.293486][ T8956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.389561][ T8961] bridge1: entered promiscuous mode [ 230.410059][ T8961] bridge1: entered allmulticast mode [ 230.677982][ T8972] loop4: detected capacity change from 0 to 512 [ 230.701225][ T8972] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.1015: casefold flag without casefold feature [ 230.720727][ T8972] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1015: couldn't read orphan inode 15 (err -117) [ 230.766436][ T8972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.977866][ T8976] FAULT_INJECTION: forcing a failure. [ 230.977866][ T8976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.995459][ T8974] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 231.025349][ T8976] CPU: 1 PID: 8976 Comm: syz.3.1016 Not tainted syzkaller #0 [ 231.033133][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.043270][ T8976] Call Trace: [ 231.046627][ T8976] [ 231.049637][ T8976] dump_stack_lvl+0x18c/0x250 [ 231.054519][ T8976] ? show_regs_print_info+0x20/0x20 [ 231.059986][ T8976] ? load_image+0x420/0x420 [ 231.064581][ T8976] ? __lock_acquire+0x7eb0/0x7eb0 [ 231.069693][ T8976] ? __virt_addr_valid+0x10c/0x380 [ 231.074977][ T8976] should_fail_ex+0x394/0x4c0 [ 231.079760][ T8976] _copy_from_user+0x2f/0xe0 [ 231.084474][ T8976] bpf_vlog_reverse_ubuf+0x122/0x3a0 [ 231.089964][ T8976] bpf_vlog_finalize+0x12b/0x3e0 [ 231.095021][ T8976] btf_new_fd+0x4ca/0x9e0 [ 231.099467][ T8976] ? bpf_btf_show_fdinfo+0x80/0x80 [ 231.104686][ T8976] ? capable+0x88/0xe0 [ 231.108849][ T8976] __sys_bpf+0x670/0x890 [ 231.113182][ T8976] ? bpf_link_show_fdinfo+0x560/0x560 [ 231.118753][ T8976] ? lock_chain_count+0x20/0x20 [ 231.123746][ T8976] __x64_sys_bpf+0x7c/0x90 [ 231.128249][ T8976] do_syscall_64+0x55/0xb0 [ 231.132714][ T8976] ? clear_bhb_loop+0x40/0x90 [ 231.137458][ T8976] ? clear_bhb_loop+0x40/0x90 [ 231.142286][ T8976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.148348][ T8976] RIP: 0033:0x7f2bd679e559 [ 231.152812][ T8976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.172567][ T8976] RSP: 002b:00007f2bd7723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.181037][ T8976] RAX: ffffffffffffffda RBX: 00007f2bd6a25fa0 RCX: 00007f2bd679e559 [ 231.189072][ T8976] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 231.197114][ T8976] RBP: 00007f2bd68358b0 R08: 0000000000000000 R09: 0000000000000000 [ 231.205231][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.213234][ T8976] R13: 00007f2bd6a26038 R14: 00007f2bd6a25fa0 R15: 00007ffe47579cf8 [ 231.221262][ T8976] [ 231.299611][ T7956] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.633401][ T9016] loop4: detected capacity change from 0 to 8 [ 235.275104][ C0] sched: RT throttling activated [ 235.495993][ T9056] loop3: detected capacity change from 0 to 131072 [ 235.541010][ T9056] F2FS-fs (loop3): invalid crc value [ 235.571061][ T9056] F2FS-fs (loop3): Found nat_bits in checkpoint [ 235.645245][ T9056] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 236.916707][ T9101] FAULT_INJECTION: forcing a failure. [ 236.916707][ T9101] name failslab, interval 1, probability 0, space 0, times 0 [ 236.952030][ T9098] loop6: detected capacity change from 0 to 512 [ 236.967510][ T9101] CPU: 0 PID: 9101 Comm: syz.5.1049 Not tainted syzkaller #0 [ 236.975067][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 236.985628][ T9101] Call Trace: [ 236.989056][ T9101] [ 236.992146][ T9101] dump_stack_lvl+0x18c/0x250 [ 236.997168][ T9101] ? show_regs_print_info+0x20/0x20 [ 237.002430][ T9101] ? load_image+0x420/0x420 [ 237.007019][ T9101] ? __might_sleep+0xe0/0xe0 [ 237.011975][ T9101] ? __lock_acquire+0x7eb0/0x7eb0 [ 237.017112][ T9101] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.023877][ T9101] should_fail_ex+0x394/0x4c0 [ 237.028661][ T9101] should_failslab+0x9/0x20 [ 237.033256][ T9101] slab_pre_alloc_hook+0x59/0x300 [ 237.038470][ T9101] ? alloc_super+0x5a/0x910 [ 237.043052][ T9101] __kmem_cache_alloc_node+0x53/0x250 [ 237.048525][ T9101] ? __lock_acquire+0x7eb0/0x7eb0 [ 237.053652][ T9101] ? alloc_super+0x5a/0x910 [ 237.058255][ T9101] kmalloc_trace+0x2a/0xe0 [ 237.062857][ T9101] alloc_super+0x5a/0x910 [ 237.067267][ T9101] ? kill_litter_super+0xb0/0xb0 [ 237.072369][ T9101] ? kill_litter_super+0xb0/0xb0 [ 237.077390][ T9101] sget_fc+0x325/0x8d0 [ 237.081540][ T9101] ? kill_litter_super+0xb0/0xb0 [ 237.086634][ T9101] ? mqueue_get_tree+0xf0/0xf0 [ 237.091490][ T9101] get_tree_nodev+0x2a/0x140 [ 237.096217][ T9101] vfs_get_tree+0x8c/0x280 [ 237.100734][ T9101] fc_mount+0x1c/0xb0 [ 237.104800][ T9101] mq_init_ns+0x3a1/0x510 [ 237.109255][ T9101] copy_ipcs+0x309/0x500 [ 237.113034][ T9098] EXT4-fs: Ignoring removed nobh option [ 237.113573][ T9101] create_new_namespaces+0x212/0x700 [ 237.124548][ T9101] unshare_nsproxy_namespaces+0x11a/0x160 [ 237.130392][ T9101] ksys_unshare+0x4fa/0x8f0 [ 237.134992][ T9101] ? sighand_ctor+0x50/0x50 [ 237.139598][ T9101] ? lock_chain_count+0x20/0x20 [ 237.144639][ T9101] ? syscall_enter_from_user_mode+0x25/0x80 [ 237.150621][ T9101] __x64_sys_unshare+0x38/0x40 [ 237.155467][ T9101] do_syscall_64+0x55/0xb0 [ 237.159968][ T9101] ? clear_bhb_loop+0x40/0x90 [ 237.164807][ T9101] ? clear_bhb_loop+0x40/0x90 [ 237.169566][ T9101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.175558][ T9101] RIP: 0033:0x7f593a19e559 [ 237.180037][ T9101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.199805][ T9101] RSP: 002b:00007f593b02f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 237.208374][ T9101] RAX: ffffffffffffffda RBX: 00007f593a425fa0 RCX: 00007f593a19e559 [ 237.216414][ T9101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 237.224469][ T9101] RBP: 00007f593a2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 237.232687][ T9101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.240732][ T9101] R13: 00007f593a426038 R14: 00007f593a425fa0 R15: 00007ffe5d59af08 [ 237.248886][ T9101] [ 237.422867][ T9098] EXT4-fs: Mount option(s) incompatible with ext2 [ 237.805252][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 238.009546][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.055278][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.092693][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.132272][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.175220][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.214960][ T9] usb 7-1: config 0 descriptor?? [ 238.616341][ T9137] FAULT_INJECTION: forcing a failure. [ 238.616341][ T9137] name failslab, interval 1, probability 0, space 0, times 0 [ 238.650462][ T9140] loop3: detected capacity change from 0 to 256 [ 238.666712][ T9137] CPU: 1 PID: 9137 Comm: syz.4.1060 Not tainted syzkaller #0 [ 238.674187][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 238.684303][ T9137] Call Trace: [ 238.687633][ T9137] [ 238.690689][ T9137] dump_stack_lvl+0x18c/0x250 [ 238.695640][ T9137] ? show_regs_print_info+0x20/0x20 [ 238.700996][ T9137] ? load_image+0x420/0x420 [ 238.705590][ T9137] ? __lock_acquire+0x7eb0/0x7eb0 [ 238.711160][ T9137] ? pointer+0x9ed/0x1150 [ 238.717277][ T9137] should_fail_ex+0x394/0x4c0 [ 238.722048][ T9137] should_failslab+0x9/0x20 [ 238.726712][ T9137] slab_pre_alloc_hook+0x59/0x300 [ 238.731798][ T9137] ? kasprintf+0xe3/0x140 [ 238.736217][ T9137] ? kasprintf+0xe3/0x140 [ 238.740609][ T9137] __kmem_cache_alloc_node+0x53/0x250 [ 238.746079][ T9137] ? kasprintf+0xe3/0x140 [ 238.750479][ T9137] __kmalloc_node_track_caller+0xa4/0x230 [ 238.756287][ T9137] kvasprintf+0xec/0x1a0 [ 238.760623][ T9137] ? bust_spinlocks+0xd0/0xd0 [ 238.765472][ T9137] ? plist_add+0x3db/0x490 [ 238.769968][ T9137] kasprintf+0xe3/0x140 [ 238.774194][ T9137] ? schedule+0xc7/0x170 [ 238.778510][ T9137] ? kvasprintf_const+0x240/0x240 [ 238.781713][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 238.783688][ T9137] logfc+0x156/0x4f0 [ 238.795144][ T9137] ? trace_raw_output_contention_end+0xd0/0xd0 [ 238.801480][ T9137] ? vfs_parse_fs_param_source+0x190/0x190 [ 238.807351][ T9137] ? aa_get_newest_label+0xfd/0x5c0 [ 238.812628][ T9137] ? trace_contention_end+0x39/0xe0 [ 238.817891][ T9137] ? end_current_label_crit_section+0x170/0x170 [ 238.824214][ T9137] ? __mutex_lock+0x30d/0xc80 [ 238.828961][ T9137] ? file_end_write+0x159/0x250 [ 238.833881][ T9137] nfs_get_tree+0x66b/0x1650 [ 238.838637][ T9137] ? apparmor_capable+0x137/0x1a0 [ 238.843730][ T9137] ? bpf_lsm_capable+0x9/0x10 [ 238.848462][ T9137] ? security_capable+0x89/0xb0 [ 238.853382][ T9137] vfs_get_tree+0x8c/0x280 [ 238.858049][ T9137] vfs_cmd_create+0xe3/0x230 [ 238.862721][ T9137] __se_sys_fsconfig+0x70a/0x850 [ 238.867758][ T9137] ? __x64_sys_fsconfig+0xc0/0xc0 [ 238.872862][ T9137] ? lockdep_hardirqs_on+0x98/0x150 [ 238.878141][ T9137] ? __x64_sys_fsconfig+0x20/0xc0 [ 238.883242][ T9137] do_syscall_64+0x55/0xb0 [ 238.887714][ T9137] ? clear_bhb_loop+0x40/0x90 [ 238.892432][ T9137] ? clear_bhb_loop+0x40/0x90 [ 238.897149][ T9137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.903084][ T9137] RIP: 0033:0x7f1b60f9e559 [ 238.907538][ T9137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.927198][ T9137] RSP: 002b:00007f1b61ed3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 238.935689][ T9137] RAX: ffffffffffffffda RBX: 00007f1b61225fa0 RCX: 00007f1b60f9e559 [ 238.943819][ T9137] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 238.951849][ T9137] RBP: 00007f1b610358b0 R08: 0000000000000000 R09: 0000000000000000 [ 238.959863][ T9137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.968060][ T9137] R13: 00007f1b61226038 R14: 00007f1b61225fa0 R15: 00007ffcebb2d9d8 [ 238.976202][ T9137] [ 238.990367][ T9] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 239.007850][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 239.027697][ T9] usb 7-1: USB disconnect, device number 2 [ 239.086197][ T9143] ip_tables: iptables: counters copy to user failed while replacing table [ 239.307751][ T9144] fido_id[9144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 239.655062][ T9148] overlayfs: upper fs does not support file handles, falling back to index=off. [ 240.172039][ T9159] loop6: detected capacity change from 0 to 4096 [ 240.489907][ T9174] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.141369][ T9185] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 241.164405][ T9160] loop3: detected capacity change from 0 to 32768 [ 241.200394][ T9160] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1066 (9160) [ 241.286075][ T9160] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.307687][ T9160] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 241.339820][ T9160] BTRFS info (device loop3): force clearing of disk cache [ 241.366113][ T9160] BTRFS info (device loop3): enabling auto defrag [ 241.395462][ T9160] BTRFS info (device loop3): max_inline at 0 [ 241.401703][ T9160] BTRFS info (device loop3): enabling disk space caching [ 241.435176][ T9160] BTRFS info (device loop3): disk space caching is enabled [ 241.500228][ T28] audit: type=1800 audit(1792105394.828:243): pid=9188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1073" name="protocol" dev="configfs" ino=19364 res=0 errno=0 [ 241.721530][ T9160] BTRFS info (device loop3): enabling ssd optimizations [ 241.792924][ T9160] BTRFS info (device loop3): rebuilding free space tree [ 241.936683][ T9160] BTRFS info (device loop3): disabling free space tree [ 241.963366][ T9160] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 242.012319][ T9160] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 242.365414][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 242.469378][ T6923] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 242.555598][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.595573][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 242.610884][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.652791][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 242.705884][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 242.730438][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.776609][ T9] usb 6-1: config 0 descriptor?? [ 243.214909][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 243.269775][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0005/input/input16 [ 243.340788][ T28] audit: type=1804 audit(1792105396.648:244): pid=9239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1082" name="bus" dev="ramfs" ino=20191 res=1 errno=0 [ 243.430953][ T9] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 244.090931][ T56] usb 6-1: USB disconnect, device number 3 [ 244.271435][ T8674] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.551017][ T8674] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.812779][ T8674] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.078956][ T8674] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.316661][ T5897] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 245.404958][ T8674] netdevsim netdevsim6 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.518159][ T8674] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.547876][ T5897] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 245.570524][ T5897] usb 5-1: config 1 has no interface number 0 [ 245.617899][ T5897] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 245.628512][ T8674] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.641661][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.670206][ T5897] usb 5-1: Product: syz [ 245.690545][ T5897] usb 5-1: Manufacturer: syz [ 245.706459][ T8674] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.715358][ T5897] usb 5-1: SerialNumber: syz [ 246.036634][ T5897] usb 5-1: cannot find UAC_HEADER [ 246.226222][ T5897] snd-usb-audio: probe of 5-1:1.3 failed with error -22 [ 246.283410][ T5897] usb 5-1: USB disconnect, device number 3 [ 246.339016][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.192902][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.249653][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.261080][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.336710][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.352609][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 247.362310][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.436732][ T9313] loop5: detected capacity change from 0 to 128 [ 247.572605][ T9313] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 247.613372][ T9310] loop3: detected capacity change from 0 to 40427 [ 247.624623][ T9310] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 247.632870][ T9310] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 247.660897][ T9313] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 247.683297][ T9310] F2FS-fs (loop3): Found nat_bits in checkpoint [ 247.782723][ T9310] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 247.789987][ T9310] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 248.064334][ T7988] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 248.174690][ T9306] rxe_eth0 speed is unknown, defaulting to 1000 [ 248.377503][ T9310] syz.3.1098: attempt to access beyond end of device [ 248.377503][ T9310] loop3: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 248.427000][ T9310] syz.3.1098: attempt to access beyond end of device [ 248.427000][ T9310] loop3: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 248.531379][ T9310] syz.3.1098: attempt to access beyond end of device [ 248.531379][ T9310] loop3: rw=2049, sector=57344, nr_sectors = 12288 limit=40427 [ 248.566558][ T9310] syz.3.1098: attempt to access beyond end of device [ 248.566558][ T9310] loop3: rw=2049, sector=69632, nr_sectors = 8 limit=40427 [ 248.580686][ T9310] syz.3.1098: attempt to access beyond end of device [ 248.580686][ T9310] loop3: rw=2049, sector=69640, nr_sectors = 8 limit=40427 [ 248.594808][ T9310] syz.3.1098: attempt to access beyond end of device [ 248.594808][ T9310] loop3: rw=2049, sector=69648, nr_sectors = 8 limit=40427 [ 248.608883][ T9310] syz.3.1098: attempt to access beyond end of device [ 248.608883][ T9310] loop3: rw=2049, sector=69656, nr_sectors = 8 limit=40427 [ 248.623730][ T9310] syz.3.1098: attempt to access beyond end of device [ 248.623730][ T9310] loop3: rw=2049, sector=69664, nr_sectors = 8 limit=40427 [ 248.638045][ T9310] syz.3.1098: attempt to access beyond end of device [ 248.638045][ T9310] loop3: rw=2049, sector=69672, nr_sectors = 8 limit=40427 [ 248.653856][ T9310] syz.3.1098: attempt to access beyond end of device [ 248.653856][ T9310] loop3: rw=2049, sector=69680, nr_sectors = 8 limit=40427 [ 248.985334][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 249.525880][ T5791] Bluetooth: hci3: command tx timeout [ 249.734583][ T8674] hsr_slave_0: left promiscuous mode [ 249.746382][ T8674] hsr_slave_1: left promiscuous mode [ 249.885740][ T8674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.916510][ T8674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.966139][ T8674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.974027][ T8674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.050749][ T8674] bridge_slave_1: left allmulticast mode [ 250.080537][ T8674] bridge_slave_1: left promiscuous mode [ 250.116126][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.182820][ T8674] bridge_slave_0: left allmulticast mode [ 250.206520][ T8674] bridge_slave_0: left promiscuous mode [ 250.243118][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.498186][ T8674] veth1_macvtap: left promiscuous mode [ 250.524308][ T8674] veth0_macvtap: left promiscuous mode [ 250.544743][ T8674] veth1_vlan: left promiscuous mode [ 250.560649][ T8674] veth0_vlan: left promiscuous mode [ 250.856093][ T9349] loop4: detected capacity change from 0 to 131072 [ 250.869643][ T9349] F2FS-fs (loop4): invalid crc value [ 250.903201][ T9349] F2FS-fs (loop4): Found nat_bits in checkpoint [ 250.975476][ T9349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 251.608639][ T5791] Bluetooth: hci3: command tx timeout [ 252.743121][ T8674] team0 (unregistering): Port device team_slave_1 removed [ 252.831980][ T8674] team0 (unregistering): Port device team_slave_0 removed [ 252.908572][ T8674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.001209][ T8674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.504666][ T8674] bond0 (unregistering): Released all slaves [ 253.645259][ T9306] chnl_net:caif_netlink_parms(): no params data found [ 253.689225][ T5791] Bluetooth: hci3: command tx timeout [ 253.921440][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1116'. [ 254.136802][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.144160][ T9306] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.177248][ T9306] bridge_slave_0: entered allmulticast mode [ 254.226038][ T9306] bridge_slave_0: entered promiscuous mode [ 254.253189][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.289478][ T9306] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.485409][ T9306] bridge_slave_1: entered allmulticast mode [ 254.493211][ T9306] bridge_slave_1: entered promiscuous mode [ 255.561042][ T9406] loop5: detected capacity change from 0 to 131072 [ 255.575898][ T9406] F2FS-fs (loop5): invalid crc value [ 255.619637][ T9406] F2FS-fs (loop5): Found nat_bits in checkpoint [ 255.702331][ T9406] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 255.707421][ T9418] netlink: 'syz.4.1120': attribute type 20 has an invalid length. [ 255.735264][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 255.765539][ T5791] Bluetooth: hci3: command tx timeout [ 255.783541][ T9418] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.793485][ T9418] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.802609][ T9418] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.812048][ T9418] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.865266][ T9418] netlink: 'syz.4.1120': attribute type 20 has an invalid length. [ 255.905492][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 256.081834][ T9306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.162910][ T9306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.337803][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.344611][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.389624][ T9306] team0: Port device team_slave_0 added [ 256.421840][ T9306] team0: Port device team_slave_1 added [ 256.486760][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.493827][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.528292][ T9306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.585671][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.592819][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.675582][ T9306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.900514][ T9306] hsr_slave_0: entered promiscuous mode [ 256.986471][ T9306] hsr_slave_1: entered promiscuous mode [ 257.012970][ T9306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.032031][ T9306] Cannot create hsr debugfs directory [ 257.697362][ T27] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 257.853298][ T9306] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 257.896116][ T9306] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 257.928091][ T27] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 257.946894][ T27] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 257.985258][ T9306] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 257.995336][ T27] usb 4-1: config 4 has no interface number 0 [ 258.001596][ T27] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 258.059371][ T9306] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 258.078442][ T27] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 258.087959][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.106868][ T9438] loop4: detected capacity change from 0 to 32768 [ 258.114191][ T27] usb 4-1: Product: syz [ 258.128105][ T27] usb 4-1: Manufacturer: syz [ 258.132832][ T27] usb 4-1: SerialNumber: syz [ 258.225672][ T9438] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 258.638936][ T9438] XFS (loop4): Ending clean mount [ 258.697887][ T27] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 258.737973][ T9438] XFS (loop4): Quotacheck needed: Please wait. [ 258.746771][ T9306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.845471][ T27] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 258.866157][ T27] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 258.882058][ T9306] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.895246][ T27] usb 4-1: media controller created [ 258.933113][ T8674] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 258.969721][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.977580][ T8674] XFS (loop4): Unmount and run xfs_repair [ 258.984007][ T8674] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 258.997711][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.005017][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.022371][ T8674] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 259.042080][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.049414][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.066071][ T8674] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 259.099815][ T8674] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 259.113174][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1126'. [ 259.122401][ T8674] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 259.155502][ T9467] netlink: 'syz.5.1126': attribute type 7 has an invalid length. [ 259.176088][ T8674] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 259.184374][ T9467] netlink: 'syz.5.1126': attribute type 8 has an invalid length. [ 259.208164][ T8674] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 259.220725][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1126'. [ 259.230054][ T8674] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 259.270857][ T8674] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 259.331020][ T8674] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 259.352914][ T27] DVB: Unable to find symbol dib7000p_attach() [ 259.375178][ T27] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 259.406277][ T9438] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 259.606904][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1127'. [ 259.635509][ T27] rc_core: IR keymap rc-dib0700-rc5 not found [ 259.641724][ T27] Registered IR keymap rc-empty [ 259.677303][ T27] dvb-usb: could not initialize remote control. [ 259.683883][ T9476] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1127'. [ 259.719294][ T23] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 259.760627][ T23] XFS (loop4): Unmount and run xfs_repair [ 259.767187][ T27] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 259.794083][ T23] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 259.820617][ T23] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 259.830360][ T27] usb 4-1: USB disconnect, device number 7 [ 259.874555][ T23] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 259.925227][ T23] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 259.934232][ T23] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 259.978484][ T27] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 260.005248][ T23] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 260.014230][ T23] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 260.071287][ T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 260.095612][ T9484] loop5: detected capacity change from 0 to 512 [ 260.107026][ T23] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 260.169297][ T9438] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 260.200654][ T9438] XFS (loop4): page discard on page ffffea00013b7d00, inode 0x244a, pos 0. [ 260.263652][ T9484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.278529][ T9478] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 260.292525][ T9478] XFS (loop4): Unmount and run xfs_repair [ 260.299849][ T9478] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 260.307447][ T9478] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 260.316578][ T9478] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 260.326048][ T9478] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 260.335051][ T9478] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 260.353431][ T9478] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 260.363351][ T9478] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 260.373688][ T9478] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 260.376035][ T9484] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.383177][ T9478] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 260.405945][ T9478] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 260.418358][ T9478] XFS (loop4): page discard on page ffffea00013b4ac0, inode 0x2446, pos 134219776. [ 260.493619][ T9306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.634769][ T9484] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.1128: corrupted xattr block 6: invalid header [ 260.678244][ T7956] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 260.693727][ T9484] overlayfs: failed to get uuid (/file0, err=-117); falling back to uuid=null. [ 260.713266][ T9484] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.1128: corrupted xattr block 6: invalid header [ 260.749075][ T9484] overlayfs: failed to get origin (-117) [ 260.758004][ T9484] EXT4-fs error (device loop5): ext4_xattr_block_find:1881: inode #12: comm syz.5.1128: corrupted xattr block 6: invalid header [ 260.925307][ T9484] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 260.932556][ T9484] overlayfs: failed to verify upper root origin [ 261.369171][ T7988] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.618215][ T9306] veth0_vlan: entered promiscuous mode [ 261.654917][ T9306] veth1_vlan: entered promiscuous mode [ 261.675474][ T5855] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 261.779048][ T9306] veth0_macvtap: entered promiscuous mode [ 261.793016][ T9306] veth1_macvtap: entered promiscuous mode [ 261.839054][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.865260][ T5855] usb 5-1: Using ep0 maxpacket: 32 [ 261.872070][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.881961][ T5855] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 261.885285][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.899916][ T5855] usb 5-1: config 0 has no interface number 0 [ 261.919426][ T5855] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 261.931644][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.940253][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.960425][ T5855] usb 5-1: Product: syz [ 261.970617][ T5855] usb 5-1: Manufacturer: syz [ 261.975563][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.984611][ T5855] usb 5-1: SerialNumber: syz [ 262.008458][ T5855] usb 5-1: config 0 descriptor?? [ 262.015033][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.038450][ T5855] smsc95xx v2.0.0 [ 262.054043][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.102511][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.148083][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.158898][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.183479][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.209915][ T9306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.235248][ T9306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.267267][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.302290][ T9306] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.325989][ T9306] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.334791][ T9306] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.364852][ T9306] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.487172][ T5855] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 262.519647][ T5855] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 262.631041][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.675215][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.767741][ T8674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.787806][ T8674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.795874][ T9527] loop3: detected capacity change from 0 to 2048 [ 262.867735][ T9530] input: syz0 as /devices/virtual/input/input18 [ 262.973856][ T9527] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.128298][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 263.187800][ T5855] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 263.232535][ T5855] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 263.300373][ T5855] usb 5-1: USB disconnect, device number 4 [ 263.412910][ T28] audit: type=1800 audit(1792105416.738:245): pid=9527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1135" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 263.441749][ T9541] FAULT_INJECTION: forcing a failure. [ 263.441749][ T9541] name failslab, interval 1, probability 0, space 0, times 0 [ 263.495840][ T9541] CPU: 0 PID: 9541 Comm: syz.5.1137 Not tainted syzkaller #0 [ 263.503318][ T9541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 263.513700][ T9541] Call Trace: [ 263.517037][ T9541] [ 263.520028][ T9541] dump_stack_lvl+0x18c/0x250 [ 263.524778][ T9541] ? show_regs_print_info+0x20/0x20 [ 263.530035][ T9541] ? load_image+0x420/0x420 [ 263.534618][ T9541] ? __lock_acquire+0x7eb0/0x7eb0 [ 263.539700][ T9541] ? verify_lock_unused+0x140/0x140 [ 263.544962][ T9541] should_fail_ex+0x394/0x4c0 [ 263.549800][ T9541] should_failslab+0x9/0x20 [ 263.554460][ T9541] slab_pre_alloc_hook+0x59/0x300 [ 263.559542][ T9541] kmem_cache_alloc+0x5a/0x2c0 [ 263.564538][ T9541] ? prepare_creds+0x30/0x5d0 [ 263.569562][ T9541] prepare_creds+0x30/0x5d0 [ 263.574132][ T9541] lookup_user_key+0x316/0x1140 [ 263.579055][ T9541] ? lookup_user_key_possessed+0x40/0x40 [ 263.585003][ T9541] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 263.591117][ T9541] ? __might_fault+0xaa/0x120 [ 263.595851][ T9541] ? _copy_from_user+0xa5/0xe0 [ 263.600664][ T9541] __se_sys_request_key+0x228/0x350 [ 263.606090][ T9541] ? __x64_sys_request_key+0xb0/0xb0 [ 263.611632][ T9541] ? lockdep_hardirqs_on+0x98/0x150 [ 263.616975][ T9541] do_syscall_64+0x55/0xb0 [ 263.621516][ T9541] ? clear_bhb_loop+0x40/0x90 [ 263.626225][ T9541] ? clear_bhb_loop+0x40/0x90 [ 263.631461][ T9541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.637425][ T9541] RIP: 0033:0x7f593a19e559 [ 263.641965][ T9541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.662574][ T9541] RSP: 002b:00007f593b02f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 263.671029][ T9541] RAX: ffffffffffffffda RBX: 00007f593a425fa0 RCX: 00007f593a19e559 [ 263.679068][ T9541] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180 [ 263.687533][ T9541] RBP: 00007f593a2358b0 R08: 0000000000000000 R09: 0000000000000000 [ 263.695993][ T9541] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 263.704104][ T9541] R13: 00007f593a426038 R14: 00007f593a425fa0 R15: 00007ffe5d59af08 [ 263.712315][ T9541] [ 264.400888][ T9556] FAULT_INJECTION: forcing a failure. [ 264.400888][ T9556] name failslab, interval 1, probability 0, space 0, times 0 [ 264.505423][ T9556] CPU: 0 PID: 9556 Comm: syz.3.1139 Not tainted syzkaller #0 [ 264.512914][ T9556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 264.523392][ T9556] Call Trace: [ 264.526719][ T9556] [ 264.529722][ T9556] dump_stack_lvl+0x18c/0x250 [ 264.534546][ T9556] ? show_regs_print_info+0x20/0x20 [ 264.539800][ T9556] ? load_image+0x420/0x420 [ 264.544378][ T9556] ? __might_sleep+0xe0/0xe0 [ 264.549040][ T9556] ? __lock_acquire+0x7eb0/0x7eb0 [ 264.554328][ T9556] ? ida_alloc_range+0x7d0/0x860 [ 264.559332][ T9556] should_fail_ex+0x394/0x4c0 [ 264.564178][ T9556] should_failslab+0x9/0x20 [ 264.568752][ T9556] slab_pre_alloc_hook+0x59/0x300 [ 264.573829][ T9556] ? alloc_vfsmnt+0x9d/0x450 [ 264.578454][ T9556] ? alloc_vfsmnt+0x9d/0x450 [ 264.583165][ T9556] __kmem_cache_alloc_node+0x53/0x250 [ 264.588585][ T9556] ? idr_replace+0x1b0/0x1b0 [ 264.593395][ T9556] ? alloc_vfsmnt+0x9d/0x450 [ 264.598018][ T9556] __kmalloc_node_track_caller+0xa4/0x230 [ 264.603790][ T9556] kstrdup+0x3b/0x80 [ 264.607727][ T9556] alloc_vfsmnt+0x9d/0x450 [ 264.612269][ T9556] clone_mnt+0x65/0xc60 [ 264.616557][ T9556] ? lockdep_softirqs_off+0x440/0x440 [ 264.621965][ T9556] copy_tree+0xe0/0x7e0 [ 264.626267][ T9556] ? down_write+0x16e/0x200 [ 264.630811][ T9556] ? down_read_killable+0x340/0x340 [ 264.636231][ T9556] __do_loopback+0x193/0x330 [ 264.640877][ T9556] __se_sys_open_tree+0x365/0x880 [ 264.646608][ T9556] ? lock_chain_count+0x20/0x20 [ 264.651540][ T9556] ? __x64_sys_open_tree+0x80/0x80 [ 264.656794][ T9556] ? lockdep_hardirqs_on+0x98/0x150 [ 264.662035][ T9556] do_syscall_64+0x55/0xb0 [ 264.666504][ T9556] ? clear_bhb_loop+0x40/0x90 [ 264.671307][ T9556] ? clear_bhb_loop+0x40/0x90 [ 264.676021][ T9556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.681980][ T9556] RIP: 0033:0x7f2bd679e559 [ 264.686482][ T9556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.706753][ T9556] RSP: 002b:00007f2bd7723028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 264.715224][ T9556] RAX: ffffffffffffffda RBX: 00007f2bd6a25fa0 RCX: 00007f2bd679e559 [ 264.723247][ T9556] RDX: 0000000000089901 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 264.731287][ T9556] RBP: 00007f2bd68358b0 R08: 0000000000000000 R09: 0000000000000000 [ 264.739437][ T9556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.747471][ T9556] R13: 00007f2bd6a26038 R14: 00007f2bd6a25fa0 R15: 00007ffe47579cf8 [ 264.755525][ T9556] [ 265.592715][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 265.640395][ T9574] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 265.679547][ T9574] gretap0: entered promiscuous mode [ 265.740443][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 266.408333][ T9586] loop4: detected capacity change from 0 to 1024 [ 267.649776][ T9616] loop4: detected capacity change from 0 to 1024 [ 268.319167][ T9632] FAULT_INJECTION: forcing a failure. [ 268.319167][ T9632] name failslab, interval 1, probability 0, space 0, times 0 [ 268.353677][ T9593] loop3: detected capacity change from 0 to 32768 [ 268.362145][ T9632] CPU: 1 PID: 9632 Comm: syz.5.1169 Not tainted syzkaller #0 [ 268.369609][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 268.379721][ T9632] Call Trace: [ 268.383191][ T9632] [ 268.386185][ T9632] dump_stack_lvl+0x18c/0x250 [ 268.391018][ T9632] ? show_regs_print_info+0x20/0x20 [ 268.396411][ T9632] ? load_image+0x420/0x420 [ 268.400991][ T9632] ? __might_sleep+0xe0/0xe0 [ 268.405654][ T9632] ? __lock_acquire+0x7eb0/0x7eb0 [ 268.410761][ T9632] should_fail_ex+0x394/0x4c0 [ 268.415616][ T9632] should_failslab+0x9/0x20 [ 268.420194][ T9632] slab_pre_alloc_hook+0x59/0x300 [ 268.425285][ T9632] kmem_cache_alloc+0x5a/0x2c0 [ 268.430244][ T9632] ? __anon_vma_prepare+0xb6/0x440 [ 268.435521][ T9632] __anon_vma_prepare+0xb6/0x440 [ 268.440543][ T9632] ? __pte_alloc+0x113/0x2a0 [ 268.445297][ T9632] handle_mm_fault+0x3ded/0x4a50 [ 268.450656][ T9632] ? handle_mm_fault+0xe6/0x4a50 [ 268.455696][ T9632] ? numa_migrate_prep+0x350/0x350 [ 268.460904][ T9632] __get_user_pages+0x604/0x1580 [ 268.466075][ T9632] ? vma_link+0x2e1/0x530 [ 268.470475][ T9632] ? populate_vma_page_range+0x380/0x380 [ 268.476165][ T9632] get_user_pages_remote+0x39e/0xb90 [ 268.481501][ T9632] ? get_dump_page+0x200/0x200 [ 268.486413][ T9632] ? down_read+0x1ac/0x2e0 [ 268.491068][ T9632] get_arg_page+0x274/0x560 [ 268.495734][ T9632] ? copy_string_kernel+0x220/0x220 [ 268.500991][ T9632] ? up_write+0x1be/0x410 [ 268.505374][ T9632] copy_string_kernel+0x165/0x220 [ 268.510623][ T9632] do_execveat_common+0x35d/0x6b0 [ 268.515706][ T9632] __x64_sys_execveat+0xc4/0xe0 [ 268.520724][ T9632] do_syscall_64+0x55/0xb0 [ 268.525192][ T9632] ? clear_bhb_loop+0x40/0x90 [ 268.530280][ T9632] ? clear_bhb_loop+0x40/0x90 [ 268.535012][ T9632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.540958][ T9632] RIP: 0033:0x7f593a19e559 [ 268.545527][ T9632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.565632][ T9632] RSP: 002b:00007f593b02f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 268.574189][ T9632] RAX: ffffffffffffffda RBX: 00007f593a425fa0 RCX: 00007f593a19e559 [ 268.583326][ T9632] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 268.591422][ T9632] RBP: 00007f593a2358b0 R08: 0000000000001000 R09: 0000000000000000 [ 268.599438][ T9632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.607724][ T9632] R13: 00007f593a426038 R14: 00007f593a425fa0 R15: 00007ffe5d59af08 [ 268.615856][ T9632] [ 268.775496][ T9593] JBD2: Ignoring recovery information on journal [ 268.955768][ T9593] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 269.582300][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 269.815194][ T5855] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 270.037562][ T5855] usb 8-1: config 1 interface 0 has no altsetting 0 [ 270.048769][ T5855] usb 8-1: string descriptor 0 read error: -22 [ 270.070828][ T5855] usb 8-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.40 [ 270.114631][ T5855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.307084][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1182'. [ 270.528790][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1185'. [ 270.561388][ T9685] netlink: 75 bytes leftover after parsing attributes in process `syz.4.1185'. [ 270.593855][ T5855] belkin 0003:050D:3201.0006: unknown main item tag 0x1 [ 270.619673][ T5855] belkin 0003:050D:3201.0006: report_id 34933 is invalid [ 270.645336][ T5855] belkin 0003:050D:3201.0006: item 0 2 1 8 parsing failed [ 270.653584][ T5855] belkin 0003:050D:3201.0006: parse failed [ 270.685829][ T5855] belkin: probe of 0003:050D:3201.0006 failed with error -22 [ 270.707586][ T9688] FAULT_INJECTION: forcing a failure. [ 270.707586][ T9688] name failslab, interval 1, probability 0, space 0, times 0 [ 270.754651][ T9688] CPU: 0 PID: 9688 Comm: syz.3.1186 Not tainted syzkaller #0 [ 270.762256][ T9688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 270.772813][ T9688] Call Trace: [ 270.776156][ T9688] [ 270.779200][ T9688] dump_stack_lvl+0x18c/0x250 [ 270.783959][ T9688] ? show_regs_print_info+0x20/0x20 [ 270.789271][ T9688] ? load_image+0x420/0x420 [ 270.793939][ T9688] ? __might_sleep+0xe0/0xe0 [ 270.798710][ T9688] ? __lock_acquire+0x7eb0/0x7eb0 [ 270.803928][ T9688] should_fail_ex+0x394/0x4c0 [ 270.808800][ T9688] should_failslab+0x9/0x20 [ 270.813416][ T9688] slab_pre_alloc_hook+0x59/0x300 [ 270.818686][ T9688] ? loopback_open+0x27a/0xa50 [ 270.823620][ T9688] __kmem_cache_alloc_node+0x53/0x250 [ 270.829080][ T9688] ? loopback_open+0x27a/0xa50 [ 270.834024][ T9688] kmalloc_trace+0x2a/0xe0 [ 270.838976][ T9688] loopback_open+0x27a/0xa50 [ 270.843927][ T9688] snd_pcm_open_substream+0x1023/0x2540 [ 270.849657][ T9688] ? snd_pcm_drop+0x250/0x250 [ 270.854604][ T9688] snd_pcm_open+0x1d3/0x600 [ 270.859195][ T9688] ? snd_pcm_mmap_control_fault+0x270/0x270 [ 270.865328][ T9688] ? do_task_dead+0xd0/0xd0 [ 270.870056][ T9688] snd_pcm_playback_open+0x6f/0xd0 [ 270.875252][ T9688] chrdev_open+0x58c/0x600 [ 270.879782][ T9688] ? cd_forget+0x160/0x160 [ 270.884289][ T9688] ? fsnotify_perm+0x3ed/0x5e0 [ 270.889136][ T9688] do_dentry_open+0x880/0x14b0 [ 270.893977][ T9688] ? cd_forget+0x160/0x160 [ 270.898540][ T9688] path_openat+0x284f/0x3270 [ 270.903366][ T9688] ? do_sys_openat2+0xda/0x1d0 [ 270.908186][ T9688] ? __x64_sys_openat+0x139/0x160 [ 270.913305][ T9688] ? verify_lock_unused+0x140/0x140 [ 270.918599][ T9688] ? do_filp_open+0x430/0x430 [ 270.923455][ T9688] do_filp_open+0x1f2/0x430 [ 270.928131][ T9688] ? vfs_tmpfile+0x620/0x620 [ 270.932814][ T9688] ? _raw_spin_unlock+0x28/0x40 [ 270.937722][ T9688] ? alloc_fd+0x590/0x640 [ 270.942137][ T9688] do_sys_openat2+0x134/0x1d0 [ 270.946866][ T9688] ? do_sys_open+0xe0/0xe0 [ 270.951377][ T9688] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 270.957411][ T9688] ? lock_chain_count+0x20/0x20 [ 270.962301][ T9688] ? lock_chain_count+0x20/0x20 [ 270.967200][ T9688] __x64_sys_openat+0x139/0x160 [ 270.972100][ T9688] do_syscall_64+0x55/0xb0 [ 270.976646][ T9688] ? clear_bhb_loop+0x40/0x90 [ 270.981365][ T9688] ? clear_bhb_loop+0x40/0x90 [ 270.986260][ T9688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 270.992201][ T9688] RIP: 0033:0x7f2bd675ed8e [ 270.996661][ T9688] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 271.017018][ T9688] RSP: 002b:00007f2bd7722b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 271.025768][ T9688] RAX: ffffffffffffffda RBX: 00007f2bd77236c0 RCX: 00007f2bd675ed8e [ 271.033890][ T9688] RDX: 0000000000000002 RSI: 00007f2bd7722c00 RDI: ffffffffffffff9c [ 271.042026][ T9688] RBP: 00007f2bd7722c00 R08: 0000000000000000 R09: 0000000000000000 [ 271.050143][ T9688] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 271.058185][ T9688] R13: 00007f2bd6a26038 R14: 00007f2bd6a25fa0 R15: 00007ffe47579cf8 [ 271.066411][ T9688] [ 271.182713][ T5860] usb 8-1: USB disconnect, device number 2 [ 273.435007][ T9736] loop3: detected capacity change from 0 to 40427 [ 273.465763][ T9736] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 273.481459][ T9736] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 273.511211][ T9736] F2FS-fs (loop3): invalid crc value [ 273.587989][ T9736] F2FS-fs (loop3): Found nat_bits in checkpoint [ 273.774634][ T9736] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 273.789883][ T9765] overlayfs: failed to clone upperpath [ 273.802318][ T9736] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 274.020101][ T28] audit: type=1804 audit(1792105427.348:246): pid=9736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1203" name="/newroot/317/file0/bus" dev="loop3" ino=10 res=1 errno=0 [ 274.176521][ T28] audit: type=1800 audit(1792105427.508:247): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1203" name="file0" dev="loop3" ino=11 res=0 errno=0 [ 274.208827][ T9782] loop7: detected capacity change from 0 to 512 [ 274.251130][ T9782] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 274.301959][ T9782] EXT4-fs error (device loop7): ext4_orphan_get:1408: inode #15: comm syz.7.1215: inode has both inline data and extents flags [ 274.441927][ T9782] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.1215: couldn't read orphan inode 15 (err -117) [ 274.502742][ T9782] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.865330][ T5860] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 275.048045][ T5860] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.071841][ T5860] usb 8-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 275.097850][ T5860] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.216848][ T9803] bridge0: port 3(vlan2) entered blocking state [ 275.223600][ T9803] bridge0: port 3(vlan2) entered disabled state [ 275.243967][ T9803] vlan2: entered allmulticast mode [ 275.255754][ T9803] dummy0: entered allmulticast mode [ 275.300661][ T9803] vlan2: entered promiscuous mode [ 275.324340][ T9803] dummy0: entered promiscuous mode [ 275.336056][ T9807] fuse: Bad value for 'fd' [ 275.579202][ T5860] wacom 0003:056A:033B.0007: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 275.623696][ T5860] wacom 0003:056A:033B.0007: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.7-1/input0 [ 275.647946][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 275.669847][ T5860] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:056A:033B.0007/input/input19 [ 275.748743][ T9814] netlink: 'syz.4.1225': attribute type 1 has an invalid length. [ 275.793486][ T9814] netlink: 'syz.4.1225': attribute type 2 has an invalid length. [ 276.158834][ T5859] usb 8-1: USB disconnect, device number 3 [ 276.301201][ T9828] overlayfs: failed to resolve './file0': -2 [ 276.490022][ T9834] veth1_to_bond: entered allmulticast mode [ 276.500289][ T9834] veth1_to_bond: entered promiscuous mode [ 276.509972][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1230'. [ 276.641938][ T9834] veth1_to_bond (unregistering): left promiscuous mode [ 276.650037][ T9834] veth1_to_bond (unregistering): left allmulticast mode [ 276.704039][ T9834] bond0: (slave bond_slave_1): Releasing backup interface [ 276.735016][ T9306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.737312][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.757989][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.768599][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.798773][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.820010][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.854292][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.874075][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.891578][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.902590][ T9839] batadv_slave_0: entered promiscuous mode [ 276.935028][ T9839] batadv_slave_0: left promiscuous mode [ 277.111175][ T9843] loop7: detected capacity change from 0 to 4096 [ 277.197508][ T9843] ntfs3: loop7: Failed to load $Extend (-22). [ 277.220947][ T9843] ntfs3: loop7: Failed to initialize $Extend. [ 278.115021][ T9874] fuse: Bad value for 'fd' [ 278.465741][ T9888] ip_tables: iptables: counters copy to user failed while replacing table [ 279.141456][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1258'. [ 279.481414][ T9925] ipip1: entered allmulticast mode [ 279.669554][ T9934] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) ! [ 279.745450][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 279.764887][ T9937] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 279.924221][ T9939] netlink: 'syz.4.1264': attribute type 1 has an invalid length. [ 280.054578][ T9939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.222963][ T9944] bond1: (slave gretap1): making interface the new active one [ 280.292466][ T9944] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 281.109411][ T9984] loop4: detected capacity change from 0 to 16 [ 281.213084][ T9984] erofs: (device loop4): mounted with root inode @ nid 36. [ 281.319233][ T9989] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1272'. [ 281.851505][ T9999] netlink: 'syz.4.1274': attribute type 12 has an invalid length. [ 281.928954][T10003] tls_set_device_offload: netdev not found [ 282.760061][T10029] netlink: 'syz.7.1286': attribute type 1 has an invalid length. [ 282.771094][T10029] netlink: 'syz.7.1286': attribute type 2 has an invalid length. [ 282.779841][T10029] netlink: 244 bytes leftover after parsing attributes in process `syz.7.1286'. [ 283.432601][T10052] ref_ctr_offset mismatch. inode: 0xdd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 283.461857][T10055] netlink: 'syz.3.1296': attribute type 1 has an invalid length. [ 283.537903][T10055] 8021q: adding VLAN 0 to HW filter on device bond4 [ 283.787668][T10031] loop4: detected capacity change from 0 to 40427 [ 283.815201][T10031] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 283.855435][T10031] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 283.887683][T10031] F2FS-fs (loop4): invalid crc value [ 283.906547][T10031] F2FS-fs (loop4): Found nat_bits in checkpoint [ 284.012125][T10031] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 284.028143][T10031] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 284.261532][ T28] audit: type=1804 audit(1792105437.588:248): pid=10031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1287" name="/newroot/135/file0/bus" dev="loop4" ino=10 res=1 errno=0 [ 284.453280][ T28] audit: type=1800 audit(1792105437.778:249): pid=10031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1287" name="file0" dev="loop4" ino=11 res=0 errno=0 [ 285.247472][T10108] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 285.669953][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.196866][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.265923][T10146] netlink: 'syz.7.1313': attribute type 1 has an invalid length. [ 286.386342][T10146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.493650][T10148] bond1: (slave gretap1): making interface the new active one [ 286.538071][T10148] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 286.671381][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.953956][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 286.975738][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.087342][T10156] loop4: detected capacity change from 0 to 8192 [ 287.210015][ T42] netdevsim netdevsim3 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.287890][ T42] netdevsim netdevsim3 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.347740][ T42] netdevsim netdevsim3 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.402279][ T42] netdevsim netdevsim3 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.417870][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 288.439270][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 288.449562][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 288.486149][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 288.495433][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 288.518611][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 288.806614][T10187] rxe_eth0 speed is unknown, defaulting to 1000 [ 288.816635][ T28] audit: type=1326 audit(1792105442.138:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.5.1328" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f593a19e559 code=0x0 [ 289.145950][ T42] gretap0 (unregistering): left promiscuous mode [ 289.841212][T10187] chnl_net:caif_netlink_parms(): no params data found [ 290.502624][ T42] hsr_slave_0: left promiscuous mode [ 290.564540][ T42] hsr_slave_1: left promiscuous mode [ 290.575482][ T51] Bluetooth: hci0: command tx timeout [ 290.614965][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.633705][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.694470][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.719455][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.743081][ T42] bridge_slave_1: left allmulticast mode [ 290.751215][ T42] bridge_slave_1: left promiscuous mode [ 290.772443][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.798246][ T42] bridge_slave_0: left allmulticast mode [ 290.804030][ T42] bridge_slave_0: left promiscuous mode [ 290.833317][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.970898][ T42] veth1_macvtap: left promiscuous mode [ 290.979125][ T42] veth0_macvtap: left promiscuous mode [ 290.990733][ T42] veth1_vlan: left promiscuous mode [ 291.006251][T10260] loop7: detected capacity change from 0 to 256 [ 291.012911][ T42] veth0_vlan: left promiscuous mode [ 291.022612][T10260] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 291.311969][T10263] loop7: detected capacity change from 0 to 2048 [ 291.363930][T10263] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.938323][T10269] loop7: detected capacity change from 0 to 2048 [ 292.030408][T10269] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 292.112851][T10269] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.394248][ T42] bond4 (unregistering): Released all slaves [ 292.464291][ T42] bond3 (unregistering): Released all slaves [ 292.566781][ T42] bond2 (unregistering): (slave geneve2): Releasing active interface [ 292.651892][ T51] Bluetooth: hci0: command tx timeout [ 293.144288][ T42] bond2 (unregistering): Released all slaves [ 293.176161][ T42] bond1 (unregistering): (slave lo): Releasing backup interface [ 293.202520][ T42] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 293.238051][ T42] bond1 (unregistering): Released all slaves [ 294.272217][ T42] team0 (unregistering): Port device team_slave_1 removed [ 294.349068][ T42] team0 (unregistering): Port device team_slave_0 removed [ 294.414728][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.482880][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.745170][ T51] Bluetooth: hci0: command tx timeout [ 295.021732][ T42] bond0 (unregistering): Released all slaves [ 295.203636][T10187] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.240957][T10187] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.261425][T10187] bridge_slave_0: entered allmulticast mode [ 295.279479][T10187] bridge_slave_0: entered promiscuous mode [ 295.333350][T10187] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.374563][T10187] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.414541][T10187] bridge_slave_1: entered allmulticast mode [ 295.434374][T10187] bridge_slave_1: entered promiscuous mode [ 295.539886][T10187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.591282][T10187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.742305][T10187] team0: Port device team_slave_0 added [ 295.794643][T10187] team0: Port device team_slave_1 added [ 295.936506][T10187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.953658][T10187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.009678][T10187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.044983][T10187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.055726][T10187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.102788][T10187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.209973][T10187] hsr_slave_0: entered promiscuous mode [ 296.226251][T10187] hsr_slave_1: entered promiscuous mode [ 296.234459][T10187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.248084][T10187] Cannot create hsr debugfs directory [ 296.806707][ T51] Bluetooth: hci0: command tx timeout [ 297.049936][T10187] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 297.084204][T10187] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 297.110112][T10187] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 297.153704][T10187] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 297.391786][T10187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.448731][T10187] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.498140][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.505459][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.581290][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.588582][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.677149][ T28] audit: type=1326 audit(1792105451.008:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593a19e559 code=0x7ffc0000 [ 297.748281][ T28] audit: type=1326 audit(1792105451.008:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593a19e559 code=0x7ffc0000 [ 297.805496][ T28] audit: type=1326 audit(1792105451.008:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593a19e559 code=0x7ffc0000 [ 297.895952][ T28] audit: type=1326 audit(1792105451.008:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f593a19e559 code=0x7ffc0000 [ 297.972789][ T28] audit: type=1326 audit(1792105451.008:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593a19e559 code=0x7ffc0000 [ 298.080310][ T28] audit: type=1326 audit(1792105451.008:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593a19e559 code=0x7ffc0000 [ 298.151798][ T28] audit: type=1326 audit(1792105451.008:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593a19e559 code=0x7ffc0000 [ 298.236448][ T28] audit: type=1326 audit(1792105451.008:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593a19e559 code=0x7ffc0000 [ 298.276856][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.291667][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.302935][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.325761][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.334394][ T28] audit: type=1326 audit(1792105451.008:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593a19e559 code=0x7ffc0000 [ 298.359729][ T28] audit: type=1326 audit(1792105451.008:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10356 comm="syz.5.1371" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f593a19e559 code=0x7ffc0000 [ 298.385451][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 298.393757][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.533014][T10367] rxe_eth0 speed is unknown, defaulting to 1000 [ 298.583436][T10187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.298835][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1379'. [ 299.565898][T10187] veth0_vlan: entered promiscuous mode [ 299.656858][T10367] chnl_net:caif_netlink_parms(): no params data found [ 299.710605][T10187] veth1_vlan: entered promiscuous mode [ 299.720801][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1383'. [ 299.736175][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1383'. [ 299.882316][T10187] veth0_macvtap: entered promiscuous mode [ 299.938522][T10187] veth1_macvtap: entered promiscuous mode [ 300.087056][T10367] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.094416][T10367] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.103521][T10367] bridge_slave_0: entered allmulticast mode [ 300.112812][T10367] bridge_slave_0: entered promiscuous mode [ 300.166825][T10367] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.174092][T10367] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.209032][T10367] bridge_slave_1: entered allmulticast mode [ 300.231514][T10367] bridge_slave_1: entered promiscuous mode [ 300.246436][T10187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.274161][T10187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.284271][T10187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.301148][T10187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.311589][T10187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.329856][T10187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.346395][T10187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.379022][T10187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.405129][T10187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.425480][T10187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.447177][T10187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.462300][T10187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.474483][T10187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.487281][T10187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.495321][ T5791] Bluetooth: hci2: command tx timeout [ 300.633486][T10187] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.675145][T10187] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.701124][T10187] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.714864][T10187] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.746344][T10367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.777108][T10367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.923402][T10367] team0: Port device team_slave_0 added [ 300.944692][T10367] team0: Port device team_slave_1 added [ 301.096570][T10367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.103760][T10367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.175280][T10367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.197579][T10367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.204630][T10367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.275206][T10367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.414526][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.463267][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.506144][T10367] hsr_slave_0: entered promiscuous mode [ 301.521233][T10367] hsr_slave_1: entered promiscuous mode [ 301.533073][T10367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.542713][T10367] Cannot create hsr debugfs directory [ 301.792905][ T8674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.825286][ T8674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.327617][T10367] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.349472][T10367] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.565246][ T51] Bluetooth: hci2: command tx timeout [ 302.703810][T10367] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.737678][T10367] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.981494][T10367] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.019427][T10367] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.274260][T10367] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.302948][T10367] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.570885][T10468] loop8: detected capacity change from 0 to 40427 [ 303.652968][T10468] F2FS-fs (loop8): Wrong secs_per_zone / total_sections (262145, 24) [ 303.689449][T10468] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 303.746324][T10468] F2FS-fs (loop8): invalid crc value [ 303.773956][T10468] F2FS-fs (loop8): invalid crc value [ 303.783971][T10468] F2FS-fs (loop8): Failed to get valid F2FS checkpoint [ 303.913034][T10367] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.971759][T10367] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 304.018763][T10367] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 304.058771][T10367] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 304.454103][T10367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.540169][T10367] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.591460][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.598718][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.645355][ T51] Bluetooth: hci2: command tx timeout [ 304.670195][T10502] loop7: detected capacity change from 0 to 256 [ 304.679153][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.686456][ T8674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.723618][T10502] exfat: Deprecated parameter 'namecase' [ 304.786076][T10502] exfat: Deprecated parameter 'namecase' [ 304.899215][T10367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.014962][T10502] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 305.224519][T10502] exFAT-fs (loop7): invalid start cluster (4278190088) [ 305.608661][T10367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.463016][T10367] veth0_vlan: entered promiscuous mode [ 306.515893][T10367] veth1_vlan: entered promiscuous mode [ 306.607299][T10367] veth0_macvtap: entered promiscuous mode [ 306.628384][T10367] veth1_macvtap: entered promiscuous mode [ 306.652492][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.664248][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.677842][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.692374][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.710790][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.722787][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.734516][ T51] Bluetooth: hci2: command tx timeout [ 306.744425][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.761244][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.773778][T10367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.830793][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.847050][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.872106][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.896354][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.917331][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.940962][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.983568][T10367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.996302][T10367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.022285][T10367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.075611][T10367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.084588][T10367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.115465][T10367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.135498][T10367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.935537][T10582] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1415'. [ 308.144620][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1417'. [ 308.484052][T10602] veth1_to_bond: entered promiscuous mode [ 308.518070][T10602] veth1_to_bond: entered allmulticast mode [ 308.538666][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1419'. [ 308.688032][T10602] veth1_to_bond (unregistering): left allmulticast mode [ 308.695456][T10602] veth1_to_bond (unregistering): left promiscuous mode [ 308.791516][T10602] bond0: (slave bond_slave_1): Releasing backup interface [ 309.243905][ T3001] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.605805][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 310.120941][ T3001] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.228134][T10635] fuse: Bad value for 'fd' [ 310.348200][ T3001] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.601769][ T3001] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.773508][T10643] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 311.018126][ T3001] netdevsim netdevsim4 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.096162][ T3001] netdevsim netdevsim4 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.165835][ T3001] netdevsim netdevsim4 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.235877][ T3001] netdevsim netdevsim4 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.639991][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1434'. [ 313.355461][ T3001] hsr_slave_0: left promiscuous mode [ 313.385584][ T3001] hsr_slave_1: left promiscuous mode [ 313.411119][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.425642][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.451366][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.489647][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.517867][ T5897] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.532222][ T3001] bridge_slave_1: left allmulticast mode [ 313.566535][ T3001] bridge_slave_1: left promiscuous mode [ 313.572492][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.621827][ T5897] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 313.634035][ T3001] bridge_slave_0: left allmulticast mode [ 313.659165][ T3001] bridge_slave_0: left promiscuous mode [ 313.687447][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.720943][T10712] udevd[10712]: open /dev/null failed: Not a directory [ 313.917209][ T3001] veth1_macvtap: left promiscuous mode [ 313.922886][ T3001] veth0_macvtap: left promiscuous mode [ 313.954080][ T3001] veth1_vlan: left promiscuous mode [ 313.995950][ T3001] veth0_vlan: left promiscuous mode [ 316.220261][ T3001] team0 (unregistering): Port device team_slave_1 removed [ 316.268483][T10741] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 316.400802][ T3001] team0 (unregistering): Port device team_slave_0 removed [ 316.408561][T10744] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 316.562498][ T3001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.662207][ T3001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.855163][ T5860] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 317.037646][ T5860] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 317.049155][ T5860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.348239][ T3001] bond0 (unregistering): Released all slaves [ 317.796623][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.805767][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.821950][T10754] loop7: detected capacity change from 0 to 2048 [ 317.859679][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 318.176900][ T5860] usb 9-1: non-Atmel transceiver xxxx1f7f [ 318.390846][ T5860] usb 9-1: Firmware version (0.0) predates our first public release. [ 318.414578][ T5860] usb 9-1: Please update to version 0.2 or newer [ 318.423196][ T5860] usb 9-1: atusb_probe: initialization failed, error = -19 [ 318.445434][ T5860] usb 9-1: USB disconnect, device number 2 [ 318.659031][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 318.677148][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1454'. [ 318.719814][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 319.783219][T10801] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1457'. [ 319.791519][T10802] netlink: 'syz.7.1455': attribute type 1 has an invalid length. [ 319.872003][T10802] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.988816][T10805] bond2: (slave geneve2): making interface the new active one [ 320.017602][T10805] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 320.179190][T10811] loop8: detected capacity change from 0 to 2048 [ 320.224018][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 320.390965][T10811] Alternate GPT is invalid, using primary GPT. [ 320.416300][T10811] loop8: p2 p3 p7 [ 320.437395][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 320.492810][T10103] udevd[10103]: inotify_add_watch(7, /dev/loop8p3, 10) failed: Not a directory [ 320.503028][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop8p2, 10) failed: Not a directory [ 320.512908][ T9986] udevd[9986]: inotify_add_watch(7, /dev/loop8p7, 10) failed: Not a directory [ 320.664429][T10826] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1464'. [ 320.729066][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 320.788145][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 322.470872][T10885] loop8: detected capacity change from 0 to 4096 [ 322.515227][T10885] EXT4-fs: Ignoring removed bh option [ 322.529141][T10885] EXT4-fs (loop8): Test dummy encryption mode enabled [ 322.547167][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 322.590021][T10885] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.814816][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 322.814834][ T28] audit: type=1800 audit(1700000009.910:312): pid=10885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1469" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 322.933452][T10195] libceph: connect (1)[c::]:6789 error -101 [ 322.942635][T10187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.952116][T10195] libceph: mon0 (1)[c::]:6789 connect error [ 322.997629][ T56] libceph: connect (1)[c::]:6789 error -101 [ 323.003719][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 323.079656][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 323.163448][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 323.205314][ T23] libceph: connect (1)[c::]:6789 error -101 [ 323.211514][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 323.275272][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 323.281426][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 323.705893][T10915] ceph: No mds server is up or the cluster is laggy [ 323.714648][T10909] ceph: No mds server is up or the cluster is laggy [ 323.735059][ T23] libceph: connect (1)[c::]:6789 error -101 [ 323.753445][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 323.908408][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.376497][ T28] audit: type=1326 audit(1700000011.480:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.7.1476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d78b9e559 code=0x7ffc0000 [ 324.467709][ T28] audit: type=1326 audit(1700000011.480:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.7.1476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d78b9e559 code=0x7ffc0000 [ 324.549634][ T28] audit: type=1326 audit(1700000011.510:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.7.1476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d78b9e559 code=0x7ffc0000 [ 324.657629][ T28] audit: type=1326 audit(1700000011.520:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.7.1476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d78b9e559 code=0x7ffc0000 [ 324.735670][ T28] audit: type=1326 audit(1700000011.520:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.7.1476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d78b9e559 code=0x7ffc0000 [ 324.829073][ T28] audit: type=1326 audit(1700000011.520:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.7.1476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d78b9e559 code=0x7ffc0000 [ 324.872094][ T28] audit: type=1326 audit(1700000011.520:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.7.1476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d78b9e559 code=0x7ffc0000 [ 324.968717][ T28] audit: type=1326 audit(1700000011.520:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.7.1476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d78b9e559 code=0x7ffc0000 [ 325.055345][ T28] audit: type=1326 audit(1700000011.520:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10955 comm="syz.7.1476" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7d78b9e559 code=0x7ffc0000 [ 326.159092][T10974] loop7: detected capacity change from 0 to 32768 [ 326.171550][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 326.201647][T10974] JBD2: Ignoring recovery information on journal [ 326.273332][T10974] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 326.514736][T10974] syz.7.1481 (10974) used greatest stack depth: 18808 bytes left [ 326.567610][ T9306] ocfs2: Unmounting device (7,7) on (node local) [ 326.643365][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 326.686889][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 327.730845][T11039] loop7: detected capacity change from 0 to 1024 [ 327.763032][T11039] EXT4-fs: inline encryption not supported [ 327.778509][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 327.814894][T11039] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 327.858360][T11046] netlink: 'syz.8.1490': attribute type 15 has an invalid length. [ 327.872757][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1490'. [ 327.893862][T11039] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.931971][T11046] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 327.941175][T11046] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 327.950189][T11046] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 327.959010][T11046] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 328.019880][T11046] netlink: 'syz.8.1490': attribute type 15 has an invalid length. [ 328.028518][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1490'. [ 328.263449][ T9306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.327578][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 328.359229][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 330.121072][T11118] trusted_key: syz.5.1499 sent an empty control message without MSG_MORE. [ 330.151488][T11113] loop7: detected capacity change from 0 to 164 [ 330.175463][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 330.219041][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 330.257411][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 332.893251][T11194] loop8: detected capacity change from 0 to 256 [ 332.917449][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 332.949015][T11194] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 333.174873][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 333.222853][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 333.274509][T11203] loop7: detected capacity change from 0 to 512 [ 333.291032][T10103] udevd[10103]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 333.330271][T11203] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 333.408668][T11203] EXT4-fs (loop7): Test dummy encryption mode enabled [ 333.492270][T11203] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.772709][ T9306] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 333.858038][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 333.907466][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop7, 10) failed: Not a directory [ 338.867947][T11361] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 339.289997][T11368] loop8: detected capacity change from 0 to 4096 [ 339.310106][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 339.587384][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 339.617327][T10101] udevd[10101]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 345.644368][ T2970] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.781985][ T2970] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.937718][ T2970] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.100609][T11495] loop8: detected capacity change from 0 to 1024 [ 346.143538][T11495] EXT4-fs: Ignoring removed bh option [ 346.152288][ T2970] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.162157][T11468] udevd[11468]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 346.214878][T11495] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 346.243311][T11495] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.286493][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1552'. [ 346.320219][T11502] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1552'. [ 346.509512][ T2970] netdevsim netdevsim7 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.579742][T10187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 346.628548][ T2970] netdevsim netdevsim7 eth26: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.737622][ T2970] netdevsim netdevsim7 eth27: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.768506][T11466] udevd[11466]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 346.831868][T11468] udevd[11468]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 346.877429][ T2970] netdevsim netdevsim7 eth28: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.771633][ T2970] bond1: (slave gretap1): Releasing active interface [ 350.116181][ T2970] hsr_slave_0: left promiscuous mode [ 350.174194][ T2970] hsr_slave_1: left promiscuous mode [ 350.206525][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.235006][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.254457][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.261985][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.280016][ T2970] bridge_slave_1: left allmulticast mode [ 350.299905][ T2970] bridge_slave_1: left promiscuous mode [ 350.310205][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.415260][ T2970] bridge_slave_0: left allmulticast mode [ 350.421111][ T2970] bridge_slave_0: left promiscuous mode [ 350.466930][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.751448][ T2970] veth1_macvtap: left promiscuous mode [ 350.758758][ T2970] veth0_macvtap: left promiscuous mode [ 350.780514][ T2970] veth1_vlan: left promiscuous mode [ 350.803334][ T2970] veth0_vlan: left promiscuous mode [ 351.364270][ T2970] bond2 (unregistering): (slave geneve2): Releasing active interface [ 351.970683][ T2970] bond2 (unregistering): Released all slaves [ 352.575102][ T2970] bond1 (unregistering): Released all slaves [ 354.986262][ T2970] team0 (unregistering): Port device team_slave_1 removed SYZFAIL: open(/dev/rfkill) failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=1369 state=3 status=67 (errno 9: Bad file descriptor) [ 355.160106][ T2970] team0 (unregistering): Port device team_slave_0 removed [ 355.358297][ T2970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.536679][ T2970] bond0 (unregistering): Released all slaves [ 357.884013][ T6923] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.069779][ T6923] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.276294][ T6923] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.377848][ T6923] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.585272][ T6923] netdevsim netdevsim5 eth29: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.701518][ T6923] netdevsim netdevsim5 eth30: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.757602][ T6923] netdevsim netdevsim5 eth31: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.788619][ T6923] netdevsim netdevsim5 eth32: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.371462][ T6923] hsr_slave_0: left promiscuous mode [ 360.378238][ T6923] hsr_slave_1: left promiscuous mode [ 360.387443][ T6923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.395631][ T6923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.405535][ T6923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.413231][ T6923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.421921][ T6923] bridge_slave_1: left allmulticast mode [ 360.428506][ T6923] bridge_slave_1: left promiscuous mode [ 360.435240][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.445789][ T6923] bridge_slave_0: left allmulticast mode [ 360.451505][ T6923] bridge_slave_0: left promiscuous mode [ 360.458132][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.496344][ T6923] veth1_macvtap: left promiscuous mode [ 360.502022][ T6923] veth0_macvtap: left promiscuous mode [ 360.509589][ T6923] veth1_vlan: left promiscuous mode [ 360.515349][ T6923] veth0_vlan: left promiscuous mode [ 361.642587][ T6923] team0 (unregistering): Port device team_slave_1 removed [ 361.729086][ T6923] team0 (unregistering): Port device team_slave_0 removed [ 361.817519][ T6923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.902009][ T6923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.594822][ T6923] bond0 (unregistering): Released all slaves