last executing test programs: 2m2.083075233s ago: executing program 3 (id=700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8894}, 0x800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x2) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 2m2.022118546s ago: executing program 3 (id=701): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e4, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xff03, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000080000", 0x1c) 2m1.343452578s ago: executing program 3 (id=705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x2000a8c4) 2m1.193653395s ago: executing program 3 (id=708): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2m0.164580594s ago: executing program 2 (id=715): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e4, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xff03, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000080000", 0x1c) 2m0.099194577s ago: executing program 3 (id=716): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={0x0}) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000200), 0x1003) 1m59.39356514s ago: executing program 2 (id=718): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000780)='\v', 0x1}, {&(0x7f0000000740)="26b3", 0x2}], 0x2) 1m59.149328252s ago: executing program 2 (id=720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r2, {0xe0ff}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 1m59.149090512s ago: executing program 3 (id=721): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@minixdf}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x40) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x9000) 1m58.664882205s ago: executing program 32 (id=721): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@minixdf}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x40) pwrite64(r0, &(0x7f00000000c0), 0x0, 0x9000) 1m58.652504225s ago: executing program 2 (id=724): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m57.560245637s ago: executing program 2 (id=730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x44}}, 0x800) 1m56.490960088s ago: executing program 2 (id=732): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x102) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) 1m55.80905819s ago: executing program 33 (id=732): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x102) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) 1m30.695164018s ago: executing program 0 (id=905): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 1m30.063037268s ago: executing program 0 (id=911): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000740)='&', 0x1}], 0x2) 1m29.728654504s ago: executing program 0 (id=913): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) request_key(0x0, 0x0, 0x0, 0x0) 1m29.451057347s ago: executing program 0 (id=916): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0xfe, 0x0, 0x2, 0x9}, 0x10) 1m28.653553774s ago: executing program 0 (id=919): getuid() syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000001c40)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x0, &(0x7f0000000300)={[], [{@fsname={'fsname', 0x3d, '-&!^\xe5#!j^-\x1f'}}, {@smackfshat}]}, 0x2, 0x514, &(0x7f0000001680)="$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") bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000002240)={0x5, 0x1, 0xc7, 0x0, 0x2, 0x80000c3, 0x4, 0x1, 0xffffffff}) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) 1m27.594149235s ago: executing program 0 (id=926): getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004000000003"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x20) 1m12.412342143s ago: executing program 34 (id=926): getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004000000003"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x20) 59.322709013s ago: executing program 1 (id=1083): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) request_key(0x0, 0x0, 0x0, 0x0) 58.934180651s ago: executing program 1 (id=1085): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0xff, 0x3, 0xc, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "c1"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) 57.845018953s ago: executing program 1 (id=1091): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55b, &(0x7f0000001080)="$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") socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 57.523291408s ago: executing program 1 (id=1093): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4177d}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048800}, 0x8000002) 57.238438432s ago: executing program 1 (id=1095): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x1ff) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000800)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe7, '\x00', "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"}}, 0xffffffd0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f00000001c0)=ANY=[@ANYBLOB="d575d1e1667de98a207c809ae618958500"], 0x2, 0x2ae, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, 0x0, 0xa041, 0xd) unlinkat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x3}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/sched/preempt\x00', 0x2, 0x0) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) tgkill(0x0, 0x0, 0x1a) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) 55.811301209s ago: executing program 1 (id=1103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 40.510407273s ago: executing program 35 (id=1103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 33.709602045s ago: executing program 5 (id=1160): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@int=0x56b1, 0x4) 33.356710901s ago: executing program 6 (id=1161): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14) 33.356550961s ago: executing program 5 (id=1162): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f00000006c0)='./file0\x00', 0x120488f, &(0x7f0000001f80)=ANY=[], 0x81, 0x665, &(0x7f0000000040)="$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") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") 33.356377421s ago: executing program 4 (id=1163): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55b, &(0x7f0000001080)="$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") socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 33.085693034s ago: executing program 4 (id=1165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000140)="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", 0x1d8, r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000900) syz_mount_image$iso9660(&(0x7f0000000480), &(0x7f0000000080)='./file2\x00', 0x800040, &(0x7f00000004c0)=ANY=[], 0x1, 0x5db, &(0x7f0000000ac0)="$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") r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe) 33.083622804s ago: executing program 6 (id=1173): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x40000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) 33.029206237s ago: executing program 5 (id=1166): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f00000003c0)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e", 0x28}) 31.000211083s ago: executing program 4 (id=1167): r0 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x82) 30.984711114s ago: executing program 5 (id=1176): syz_usb_connect(0x6, 0x36, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 30.890728678s ago: executing program 4 (id=1168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a004e220000000500002d003a2d003a0040ffffe000000102000000200002000a00000000000000ff0100000000000000000000000000019c0000000d0001"], 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20040084) 29.108383232s ago: executing program 6 (id=1169): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x10, {0xa, 0x4e22, 0x5, @remote, 0x101}}, 0x80, 0x0}, 0x0) 29.107872003s ago: executing program 5 (id=1170): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 29.107105463s ago: executing program 4 (id=1171): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setns(0xffffffffffffffff, 0x8000000) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) poll(&(0x7f0000000080)=[{r0, 0xa081}], 0x1, 0x7) 28.958355519s ago: executing program 6 (id=1172): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) syz_emit_ethernet(0x66, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x30, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf51, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1}}}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 28.723011141s ago: executing program 6 (id=1174): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55b, &(0x7f0000001080)="$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") socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100"], 0x90}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 27.611411523s ago: executing program 5 (id=1175): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="2c736d61636b6673726f6f743d2d5c7f402d832c66736d616769633d3078303030303030303030303030303030302c00"], 0xfa, 0x6b6, &(0x7f0000000840)="$eJzs3c9v2+Ydx/EP5R+S3SErtqEIgvx4kqyAg2WKJDcOjAxoOYqyuUmiQMqDDQwrssYugsjplnTA4kvny34AHbDzbr3ssNv+gWE997/YbQOK7TZgPWggKcqSJUp2rTjt+n4ZiaiHXz7Pl6TCb2iJlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCynWiqVLdW95ta2yeZUA78xYX7S24JuJRO3po4rWdEfFQq6mDRd/NbR7Neiv27ocvLssgrRQ0EHr7z26v1vzufS5Sck9HnotB0+e37w+EGns/v0BLFzOnX3L5NyJwjacJte6HsNe8M1Xuib9bW10p3NWmhqXt0Nd8K22zBO4ObafmBWnFumvL6+atzijr/V3KjadTdtvPfdSqm0Zn6QT3a0pGLobHr1utfciGOi2VHMPfPhj5MA124Ys/eos7s6LckoqJw1MzcQVJnWU6VUqZTLlUp57e763Xul0vxIQylilfo0EjHzFy2+ZGZ38AbOKBfV/79bUl0FNbWlbZmxP46qCuSrkTG/J63/r99xJ447WP/TKn9RerM3+5Li+n81eXY1q/5n5GJk4gXGzbEy2k/3sxBnZPRMz3Wgx3qgjjra1dMZ9G1krs2kl1n+5Ma3b8hVU55C+fLUkB23mF6L0brWtKaS3tamagplVJOnulyF2lGottz4FeUokCtbbfkKZLQiR7dkVNa61rUqI1dF7cjXlpraUFW2/tPtdvf0KN7uqxNyVxpUzgjIDwZVJvSUVf9/+kHyOu3V/xL1/6sqeR3kk4dPJsUAXwB/iw5bZeu0i117MdkAAAAAAIAXwYp/+27F791fkdRVzau7pewFFs8zOwAAAAAAMAuWunldlhWd/0u6Iqubn3j+DwAAAAAAvnSs+Bo7S9Jy/KF+6+hKqJP8EmDuHFIEAAAAAABnFF/5f3VR6sY3rbgma/D8/ycvOz0AAAAAADADvx24x/58eo/dbvq2fk5S2Mpbf/1XXsGCddja/ra1b0dz7P25XBwy8gmAdu2SFf4huVFvfL/eRUnxM8e9bPVG690Es3/fwU/3pt3r3wqOJbA4N9jBsQQu9Ja2opHX5nvP9KGuvzkU+/Agp3hOMspyzau7Rcev3y/Lti/k2u52+xdPHv1SCvrrufeos1t8573OwziXw6jpcD/K44M0nb8s9jbdcC7xQz+Xz7oJ6crYNV5SLR3yd83GshWPW0rXf072fu5oH2Wu//CY+rVuJPvsxnISu3zQv+N+tP6FaP3LxXiXHa391xVt+6MsysfXfNyOyMiiEGdxM4m5uXIzeUjzi/rJWYXvzEmV4ug+GMqiMpjF9G1h/XtkW0zKorctVqMsPo46yshi9XRZjOwRAHhZ9uK7/sRX/sU3MR+pu2l5SA9qn6vuTK/ubw1X9/f/GFXG5L8X8733JiaOUlB0RF+x4jq0qPjAOn9p5Iiero19oaCMI3rpDNUtGuvPR9+B1Et7JIv/drvd++V43N8fq6ofRQt8lIy7MDpuWE82+533938W3wA/8u7uu7tPKpXVtdIbpdLdihbi1eg9zInaAwAYMf07dqZGWG/oehJx/eE/X0+mhireN/ofKSjqHb2njh5qIf0KgWvje10e+BjC7eSsVQNnrea1V+8vScdjy7qdeVYX19KB2Eo/dkHpIsOV+ih29QXvBQAAzteNKXV4fP0vDNX/21pJIlYujT3vHq7lvbPj/il9Vmx5evJvzXprAADw1eAGn1rL7d9YQeC13i6vr5ft9qZrAt/5oQm86oZrvGbbDZxNu7nhmlbgt33Hr5tWoLxXdUMTbrVaftA2NT8wLT/0tuNvfje9r34P3YbdbHtO2Kq7dugax2+2badtql7omNbW9+teuOkG8cJhy3W8mufYbc9vmtDfChy3aEzougOBXtVttr2aF002TSvwGnawY37k17carqm6oRN4rbafdJiO5TVrftCIuy2qe+ovOgQA4P/Rs+cHjx90OrtPj08sRafmScuhMmJGJxbHdMg9ggAA+II5KtenWKjQn/q4+0KyAgAAAAAAAAAAAAAAAAAAAAAAg6Zf0nfKiYVxFwtK/ZafX+i16Fc6usRwpB9LM0xsqbeyJ14qd9oh0ksiDh5/MiF4qd+Sbv7BmMOzrulnJw3+x9ekV+IWJS3z44IL2f1Y0/NZmrBzTzgxF22gkwZ/by/ZopkxmS+AfH9fzM/+n0M08eRPGbO63W538uL54W24OGkFhyfmJT1dPMMuON/jEIDz978AAAD//6rDOgE=") sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x80c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r4, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000003c0)={0x0, 0x230, 0x0, [0x2, 0x40, 0x0, 0x2, 0xa36b], [0x1, 0x7, 0x8, 0x7ff, 0x0, 0xc, 0x3b, 0x3, 0x2, 0x7, 0x4, 0x2, 0x4, 0x6, 0xffffffffffffffc0, 0x80000001, 0x0, 0x6, 0x5, 0xd34855a, 0x100000000, 0x4, 0x6, 0x8000, 0x5, 0x80000001, 0x83f, 0xee73, 0x1, 0x4, 0xfffffffffffffffa, 0x7, 0x6, 0x9, 0x7fff, 0x8, 0x4, 0x6, 0xffffffff, 0x4, 0x2, 0x0, 0xfffffffffffffffa, 0x698c, 0x0, 0xd51, 0x8, 0x3, 0x30000000000, 0x0, 0x100000000, 0x2203, 0x2, 0xdc16, 0xa75, 0xb0, 0x6, 0x5, 0x4, 0x10001, 0x6, 0x6, 0xd78e, 0xa6, 0x7ac, 0x4, 0x1, 0x1, 0x5, 0x667, 0x7, 0x5, 0x2, 0x7, 0xf2, 0x7, 0x7, 0x400, 0x1, 0x7bb, 0xe, 0x9, 0x3, 0x5, 0x6, 0x0, 0x3, 0x1, 0x8000000000000001, 0x9, 0x8, 0x7, 0x8, 0x3, 0x81, 0xb, 0x7, 0x6, 0x3, 0x6, 0x2, 0x5, 0x5, 0x8, 0x400, 0x5d8e, 0x800, 0xffffffffffffffff, 0x1000, 0x6, 0x5, 0x1, 0x7fffffffffffffff, 0x101, 0xfff, 0x5, 0x7, 0x400, 0x0, 0x4, 0x3]}) r5 = syz_open_dev$usbmon(&(0x7f0000000b40), 0xffff, 0x100) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000b80)) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) r6 = socket(0x18, 0x6, 0x90) recvmmsg(r6, &(0x7f0000001400)=[{{&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000001300)=[{&(0x7f0000000f00)=""/246, 0xf6}, {&(0x7f0000001240)=""/35, 0x23}, {&(0x7f0000001280)=""/79, 0x4f}], 0x3, &(0x7f0000001340)=""/161, 0xa1}, 0x6}], 0x1, 0x0, &(0x7f0000001440)={0x77359400}) 27.606168184s ago: executing program 6 (id=1184): getdents64(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x74) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) ioctl$LOOP_SET_STATUS(r0, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xfffffffc, 0x12, 0x1e, 0x9, "4b8b3ea40100dfed0b2f3409000000dd5a1f0ececfe0f4fcdf997dd52115fac256cf08000000000000030000000000000000000000ea00", "090000041031eaabb9496e4d7e00000000000108000000ecff0200", [0x1000000000000911, 0xe]}) 27.605406074s ago: executing program 4 (id=1185): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x502d}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) 11.647046529s ago: executing program 7 (id=1128): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 9.50715725s ago: executing program 7 (id=1128): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 7.287219815s ago: executing program 7 (id=1128): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4.968196605s ago: executing program 7 (id=1128): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2.54775568s ago: executing program 7 (id=1128): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 0s ago: executing program 7 (id=1128): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) kernel console output (not intermixed with test programs): 144.754296][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 144.774123][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.790383][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 144.806480][ T993] kworker/u4:6: attempt to access beyond end of device [ 144.806480][ T993] loop2: rw=1, sector=2872, nr_sectors = 2992 limit=512 [ 144.829411][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.843076][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 144.855134][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 144.872735][ T993] kworker/u4:6: attempt to access beyond end of device [ 144.872735][ T993] loop2: rw=1, sector=5864, nr_sectors = 3536 limit=512 [ 144.889500][ T23] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 144.899206][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.945470][ T23] usb 2-1: config 0 descriptor?? [ 144.946623][ T993] kworker/u4:6: attempt to access beyond end of device [ 144.946623][ T993] loop2: rw=1, sector=9400, nr_sectors = 2576 limit=512 [ 145.031529][ T993] kworker/u4:6: attempt to access beyond end of device [ 145.031529][ T993] loop2: rw=1, sector=11976, nr_sectors = 4016 limit=512 [ 145.079115][ T993] kworker/u4:6: attempt to access beyond end of device [ 145.079115][ T993] loop2: rw=1, sector=15992, nr_sectors = 472 limit=512 [ 145.174866][ T23] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 145.232329][ T23] usb 2-1: USB disconnect, device number 7 [ 145.255355][ T23] usblp0: removed [ 145.665585][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 145.801250][ T6803] loop3: detected capacity change from 0 to 512 [ 145.858103][ T27] audit: type=1800 audit(1789383501.221:41): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.408" name="file1" dev="loop3" ino=1048651 res=0 errno=0 [ 146.821399][ T1144] kworker/u4:7: attempt to access beyond end of device [ 146.821399][ T1144] loop3: rw=1, sector=3048, nr_sectors = 11120 limit=512 [ 147.412274][ T6825] loop2: detected capacity change from 0 to 512 [ 147.433310][ T6825] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.511727][ T6825] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.418: bad orphan inode 131083 [ 147.542110][ T6825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.602531][ T27] audit: type=1800 audit(1789383502.971:42): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.418" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 147.604934][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 147.725697][ T6836] loop3: detected capacity change from 0 to 128 [ 147.764500][ T6836] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.786415][ T6839] netlink: 76 bytes leftover after parsing attributes in process `syz.1.422'. [ 147.795667][ T6839] netlink: 72 bytes leftover after parsing attributes in process `syz.1.422'. [ 147.805611][ T6839] netlink: 'syz.1.422': attribute type 3 has an invalid length. [ 147.813881][ T6839] netlink: 11 bytes leftover after parsing attributes in process `syz.1.422'. [ 147.818876][ T6836] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.864702][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 147.915732][ T23] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 147.953616][ T23] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 147.962327][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 147.987629][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.988025][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.002441][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.016408][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 148.083552][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.106626][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 148.153490][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 148.209583][ T23] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 148.239358][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.261549][ T6845] loop2: detected capacity change from 0 to 512 [ 148.269174][ T23] usb 1-1: config 0 descriptor?? [ 148.285830][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'. [ 148.341169][ T27] audit: type=1800 audit(1789383503.711:43): pid=6845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.424" name="file1" dev="loop2" ino=1048653 res=0 errno=0 [ 148.496234][ T23] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 148.547355][ T23] usb 1-1: USB disconnect, device number 3 [ 148.602685][ T23] usblp0: removed [ 149.270075][ T34] bio_check_eod: 1 callbacks suppressed [ 149.270094][ T34] kworker/u4:2: attempt to access beyond end of device [ 149.270094][ T34] loop2: rw=1, sector=7048, nr_sectors = 3400 limit=512 [ 149.361569][ T34] kworker/u4:2: attempt to access beyond end of device [ 149.361569][ T34] loop2: rw=1, sector=10448, nr_sectors = 432 limit=512 [ 149.710046][ T6871] loop0: detected capacity change from 0 to 512 [ 149.969882][ T6876] loop3: detected capacity change from 0 to 164 [ 149.983075][ T6876] rock: directory entry would overflow storage [ 150.016636][ T6876] rock: sig=0x66, size=4, remaining=3 [ 150.073795][ T6876] rock: directory entry would overflow storage [ 150.080040][ T6876] rock: sig=0x66, size=4, remaining=3 [ 150.181458][ T6881] loop0: detected capacity change from 0 to 512 [ 150.226736][ T27] audit: type=1800 audit(1789383505.601:44): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.440" name="file1" dev="loop0" ino=1048656 res=0 errno=0 [ 151.234210][ T993] kworker/u4:6: attempt to access beyond end of device [ 151.234210][ T993] loop0: rw=1, sector=3824, nr_sectors = 4560 limit=512 [ 151.291413][ T993] kworker/u4:6: attempt to access beyond end of device [ 151.291413][ T993] loop0: rw=1, sector=8384, nr_sectors = 3552 limit=512 [ 151.348880][ T993] kworker/u4:6: attempt to access beyond end of device [ 151.348880][ T993] loop0: rw=1, sector=11936, nr_sectors = 4152 limit=512 [ 151.450007][ T6906] loop2: detected capacity change from 0 to 512 [ 151.478446][ T6906] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 151.515384][ T6906] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 151.538428][ T6906] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.451: Corrupt directory, running e2fsck is recommended [ 151.612936][ T6906] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 151.634088][ T6906] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.451: corrupted in-inode xattr: e_name out of bounds [ 151.654702][ T6906] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.451: couldn't read orphan inode 15 (err -117) [ 151.699486][ T6906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.752551][ T6906] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 151.788577][ T6906] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 151.801761][ T6912] FAULT_INJECTION: forcing a failure. [ 151.801761][ T6912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.816778][ T6906] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.451: Corrupt directory, running e2fsck is recommended [ 151.830138][ T6912] CPU: 0 PID: 6912 Comm: syz.0.448 Not tainted syzkaller #0 [ 151.837505][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 151.847622][ T6912] Call Trace: [ 151.850955][ T6912] [ 151.853937][ T6912] dump_stack_lvl+0x18c/0x250 [ 151.858692][ T6912] ? show_regs_print_info+0x20/0x20 [ 151.863955][ T6912] ? load_image+0x420/0x420 [ 151.868528][ T6912] ? __might_fault+0xaa/0x120 [ 151.873267][ T6912] ? __lock_acquire+0x7d80/0x7d80 [ 151.878380][ T6912] should_fail_ex+0x394/0x4c0 [ 151.883128][ T6912] strncpy_from_user+0x36/0x2f0 [ 151.888048][ T6912] getname_flags+0xf6/0x500 [ 151.892627][ T6912] do_sys_openat2+0xda/0x1d0 [ 151.897279][ T6912] ? do_sys_open+0xe0/0xe0 [ 151.901766][ T6912] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 151.907788][ T6912] ? lock_chain_count+0x20/0x20 [ 151.912693][ T6912] __x64_sys_openat+0x139/0x160 [ 151.917585][ T6912] do_syscall_64+0x55/0xb0 [ 151.922037][ T6912] ? clear_bhb_loop+0x40/0x90 [ 151.926750][ T6912] ? clear_bhb_loop+0x40/0x90 [ 151.931466][ T6912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.937478][ T6912] RIP: 0033:0x7f7af715e98e [ 151.941915][ T6912] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.961555][ T6912] RSP: 002b:00007f7af8000ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 151.970004][ T6912] RAX: ffffffffffffffda RBX: 00007f7af80016c0 RCX: 00007f7af715e98e [ 151.978022][ T6912] RDX: 0000000000000002 RSI: 00007f7af8000f90 RDI: ffffffffffffff9c [ 151.986025][ T6912] RBP: 00007f7af723503b R08: 0000000000000000 R09: 0000000000000000 [ 151.994024][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.002027][ T6912] R13: 00007f7af7426038 R14: 00007f7af7425fa0 R15: 00007ffe388d9d78 [ 152.010042][ T6912] [ 152.037653][ T6913] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 152.103726][ T6913] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 152.129366][ T6913] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.451: Corrupt directory, running e2fsck is recommended [ 152.167544][ T6915] Illegal XDP return value 4294967274 on prog (id 18) dev N/A, expect packet loss! [ 152.183094][ T6906] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 152.204174][ T6906] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 152.245159][ T6906] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.451: Corrupt directory, running e2fsck is recommended [ 152.320903][ T6916] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 152.394725][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.431254][ T6923] loop3: detected capacity change from 0 to 512 [ 152.481388][ T6923] EXT4-fs: Ignoring removed i_version option [ 152.512707][ T6923] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.596545][ T6923] EXT4-fs (loop3): 1 truncate cleaned up [ 152.664063][ T6923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.821690][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.860884][ T6931] TCP: TCP_TX_DELAY enabled [ 153.059031][ T6935] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 154.464079][ T5815] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 154.633581][ T5815] usb 3-1: device descriptor read/64, error -71 [ 154.789292][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'. [ 154.876943][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.486'. [ 154.896328][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.486'. [ 154.934590][ T5815] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.105818][ T5815] usb 3-1: device descriptor read/64, error -71 [ 155.234700][ T5815] usb usb3-port1: attempt power cycle [ 155.663628][ T5815] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 155.714360][ T5815] usb 3-1: device descriptor read/8, error -71 [ 155.805841][ T7011] loop3: detected capacity change from 0 to 512 [ 155.893241][ T7011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.958482][ T7011] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.023599][ T5815] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 156.064309][ T5815] usb 3-1: device descriptor read/8, error -71 [ 156.187068][ T5815] usb usb3-port1: unable to enumerate USB device [ 156.317911][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.572471][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 156.592618][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.499'. [ 156.619669][ T7029] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.628959][ T7029] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.637879][ T7029] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.646846][ T7029] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.850341][ T7037] FAULT_INJECTION: forcing a failure. [ 156.850341][ T7037] name failslab, interval 1, probability 0, space 0, times 0 [ 156.893447][ T7037] CPU: 0 PID: 7037 Comm: syz.1.502 Not tainted syzkaller #0 [ 156.900824][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 156.910943][ T7037] Call Trace: [ 156.914273][ T7037] [ 156.917250][ T7037] dump_stack_lvl+0x18c/0x250 [ 156.921996][ T7037] ? show_regs_print_info+0x20/0x20 [ 156.927257][ T7037] ? load_image+0x420/0x420 [ 156.931810][ T7037] ? __lock_acquire+0x7d80/0x7d80 [ 156.936905][ T7037] ? number+0xc9d/0xf00 [ 156.941115][ T7037] should_fail_ex+0x394/0x4c0 [ 156.945860][ T7037] should_failslab+0x9/0x20 [ 156.950435][ T7037] slab_pre_alloc_hook+0x59/0x300 [ 156.955532][ T7037] ? kasprintf+0xe3/0x140 [ 156.959914][ T7037] ? kasprintf+0xe3/0x140 [ 156.964292][ T7037] __kmem_cache_alloc_node+0x53/0x250 [ 156.969731][ T7037] ? kasprintf+0xe3/0x140 [ 156.974108][ T7037] __kmalloc_node_track_caller+0xa4/0x230 [ 156.979934][ T7037] kvasprintf+0xec/0x1a0 [ 156.984240][ T7037] ? bust_spinlocks+0xd0/0xd0 [ 156.988991][ T7037] kasprintf+0xe3/0x140 [ 156.993203][ T7037] ? kvasprintf_const+0x240/0x240 [ 156.998296][ T7037] alloc_bprm+0x125/0x9a0 [ 157.002692][ T7037] ? strncpy_from_user+0x1a1/0x2f0 [ 157.007854][ T7037] do_execveat_common+0x18a/0x6b0 [ 157.012957][ T7037] __x64_sys_execveat+0xc4/0xe0 [ 157.017870][ T7037] do_syscall_64+0x55/0xb0 [ 157.022342][ T7037] ? clear_bhb_loop+0x40/0x90 [ 157.027076][ T7037] ? clear_bhb_loop+0x40/0x90 [ 157.031850][ T7037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.037816][ T7037] RIP: 0033:0x7fc92ad9e159 [ 157.042288][ T7037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.061962][ T7037] RSP: 002b:00007fc928ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 157.070444][ T7037] RAX: ffffffffffffffda RBX: 00007fc92b025fa0 RCX: 00007fc92ad9e159 [ 157.078477][ T7037] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 157.086507][ T7037] RBP: 00007fc92ae3503b R08: 0000000000001000 R09: 0000000000000000 [ 157.094534][ T7037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.102561][ T7037] R13: 00007fc92b026038 R14: 00007fc92b025fa0 R15: 00007ffc1ab32bb8 [ 157.110626][ T7037] [ 157.382917][ T7046] loop3: detected capacity change from 0 to 512 [ 157.410546][ T7046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.429533][ T7046] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.542654][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.047280][ T7059] FAULT_INJECTION: forcing a failure. [ 158.047280][ T7059] name fail_futex, interval 1, probability 0, space 0, times 1 [ 158.065080][ T7059] CPU: 0 PID: 7059 Comm: syz.3.512 Not tainted syzkaller #0 [ 158.072450][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 158.082560][ T7059] Call Trace: [ 158.085886][ T7059] [ 158.088891][ T7059] dump_stack_lvl+0x18c/0x250 [ 158.093632][ T7059] ? show_regs_print_info+0x20/0x20 [ 158.098889][ T7059] ? load_image+0x420/0x420 [ 158.103458][ T7059] should_fail_ex+0x394/0x4c0 [ 158.108207][ T7059] get_futex_key+0x136/0x1030 [ 158.112976][ T7059] ? futex_setup_timer+0xc0/0xc0 [ 158.117978][ T7059] ? __local_bh_enable_ip+0x13a/0x1c0 [ 158.123409][ T7059] futex_wake+0x127/0x4f0 [ 158.127802][ T7059] ? futex_wake_mark+0x150/0x150 [ 158.132794][ T7059] ? sk_setsockopt+0x25fa/0x2b20 [ 158.137814][ T7059] ? sockopt_capable+0x60/0x60 [ 158.142642][ T7059] do_futex+0x35d/0x3e0 [ 158.146853][ T7059] ? __fget_files+0x28/0x460 [ 158.151504][ T7059] ? __ia32_sys_get_robust_list+0x110/0x110 [ 158.157454][ T7059] ? aa_af_perm+0x330/0x330 [ 158.162029][ T7059] __se_sys_futex+0x3a9/0x440 [ 158.166773][ T7059] ? __x64_sys_futex+0xf0/0xf0 [ 158.171594][ T7059] ? __x64_sys_futex+0x21/0xf0 [ 158.176418][ T7059] do_syscall_64+0x55/0xb0 [ 158.180931][ T7059] ? clear_bhb_loop+0x40/0x90 [ 158.185664][ T7059] ? clear_bhb_loop+0x40/0x90 [ 158.190395][ T7059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.196340][ T7059] RIP: 0033:0x7f327599e159 [ 158.200799][ T7059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.220472][ T7059] RSP: 002b:00007f32769590e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 158.228953][ T7059] RAX: ffffffffffffffda RBX: 00007f3275c25fa8 RCX: 00007f327599e159 [ 158.236986][ T7059] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3275c25fac [ 158.245134][ T7059] RBP: 00007f3275c25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 158.253163][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.261193][ T7059] R13: 00007f3275c26038 R14: 00007ffdeec9d040 R15: 00007ffdeec9d128 [ 158.269296][ T7059] [ 158.776029][ T7075] loop3: detected capacity change from 0 to 512 [ 158.838241][ T7075] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 158.878854][ T7075] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 158.890137][ T7075] System zones: 1-12 [ 158.894811][ T7075] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.520: bad orphan inode 131072 [ 158.910061][ T7075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.945735][ T7075] EXT4-fs error (device loop3): ext4_nfs_get_inode:1548: inode #15: comm syz.3.520: iget: bad extra_isize 1312 (inode size 256) [ 159.032441][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.284211][ T7087] Config c/1 of g1 needs at least one function. [ 159.291286][ T7087] udc dummy_udc.0: failed to start g1: -22 [ 159.308367][ T7087] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 159.334295][ T7087] UDC core: g1: couldn't find an available UDC or it's busy [ 160.851061][ T7104] loop3: detected capacity change from 0 to 7 [ 160.975170][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.984557][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 161.002422][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.011747][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 161.021138][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.030441][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 161.043422][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.052680][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 161.079489][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.088843][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 161.113111][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.122458][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 161.147536][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.156829][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 161.164810][ T7104] ldm_validate_partition_table(): Disk read failed. [ 161.183507][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.192762][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 161.232696][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.241992][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 161.254778][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.264077][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 161.302590][ T7104] Dev loop3: unable to read RDB block 0 [ 161.332070][ T7104] loop3: unable to read partition table [ 161.360922][ T7104] loop3: partition table beyond EOD, truncated [ 161.427583][ T7104] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 163.700810][ T7142] loop2: detected capacity change from 0 to 512 [ 163.763796][ T7142] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.859245][ T7142] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 163.899007][ T7142] System zones: 1-12 [ 163.939785][ T7142] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.543: bad orphan inode 131072 [ 164.025626][ T27] audit: type=1800 audit(1789383519.381:45): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.546" name="max_speed" dev="configfs" ino=11208 res=0 errno=0 [ 164.048954][ T7142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.196827][ T7142] EXT4-fs error (device loop2): ext4_nfs_get_inode:1548: inode #15: comm syz.2.543: iget: bad extra_isize 1312 (inode size 256) [ 164.325491][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.341730][ T7152] loop1: detected capacity change from 0 to 164 [ 164.482200][ T7152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.547'. [ 164.515264][ T7152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.547'. [ 164.685333][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.547'. [ 164.750485][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.547'. [ 164.980862][ T7168] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.553'. [ 165.454619][ T7174] raw_sendmsg: syz.2.559 forgot to set AF_INET. Fix it! [ 165.620207][ T7179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.557'. [ 166.455577][ T7196] loop0: detected capacity change from 0 to 512 [ 166.730880][ T7200] loop2: detected capacity change from 0 to 164 [ 166.754626][ T7199] loop0: detected capacity change from 0 to 512 [ 166.772500][ T7199] EXT4-fs: Ignoring removed i_version option [ 166.821157][ T7199] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.848707][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.566'. [ 166.871228][ T7199] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 166.886280][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.566'. [ 166.947830][ T7199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.978656][ T7199] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.997154][ T7203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.566'. [ 167.007154][ T7203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.566'. [ 167.247403][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.848603][ T7223] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.201590][ T7237] loop2: detected capacity change from 0 to 512 [ 168.226618][ T7237] EXT4-fs: Ignoring removed bh option [ 168.310199][ T7237] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.582: corrupted in-inode xattr: e_value size too large [ 168.378388][ T7237] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.582: couldn't read orphan inode 15 (err -117) [ 168.504954][ T7237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.597920][ T7237] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.582: Unrecognised inode hash code 4 [ 168.633607][ T7237] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.582: Corrupt directory, running e2fsck is recommended [ 168.678954][ T7237] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.582: Unrecognised inode hash code 4 [ 168.714507][ T7237] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.582: Corrupt directory, running e2fsck is recommended [ 168.860244][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.034311][ T7251] syzkaller0: entered promiscuous mode [ 170.039892][ T7251] syzkaller0: entered allmulticast mode [ 170.060679][ T7275] loop2: detected capacity change from 0 to 512 [ 170.081988][ T7275] EXT4-fs: Ignoring removed i_version option [ 170.154861][ T7275] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.202528][ T7275] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.310986][ T7275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.370791][ T7275] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.399556][ T7283] loop3: detected capacity change from 0 to 512 [ 170.408208][ T7283] EXT4-fs: Ignoring removed nobh option [ 170.482337][ T7283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.546963][ T7283] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.578194][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.790070][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.077552][ T7300] __nla_validate_parse: 2 callbacks suppressed [ 171.077569][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 171.224957][ T27] audit: type=1326 audit(1789383526.601:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7303 comm="syz.2.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f222f19e159 code=0x0 [ 171.333970][ T7309] FAULT_INJECTION: forcing a failure. [ 171.333970][ T7309] name failslab, interval 1, probability 0, space 0, times 0 [ 171.386316][ T7309] CPU: 1 PID: 7309 Comm: syz.1.609 Not tainted syzkaller #0 [ 171.393745][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 171.401831][ T7312] loop3: detected capacity change from 0 to 512 [ 171.403825][ T7309] Call Trace: [ 171.403858][ T7309] [ 171.403868][ T7309] dump_stack_lvl+0x18c/0x250 [ 171.421140][ T7309] ? show_regs_print_info+0x20/0x20 [ 171.426417][ T7309] ? load_image+0x420/0x420 [ 171.431000][ T7309] ? __might_sleep+0xe0/0xe0 [ 171.435663][ T7309] ? __lock_acquire+0x7d80/0x7d80 [ 171.439527][ T7312] EXT4-fs: Ignoring removed i_version option [ 171.440734][ T7309] should_fail_ex+0x394/0x4c0 [ 171.451486][ T7309] should_failslab+0x9/0x20 [ 171.456059][ T7309] slab_pre_alloc_hook+0x59/0x300 [ 171.461154][ T7309] ? __lock_acquire+0x1336/0x7d80 [ 171.466261][ T7309] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 171.472055][ T7309] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 171.477841][ T7309] __kmem_cache_alloc_node+0x53/0x250 [ 171.483291][ T7309] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 171.489085][ T7309] __kmalloc+0xa7/0x240 [ 171.493313][ T7309] tomoyo_realpath_from_path+0xe6/0x5c0 [ 171.498941][ T7309] tomoyo_check_open_permission+0x224/0x460 [ 171.504906][ T7309] ? tomoyo_check_open_permission+0x1cf/0x460 [ 171.511036][ T7309] ? tomoyo_check_path_number_acl+0x280/0x280 [ 171.517146][ T7309] ? step_into+0x41a/0xee0 [ 171.521604][ T7309] ? lockdep_hardirqs_on+0x98/0x150 [ 171.526862][ T7309] ? __asan_memset+0x22/0x40 [ 171.531518][ T7309] ? __rwlock_init+0x150/0x150 [ 171.536326][ T7309] ? tomoyo_file_open+0xed/0x180 [ 171.541297][ T7309] security_file_open+0x62/0xa0 [ 171.546185][ T7309] do_dentry_open+0x32b/0x14b0 [ 171.550992][ T7309] ? __asan_memcpy+0x40/0x70 [ 171.555624][ T7309] path_openat+0x284f/0x3270 [ 171.560266][ T7309] ? do_sys_openat2+0xda/0x1d0 [ 171.565098][ T7309] ? __x64_sys_openat+0x139/0x160 [ 171.570162][ T7309] ? verify_lock_unused+0x140/0x140 [ 171.575400][ T7309] ? do_filp_open+0x430/0x430 [ 171.580133][ T7309] do_filp_open+0x1f2/0x430 [ 171.584672][ T7309] ? vfs_tmpfile+0x620/0x620 [ 171.589311][ T7309] ? _raw_spin_unlock+0x28/0x40 [ 171.594201][ T7309] ? alloc_fd+0x590/0x640 [ 171.598582][ T7309] do_sys_openat2+0x134/0x1d0 [ 171.603298][ T7309] ? do_sys_open+0xe0/0xe0 [ 171.607840][ T7309] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 171.613862][ T7309] ? lock_chain_count+0x20/0x20 [ 171.618769][ T7309] __x64_sys_openat+0x139/0x160 [ 171.623664][ T7309] do_syscall_64+0x55/0xb0 [ 171.628139][ T7309] ? clear_bhb_loop+0x40/0x90 [ 171.632875][ T7309] ? clear_bhb_loop+0x40/0x90 [ 171.637607][ T7309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.643543][ T7309] RIP: 0033:0x7fc92ad5e98e [ 171.648006][ T7309] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.667652][ T7309] RSP: 002b:00007fc928ff5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.676149][ T7309] RAX: ffffffffffffffda RBX: 00007fc928ff66c0 RCX: 00007fc92ad5e98e [ 171.684155][ T7309] RDX: 0000000000000002 RSI: 00007fc928ff5c00 RDI: ffffffffffffff9c [ 171.692179][ T7309] RBP: 00007fc92ae3503b R08: 0000000000000000 R09: 0000000000000000 [ 171.700288][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.708297][ T7309] R13: 00007fc92b026038 R14: 00007fc92b025fa0 R15: 00007ffc1ab32bb8 [ 171.716356][ T7309] [ 171.725783][ T7309] ERROR: Out of memory at tomoyo_realpath_from_path. [ 171.754773][ T7312] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.804489][ T7312] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.851181][ T7312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.878769][ T7312] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.080705][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.649693][ T7314] loop0: detected capacity change from 0 to 128 [ 172.710509][ T7314] FAT-fs (loop0): Unrecognized mount option "É÷¹†" or missing value [ 173.127309][ T7339] loop3: detected capacity change from 0 to 512 [ 173.163992][ T7339] EXT4-fs: Ignoring removed i_version option [ 173.191226][ T7339] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.234135][ T7339] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.286406][ T7339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.323586][ T7339] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.491222][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.668073][ T7349] loop0: detected capacity change from 0 to 164 [ 173.715571][ T7349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.624'. [ 173.747297][ T7349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.624'. [ 173.976491][ T7353] loop1: detected capacity change from 0 to 128 [ 174.075755][ T7353] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.174893][ T7353] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.201978][ T7360] loop3: detected capacity change from 0 to 512 [ 174.225727][ T7360] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.277895][ T7360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 174.292748][ T7360] System zones: 1-12 [ 174.303065][ T7360] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.628: bad orphan inode 131072 [ 174.325806][ T7360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.440977][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.474915][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.633230][ T7375] loop1: detected capacity change from 0 to 164 [ 175.764907][ T7375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.634'. [ 175.867970][ T7375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.634'. [ 176.059532][ T7369] loop3: detected capacity change from 0 to 128 [ 176.098463][ T7369] FAT-fs (loop3): Unrecognized mount option "É÷¹†" or missing value [ 176.347167][ T7380] loop0: detected capacity change from 0 to 164 [ 177.097953][ T5776] blk_print_req_error: 10 callbacks suppressed [ 177.097972][ T5776] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.505462][ T7385] netlink: 56 bytes leftover after parsing attributes in process `syz.0.638'. [ 178.247072][ T7401] netlink: 64 bytes leftover after parsing attributes in process `syz.3.645'. [ 178.271332][ T7401] syzkaller1: entered promiscuous mode [ 178.282023][ T7401] syzkaller1: entered allmulticast mode [ 179.635640][ T7425] loop0: detected capacity change from 0 to 512 [ 179.653684][ T7425] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 179.684586][ T7425] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 179.692955][ T7425] System zones: 1-12 [ 179.705614][ T7425] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.652: bad orphan inode 131072 [ 179.745996][ T7425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.898550][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.319193][ T3066] kernel read not supported for file /usbmon9 (pid: 3066 comm: kworker/1:2) [ 181.509771][ T7440] loop3: detected capacity change from 0 to 164 [ 181.972432][ T7444] loop2: detected capacity change from 0 to 164 [ 183.652965][ T7461] loop2: detected capacity change from 0 to 512 [ 183.697079][ T7461] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 183.754570][ T7461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 183.762793][ T7461] System zones: 1-12 [ 183.803748][ T7461] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.662: bad orphan inode 131072 [ 183.869672][ T7461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.007572][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.232556][ T7470] loop3: detected capacity change from 0 to 512 [ 184.271652][ T7470] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 184.339896][ T7470] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.666: corrupted xattr entries [ 184.371281][ T7470] EXT4-fs (loop3): 1 truncate cleaned up [ 184.395823][ T7470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.509514][ T7470] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.666: corrupted in-inode xattr: e_name out of bounds [ 184.675528][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.551266][ T7476] loop3: detected capacity change from 0 to 512 [ 185.596291][ T7476] EXT4-fs: Ignoring removed i_version option [ 185.656840][ T7476] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.687868][ T7476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 185.765283][ T7476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.800271][ T7476] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.945443][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.529986][ T7488] loop3: detected capacity change from 0 to 164 [ 187.794278][ T7494] loop3: detected capacity change from 0 to 1764 [ 188.160322][ T7498] loop3: detected capacity change from 0 to 512 [ 188.173610][ T7498] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 188.199653][ T7498] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 188.212334][ T7498] System zones: 1-12 [ 188.220856][ T7498] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.673: bad orphan inode 131072 [ 188.243085][ T7498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.361031][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.889157][ T7509] loop0: detected capacity change from 0 to 512 [ 188.906451][ T7509] EXT4-fs: Ignoring removed i_version option [ 188.922025][ T7509] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.968422][ T7509] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.031179][ T7509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.065660][ T7509] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.179038][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.658261][ T27] audit: type=1326 audit(1789383545.031:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.2.681" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222f19e159 code=0x7ffc0000 [ 189.762105][ T27] audit: type=1326 audit(1789383545.031:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.2.681" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222f19e159 code=0x7ffc0000 [ 189.799559][ T7386] Set syz1 is full, maxelem 65536 reached [ 189.882884][ T27] audit: type=1326 audit(1789383545.161:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.2.681" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f222f19e159 code=0x7ffc0000 [ 189.989178][ T27] audit: type=1326 audit(1789383545.161:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.2.681" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222f19e159 code=0x7ffc0000 [ 190.047232][ T27] audit: type=1326 audit(1789383545.161:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7522 comm="syz.2.681" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f222f19e159 code=0x7ffc0000 [ 190.824666][ T7546] loop2: detected capacity change from 0 to 164 [ 190.874217][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.687'. [ 190.905661][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.687'. [ 191.207236][ T7549] loop2: detected capacity change from 0 to 512 [ 191.231681][ T7549] EXT4-fs: Ignoring removed i_version option [ 191.254564][ T7549] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 191.287180][ T7549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.391450][ T7549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.434116][ T7549] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.633536][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.961496][ T7583] loop3: detected capacity change from 0 to 512 [ 192.969084][ T7583] EXT4-fs: Ignoring removed i_version option [ 192.990074][ T7583] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.008785][ T7583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.038825][ T7583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.051693][ T7583] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.101955][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.309356][ T7531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.147186][ T7614] loop3: detected capacity change from 0 to 512 [ 194.191013][ T7614] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.708: inode has both inline data and extents flags [ 194.249640][ T7619] loop0: detected capacity change from 0 to 512 [ 194.257637][ T7619] EXT4-fs: Ignoring removed i_version option [ 194.271893][ T7619] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.283813][ T7614] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.708: couldn't read orphan inode 15 (err -117) [ 194.302211][ T7619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.325917][ T7614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.379215][ T7619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.457887][ T7619] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.648843][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.657062][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.703320][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.907483][ T7629] loop0: detected capacity change from 0 to 164 [ 194.984757][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.712'. [ 195.023501][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.712'. [ 195.630864][ T7624] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.804903][ T7624] syz.3.708 (7624) used greatest stack depth: 20776 bytes left [ 196.182246][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.315287][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.416738][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.529479][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.652386][ T7652] 9pnet_fd: Insufficient options for proto=fd [ 196.711292][ T7654] loop2: detected capacity change from 0 to 512 [ 196.782670][ T7654] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.724: inode has both inline data and extents flags [ 196.931335][ T7654] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.724: couldn't read orphan inode 15 (err -117) [ 197.012947][ T7654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.612237][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.655580][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.676388][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.696220][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.707290][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 197.715723][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.606706][ T7664] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.147096][ T7672] chnl_net:caif_netlink_parms(): no params data found [ 199.310223][ T60] hsr_slave_0: left promiscuous mode [ 199.324688][ T60] hsr_slave_1: left promiscuous mode [ 199.343221][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.362414][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.405232][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.412750][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.454307][ T60] bridge_slave_1: left allmulticast mode [ 199.460042][ T60] bridge_slave_1: left promiscuous mode [ 199.497148][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.533674][ T60] bridge_slave_0: left allmulticast mode [ 199.539406][ T60] bridge_slave_0: left promiscuous mode [ 199.555547][ T7703] loop0: detected capacity change from 0 to 164 [ 199.575030][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.740282][ T60] veth1_macvtap: left promiscuous mode [ 199.752804][ T5786] Bluetooth: hci3: command tx timeout [ 199.759481][ T60] veth0_macvtap: left promiscuous mode [ 199.773620][ T60] veth1_vlan: left promiscuous mode [ 199.779356][ T60] veth0_vlan: left promiscuous mode [ 200.375844][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.387107][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.399171][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.422012][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.443960][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 200.453177][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.888019][ T60] team0 (unregistering): Port device team_slave_1 removed [ 200.937681][ T60] team0 (unregistering): Port device team_slave_0 removed [ 200.980898][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.028007][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.351768][ T60] bond0 (unregistering): Released all slaves [ 201.473750][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.734'. [ 201.482683][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.734'. [ 201.740734][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.775437][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.782873][ T7672] bridge_slave_0: entered allmulticast mode [ 201.828380][ T7672] bridge_slave_0: entered promiscuous mode [ 201.835520][ T51] Bluetooth: hci3: command tx timeout [ 201.899886][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.908428][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.916300][ T7672] bridge_slave_1: entered allmulticast mode [ 201.926052][ T7672] bridge_slave_1: entered promiscuous mode [ 202.038870][ T7672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.125885][ T7672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.168531][ T7743] loop0: detected capacity change from 0 to 512 [ 202.206945][ T7743] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.741: inode has both inline data and extents flags [ 202.230232][ T7743] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.741: couldn't read orphan inode 15 (err -117) [ 202.247622][ T7743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.377994][ T7672] team0: Port device team_slave_0 added [ 202.399363][ T7672] team0: Port device team_slave_1 added [ 202.486548][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.504714][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.505275][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.567609][ T51] Bluetooth: hci2: command tx timeout [ 202.581256][ T7672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.649731][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.663038][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.689829][ T7672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.209108][ T7764] loop1: detected capacity change from 0 to 164 [ 203.229962][ T7672] hsr_slave_0: entered promiscuous mode [ 203.269158][ T7672] hsr_slave_1: entered promiscuous mode [ 203.304443][ T7672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.312100][ T7672] Cannot create hsr debugfs directory [ 203.353123][ T7764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.744'. [ 203.397226][ T7764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.744'. [ 203.427662][ T7764] erspan0: entered promiscuous mode [ 203.445115][ T7764] gretap0: entered promiscuous mode [ 203.466518][ T7766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.744'. [ 203.486882][ T7766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.744'. [ 203.624965][ T7723] chnl_net:caif_netlink_parms(): no params data found [ 203.903971][ T51] Bluetooth: hci3: command tx timeout [ 204.286993][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.337030][ T7723] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.352755][ T7723] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.365056][ T7723] bridge_slave_0: entered allmulticast mode [ 204.372628][ T7723] bridge_slave_0: entered promiscuous mode [ 204.451198][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.487578][ T7723] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.495225][ T7723] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.503209][ T7723] bridge_slave_1: entered allmulticast mode [ 204.511450][ T7723] bridge_slave_1: entered promiscuous mode [ 204.637707][ T51] Bluetooth: hci2: command tx timeout [ 204.655113][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.732312][ T7723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.774327][ T7723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.842207][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.884323][ T7806] loop1: detected capacity change from 0 to 8192 [ 205.008540][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.043073][ T7723] team0: Port device team_slave_0 added [ 205.049543][ T7806] FAT-fs (loop1): Filesystem has been set read-only [ 205.076163][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.085744][ T7723] team0: Port device team_slave_1 added [ 205.099053][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.108758][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.124796][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.132852][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.147268][ T7806] syz.1.752: attempt to access beyond end of device [ 205.147268][ T7806] loop1: rw=0, sector=15583, nr_sectors = 1 limit=8192 [ 205.178308][ T7806] buffer_io_error: 10 callbacks suppressed [ 205.178326][ T7806] Buffer I/O error on dev loop1, logical block 15583, async page read [ 205.205697][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.214533][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.228288][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.236784][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.250906][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.259211][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.273017][ T7672] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.280430][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.291300][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.313041][ T7723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.326918][ T7723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.353031][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.353101][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.353348][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.378447][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.387126][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.395463][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.398671][ T7723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.405283][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.430684][ T7723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.439213][ T7723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.456773][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.466079][ T7723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.534637][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.542712][ T7806] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 205.551784][ T7806] syz.1.752: attempt to access beyond end of device [ 205.551784][ T7806] loop1: rw=0, sector=15583, nr_sectors = 1 limit=8192 [ 205.569639][ T7672] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.589412][ T7806] Buffer I/O error on dev loop1, logical block 15583, async page read [ 205.601812][ T27] audit: type=1800 audit(1789383560.981:52): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.752" name="file2" dev="loop1" ino=1048657 res=0 errno=0 [ 205.657576][ T7806] syz.1.752 (7806) used greatest stack depth: 19752 bytes left [ 205.676634][ T7672] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.692563][ T7672] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.915461][ T7723] hsr_slave_0: entered promiscuous mode [ 205.923835][ T7723] hsr_slave_1: entered promiscuous mode [ 205.935375][ T7723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.951722][ T7723] Cannot create hsr debugfs directory [ 205.983949][ T51] Bluetooth: hci3: command tx timeout [ 206.243497][ T7826] netlink: 'syz.1.757': attribute type 1 has an invalid length. [ 206.714276][ T51] Bluetooth: hci2: command tx timeout [ 207.123575][ T7723] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.168770][ T7672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.184252][ T7723] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.204707][ T7723] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 207.216493][ T7849] Set syz1 is full, maxelem 65536 reached [ 207.262552][ T7723] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 207.398347][ T7672] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.643254][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.650507][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.759074][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.766352][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.801973][ T60] hsr_slave_0: left promiscuous mode [ 207.822868][ T60] hsr_slave_1: left promiscuous mode [ 207.844041][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.865935][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.878156][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.890138][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.902657][ T60] bridge_slave_1: left allmulticast mode [ 207.912677][ T60] bridge_slave_1: left promiscuous mode [ 207.923194][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.942893][ T60] bridge_slave_0: left allmulticast mode [ 207.948874][ T60] bridge_slave_0: left promiscuous mode [ 207.960367][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.018781][ T60] veth1_macvtap: left promiscuous mode [ 208.026983][ T60] veth0_macvtap: left promiscuous mode [ 208.032792][ T60] veth1_vlan: left promiscuous mode [ 208.044758][ T60] veth0_vlan: left promiscuous mode [ 208.772841][ T60] team0 (unregistering): Port device team_slave_1 removed [ 208.798973][ T51] Bluetooth: hci2: command tx timeout [ 208.825972][ T60] team0 (unregistering): Port device team_slave_0 removed [ 208.871966][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.923296][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.276857][ T60] bond0 (unregistering): Released all slaves [ 209.648323][ T7723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.776157][ T7723] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.826630][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.833923][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.869441][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.876710][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.041236][ T7890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.772'. [ 210.066589][ T7890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.772'. [ 210.162759][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.772'. [ 210.189041][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.772'. [ 210.481934][ T7672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.062538][ T7723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.867198][ T7672] veth0_vlan: entered promiscuous mode [ 212.025870][ T7672] veth1_vlan: entered promiscuous mode [ 212.066977][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 212.073099][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 212.342278][ T7723] veth0_vlan: entered promiscuous mode [ 212.354217][ T7672] veth0_macvtap: entered promiscuous mode [ 212.389923][ T7672] veth1_macvtap: entered promiscuous mode [ 212.408616][ T7723] veth1_vlan: entered promiscuous mode [ 212.457573][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.476080][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.487708][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.498740][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.511052][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.551152][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.564427][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.579530][ T7672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.599480][ T7672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.611704][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.676772][ T7672] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.700544][ T7672] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.711606][ T7672] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.725795][ T7672] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.757185][ T7723] veth0_macvtap: entered promiscuous mode [ 212.806903][ T7723] veth1_macvtap: entered promiscuous mode [ 212.981742][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.023635][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.039036][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.059905][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.078802][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.095662][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.129031][ T7723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.150185][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.170995][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.181959][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.198318][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.209672][ T7723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.220690][ T7723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.236263][ T7723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.370601][ T7723] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.396478][ T7723] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.408088][ T7723] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.421363][ T7723] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.442388][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.453739][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.579331][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.598106][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.805795][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.841995][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.880544][ T7984] No such timeout policy "syz1" [ 213.979095][ T746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.017476][ T746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.032195][ T8018] loop4: detected capacity change from 0 to 164 [ 215.139766][ T5776] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.190860][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.800'. [ 215.219341][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.800'. [ 215.302352][ T8018] erspan0: entered promiscuous mode [ 215.369692][ T8018] gretap0: entered promiscuous mode [ 215.435826][ T8018] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 215.474150][ T8018] Cannot create hsr debugfs directory [ 215.491296][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.800'. [ 215.544327][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.800'. [ 216.218408][ T8047] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 216.496071][ T8055] FAULT_INJECTION: forcing a failure. [ 216.496071][ T8055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.567251][ T8055] CPU: 1 PID: 8055 Comm: syz.5.812 Not tainted syzkaller #0 [ 216.574651][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 216.584755][ T8055] Call Trace: [ 216.588081][ T8055] [ 216.591052][ T8055] dump_stack_lvl+0x18c/0x250 [ 216.595818][ T8055] ? show_regs_print_info+0x20/0x20 [ 216.601072][ T8055] ? load_image+0x420/0x420 [ 216.605655][ T8055] ? __lock_acquire+0x7d80/0x7d80 [ 216.610747][ T8055] ? do_futex+0x2ff/0x3e0 [ 216.615129][ T8055] should_fail_ex+0x394/0x4c0 [ 216.619866][ T8055] strncpy_from_user+0x36/0x2f0 [ 216.624773][ T8055] __se_sys_request_key+0xb9/0x350 [ 216.629947][ T8055] ? __x64_sys_request_key+0xb0/0xb0 [ 216.635324][ T8055] ? lockdep_hardirqs_on+0x98/0x150 [ 216.640598][ T8055] do_syscall_64+0x55/0xb0 [ 216.645071][ T8055] ? clear_bhb_loop+0x40/0x90 [ 216.649820][ T8055] ? clear_bhb_loop+0x40/0x90 [ 216.654556][ T8055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.660515][ T8055] RIP: 0033:0x7fd4f7f9e159 [ 216.665032][ T8055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.684696][ T8055] RSP: 002b:00007fd4f8e4b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 216.693186][ T8055] RAX: ffffffffffffffda RBX: 00007fd4f8225fa0 RCX: 00007fd4f7f9e159 [ 216.701218][ T8055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.709245][ T8055] RBP: 00007fd4f803503b R08: 0000000000000000 R09: 0000000000000000 [ 216.717267][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.725273][ T8055] R13: 00007fd4f8226038 R14: 00007fd4f8225fa0 R15: 00007ffc2ad82d58 [ 216.733296][ T8055] [ 216.921476][ T8061] loop4: detected capacity change from 0 to 164 [ 216.942477][ T8063] loop0: detected capacity change from 0 to 512 [ 216.999550][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.815'. [ 217.043698][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.815'. [ 217.077855][ T27] audit: type=1800 audit(1789383572.431:53): pid=8063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.822" name="bus" dev="loop0" ino=1048664 res=0 errno=0 [ 217.178787][ T27] audit: type=1804 audit(1789383572.441:54): pid=8063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.822" name="/newroot/246/file0/bus" dev="loop0" ino=1048664 res=1 errno=0 [ 217.201817][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.815'. [ 217.240553][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.815'. [ 217.817082][ T8081] syzkaller0: entered promiscuous mode [ 217.822653][ T8081] syzkaller0: entered allmulticast mode [ 217.859181][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.1.823'. [ 217.933062][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.1.823'. [ 217.953955][ T8088] hugetlbfs: Unknown parameter 'r_' [ 218.723254][ T8115] FAULT_INJECTION: forcing a failure. [ 218.723254][ T8115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.753046][ T8115] CPU: 0 PID: 8115 Comm: syz.4.834 Not tainted syzkaller #0 [ 218.760427][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 218.770517][ T8115] Call Trace: [ 218.773822][ T8115] [ 218.776784][ T8115] dump_stack_lvl+0x18c/0x250 [ 218.781504][ T8115] ? show_regs_print_info+0x20/0x20 [ 218.786747][ T8115] ? load_image+0x420/0x420 [ 218.791340][ T8115] ? __lock_acquire+0x7d80/0x7d80 [ 218.796409][ T8115] ? do_futex+0x2ff/0x3e0 [ 218.800789][ T8115] should_fail_ex+0x394/0x4c0 [ 218.805510][ T8115] strncpy_from_user+0x36/0x2f0 [ 218.810396][ T8115] __se_sys_request_key+0xb9/0x350 [ 218.815554][ T8115] ? __x64_sys_request_key+0xb0/0xb0 [ 218.820876][ T8115] ? lockdep_hardirqs_on+0x98/0x150 [ 218.826120][ T8115] do_syscall_64+0x55/0xb0 [ 218.830583][ T8115] ? clear_bhb_loop+0x40/0x90 [ 218.835322][ T8115] ? clear_bhb_loop+0x40/0x90 [ 218.840031][ T8115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.845964][ T8115] RIP: 0033:0x7f21e7f9e159 [ 218.850407][ T8115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.870051][ T8115] RSP: 002b:00007f21e8e03028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 218.878512][ T8115] RAX: ffffffffffffffda RBX: 00007f21e8225fa0 RCX: 00007f21e7f9e159 [ 218.886514][ T8115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.894513][ T8115] RBP: 00007f21e803503b R08: 0000000000000000 R09: 0000000000000000 [ 218.902520][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.910542][ T8115] R13: 00007f21e8226038 R14: 00007f21e8225fa0 R15: 00007ffd88defdd8 [ 218.918564][ T8115] [ 219.737054][ T8149] loop4: detected capacity change from 0 to 512 [ 219.819484][ T8149] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.846: corrupted in-inode xattr: invalid ea_ino [ 219.843792][ T8149] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.846: couldn't read orphan inode 15 (err -117) [ 219.948302][ T8149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.180906][ T7672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.546727][ T8176] loop1: detected capacity change from 0 to 164 [ 220.598366][ T8176] __nla_validate_parse: 1 callbacks suppressed [ 220.598381][ T8176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.855'. [ 220.623011][ T8176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.855'. [ 220.701310][ T8182] tipc: Started in network mode [ 220.720729][ T8182] tipc: Node identity 3658117c71ab, cluster identity 4711 [ 220.744002][ T8182] tipc: Enabled bearer , priority 0 [ 220.807989][ T8182] tipc: Resetting bearer [ 220.920797][ T8179] tipc: Disabling bearer [ 221.717572][ T8] IPVS: starting estimator thread 0... [ 221.726726][ T8226] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 221.744462][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 221.845021][ T8229] IPVS: using max 16 ests per chain, 38400 per kthread [ 222.221851][ T27] audit: type=1326 audit(1789383577.591:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.5.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 222.276812][ T27] audit: type=1326 audit(1789383577.621:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.5.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 222.319428][ T8246] netlink: 100 bytes leftover after parsing attributes in process `syz.1.879'. [ 222.330063][ T27] audit: type=1326 audit(1789383577.621:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.5.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 222.373827][ T27] audit: type=1326 audit(1789383577.621:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.5.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 222.420998][ T27] audit: type=1326 audit(1789383577.621:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.5.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 222.468732][ T27] audit: type=1326 audit(1789383577.621:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.5.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 222.500123][ T27] audit: type=1326 audit(1789383577.621:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.5.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 222.528373][ T27] audit: type=1326 audit(1789383577.621:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.5.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 222.557801][ T27] audit: type=1326 audit(1789383577.621:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.5.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 222.603507][ T27] audit: type=1326 audit(1789383577.621:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.5.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 222.698032][ T8250] loop4: detected capacity change from 0 to 164 [ 222.767305][ T8252] loop5: detected capacity change from 0 to 512 [ 222.782871][ T8250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.881'. [ 222.814956][ T8250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.881'. [ 222.824046][ T8252] EXT4-fs (loop5): invalid journal inode [ 222.824236][ T8252] EXT4-fs (loop5): can't get journal size [ 222.872027][ T8252] EXT4-fs (loop5): 1 truncate cleaned up [ 222.895738][ T8252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.140304][ T7723] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.854897][ T8285] tipc: Started in network mode [ 223.859960][ T8285] tipc: Node identity ac1414aa, cluster identity 4711 [ 223.870636][ T8290] loop4: detected capacity change from 0 to 164 [ 223.880971][ T8285] tipc: New replicast peer: 172.20.20.187 [ 223.925276][ T8285] tipc: Enabled bearer , priority 10 [ 223.939865][ T8290] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41) [ 224.716991][ T8317] loop0: detected capacity change from 0 to 512 [ 224.756307][ T8317] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 224.829107][ T8317] EXT4-fs (loop0): 1 truncate cleaned up [ 224.836508][ T8317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.922707][ T8317] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5960: inode #12: comm syz.0.905: bad extra_isize 62 (inode size 256) [ 224.982335][ T8317] EXT4-fs (loop0): Remounting filesystem read-only [ 225.045750][ T3066] tipc: Node number set to 2886997162 [ 225.120649][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.190986][ T8329] loop5: detected capacity change from 0 to 164 [ 225.276115][ T8329] netlink: 28 bytes leftover after parsing attributes in process `syz.5.909'. [ 225.315267][ T8329] netlink: 28 bytes leftover after parsing attributes in process `syz.5.909'. [ 226.773928][ T8360] netlink: 'syz.5.920': attribute type 32 has an invalid length. [ 226.784588][ T8358] loop0: detected capacity change from 0 to 512 [ 226.880478][ T5776] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.959860][ T8358] loop0: detected capacity change from 0 to 1024 [ 226.967153][ T5776] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.985025][ T8358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.019042][ T8358] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 227.063536][ T8358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 227.117548][ T8358] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 227.137069][ T8372] loop1: detected capacity change from 0 to 164 [ 227.183727][ T8358] System zones: 0-1, 3-36 [ 227.246437][ T8358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.285018][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.924'. [ 227.351050][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.924'. [ 227.392049][ T8358] capability: warning: `syz.0.919' uses deprecated v2 capabilities in a way that may be insecure [ 227.545877][ T8381] loop4: detected capacity change from 0 to 1024 [ 227.604876][ T8381] EXT4-fs: Ignoring removed bh option [ 227.621537][ T8381] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 227.637990][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.727747][ T8381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.996368][ T7672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.237696][ T8449] loop4: detected capacity change from 0 to 164 [ 230.315838][ T8449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.943'. [ 230.350087][ T8449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.943'. [ 231.281119][ T8477] FAULT_INJECTION: forcing a failure. [ 231.281119][ T8477] name failslab, interval 1, probability 0, space 0, times 0 [ 231.353600][ T8477] CPU: 0 PID: 8477 Comm: syz.1.950 Not tainted syzkaller #0 [ 231.361084][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 231.371200][ T8477] Call Trace: [ 231.374531][ T8477] [ 231.377540][ T8477] dump_stack_lvl+0x18c/0x250 [ 231.382287][ T8477] ? show_regs_print_info+0x20/0x20 [ 231.387541][ T8477] ? load_image+0x420/0x420 [ 231.392093][ T8477] ? __might_sleep+0xe0/0xe0 [ 231.396736][ T8477] ? __lock_acquire+0x7d80/0x7d80 [ 231.401824][ T8477] should_fail_ex+0x394/0x4c0 [ 231.406586][ T8477] should_failslab+0x9/0x20 [ 231.411162][ T8477] slab_pre_alloc_hook+0x59/0x300 [ 231.416257][ T8477] ? mas_alloc_nodes+0x2f8/0x8c0 [ 231.421270][ T8477] kmem_cache_alloc_lru+0x4d/0x2b0 [ 231.426468][ T8477] ? shmem_alloc_inode+0x28/0x40 [ 231.431485][ T8477] shmem_alloc_inode+0x28/0x40 [ 231.436319][ T8477] ? shmem_match+0x160/0x160 [ 231.440975][ T8477] new_inode_pseudo+0x63/0x1d0 [ 231.445814][ T8477] new_inode+0x22/0x1d0 [ 231.450037][ T8477] shmem_get_inode+0x34d/0xcd0 [ 231.454861][ T8477] ? mas_destroy+0x20a0/0x20a0 [ 231.459687][ T8477] __shmem_file_setup+0x167/0x2c0 [ 231.464770][ T8477] shmem_zero_setup+0x8d/0x130 [ 231.469585][ T8477] mmap_region+0x1225/0x2090 [ 231.474289][ T8477] ? file_mmap_ok+0x170/0x170 [ 231.479021][ T8477] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 231.484605][ T8477] ? cap_mmap_addr+0x157/0x2b0 [ 231.489429][ T8477] do_mmap+0x98f/0x10a0 [ 231.493655][ T8477] ? mlock_future_ok+0xf0/0xf0 [ 231.498486][ T8477] ? down_write+0x200/0x200 [ 231.503048][ T8477] vm_mmap_pgoff+0x1c4/0x3f0 [ 231.507701][ T8477] ? account_locked_vm+0x200/0x200 [ 231.512868][ T8477] ? ksys_mmap_pgoff+0xf3/0x720 [ 231.517765][ T8477] ? __x64_sys_mmap+0x7a/0x130 [ 231.522579][ T8477] do_syscall_64+0x55/0xb0 [ 231.527032][ T8477] ? clear_bhb_loop+0x40/0x90 [ 231.531804][ T8477] ? clear_bhb_loop+0x40/0x90 [ 231.536560][ T8477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.542496][ T8477] RIP: 0033:0x7fc92ad9e159 [ 231.546978][ T8477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.566639][ T8477] RSP: 002b:00007fc928ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 231.575121][ T8477] RAX: ffffffffffffffda RBX: 00007fc92b025fa0 RCX: 00007fc92ad9e159 [ 231.583141][ T8477] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 000000110c230000 [ 231.591162][ T8477] RBP: 00007fc92ae3503b R08: ffffffffffffffff R09: 0000000000000000 [ 231.599185][ T8477] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000 [ 231.607205][ T8477] R13: 00007fc92b026038 R14: 00007fc92b025fa0 R15: 00007ffc1ab32bb8 [ 231.615252][ T8477] [ 231.771126][ T8486] loop4: detected capacity change from 0 to 512 [ 231.779694][ T8486] EXT4-fs: Ignoring removed orlov option [ 231.890475][ T8486] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 232.138097][ T8486] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2974: inode #15: comm syz.4.953: corrupted xattr block 252: invalid header [ 232.210637][ T8486] EXT4-fs (loop4): Remounting filesystem read-only [ 232.227037][ T8486] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 232.239816][ T8486] EXT4-fs (loop4): 1 orphan inode deleted [ 232.249404][ T8486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.970659][ T8498] loop5: detected capacity change from 0 to 164 [ 233.464760][ T8498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.955'. [ 233.477912][ T7672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.637500][ T8498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.955'. [ 235.982624][ T8546] loop5: detected capacity change from 0 to 164 [ 236.114978][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.5.971'. [ 236.174855][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.5.971'. [ 237.701286][ T8567] loop5: detected capacity change from 0 to 1024 [ 237.829976][ T8567] EXT4-fs: Ignoring removed bh option [ 237.968203][ T8567] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 238.934924][ T8567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.515286][ T7723] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.042829][ T8604] loop5: detected capacity change from 0 to 164 [ 240.104967][ T8604] netlink: 28 bytes leftover after parsing attributes in process `syz.5.983'. [ 240.134259][ T8604] netlink: 28 bytes leftover after parsing attributes in process `syz.5.983'. [ 240.663728][ T8616] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(3) [ 240.707327][ T8616] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(9) [ 242.619970][ T8647] loop5: detected capacity change from 0 to 164 [ 242.786348][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.5.995'. [ 242.865245][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.5.995'. [ 244.110349][ T8388] Set syz1 is full, maxelem 65536 reached [ 244.386423][ T8683] loop5: detected capacity change from 0 to 164 [ 244.463866][ T8681] xt_CONNSECMARK: invalid mode: 0 [ 244.481089][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.493754][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.501839][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.516832][ T8683] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1008'. [ 244.546584][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.560625][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 244.564034][ T8683] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1008'. [ 244.584663][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.861121][ T8693] loop4: detected capacity change from 0 to 1024 [ 244.905497][ T8693] EXT4-fs: Ignoring removed bh option [ 244.973682][ T8693] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 245.109520][ T8693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.489989][ T7672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.719740][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.730824][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.777792][ T8684] chnl_net:caif_netlink_parms(): no params data found [ 245.948305][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.958932][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.068531][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.085540][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.123553][ T8727] netlink: 'syz.4.1016': attribute type 10 has an invalid length. [ 246.230604][ T8727] team0 (unregistering): Port device team_slave_0 removed [ 246.258324][ T8727] team0 (unregistering): Port device team_slave_1 removed [ 246.319668][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.330705][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.451849][ T8684] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.482392][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.521368][ T8684] bridge_slave_0: entered allmulticast mode [ 246.541406][ T8684] bridge_slave_0: entered promiscuous mode [ 246.588786][ T8684] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.598868][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.607165][ T8684] bridge_slave_1: entered allmulticast mode [ 246.615126][ T8684] bridge_slave_1: entered promiscuous mode [ 246.694895][ T8740] loop4: detected capacity change from 0 to 764 [ 246.703937][ T5786] Bluetooth: hci4: command tx timeout [ 246.778225][ T8740] Symlink component flag not implemented [ 246.790231][ T8740] Symlink component flag not implemented (128) [ 246.849316][ T8684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.907070][ T8747] loop1: detected capacity change from 0 to 1024 [ 246.927440][ T8747] EXT4-fs: Ignoring removed bh option [ 246.935077][ T8684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.944265][ T8747] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 247.006038][ T8747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.271429][ T8684] team0: Port device team_slave_0 added [ 247.306784][ T8684] team0: Port device team_slave_1 added [ 247.325114][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.445003][ T8757] loop5: detected capacity change from 0 to 1024 [ 247.488438][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.503618][ T8757] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 247.520050][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.546616][ T8757] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 247.572885][ T8757] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 247.588895][ T8760] loop4: detected capacity change from 0 to 128 [ 247.604019][ T8757] EXT4-fs (loop5): orphan cleanup on readonly fs [ 247.611166][ T8684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.698801][ T8757] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.1024: Inode bitmap for bg 0 marked uninitialized [ 247.732411][ T8757] EXT4-fs (loop5): Remounting filesystem read-only [ 247.741332][ T8757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 247.898011][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.908547][ T7723] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.927522][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.982855][ T8684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.344054][ T8684] hsr_slave_0: entered promiscuous mode [ 248.364040][ T8684] hsr_slave_1: entered promiscuous mode [ 248.539162][ T8791] loop5: detected capacity change from 0 to 1024 [ 248.546948][ T8791] EXT4-fs: Ignoring removed bh option [ 248.593559][ T8791] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.679974][ T8791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.783669][ T5786] Bluetooth: hci4: command tx timeout [ 248.859728][ T7723] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.899207][ T8802] loop4: detected capacity change from 0 to 164 [ 249.106010][ T8804] loop1: detected capacity change from 0 to 128 [ 249.224648][ T8804] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.237283][ T8804] ext4 filesystem being mounted at /262/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.318931][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.459474][ T8813] loop4: detected capacity change from 0 to 512 [ 249.529220][ T8813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.884986][ T7672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.047453][ T8830] loop1: detected capacity change from 0 to 1024 [ 250.073102][ T8830] EXT4-fs: Ignoring removed bh option [ 250.096921][ T8830] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 250.184073][ T8830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.285538][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.469428][ T12] hsr_slave_0: left promiscuous mode [ 250.524031][ T12] hsr_slave_1: left promiscuous mode [ 250.602173][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.634934][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.713959][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.721491][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.739672][ T12] bridge_slave_1: left allmulticast mode [ 250.752340][ T12] bridge_slave_1: left promiscuous mode [ 250.771777][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.801792][ T12] bridge_slave_0: left allmulticast mode [ 250.820916][ T12] bridge_slave_0: left promiscuous mode [ 250.833688][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.869376][ T5786] Bluetooth: hci4: command tx timeout [ 250.878220][ T12] veth1_macvtap: left promiscuous mode [ 250.885857][ T12] veth0_macvtap: left promiscuous mode [ 250.895707][ T12] veth1_vlan: left promiscuous mode [ 250.907428][ T12] veth0_vlan: left promiscuous mode [ 252.018768][ T8867] loop1: detected capacity change from 0 to 164 [ 252.200509][ T12] team0 (unregistering): Port device team_slave_1 removed [ 252.298518][ T12] team0 (unregistering): Port device team_slave_0 removed [ 252.390379][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.492063][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.868367][ T8883] loop1: detected capacity change from 0 to 164 [ 252.959115][ T5786] Bluetooth: hci4: command tx timeout [ 253.036824][ T8885] loop1: detected capacity change from 0 to 164 [ 253.096541][ T12] bond0 (unregistering): Released all slaves [ 253.287171][ T8684] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.320499][ T8684] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.375852][ T8684] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 253.425493][ T8684] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.723957][ T8684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.801959][ T8684] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.858144][ T8904] loop4: detected capacity change from 0 to 164 [ 253.886783][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.894027][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.931680][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.938936][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.044426][ T27] audit: type=1326 audit(1789383609.401:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.5.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 254.126086][ T27] audit: type=1326 audit(1789383609.401:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.5.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 254.187779][ T8910] loop1: detected capacity change from 0 to 164 [ 254.283525][ T27] audit: type=1326 audit(1789383609.461:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.5.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 254.407921][ T27] audit: type=1326 audit(1789383609.461:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.5.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 254.524202][ T27] audit: type=1326 audit(1789383609.461:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.5.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 254.643882][ T27] audit: type=1326 audit(1789383609.471:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.5.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 254.773862][ T27] audit: type=1326 audit(1789383609.471:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.5.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 254.860220][ T27] audit: type=1326 audit(1789383609.471:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.5.1071" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f7f9e159 code=0x7ffc0000 [ 255.159561][ T8684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.429377][ T8943] loop1: detected capacity change from 0 to 512 [ 255.586108][ T8943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.676139][ T8943] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.851976][ T8955] loop4: detected capacity change from 0 to 512 [ 255.920098][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.956699][ T8955] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: comm syz.4.1081: inode #1: comm syz.4.1081: iget: illegal inode # [ 256.006112][ T8955] EXT4-fs (loop4): no journal found [ 256.037998][ T8955] EXT4-fs (loop4): can't get journal size [ 256.095416][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.101821][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.113234][ T8955] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 256.159203][ T8955] EXT4-fs (loop4): failed to initialize system zone (-22) [ 256.223965][ T8955] EXT4-fs (loop4): mount failed [ 256.340790][ T8969] loop5: detected capacity change from 0 to 512 [ 256.378906][ T8969] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.436405][ T8684] veth0_vlan: entered promiscuous mode [ 256.470300][ T8969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.513143][ T8684] veth1_vlan: entered promiscuous mode [ 256.516191][ T8969] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.660216][ T8969] EXT4-fs error (device loop5): ext4_xattr_block_find:1881: inode #12: comm syz.5.1084: corrupted xattr block 6: invalid header [ 256.722370][ T8684] veth0_macvtap: entered promiscuous mode [ 256.753116][ T8684] veth1_macvtap: entered promiscuous mode [ 256.810237][ T7723] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.852013][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.890693][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.924412][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.963376][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.981180][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.016387][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.038775][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.100119][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.131093][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.162502][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.191448][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.207451][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.219509][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.251138][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.296776][ T8684] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.310424][ T8684] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.336319][ T8684] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.364222][ T8684] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.537079][ T9002] loop1: detected capacity change from 0 to 164 [ 257.641395][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.661624][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.765562][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.789766][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.875545][ T9009] 8021q: VLANs not supported on ipvlan1 [ 258.153430][ T27] audit: type=1800 audit(1789383613.521:73): pid=9021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1095" name="syzkaller0" dev="sda1" ino=2049 res=0 errno=0 [ 258.622724][ T9039] FAULT_INJECTION: forcing a failure. [ 258.622724][ T9039] name failslab, interval 1, probability 0, space 0, times 0 [ 258.675673][ T9039] CPU: 1 PID: 9039 Comm: syz.4.1098 Not tainted syzkaller #0 [ 258.683163][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 258.693278][ T9039] Call Trace: [ 258.696612][ T9039] [ 258.699587][ T9039] dump_stack_lvl+0x18c/0x250 [ 258.704354][ T9039] ? show_regs_print_info+0x20/0x20 [ 258.709662][ T9039] ? load_image+0x420/0x420 [ 258.714222][ T9039] ? __might_sleep+0xe0/0xe0 [ 258.718881][ T9039] ? __lock_acquire+0x7d80/0x7d80 [ 258.723977][ T9039] should_fail_ex+0x394/0x4c0 [ 258.728743][ T9039] should_failslab+0x9/0x20 [ 258.733325][ T9039] slab_pre_alloc_hook+0x59/0x300 [ 258.738427][ T9039] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 258.744242][ T9039] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 258.750026][ T9039] __kmem_cache_alloc_node+0x53/0x250 [ 258.755474][ T9039] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 258.761284][ T9039] __kmalloc+0xa7/0x240 [ 258.765514][ T9039] tomoyo_realpath_from_path+0xe6/0x5c0 [ 258.771149][ T9039] tomoyo_check_open_permission+0x224/0x460 [ 258.777126][ T9039] ? tomoyo_check_open_permission+0x1cf/0x460 [ 258.783282][ T9039] ? tomoyo_check_path_number_acl+0x280/0x280 [ 258.789422][ T9039] ? __asan_memset+0x22/0x40 [ 258.794103][ T9039] ? __rwlock_init+0x150/0x150 [ 258.798959][ T9039] ? tomoyo_file_open+0xed/0x180 [ 258.803956][ T9039] security_file_open+0x62/0xa0 [ 258.808916][ T9039] do_dentry_open+0x32b/0x14b0 [ 258.813753][ T9039] ? __asan_memcpy+0x40/0x70 [ 258.818448][ T9039] path_openat+0x284f/0x3270 [ 258.823116][ T9039] ? do_sys_openat2+0xda/0x1d0 [ 258.827939][ T9039] ? __x64_sys_openat+0x139/0x160 [ 258.833030][ T9039] ? verify_lock_unused+0x140/0x140 [ 258.838288][ T9039] ? do_filp_open+0x430/0x430 [ 258.843035][ T9039] do_filp_open+0x1f2/0x430 [ 258.847595][ T9039] ? vfs_tmpfile+0x620/0x620 [ 258.852263][ T9039] ? _raw_spin_unlock+0x28/0x40 [ 258.857173][ T9039] ? alloc_fd+0x590/0x640 [ 258.861573][ T9039] do_sys_openat2+0x134/0x1d0 [ 258.866320][ T9039] ? do_sys_open+0xe0/0xe0 [ 258.870797][ T9039] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 258.876834][ T9039] ? lock_chain_count+0x20/0x20 [ 258.881783][ T9039] __x64_sys_openat+0x139/0x160 [ 258.886740][ T9039] do_syscall_64+0x55/0xb0 [ 258.891221][ T9039] ? clear_bhb_loop+0x40/0x90 [ 258.895965][ T9039] ? clear_bhb_loop+0x40/0x90 [ 258.900747][ T9039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.906705][ T9039] RIP: 0033:0x7f21e7f9e159 [ 258.911176][ T9039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.931541][ T9039] RSP: 002b:00007f21e8e03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 258.940021][ T9039] RAX: ffffffffffffffda RBX: 00007f21e8225fa0 RCX: 00007f21e7f9e159 [ 258.948083][ T9039] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 258.956117][ T9039] RBP: 00007f21e803503b R08: 0000000000000000 R09: 0000000000000000 [ 258.964146][ T9039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.972186][ T9039] R13: 00007f21e8226038 R14: 00007f21e8225fa0 R15: 00007ffd88defdd8 [ 258.980262][ T9039] [ 259.010089][ T9039] ERROR: Out of memory at tomoyo_realpath_from_path. [ 260.345867][ T9087] loop5: detected capacity change from 0 to 164 [ 260.520075][ T9094] loop4: detected capacity change from 0 to 512 [ 260.557649][ T9094] EXT4-fs: Ignoring removed oldalloc option [ 260.637716][ T9094] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.1111: bg 0: block 5: invalid block bitmap [ 260.700795][ T9094] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 260.736611][ T9094] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1111: invalid indirect mapped block 3 (level 2) [ 260.769376][ T9094] EXT4-fs (loop4): 1 orphan inode deleted [ 260.779101][ T9094] EXT4-fs (loop4): 1 truncate cleaned up [ 260.841606][ T9094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.921913][ T27] audit: type=1804 audit(1789383616.291:74): pid=9094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1111" name="/newroot/92/file0/file0" dev="loop4" ino=11 res=1 errno=0 [ 260.949478][ T9094] EXT4-fs (loop4): shut down requested (0) [ 261.160257][ T7672] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.816828][ T9140] loop4: detected capacity change from 0 to 164 [ 263.003833][ T27] audit: type=1804 audit(1789383618.381:75): pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/294/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 274.817460][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1136'. [ 275.034702][ T9215] loop5: detected capacity change from 0 to 128 [ 275.064436][ T5141] udevd[5141]: could not touch /run/udev/queue: No such file or directory [ 275.247134][ T9217] loop4: detected capacity change from 0 to 164 [ 275.484984][ T9222] loop6: detected capacity change from 0 to 164 [ 276.209145][ T5780] syz_tun (unregistering): left allmulticast mode [ 276.386861][ T993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.402590][ T27] audit: type=1326 audit(1789383631.781:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e7f9e159 code=0x7ffc0000 [ 276.430941][ T27] audit: type=1326 audit(1789383631.781:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e7f9e159 code=0x7ffc0000 [ 276.457737][ T27] audit: type=1326 audit(1789383631.781:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e7f9e159 code=0x7ffc0000 [ 276.494838][ T27] audit: type=1326 audit(1789383631.831:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e7f9e159 code=0x7ffc0000 [ 276.587336][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.591874][ T27] audit: type=1326 audit(1789383631.861:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f21e7f9e159 code=0x7ffc0000 [ 276.619686][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.632919][ T993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.643910][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.656035][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.666726][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.674261][ T27] audit: type=1326 audit(1789383631.871:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e7f9e159 code=0x7ffc0000 [ 276.700368][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.739500][ T27] audit: type=1326 audit(1789383631.871:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e7f9e159 code=0x7ffc0000 [ 276.793043][ T27] audit: type=1326 audit(1789383631.871:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e7f9e159 code=0x7ffc0000 [ 276.820451][ T27] audit: type=1326 audit(1789383631.871:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e7f9e159 code=0x7ffc0000 [ 276.845497][ T27] audit: type=1326 audit(1789383631.901:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f21e7f9e159 code=0x7ffc0000 [ 276.993226][ T993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.032381][ T9237] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1138'. [ 277.066964][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c39bc00: rx timeout, send abort [ 277.077786][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c39bc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 277.148520][ T993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.372942][ T993] tipc: Disabling bearer [ 277.381093][ T993] tipc: Left network mode [ 277.551607][ T9249] loop6: detected capacity change from 0 to 164 [ 277.600594][ T9249] isofs_fill_super: bread failed, dev=loop6, iso_blknum=41, block=82 [ 277.946805][ T9257] loop4: detected capacity change from 0 to 1024 [ 277.961556][ T9257] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 277.971475][ T9257] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 278.349864][ T9257] EXT4-fs (loop4): invalid journal inode [ 278.516212][ T9257] EXT4-fs (loop4): can't get journal size [ 278.560660][ T9257] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11c, mo2=0002] [ 278.603845][ T9257] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.1143: blocks 48-48 from inode overlap system zone [ 278.678280][ T9257] EXT4-fs (loop4): failed to initialize system zone (-117) [ 278.731132][ T9257] EXT4-fs (loop4): mount failed [ 278.956747][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.966938][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.975284][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.983507][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.992473][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.000278][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.260468][ T9276] loop6: detected capacity change from 0 to 512 [ 279.534158][ T9282] loop5: detected capacity change from 0 to 164 [ 280.187569][ T9276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.223250][ T993] erspan0 (unregistering): left promiscuous mode [ 280.233513][ T9276] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.294325][ T9276] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.1148: Failed to acquire dquot type 1 [ 280.377738][ T8684] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.390536][ T993] gretap0 (unregistering): left promiscuous mode [ 280.895575][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801f7b4800: rx timeout, send abort [ 280.904109][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801f7b4800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 280.952540][ T993] hsr_slave_0: left promiscuous mode [ 280.972521][ T993] hsr_slave_1: left promiscuous mode [ 280.988110][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.019085][ T993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.068302][ T993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.080557][ T993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.099180][ T993] bridge_slave_1: left allmulticast mode [ 281.112584][ T993] bridge_slave_1: left promiscuous mode [ 281.122852][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.149299][ T993] bridge_slave_0: left allmulticast mode [ 281.160530][ T993] bridge_slave_0: left promiscuous mode [ 281.186998][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.237781][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.258651][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.276194][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.285062][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.293135][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.303621][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.345962][ T993] veth1_macvtap: left promiscuous mode [ 281.359310][ T993] veth0_macvtap: left promiscuous mode [ 281.376345][ T993] veth1_vlan: left promiscuous mode [ 281.407924][ T993] veth0_vlan: left promiscuous mode [ 281.603205][ T9320] sctp: [Deprecated]: syz.5.1160 (pid 9320) Use of int in max_burst socket option deprecated. [ 281.603205][ T9320] Use struct sctp_assoc_value instead [ 281.947258][ T9323] loop4: detected capacity change from 0 to 164 [ 282.024651][ T9327] loop5: detected capacity change from 0 to 164 [ 282.051189][ T9327] rock: directory entry would overflow storage [ 282.063217][ T9327] rock: sig=0x66, size=4, remaining=3 [ 282.076061][ T9327] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 282.657973][ T9340] loop4: detected capacity change from 0 to 164 [ 283.375176][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.384611][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.392675][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.405838][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.423262][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.434348][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.836947][ T993] team0 (unregistering): Port device team_slave_1 removed [ 283.891471][ T993] team0 (unregistering): Port device team_slave_0 removed [ 283.939075][ T993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.989602][ T993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.085188][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c996400: rx timeout, send abort [ 284.093908][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c996400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 284.990104][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.009819][ T993] bond0 (unregistering): Released all slaves [ 285.018494][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.030322][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.042435][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.052228][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.059717][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.186538][ T9333] netlink: 'syz.6.1173': attribute type 1 has an invalid length. [ 286.548269][ T9378] loop6: detected capacity change from 0 to 164 [ 286.585620][ T9378] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1174'. [ 286.595168][ T9378] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1174'. [ 286.606196][ T9378] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1174'. [ 286.615798][ T9378] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1174'. [ 286.642953][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.653567][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.668152][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 286.680954][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 286.689192][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 286.697544][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.737244][ T9386] loop5: detected capacity change from 0 to 164 [ 287.772887][ T9386] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=82 [ 288.039087][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 288.051953][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 288.066039][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 288.081148][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 288.093052][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 288.103871][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.072815][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.082174][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.090673][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.102917][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.112375][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 290.122122][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.399996][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.408673][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.421607][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.432820][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.443802][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 291.451339][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.818207][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.826967][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.836348][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.846209][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.854358][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 292.861779][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.342187][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.352763][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.361827][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.371563][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.379700][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.387394][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.932996][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.941618][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.953639][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.961832][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.971805][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 295.980159][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.661538][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.673897][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.682099][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.692798][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.701605][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 297.709345][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.480972][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.489909][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.499529][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.508705][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.516698][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 299.528332][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.380632][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.390124][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.398391][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.406698][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.419264][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 301.427097][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.468188][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.480395][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.489152][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.498995][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.511152][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 303.518803][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.600138][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.609834][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.618682][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.628105][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.636354][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 305.645313][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.836559][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.847106][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.855649][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.864716][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.873599][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 307.881219][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.147192][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.156116][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.166667][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.178187][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.186209][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 310.196830][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.542884][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.553186][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.562422][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.572768][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.581505][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 312.590209][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.119074][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.128833][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.140519][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.150369][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.159579][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 315.167243][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=7 req=1128 state=3 status=67 (errno 9: Bad file descriptor) [ 316.319032][ T3519] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.501383][ T3519] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.561186][ T3519] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.632730][ T3519] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.279559][ T3519] erspan0 (unregistering): left promiscuous mode [ 317.351098][ T3519] gretap0 (unregistering): left promiscuous mode [ 317.509165][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.515729][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.525720][ T3519] IPVS: stopping backup sync thread 8047 ... [ 317.685155][ T3519] hsr_slave_0: left promiscuous mode [ 317.691217][ T3519] hsr_slave_1: left promiscuous mode [ 317.697653][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.709108][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.717362][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.724970][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.732829][ T3519] bridge_slave_1: left allmulticast mode [ 317.738584][ T3519] bridge_slave_1: left promiscuous mode [ 317.744450][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.755151][ T3519] bridge_slave_0: left allmulticast mode [ 317.760857][ T3519] bridge_slave_0: left promiscuous mode [ 317.767563][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.796798][ T3519] veth1_macvtap: left promiscuous mode [ 317.802447][ T3519] veth0_macvtap: left promiscuous mode [ 317.808652][ T3519] veth1_vlan: left promiscuous mode [ 317.816071][ T3519] veth0_vlan: left promiscuous mode [ 318.593983][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.652678][ T3519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.005954][ T3519] bond0 (unregistering): Released all slaves [ 319.472849][ T3519] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.551803][ T3519] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.605057][ T3519] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.660242][ T3519] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.797537][ T3519] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.875089][ T3519] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.946376][ T3519] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.018461][ T3519] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.618446][ T3519] tipc: Left network mode [ 323.776775][ T3519] hsr_slave_0: left promiscuous mode [ 323.782868][ T3519] hsr_slave_1: left promiscuous mode [ 323.791545][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.799539][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.808338][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.817225][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.825903][ T3519] bridge_slave_1: left allmulticast mode [ 323.831571][ T3519] bridge_slave_1: left promiscuous mode [ 323.838067][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.847886][ T3519] bridge_slave_0: left allmulticast mode [ 323.853781][ T3519] bridge_slave_0: left promiscuous mode [ 323.859525][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.874838][ T3519] hsr_slave_0: left promiscuous mode [ 323.880972][ T3519] hsr_slave_1: left promiscuous mode [ 323.888052][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.896902][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.905960][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.913574][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.921615][ T3519] bridge_slave_1: left allmulticast mode [ 323.927468][ T3519] bridge_slave_1: left promiscuous mode [ 323.933223][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.943101][ T3519] bridge_slave_0: left allmulticast mode [ 323.949313][ T3519] bridge_slave_0: left promiscuous mode [ 323.955355][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.001309][ T3519] veth1_macvtap: left promiscuous mode [ 324.007209][ T3519] veth0_macvtap: left promiscuous mode [ 324.012874][ T3519] veth1_vlan: left promiscuous mode [ 324.019400][ T3519] veth0_vlan: left promiscuous mode [ 324.027096][ T3519] veth1_macvtap: left promiscuous mode [ 324.032648][ T3519] veth0_macvtap: left promiscuous mode [ 324.038498][ T3519] veth1_vlan: left promiscuous mode [ 324.043987][ T3519] veth0_vlan: left promiscuous mode [ 324.882544][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 324.938916][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 324.987629][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.035471][ T3519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface