last executing test programs: 3m17.73563018s ago: executing program 1 (id=289): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) close_range(r1, 0xffffffffffffffff, 0x0) 3m17.663169165s ago: executing program 1 (id=290): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000f40)={0x44, &(0x7f0000000c40)={0x20, 0x13, 0x1, "e3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m17.120834275s ago: executing program 1 (id=291): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 3m17.019962128s ago: executing program 1 (id=293): inotify_init1(0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000500)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x10142, 0x0) 3m16.152046839s ago: executing program 1 (id=295): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040010) 3m16.047484502s ago: executing program 1 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) 3m0.957591569s ago: executing program 32 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) 2m45.269858427s ago: executing program 2 (id=408): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x40008000) bind$inet(r4, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x40800) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={r0, 0xee01}, 0xc) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$P9_RUNLINKAT(r7, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x32) 2m44.412311176s ago: executing program 2 (id=416): r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000300)={0xd0, 0x2, 0x0, 0x40000008}) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000040)={0x0, 0x0, 0x0, @lost_msgs}) 2m43.786093923s ago: executing program 2 (id=418): syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1', 0x1) 2m42.920606765s ago: executing program 2 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x18, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x102) read$char_usb(r0, &(0x7f0000000240)=""/187, 0xbb) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f0000000100), 0x0) 2m42.769526858s ago: executing program 2 (id=425): syz_clone3(&(0x7f00000003c0)={0x100001000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x66) pidfd_send_signal(r0, 0x11, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="3d7bc76bdbbda9b84b4fce8176a4fe0b", 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r1, 0x5) r2 = accept(r1, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) shutdown(r2, 0x1) 2m41.76179142s ago: executing program 2 (id=430): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r1, 0x0, 0x0) 2m27.208708208s ago: executing program 33 (id=430): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r1, 0x0, 0x0) 1m54.827169487s ago: executing program 0 (id=612): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x32, &(0x7f0000000d40)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x7, 0x0, @val=0x80}}}}}}}, 0x0) 1m54.715908941s ago: executing program 0 (id=615): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[], 0x3, 0x2cb, &(0x7f0000000ac0)="$eJzs3U9LW1kYx/GfJmNiHE0Ww8AMDHOY2cxsgpN5ATNhUBgmMMUaabsoXOtNG3KbyL3BEik1m9JtX4d02V2h7RtwU7rpvjspFLpxUXqL9yaaaJLGkD9avx+Q8yTPeXKO5ihPLiTuX3t8t1Tw0gWrqum40bRU14GUOowaphrjdBDPqFVdv899ePPT1es3/svmcksrxixnV//MGGMWfn5+7/6TX15W59aeLjyLaS91c/995u3ezN4P+59W7xQ9U/RMuVI1llmvVKrWumObjaJXShtzxbEtzzbFsme7bfmCU9ncrBmrvDGf2HRtzzNWuWZKds1UK6bq1ox12yqWTTqdNvMJXW7RPubkd1dWrGzXtB8Z6o4wcrOd7nTdbL1zMr87hj0BAIBzpnf/H/b63fv/3Fo4nqX///7L/b9E/z8i9bZbXfr/b8e4IYyc62atROP3tx39PwAAAAAAAAAAAAAAAAAAAAAAF8GB7yd9308ejo27gtsxSXFJfiN/VNDP28pxYbQ+/37LV9fnP/TXhLaLIWt5415cch5t5bfy4RjmswUV5cjWopL6GJyHhjBe/je3tGgCKb1wdhr1O1v5iGLN+qZUp/qpqBQ+QHv9N0q0rp9RUt91Xj9jOtXP6LdfW+rTSurVLVXkaCM418f1D/4w5p//cyfqZ4N5AAAAAAB8DdLmyKnX70E+mBDX6XxY33J9wPf9nV7XB068vo7qR64lAgAAAAAwFl5tu2Q5ju0OEMQkDVYuDbxor8D3paE+4EBBRJNcvVvwt6RzsI1xBXE1z5gZpPydznRE/T7mRCVN/MdyhmDSf5kAAAAADJtX2z7+Bz/9ev1wRLsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBy6vfzwJrzT6WaiZ6f9nckMvZvEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhHPgcAAP//ps0YVA==") sched_setscheduler(0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x111) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x7, 0x200001ff, 0xfffffffffffffffd}) 1m54.353090511s ago: executing program 0 (id=616): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) 1m53.366996398s ago: executing program 0 (id=622): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x676, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x3, 'veth0_vlan\x00', {0x6}, 0xc3fd}) syz_fuse_handle_req(r1, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x5, 0x0, {0x2, 0x8e, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x4009, 0x7, 0x0, r2, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) munlock(&(0x7f00001a9000/0x13000)=nil, 0x13000) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$unix(0x1, 0x2, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 1m52.649287996s ago: executing program 6 (id=627): syz_usb_connect(0x3, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0xca, 0xa3, 0x72, 0x8, 0x830, 0x80, 0xe863, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xf, 0x80, 0x4, "", [{{0x9, 0x4, 0x4d, 0xc4, 0x0, 0xac, 0x8e, 0xb6, 0x5}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x5, &(0x7f00000008c0)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) syz_usb_connect$printer(0x6, 0x2d, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0xe4, 0x5, 0x0, 0xb9, 0x56, 0xda, 0x2}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x5, 0x10c, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x2a39, 0x3fb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfa, 0x3, 0x1, 0xc, 0x20, 0x5, {0x8, 0xb, 0x1, 0x2, 0x1, 0x2, 0x30, 0x52}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x64, 0x3}, [@output_terminal={0x13, 0x24, 0x3, 0x1, 0x0, 0x5, 0x4, 0x2, 0x4, 0x3, 0xfffc, 0x5}, @source_unit={0xc, 0x24, 0xb, 0x5, 0x0, 0x3, 0xa, 0x6}, @input_terminal={0x14, 0x24, 0x2, 0x5, 0x203, 0x4, 0x6, 0x6, 0x7, 0x5, 0x5, 0xab6}, @input_terminal={0x14, 0x24, 0x2, 0x6, 0x2fa, 0x4, 0x6, 0x9, 0x4, 0x1, 0x559, 0x4}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x1ff, 0x6, 0x1, 0x0, 0x8001, 0x80, 0x6d, 0xfff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x1, 0x9, 0x2, 0x1}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8074, 0x191e, 0x8, "9474ad8b5e834b"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x1}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x2, 0x7, 0x8, "", "f84c"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x80, 0x9, 0x2, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x36, 0x5, 0x0, {0xa, 0x25, 0x25, 0x7, 0xff, 0x29}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xc, 0x9, 0x5, {0xa, 0x25, 0x25, 0x4, 0x9, 0x80}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xe7, 0x96, 0x80, 0xab}, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x0, 0x0}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40a}}]}) 1m51.63494704s ago: executing program 0 (id=632): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m51.59209612s ago: executing program 6 (id=633): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone3(&(0x7f0000000580)={0x802000, &(0x7f0000000140), 0x0, 0x0, {0x29}, &(0x7f0000000200)=""/164, 0xa4, 0x0, &(0x7f0000000540)=[0xffffffffffffffff], 0x1}, 0x58) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040)=0x4, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x30400, 0x66) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 1m50.953897701s ago: executing program 0 (id=635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1m48.720518873s ago: executing program 6 (id=645): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x280000f, 0x31, 0xffffffffffffffff, 0x4d8ea000) 1m48.579164594s ago: executing program 6 (id=646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0xe) 1m47.772862012s ago: executing program 6 (id=647): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) fdatasync(r0) 1m47.64651883s ago: executing program 6 (id=648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x35dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x6}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x4, 0x0, 0x0) 1m36.204839401s ago: executing program 34 (id=635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1m32.693206836s ago: executing program 35 (id=648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x35dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x6}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x4, 0x0, 0x0) 25.369421607s ago: executing program 8 (id=893): ptrace(0x10, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d67c5da8c5c4dada466bf73ee60295d1d133135d5c7", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x10001) read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020) r2 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$IPC_INFO(r2, 0x3, &(0x7f00000001c0)=""/243) 24.521250094s ago: executing program 8 (id=897): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000000)="0200") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) 23.86131249s ago: executing program 8 (id=900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 23.754577473s ago: executing program 8 (id=901): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)='0x0200', 0x6) write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r1, &(0x7f00000006c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='8\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) write(r3, 0x0, 0x0) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000a40)='dummy_udc.0', 0xb) 23.695177486s ago: executing program 8 (id=902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x60, 0x5}]}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)={0x14, 0x10, 0x200, 0x70bd2c, 0x25dfdbfe, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x804) 23.575510403s ago: executing program 8 (id=904): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-# -3 -4\n', 0x9) 12.158320709s ago: executing program 3 (id=958): close(0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r2, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x4008000) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 12.009028642s ago: executing program 7 (id=959): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='0x0200', 0x6) write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r1, &(0x7f00000006c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='8\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) write(r3, 0x0, 0x0) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000a40)='dummy_udc.0', 0xb) 11.921437602s ago: executing program 7 (id=960): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='+p', 0x2) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000004c0)=ANY=[@ANYBLOB="6a6f757256ce6c5f6173796e635f636f6d080000000000000074000100003d6e6f6e652c754e7d26c24b1df2ac646174613d77726974656261636b2c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030302c696e6f646536342c00"], 0x0, 0x4714, &(0x7f0000009780)="$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") r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000700)={0x27, 0x1, 0x0, 0x5, 0x0, 0x0, 'urn:nfc:sn:snep\x00', 0x10}, 0x60) 11.488832377s ago: executing program 3 (id=963): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000000)="0200") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) 10.826344833s ago: executing program 3 (id=964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000015c768692c7335ab0ac1fd0750a8faab117f8963b4d7f586090000000000000009", @ANYRES16=r1, @ANYBLOB="050000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060010000100000006001200010000000c00130082848b960c121824"], 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 10.734540053s ago: executing program 7 (id=965): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB='W \x00\x00! \x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x108) close(r1) r5 = openat$cgroup_ro(r4, &(0x7f0000000540)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x402, 0x12) r6 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="86ae7ae3f53aca5aeb6857b9d7b9168397711407f5f2f321ac655cebc266df84a71e8fae0b882d1774158b2387b42d774f626a032b9d5f5cb82baa3e87bfb7ffe66beef9013c745a7d7a83e2a691930d76b0b6c1f1fafe93df29", 0x5a}, {&(0x7f0000000700)="74adf3039f01162cdc1a938f34b0b90309078b4ee0e55382d9129e0af8b38412ac8b4f94557c7ecb0f48c1a8ab58f94cb6bc87", 0x33}, {&(0x7f0000000b00)="5f7e2deeac0f820d8bfa26c88de87bdc8af5b1d77e728715a413495407edc4643bec20d2742f92154f68a088c444dea64d7d0e6684fff07d2db5b6867d263bda1fb1b81b1c36de1f2d2496bd42f3879bdba96c301a58a7c040afa35ebcc46e497787d8f2535e23672611b9c9ad3cfac2c663130aecb703e4f3a2b3a840f92a53b090453fadd72f313c2bd14ba2ffbbbbea0b9d2fa2982f5fa7ce6d5220fb3840b562744b51f25bf49ce298a13d828abcd1444eecbec18b5c166bf462b9239fa120ecdd47d4e1aa87da2b741301337b152d8e832325dbf74846e84e2c9cf0", 0xde}, {&(0x7f0000000c00)="a569c7a3b986842901051774d47b89ba6490be1a2c6cc4cbd2182db962514511d48fa12066975e945e0b5a1e173fbddfacef8efff0d5009507074c112295c65a8a9c", 0x42}, {&(0x7f0000000c80)="a2ccb700b3ee60ee299be92dc3572c1f496dc8145bf2b794628516a7e5d88f744b612b6df6c79650e16ac65ababa735cb3247924902f1aaafe4ee18a9b9b0bb6769c2760fb1e4a065b53165a48bd1e2599ff61a14b0a329a9ac38c110b16c8336480df8028e0a7aab102cd9098e4fdf6e0867b72e9f1081d9b996cd3024ce7d602a2c9d3c2d9240213e456f32fc2c28a469854f70fce4ed86babb848bd8afaf721c4c822496365f69cee18fff4cfe9d78c88453ce347c15dc2d240ecdff14573896c746a9d3b4ecc4fd5adb8e29fc8e1f54c3f187866", 0xd6}], 0x5}, 0xc851) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x279, @remote}}, 0x1000, 0xffff}, 0x90) sendfile(0xffffffffffffffff, r2, 0x0, 0x2) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x4, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x85, &(0x7f0000000180)=""/133, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d80)=ANY=[@ANYRES64=r8, @ANYRES8=r6, @ANYRESOCT=r5], 0x20) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000004c0)={0x2, 0x4e20, @broadcast}, 0x10) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r10, &(0x7f0000000040)={0x1f, @any, 0x1}, 0xa) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r11, &(0x7f0000005dc0)={0x1f, @any, 0x15}, 0xa) shutdown(r10, 0x1) 10.25325062s ago: executing program 4 (id=966): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) mount$afs(&(0x7f00000004c0)=ANY=[@ANYRES8=r0], &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000080), 0x8000c0, 0x0) 10.188882184s ago: executing program 4 (id=967): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='devices.list\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x50}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) inotify_add_watch(0xffffffffffffffff, 0x0, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 7.871477595s ago: executing program 5 (id=972): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6\xda?uEy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\xabc\x10`\xee\xa9\x8b\x06%\xb8G\x9bh\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\x01\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7\xa9\xe5\xbbn\xec\xbeKu\x99\xab\xd4\xb2\xaa1\x99c5>\xa9\"O\x8b', 0x1) 7.857624778s ago: executing program 5 (id=973): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) unshare(0x60600) r1 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x199, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x2, 0x9}) mq_timedreceive(r1, 0x0, 0x0, 0x5, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x2090) shutdown(r2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0]) 7.66657253s ago: executing program 5 (id=974): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b0300000000000109022200010100803209040000010300000009211101000122170007058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000000)="0200") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) 6.98332331s ago: executing program 5 (id=975): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0xe) 6.98321236s ago: executing program 36 (id=904): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='-# -3 -4\n', 0x9) 1.760024722s ago: executing program 5 (id=977): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000700)="f313", 0x2}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) 1.728471849s ago: executing program 3 (id=978): r0 = socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cipher_null)\x00'}, 0x58) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x80) acct(&(0x7f00000000c0)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x7) recvmsg$inet_nvme(r0, &(0x7f0000004040)={0x0, 0x0, 0x0}, 0x220) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) 1.728068379s ago: executing program 7 (id=979): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x200008, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT, @ANYRESOCT=0x0], 0x1, 0x392, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000d0429bd70000000000000010000", @ANYRES32=r3, @ANYBLOB="9b060000000000001c00128009000100626f6e64000000000c0002800500010004"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) socket(0x1, 0x803, 0x0) socket$inet(0x2, 0x1, 0x9) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000", 0x17}], 0x1}, 0x0) 1.727779939s ago: executing program 4 (id=980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) setresgid(0xee00, 0x0, 0x0) sendto$unix(r4, 0x0, 0x0, 0xd1, 0x0, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) openat(0xffffffffffffff9c, 0x0, 0x302, 0x0) 935.714404ms ago: executing program 3 (id=981): inotify_init1(0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000500)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x10142, 0x0) 920.752457ms ago: executing program 7 (id=982): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='0x0200', 0x6) write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r1, &(0x7f00000006c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='8\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) write(r3, 0x0, 0x0) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000a40)='dummy_udc.0', 0xb) 757.449713ms ago: executing program 5 (id=983): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r5, r6, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r5, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r4}, 0x20) sendto(r4, &(0x7f0000000840)='{', 0x1, 0x8000, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, 0x0, 0x0) 741.573807ms ago: executing program 4 (id=984): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) unshare(0x60600) r1 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x199, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x2, 0x9}) mq_timedreceive(r1, 0x0, 0x0, 0x5, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x2090) shutdown(r2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0]) 645.483887ms ago: executing program 7 (id=985): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b0300000000000109022200010100803209040000010300000009211101000122170007058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000000)="0200") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) 527.685313ms ago: executing program 4 (id=986): r0 = openat2$dir(0xffffff9c, &(0x7f0000000080)='./trace\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x1ff) r1 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) quotactl$Q_SETINFO(0xffffffff80000602, 0x0, 0x0, 0x0) faccessat2(r0, 0x0, 0x1, 0x100) mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0xd3283d0369e269ba, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x9}}, 0x18) write(r2, &(0x7f0000000440)='44100,48000,88200,', 0x12) 226.55183ms ago: executing program 4 (id=987): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2800083, &(0x7f0000000280)={[{@clear_cache}, {@user_subvol_rm}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@nospace_cache}, {@nossd_spread}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x37, 0x25, 0x32, 0x36, 0x4c, 0x6d, 0x2d, 0x37, 0x35, 0x78, 0x6b, 0x36]}}, {@space_cache_v2}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r1, r0, 0x0, 0xffffffff) 0s ago: executing program 3 (id=988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000015c768692c7335ab0ac1fd0750a8faab117f8963b4d7f586090000000000000009", @ANYRES16=r1, @ANYBLOB="050000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060010000100000006001200010000000c00130082848b960c121824"], 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): 001: unknown main item tag 0x0 [ 45.413252][ T4378] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 45.414536][ T4378] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 45.415530][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.415899][ T4378] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 45.420422][ T4378] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 45.421709][ T4378] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 45.422969][ T4378] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 45.425610][ T4378] hid-generic 0000:47A1:0001.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 45.483463][ T4954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.485144][ T4954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.502886][ T4951] fido_id[4951]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.774049][ T4955] netlink: 'syz.1.195': attribute type 22 has an invalid length. [ 45.835832][ T4967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.836065][ T4965] syz.3.202 uses obsolete (PF_INET,SOCK_PACKET) [ 45.840955][ T4967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.141569][ T4979] IPv6: sit1: Disabled Multicast RS [ 46.528358][ T4992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.582262][ T4992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.584903][ T4992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.864649][ T4996] CIFS: bad ip= option (127®0.0.1) [ 46.866268][ T4996] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 46.873959][ T4996] CIFS: Attempting to mount \\127.0.0.1\share [ 46.875220][ T4996] FAULT_INJECTION: forcing a failure. [ 46.875220][ T4996] name failslab, interval 1, probability 0, space 0, times 0 [ 46.877648][ T4996] CPU: 0 PID: 4996 Comm: syz.0.214 Not tainted syzkaller #0 [ 46.878912][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 46.880594][ T4996] Call trace: [ 46.881174][ T4996] dump_backtrace+0x1c4/0x1f0 [ 46.882033][ T4996] show_stack+0x2c/0x3c [ 46.882807][ T4996] __dump_stack+0x30/0x40 [ 46.883602][ T4996] dump_stack_lvl+0xf4/0x15c [ 46.884429][ T4996] dump_stack+0x1c/0x5c [ 46.885178][ T4996] should_fail_ex+0x3cc/0x524 [ 46.886012][ T4996] __should_failslab+0xc0/0x11c [ 46.886868][ T4996] should_failslab+0x10/0x28 [ 46.887706][ T4996] __kmem_cache_alloc_node+0x7c/0x318 [ 46.888692][ T4996] kmalloc_trace+0x48/0x94 [ 46.889485][ T4996] cifs_smb3_do_mount+0x17c/0x680 [ 46.890408][ T4996] smb3_get_tree+0x474/0x88c [ 46.891250][ T4996] vfs_get_tree+0x90/0x278 [ 46.892064][ T4996] vfs_fsconfig_locked+0x1e0/0x374 [ 46.893001][ T4996] __arm64_sys_fsconfig+0x640/0x790 [ 46.893958][ T4996] invoke_syscall+0x98/0x290 [ 46.894828][ T4996] el0_svc_common+0x13c/0x258 [ 46.895711][ T4996] do_el0_svc+0x5c/0x134 [ 46.896494][ T4996] el0_svc+0x58/0x128 [ 46.897230][ T4996] el0t_64_sync_handler+0x84/0xf0 [ 46.898134][ T4996] el0t_64_sync+0x18c/0x190 [ 46.929053][ T5000] device syzkaller1 entered promiscuous mode [ 46.944542][ T5002] loop3: detected capacity change from 0 to 512 [ 46.981403][ T5002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.986145][ T5002] netlink: 36 bytes leftover after parsing attributes in process `syz.3.218'. [ 47.013957][ T5002] netlink: 14 bytes leftover after parsing attributes in process `syz.3.218'. [ 47.117765][ T5007] Set syz1 is full, maxelem 65536 reached [ 47.123278][ T5002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.153382][ T5002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.190494][ T5002] bond0 (unregistering): Released all slaves [ 47.766729][ T5020] Bluetooth: MGMT ver 1.22 [ 47.915276][ T5025] loop4: detected capacity change from 0 to 1024 [ 47.920164][ T5025] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 48.170572][ T5025] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.197783][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 48.239125][ T5032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.242786][ T5032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.300025][ T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 48.413905][ T5034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.415995][ T5034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.510600][ T7] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 48.512013][ T7] usb 1-1: config 0 has no interface number 0 [ 48.513016][ T7] usb 1-1: config 0 interface 41 has no altsetting 0 [ 48.540713][ T7] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 48.542441][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.543932][ T7] usb 1-1: Product: syz [ 48.544700][ T7] usb 1-1: Manufacturer: syz [ 48.545520][ T7] usb 1-1: SerialNumber: syz [ 48.563601][ T7] usb 1-1: config 0 descriptor?? [ 48.801833][ T5038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.807224][ T5038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.810284][ T5036] Set syz1 is full, maxelem 65536 reached [ 48.957423][ T5049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.963368][ T5049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.285701][ T5057] loop4: detected capacity change from 0 to 1024 [ 49.345503][ T5057] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.368924][ T5057] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.405297][ T5061] device-mapper: table: 248:0: multipath: not enough priority group arguments (-EINVAL) [ 49.407158][ T5061] device-mapper: ioctl: error adding target to table [ 49.411494][ T7] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 49.593767][ T5066] loop2: detected capacity change from 0 to 512 [ 49.694009][ T5066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.714646][ T5066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.241'. [ 49.775037][ T5071] netlink: 14 bytes leftover after parsing attributes in process `syz.2.241'. [ 49.966207][ T5071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.999776][ T5071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.037046][ T5071] bond0 (unregistering): Released all slaves [ 50.244237][ T5085] device syzkaller0 entered promiscuous mode [ 50.253501][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 50.291964][ T5093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.293571][ T5093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.367056][ T5099] input: syz0 as /devices/virtual/input/input4 [ 50.373650][ T5101] device-mapper: table: 248:0: multipath: not enough priority group arguments (-EINVAL) [ 50.382209][ T5101] device-mapper: ioctl: error adding target to table [ 50.417270][ T5103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.427270][ T5103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.475030][ T7] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 50.476837][ T7] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 50.480082][ T7] CoreChips: probe of 1-1:0.41 failed with error -71 [ 50.491005][ T7] usb 1-1: USB disconnect, device number 2 [ 50.978130][ T5116] loop1: detected capacity change from 0 to 1024 [ 51.017808][ T5116] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.040517][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 51.080612][ T5116] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 51.255883][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 51.305795][ T7] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 51.307205][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 51.309210][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 51.311084][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 51.315317][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.334934][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 51.344143][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.587831][ T7] usb 1-1: usb_control_msg returned -32 [ 51.588987][ T7] usbtmc 1-1:16.0: can't read capabilities [ 51.864971][ T4335] EXT4-fs (loop1): unmounting filesystem. [ 51.909602][ T5134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.912912][ T5134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.945839][ T5135] usb 1-1: usbtmc_ioctl_clear_out_halt returned -32 [ 52.059369][ T5143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.062058][ T5143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.486393][ T5145] jffs2: notice: (5145) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 52.603417][ T5152] binder: 5151:5152 tried to acquire reference to desc 0, got 1 instead [ 52.606628][ T5152] binder_alloc: 5151: binder_alloc_buf, no vma [ 52.620689][ T5152] binder: cannot allocate buffer: vma cleared, target dead or dying [ 52.620725][ T5152] binder: 5151:5152 transaction call to 5151:0 failed 12/29189/-3, size 0--29 line 3247 [ 52.625576][ T3901] binder: release 5151:5152 transaction 5 out, still active [ 52.627018][ T3901] binder: undelivered TRANSACTION_COMPLETE [ 52.638447][ T3901] binder: undelivered TRANSACTION_ERROR: 29189 [ 52.639728][ T3901] binder: send failed reply for transaction 5, target dead [ 52.915404][ T5162] loop1: detected capacity change from 0 to 1024 [ 52.919094][ T5162] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.988266][ T5162] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 52.992332][ T5160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.994240][ T5160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.627009][ T4381] usb 1-1: USB disconnect, device number 3 [ 53.676098][ T4335] EXT4-fs (loop1): unmounting filesystem. [ 53.776683][ T5173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.779335][ T5173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.187987][ T4381] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 54.367971][ T4381] usb 1-1: Using ep0 maxpacket: 8 [ 54.371976][ T4381] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 54.373579][ T4381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 54.374999][ T4381] usb 1-1: Product: syz [ 54.375726][ T4381] usb 1-1: Manufacturer: syz [ 54.376527][ T4381] usb 1-1: SerialNumber: syz [ 54.390001][ T4381] usb 1-1: config 0 descriptor?? [ 54.394066][ T4381] gspca_main: sq905-2.14.0 probing 2770:9120 [ 54.451422][ T5180] input: syz0 as /devices/virtual/input/input5 [ 54.758885][ T5190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.761895][ T5190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.325489][ T5192] mmap: syz.1.291 (5192) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.422027][ T4381] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 55.423391][ T4381] sq905: probe of 1-1:0.0 failed with error -71 [ 55.428296][ T4381] usb 1-1: USB disconnect, device number 4 [ 55.592466][ T5200] loop1: detected capacity change from 0 to 1024 [ 55.766213][ T5200] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 55.809254][ T5200] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 56.245788][ T4335] EXT4-fs (loop1): unmounting filesystem. [ 57.563383][ T113] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 57.772768][ T113] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 57.774436][ T113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.803347][ T113] usb 1-1: ATUSB: AT86RF231 version 3 [ 59.009229][ T113] usb 1-1: Firmware version (0.0) predates our first public release. [ 59.010679][ T113] usb 1-1: Please update to version 0.2 or newer [ 61.640354][ T113] usb 1-1: USB disconnect, device number 5 [ 61.676203][ T5240] XFS (loop0): Invalid device [./loop0], error=-16 [ 62.155085][ T5253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.170593][ T5253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.173900][ T5251] device syzkaller0 entered promiscuous mode [ 62.519627][ T113] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 62.630876][ T5257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.316'. [ 62.754446][ T113] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 62.756376][ T113] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.786834][ T113] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 62.788414][ T113] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 62.789719][ T113] usb 1-1: Product: syz [ 62.799653][ T113] usb 1-1: can't set config #4, error -71 [ 62.811300][ T113] usb 1-1: USB disconnect, device number 6 [ 63.426020][ T5292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.427581][ T5292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.979892][ T5305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.983847][ T5305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.489407][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.490723][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.678632][ T5311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.682334][ T5311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.334624][ T5313] binder: 5312:5313 tried to acquire reference to desc 0, got 1 instead [ 65.340739][ T113] binder: release 5312:5313 transaction 17 out, still active [ 65.342288][ T113] binder: undelivered TRANSACTION_COMPLETE [ 65.354829][ T5245] binder: send failed reply for transaction 17, target dead [ 65.545153][ T5319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.547662][ T5319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.769072][ T4334] Bluetooth: hci5: command 0xfc11 tx timeout [ 65.770671][ T4345] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 66.688005][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 66.881692][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.884381][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.886199][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 66.898492][ T22] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 66.900223][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.909524][ T22] usb 1-1: config 0 descriptor?? [ 67.320318][ T22] sony 0003:054C:09CC.0002: unknown main item tag 0x0 [ 67.322028][ T22] sony 0003:054C:09CC.0002: unknown main item tag 0x0 [ 67.323115][ T22] sony 0003:054C:09CC.0002: unknown main item tag 0x0 [ 67.324429][ T22] sony 0003:054C:09CC.0002: unknown main item tag 0x0 [ 67.325605][ T22] sony 0003:054C:09CC.0002: unknown main item tag 0x0 [ 67.326776][ T22] sony 0003:054C:09CC.0002: unknown main item tag 0x0 [ 67.342930][ T22] sony 0003:054C:09CC.0002: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 67.346340][ T22] sony 0003:054C:09CC.0002: failed to claim input [ 67.481597][ T5338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.343'. [ 67.484308][ T5338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.343'. [ 67.549101][ T3901] usb 1-1: USB disconnect, device number 7 [ 67.612739][ T5342] FAULT_INJECTION: forcing a failure. [ 67.612739][ T5342] name failslab, interval 1, probability 0, space 0, times 0 [ 67.614882][ T5342] CPU: 1 PID: 5342 Comm: syz.4.345 Not tainted syzkaller #0 [ 67.616062][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.617608][ T5342] Call trace: [ 67.618175][ T5342] dump_backtrace+0x1c4/0x1f0 [ 67.619032][ T5342] show_stack+0x2c/0x3c [ 67.619811][ T5342] __dump_stack+0x30/0x40 [ 67.620660][ T5342] dump_stack_lvl+0xf4/0x15c [ 67.621503][ T5342] dump_stack+0x1c/0x5c [ 67.622271][ T5342] should_fail_ex+0x3cc/0x524 [ 67.623124][ T5342] __should_failslab+0xc0/0x11c [ 67.624023][ T5342] should_failslab+0x10/0x28 [ 67.624843][ T5342] kmem_cache_alloc+0x88/0x310 [ 67.625711][ T5342] mas_alloc_nodes+0x284/0x758 [ 67.626588][ T5342] mas_preallocate+0x13c/0x310 [ 67.627485][ T5342] __vma_adjust+0x26c/0x16fc [ 67.628339][ T5342] __split_vma+0x328/0x44c [ 67.629150][ T5342] split_vma+0xa0/0xf8 [ 67.629905][ T5342] mprotect_fixup+0x3e4/0x610 [ 67.630785][ T5342] __arm64_sys_mprotect+0x5f0/0xa10 [ 67.631755][ T5342] invoke_syscall+0x98/0x290 [ 67.632592][ T5342] el0_svc_common+0x13c/0x258 [ 67.633445][ T5342] do_el0_svc+0x5c/0x134 [ 67.634239][ T5342] el0_svc+0x58/0x128 [ 67.634982][ T5342] el0t_64_sync_handler+0x84/0xf0 [ 67.635933][ T5342] el0t_64_sync+0x18c/0x190 [ 67.825237][ T5346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.827223][ T5346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.401816][ T5358] nbd0: detected capacity change from 0 to 16 [ 68.406906][ T5358] block nbd0: shutting down sockets [ 68.412303][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.413677][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.415683][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.417270][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.422161][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.423657][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.426173][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.427821][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.429462][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.431077][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.432535][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.434095][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.435547][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.437144][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.438630][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.440170][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.441528][ T4318] ldm_validate_partition_table(): Disk read failed. [ 68.442689][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.444239][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.445693][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.447269][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.448856][ T4318] Dev nbd0: unable to read RDB block 0 [ 68.451138][ T4318] nbd0: unable to read partition table [ 68.452236][ T4318] nbd0: partition table beyond EOD, truncated [ 68.509786][ T5364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.354'. [ 68.511616][ T5364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.354'. [ 68.554996][ T5366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.556675][ T5366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.798018][ T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 68.979923][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.981687][ T22] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 68.983180][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.268595][ T5372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.281724][ T5372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.399074][ T22] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 69.405205][ T22] wacom 0003:056A:033B.0003: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 69.407819][ T22] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0003/input/input10 [ 69.609216][ T3778] cfg80211: failed to load regulatory.db [ 69.899342][ T22] usb 1-1: USB disconnect, device number 8 [ 71.532716][ T4345] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.534800][ T4345] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.536319][ T4345] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.538739][ T4345] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.540723][ T4345] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 71.543288][ T4345] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.975245][ T5422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.976750][ T5422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.048443][ T5426] FAULT_INJECTION: forcing a failure. [ 73.048443][ T5426] name failslab, interval 1, probability 0, space 0, times 0 [ 73.050656][ T5426] CPU: 0 PID: 5426 Comm: syz.0.373 Not tainted syzkaller #0 [ 73.051850][ T5426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.053666][ T5426] Call trace: [ 73.054255][ T5426] dump_backtrace+0x1c4/0x1f0 [ 73.055123][ T5426] show_stack+0x2c/0x3c [ 73.055899][ T5426] __dump_stack+0x30/0x40 [ 73.056692][ T5426] dump_stack_lvl+0xf4/0x15c [ 73.057543][ T5426] dump_stack+0x1c/0x5c [ 73.058326][ T5426] should_fail_ex+0x3cc/0x524 [ 73.059212][ T5426] __should_failslab+0xc0/0x11c [ 73.060081][ T5426] should_failslab+0x10/0x28 [ 73.060913][ T5426] __kmem_cache_alloc_node+0x7c/0x318 [ 73.061902][ T5426] kmalloc_trace+0x48/0x94 [ 73.062709][ T5426] blk_stat_alloc_callback+0x70/0x1ec [ 73.063667][ T5426] blk_mq_init_allocated_queue+0x144/0x161c [ 73.064733][ T5426] __blk_mq_alloc_disk+0xb4/0x1e0 [ 73.065643][ T5426] loop_add+0x2c4/0x810 [ 73.066401][ T5426] loop_control_ioctl+0x130/0x514 [ 73.067285][ T5426] __arm64_sys_ioctl+0x14c/0x1c8 [ 73.068179][ T5426] invoke_syscall+0x98/0x290 [ 73.069014][ T5426] el0_svc_common+0x13c/0x258 [ 73.069859][ T5426] do_el0_svc+0x5c/0x134 [ 73.070642][ T5426] el0_svc+0x58/0x128 [ 73.071412][ T5426] el0t_64_sync_handler+0x84/0xf0 [ 73.072307][ T5426] el0t_64_sync+0x18c/0x190 [ 73.083048][ T5424] device syzkaller0 entered promiscuous mode [ 73.174236][ T5433] input: syz0 as /devices/virtual/input/input13 [ 73.306999][ T5437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.310148][ T5437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.528233][ T5245] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 73.607975][ T4345] Bluetooth: hci5: command 0x0409 tx timeout [ 73.715547][ T5245] usb 1-1: Dual-Role OTG device on HNP port [ 73.717847][ T5245] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 6.01 [ 73.720953][ T5245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.739937][ T5245] usbhid 1-1:1.0: can't add hid device: -22 [ 73.742215][ T5245] usbhid: probe of 1-1:1.0 failed with error -22 [ 74.641872][ T5452] loop3: detected capacity change from 0 to 256 [ 75.687960][ T4337] Bluetooth: hci5: command 0x041b tx timeout [ 77.767973][ T4345] Bluetooth: hci5: command 0x040f tx timeout [ 79.847998][ T4337] Bluetooth: hci5: command 0x0419 tx timeout [ 84.669179][ T5466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.391'. [ 84.670852][ T5466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.391'. [ 85.234417][ T27] audit: type=1400 audit(85.220:2): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=223A6F pid=5473 comm="syz.4.394" name=223A6F offset=66 [ 85.421742][ T5460] netlink: 52 bytes leftover after parsing attributes in process `syz.3.389'. [ 85.426903][ T5460] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.428634][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.543829][ T4625] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.593589][ T5486] netlink: 'syz.3.399': attribute type 20 has an invalid length. [ 85.672479][ T4625] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.710053][ T5393] chnl_net:caif_netlink_parms(): no params data found [ 85.739379][ T5495] loop2: detected capacity change from 0 to 2048 [ 85.757253][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.759143][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.766297][ T5393] device bridge_slave_0 entered promiscuous mode [ 86.089804][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.091708][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.100177][ T5393] device bridge_slave_1 entered promiscuous mode [ 86.410524][ T5502] capability: warning: `syz.2.402' uses deprecated v2 capabilities in a way that may be insecure [ 86.418386][ T5495] GPT:first_usable_lbas don't match. [ 86.423798][ T5495] GPT:34 != 290 [ 86.424505][ T5495] GPT: Use GNU Parted to correct GPT errors. [ 86.425892][ T5495] loop2: p1 p2 p3 [ 86.440484][ T4625] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.444975][ T5393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.449967][ T5393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.537057][ T5508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.538825][ T5508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.544336][ T5393] team0: Port device team_slave_0 added [ 86.551762][ T5393] team0: Port device team_slave_1 added [ 86.553414][ T5510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.554985][ T5510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.908728][ T5510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.910534][ T5510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.011490][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.015237][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.036862][ T5393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.075205][ T5463] udevd[5463]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 87.078331][ T5461] udevd[5461]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 87.088464][ T4625] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.089186][ T5505] udevd[5505]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 87.095603][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.097183][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.103002][ T5393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.144702][ T5393] device hsr_slave_0 entered promiscuous mode [ 87.172045][ T5393] device hsr_slave_1 entered promiscuous mode [ 87.191782][ T5393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.193083][ T5393] Cannot create hsr debugfs directory [ 87.735905][ T5527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.411'. [ 87.738965][ T5393] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.793932][ T5393] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.860357][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 87.861990][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 87.874058][ T5393] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.645766][ T5393] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.362197][ T5558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.367191][ T5558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.565305][ T5558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.578842][ T5558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.611816][ T5393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.649005][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.650677][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.653144][ T5393] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.670816][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.672532][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.674223][ T4623] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.675634][ T4623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.677890][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.686776][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.691983][ T4623] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.693180][ T4623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.706859][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.708703][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.713303][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.717188][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.730034][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.736082][ T5393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.738150][ T5393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.749134][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.750701][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.752939][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.755468][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.768739][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.772359][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.781613][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.788332][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.979062][ T5393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.981453][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.982927][ T241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.715384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.717244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.742703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.744401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.746228][ T5393] device veth0_vlan entered promiscuous mode [ 90.751544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.753238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.763331][ T5393] device veth1_vlan entered promiscuous mode [ 90.803280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.804972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.806479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.808169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.817883][ T5393] device veth0_macvtap entered promiscuous mode [ 90.826314][ T5393] device veth1_macvtap entered promiscuous mode [ 90.867153][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.877195][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.885919][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.894505][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.904324][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.912261][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.922224][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.957459][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.960575][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.967652][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.987543][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.996447][ T5609] loop0: detected capacity change from 0 to 32768 [ 91.004835][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.006356][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.007936][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.009648][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.013406][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.014212][ T5609] ======================================================= [ 91.014212][ T5609] WARNING: The mand mount option has been deprecated and [ 91.014212][ T5609] and is ignored by this kernel. Remove the mand [ 91.014212][ T5609] option from the mount to silence this warning. [ 91.014212][ T5609] ======================================================= [ 91.026763][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.028460][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.030379][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.032030][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.058740][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.060422][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.062231][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.063928][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.065785][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.096013][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.100589][ T5623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.431'. [ 91.102156][ T5623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.431'. [ 91.104664][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.106399][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.120464][ T5393] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.121997][ T5393] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.130343][ T5393] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.131915][ T5393] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.164745][ T5609] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 91.261915][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.263525][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.278886][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.285813][ T5609] JBD2: Ignoring recovery information on journal [ 91.329756][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.331085][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.333158][ T4623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.405837][ T5609] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 91.906857][ T4328] ocfs2: Unmounting device (7,0) on (node local) [ 94.338949][ T4345] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 94.340711][ T4345] CPU: 1 PID: 4345 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 94.341863][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.343391][ T4345] Workqueue: hci0 hci_rx_work [ 94.344122][ T4345] Call trace: [ 94.344698][ T4345] dump_backtrace+0x1c4/0x1f0 [ 94.345536][ T4345] show_stack+0x2c/0x3c [ 94.346335][ T4345] __dump_stack+0x30/0x40 [ 94.347157][ T4345] dump_stack_lvl+0xf4/0x15c [ 94.348032][ T4345] dump_stack+0x1c/0x5c [ 94.348823][ T4345] sysfs_create_dir_ns+0x244/0x264 [ 94.349799][ T4345] kobject_add_internal+0x5a8/0xb18 [ 94.350800][ T4345] kobject_add+0x144/0x20c [ 94.351648][ T4345] device_add+0x3dc/0xe4c [ 94.352446][ T4345] hci_conn_add_sysfs+0xb8/0x1bc [ 94.353347][ T4345] hci_sync_conn_complete_evt+0x5f8/0x944 [ 94.354394][ T4345] hci_event_packet+0x698/0xe60 [ 94.355299][ T4345] hci_rx_work+0x310/0xa70 [ 94.356116][ T4345] process_one_work+0x7e4/0x13bc [ 94.357035][ T4345] worker_thread+0x8cc/0xfe8 [ 94.357868][ T4345] kthread+0x254/0x2e0 [ 94.358636][ T4345] ret_from_fork+0x10/0x20 [ 94.360004][ T4345] kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 94.362304][ T4345] Bluetooth: hci0: failed to register connection device [ 94.471111][ T5698] loop3: detected capacity change from 0 to 512 [ 94.472611][ T5698] EXT4-fs: inline encryption not supported [ 94.593069][ T5698] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.445: inode #1: comm syz.3.445: iget: illegal inode # [ 94.613922][ T5698] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.445: error while reading EA inode 1 err=-117 [ 94.630320][ T5698] EXT4-fs (loop3): 1 orphan inode deleted [ 94.633507][ T5698] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 94.709350][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 95.015572][ T5712] device syzkaller0 entered promiscuous mode [ 95.295390][ T5735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.303496][ T5735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.855511][ T5749] loop4: detected capacity change from 0 to 1024 [ 95.856982][ T5749] EXT4-fs: Ignoring removed bh option [ 95.881293][ T5735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.884076][ T5735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.949091][ T5749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.990073][ T5749] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 96.026361][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 96.211952][ T5763] loop0: detected capacity change from 0 to 1024 [ 96.219654][ T5763] ext4: Unknown parameter 'nouser_xattr' [ 96.353539][ T4337] Bluetooth: hci0: command 0x0409 tx timeout [ 96.476665][ T5768] loop3: detected capacity change from 0 to 512 [ 96.603541][ T5768] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 96.838795][ T5768] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.458: Invalid inode table block 4134528463 in block_group 0 [ 96.861920][ T5768] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 96.870432][ T5768] EXT4-fs error (device loop3): __ext4_unlink:3329: inode #2: comm syz.3.458: mark_inode_dirty error [ 96.911369][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 98.301145][ T4345] Bluetooth: hci0: command 0x0406 tx timeout [ 99.435100][ T5796] loop4: detected capacity change from 0 to 128 [ 99.462981][ T5796] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 99.568771][ T5796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.080039][ T5805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.088587][ T5805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.390212][ T5813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.391817][ T5813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.555060][ T5806] device syzkaller1 entered promiscuous mode [ 101.183480][ T5837] loop4: detected capacity change from 0 to 512 [ 102.566596][ T5851] jffs2: notice: (5851) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 103.092750][ T5866] __vm_enough_memory: pid: 5866, comm: syz.0.480, no enough memory for the allocation [ 104.589280][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 104.591945][ T5843] netlink: 14 bytes leftover after parsing attributes in process `syz.4.475'. [ 105.320246][ T4337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.326366][ T4337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.333689][ T4337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.345344][ T4337] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.353944][ T4337] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 105.357599][ T4337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.596221][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.947062][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.320403][ T5843] bond0 (unregistering): Released all slaves [ 106.894658][ T4625] device hsr_slave_0 left promiscuous mode [ 106.912128][ T5898] jffs2: notice: (5898) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.379717][ T4345] Bluetooth: hci2: command 0x0409 tx timeout [ 107.899728][ T4625] device hsr_slave_1 left promiscuous mode [ 108.018047][ T5917] loop3: detected capacity change from 0 to 1024 [ 108.260480][ T5928] loop4: detected capacity change from 0 to 16 [ 108.281846][ T5928] erofs: (device loop4): mounted with root inode @ nid 36. [ 108.854047][ T5935] loop0: detected capacity change from 0 to 512 [ 108.860281][ T5935] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.993691][ T5935] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.497: corrupted in-inode xattr [ 109.000649][ T5935] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.497: couldn't read orphan inode 15 (err -117) [ 109.011064][ T5935] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.089789][ T5941] loop3: detected capacity change from 0 to 1024 [ 109.262110][ T5941] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.348965][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.351727][ T4345] Bluetooth: hci2: command 0x041b tx timeout [ 109.365828][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.383996][ T5941] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 109.489588][ T4625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.491119][ T4625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.497158][ T4625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.498373][ T4625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.502737][ T4625] device bridge_slave_1 left promiscuous mode [ 109.504682][ T4625] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.727571][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 109.783352][ T5945] jffs2: notice: (5945) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 109.829722][ T4625] device bridge_slave_0 left promiscuous mode [ 109.830877][ T4625] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.925610][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 110.327014][ T5955] loop0: detected capacity change from 0 to 2048 [ 110.473004][ T5955] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 110.539701][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 110.705185][ T5961] FAULT_INJECTION: forcing a failure. [ 110.705185][ T5961] name failslab, interval 1, probability 0, space 0, times 0 [ 110.707580][ T5961] CPU: 1 PID: 5961 Comm: syz.0.504 Not tainted syzkaller #0 [ 110.708783][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 110.710611][ T5961] Call trace: [ 110.711246][ T5961] dump_backtrace+0x1c4/0x1f0 [ 110.712121][ T5961] show_stack+0x2c/0x3c [ 110.712867][ T5961] __dump_stack+0x30/0x40 [ 110.713678][ T5961] dump_stack_lvl+0xf4/0x15c [ 110.714535][ T5961] dump_stack+0x1c/0x5c [ 110.715295][ T5961] should_fail_ex+0x3cc/0x524 [ 110.716185][ T5961] __should_failslab+0xc0/0x11c [ 110.717077][ T5961] should_failslab+0x10/0x28 [ 110.717951][ T5961] kmem_cache_alloc+0x88/0x310 [ 110.718860][ T5961] configfs_new_dirent+0x6c/0x32c [ 110.719771][ T5961] configfs_make_dirent+0x48/0x194 [ 110.720701][ T5961] configfs_create_file+0xdc/0x134 [ 110.721631][ T5961] configfs_attach_item+0x550/0x83c [ 110.722614][ T5961] configfs_attach_group+0x40/0x318 [ 110.723603][ T5961] configfs_mkdir+0x574/0x884 [ 110.724477][ T5961] vfs_mkdir+0x314/0x4d8 [ 110.725278][ T5961] do_mkdirat+0x1b8/0x3ec [ 110.726058][ T5961] __arm64_sys_mkdirat+0x90/0xa8 [ 110.726973][ T5961] invoke_syscall+0x98/0x290 [ 110.727835][ T5961] el0_svc_common+0x13c/0x258 [ 110.728733][ T5961] do_el0_svc+0x5c/0x134 [ 110.729513][ T5961] el0_svc+0x58/0x128 [ 110.730276][ T5961] el0t_64_sync_handler+0x84/0xf0 [ 110.731192][ T5961] el0t_64_sync+0x18c/0x190 [ 111.147031][ T5972] jffs2: notice: (5972) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 111.214837][ T4625] device veth1_macvtap left promiscuous mode [ 111.216297][ T4625] device veth0_macvtap left promiscuous mode [ 111.217487][ T4625] device veth1_vlan left promiscuous mode [ 111.218645][ T4625] device veth0_vlan left promiscuous mode [ 111.336137][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 111.349258][ T5977] FAULT_INJECTION: forcing a failure. [ 111.349258][ T5977] name failslab, interval 1, probability 0, space 0, times 0 [ 111.358916][ T5977] CPU: 0 PID: 5977 Comm: syz.5.511 Not tainted syzkaller #0 [ 111.360437][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 111.362271][ T5977] Call trace: [ 111.362855][ T5977] dump_backtrace+0x1c4/0x1f0 [ 111.363702][ T5977] show_stack+0x2c/0x3c [ 111.364466][ T5977] __dump_stack+0x30/0x40 [ 111.365248][ T5977] dump_stack_lvl+0xf4/0x15c [ 111.366057][ T5977] dump_stack+0x1c/0x5c [ 111.366801][ T5977] should_fail_ex+0x3cc/0x524 [ 111.367677][ T5977] __should_failslab+0xc0/0x11c [ 111.368621][ T5977] should_failslab+0x10/0x28 [ 111.369475][ T5977] __kmem_cache_alloc_node+0x7c/0x318 [ 111.370474][ T5977] kmalloc_trace+0x48/0x94 [ 111.371328][ T5977] __io_uring_add_tctx_node+0x138/0x3dc [ 111.372374][ T5977] io_uring_install_fd+0x48/0xa0 [ 111.373326][ T5977] io_uring_create+0x740/0xb34 [ 111.374213][ T5977] __arm64_sys_io_uring_setup+0x2a4/0x2e8 [ 111.375280][ T5977] invoke_syscall+0x98/0x290 [ 111.376144][ T5977] el0_svc_common+0x13c/0x258 [ 111.377027][ T5977] do_el0_svc+0x5c/0x134 [ 111.377779][ T5977] el0_svc+0x58/0x128 [ 111.378488][ T5977] el0t_64_sync_handler+0x84/0xf0 [ 111.379383][ T5977] el0t_64_sync+0x18c/0x190 [ 111.722190][ T5981] __vm_enough_memory: pid: 5981, comm: syz.5.512, no enough memory for the allocation [ 113.332708][ T4345] Bluetooth: hci2: command 0x0419 tx timeout [ 115.203824][ T5997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.206604][ T5997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.786954][ T4625] team0 (unregistering): Port device team_slave_1 removed [ 116.913189][ T4625] team0 (unregistering): Port device team_slave_0 removed [ 117.036858][ T4625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.180620][ T4625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.299251][ T4625] bond0 (unregistering): Released all slaves [ 118.749058][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 118.766992][ T6011] loop3: detected capacity change from 0 to 512 [ 119.174830][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.183932][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.186194][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.195060][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.211266][ T5881] device bridge_slave_0 entered promiscuous mode [ 119.239795][ T6011] bond1: option mode: unable to set because the bond device is up [ 119.243610][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.256149][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.266452][ T5881] device bridge_slave_1 entered promiscuous mode [ 119.335136][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.342767][ T6033] netlink: 14 bytes leftover after parsing attributes in process `syz.3.521'. [ 119.356437][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.429905][ T5881] team0: Port device team_slave_0 added [ 119.443359][ T5881] team0: Port device team_slave_1 added [ 119.454962][ T6022] md: could not open device unknown-block(0,0). [ 119.456272][ T6022] md: error, md_import_device() returned -6 [ 119.550340][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.551717][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.556604][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.658047][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.659421][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.677028][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.751020][ T6054] No source specified [ 119.766282][ T6054] binder: 6045:6054 ioctl 4018620d 0 returned -22 [ 120.347799][ T5881] device hsr_slave_0 entered promiscuous mode [ 120.717824][ T5881] device hsr_slave_1 entered promiscuous mode [ 120.901269][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.907564][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.000453][ T6079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.002803][ T6079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.020251][ T6079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.027183][ T6079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.229136][ T5881] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 121.447944][ T6083] loop3: detected capacity change from 0 to 1024 [ 121.505917][ T6085] loop0: detected capacity change from 0 to 512 [ 121.561660][ T5881] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 122.003769][ T6096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.012294][ T6096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.208773][ T6085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.271559][ T6093] netlink: 14 bytes leftover after parsing attributes in process `syz.0.536'. [ 122.389072][ T6103] xt_hashlimit: size too large, truncated to 1048576 [ 122.390433][ T6103] xt_hashlimit: max too large, truncated to 1048576 [ 122.656430][ T6093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.751511][ T6093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.779355][ T6093] bond0 (unregistering): Released all slaves [ 122.859660][ T6107] loop3: detected capacity change from 0 to 1024 [ 123.087857][ T6107] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.100551][ T5881] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 123.220384][ T6107] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.531373][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 123.682881][ T6117] md: array md0 already has disks! [ 124.099014][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.100348][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 124.165335][ T5881] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.169936][ T6128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.174099][ T6128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.181400][ T6117] md: could not open device unknown-block(0,0). [ 124.182633][ T6117] md: error, md_import_device() returned -6 [ 124.184177][ T6122] md: could not open device unknown-block(1,1). [ 124.185523][ T6122] md: error, md_import_device() returned -16 [ 125.029856][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.043591][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.045180][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.051706][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.066735][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.068416][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.070034][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.071443][ T4474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.074368][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.083763][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.085719][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.094998][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.096184][ T4474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.097638][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.109870][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.119851][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.128411][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.150640][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.157941][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.182436][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.190897][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.194718][ T5881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.196636][ T5881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.199315][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.208329][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.209975][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.379056][ T6168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.554'. [ 125.489396][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.492239][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.494037][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.615173][ T6179] loop4: detected capacity change from 0 to 512 [ 125.724639][ T6165] loop3: detected capacity change from 0 to 32768 [ 125.728234][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.783422][ T6165] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.553 (6165) [ 125.846957][ T6165] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 125.848827][ T6165] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 125.873353][ T6165] BTRFS info (device loop3): setting nodatacow, compression disabled [ 125.880282][ T6165] BTRFS info (device loop3): setting datasum, datacow enabled [ 125.884032][ T6165] BTRFS info (device loop3): force clearing of disk cache [ 125.896437][ T6165] BTRFS info (device loop3): enabling ssd optimizations [ 125.904433][ T6165] BTRFS info (device loop3): using spread ssd allocation scheme [ 125.906579][ T6165] BTRFS info (device loop3): turning on sync discard [ 125.911697][ T6165] BTRFS info (device loop3): not using ssd optimizations [ 125.922110][ T6165] BTRFS info (device loop3): not using spread ssd allocation scheme [ 125.923803][ T6165] BTRFS info (device loop3): using free space tree [ 126.081799][ T6186] netlink: 14 bytes leftover after parsing attributes in process `syz.4.556'. [ 126.554158][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.555996][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.591593][ T6165] BTRFS info (device loop3): rebuilding free space tree [ 126.609251][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.614536][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.616327][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.619765][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.630858][ T5881] device veth0_vlan entered promiscuous mode [ 126.643532][ T5881] device veth1_vlan entered promiscuous mode [ 126.670546][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.672520][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 126.678818][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.686910][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.695130][ T5881] device veth0_macvtap entered promiscuous mode [ 126.700011][ T5881] device veth1_macvtap entered promiscuous mode [ 126.715056][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.733180][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.734987][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.752454][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.754567][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.756458][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.758203][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.760413][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.764679][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.766635][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.792615][ T4331] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 126.795860][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.810204][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.813699][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.817532][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.819723][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.836596][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.838534][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.840194][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.841975][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.843685][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.845412][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.913811][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.915615][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.935071][ T5881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.943660][ T5881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.959787][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.973074][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.976655][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.993301][ T5463] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (5463) [ 127.012579][ T5881] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.014151][ T5881] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.015762][ T5881] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.030482][ T5881] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.140721][ T4635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.142240][ T4635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.143599][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 127.242608][ T6240] loop4: detected capacity change from 0 to 2048 [ 127.265278][ T4635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.266624][ T4635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.269197][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.600931][ T6240] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 127.959364][ T6257] No source specified [ 127.971518][ T6257] binder: 6254:6257 ioctl 4018620d 0 returned -22 [ 128.415732][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 128.526903][ T6263] loop6: detected capacity change from 0 to 512 [ 128.537281][ T6260] md: array md0 already has disks! [ 128.631554][ T6273] jffs2: notice: (6273) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 128.660358][ T6263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.691489][ T6260] md: could not open device unknown-block(0,0). [ 128.692843][ T6260] md: error, md_import_device() returned -6 [ 128.693960][ T6270] md: could not open device unknown-block(1,1). [ 128.694994][ T6270] md: error, md_import_device() returned -16 [ 128.775458][ T6278] netlink: 14 bytes leftover after parsing attributes in process `syz.6.567'. [ 129.766137][ T6297] nvmet: adding nsid 1 to subsystem testsubsys [ 129.832942][ T6297] nvmet: transport type 0 not supported [ 129.889126][ T6297] nvme_fabrics: missing parameter 'transport=%s' [ 129.891668][ T6297] nvme_fabrics: missing parameter 'nqn=%s' [ 130.230852][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.232634][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.514216][ T6278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.883968][ T6278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.149875][ T6278] bond0 (unregistering): Released all slaves [ 131.880968][ T6341] xt_hashlimit: size too large, truncated to 1048576 [ 131.882150][ T6341] xt_hashlimit: max too large, truncated to 1048576 [ 132.148280][ T6323] loop0: detected capacity change from 0 to 32768 [ 132.209713][ T6323] (syz.0.581,6323,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.218910][ T6323] (syz.0.581,6323,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.337508][ T6323] JBD2: Ignoring recovery information on journal [ 132.395529][ T6323] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 132.438333][ T6323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.581'. [ 133.153422][ T4328] ocfs2: Unmounting device (7,0) on (node local) [ 133.657235][ T6372] bridge0: port 3(syz_tun) entered blocking state [ 133.659162][ T6372] bridge0: port 3(syz_tun) entered disabled state [ 133.799262][ T6374] __vm_enough_memory: pid: 6374, comm: syz.3.591, no enough memory for the allocation [ 133.812386][ T6372] device syz_tun entered promiscuous mode [ 133.815252][ T6372] bridge0: port 3(syz_tun) entered blocking state [ 133.816669][ T6372] bridge0: port 3(syz_tun) entered forwarding state [ 133.819474][ T6371] bridge0: port 4(ip6gretap0) entered blocking state [ 133.820730][ T6371] bridge0: port 4(ip6gretap0) entered disabled state [ 133.822156][ T6371] device ip6gretap0 entered promiscuous mode [ 133.823458][ T6371] bridge0: port 4(ip6gretap0) entered blocking state [ 133.824632][ T6371] bridge0: port 4(ip6gretap0) entered forwarding state [ 133.996433][ T6379] loop0: detected capacity change from 0 to 1024 [ 134.025644][ T6379] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.260735][ T6379] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.297729][ T6412] loop5: detected capacity change from 0 to 8 [ 135.509692][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.521868][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.181278][ T6426] No source specified [ 136.497620][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 136.764084][ T6438] __vm_enough_memory: pid: 6438, comm: syz.0.605, no enough memory for the allocation [ 136.907792][ T6440] __vm_enough_memory: pid: 6440, comm: syz.3.606, no enough memory for the allocation [ 137.134431][ T6446] loop5: detected capacity change from 0 to 512 [ 137.574573][ T6460] ip_tables: iptables: counters copy to user failed while replacing table [ 137.667881][ T6467] loop0: detected capacity change from 0 to 128 [ 137.699111][ T6467] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.221956][ T6446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.255358][ T6446] netlink: 36 bytes leftover after parsing attributes in process `syz.5.608'. [ 138.313199][ T6498] netlink: 14 bytes leftover after parsing attributes in process `syz.5.608'. [ 138.683995][ T6507] __vm_enough_memory: pid: 6507, comm: syz.3.620, no enough memory for the allocation [ 138.693433][ T6509] kAFS: unparsable volume name [ 138.785654][ T6511] netlink: 24 bytes leftover after parsing attributes in process `syz.6.621'. [ 139.018339][ T6498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.404348][ T6526] kAFS: unparsable volume name [ 139.773865][ T6534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.876328][ T6534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.051732][ T6534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.064034][ T6534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.069657][ T6498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.282310][ T6534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.284945][ T6534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.572247][ T6498] bond0 (unregistering): Released all slaves [ 141.602772][ T6567] __vm_enough_memory: pid: 6567, comm: syz.4.634, no enough memory for the allocation [ 142.206242][ T6580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.223826][ T6580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.426496][ T6583] __vm_enough_memory: pid: 6583, comm: syz.4.639, no enough memory for the allocation [ 143.682050][ C0] vcan0: j1939_tp_rxtimer: 0x0000000009a2d94e: rx timeout, send abort [ 144.179995][ C0] vcan0: j1939_tp_rxtimer: 0x00000000abab5607: rx timeout, send abort [ 144.181566][ C0] vcan0: j1939_tp_rxtimer: 0x0000000009a2d94e: abort rx timeout. Force session deactivation [ 144.660154][ C0] vcan0: j1939_tp_rxtimer: 0x00000000abab5607: abort rx timeout. Force session deactivation [ 150.434531][ T4337] Bluetooth: hci0: command 0x0406 tx timeout [ 150.435738][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 150.436701][ T4337] Bluetooth: hci1: command 0x0406 tx timeout [ 156.302084][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 156.858390][ T6611] device syzkaller0 entered promiscuous mode [ 157.157325][ T6638] loop3: detected capacity change from 0 to 512 [ 157.220550][ T6638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.246088][ T4337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.251178][ T4337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.253303][ T4337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.255544][ T4337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.257102][ T4337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.258837][ T4337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.416077][ T6638] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 159.187294][ T4345] Bluetooth: hci0: command 0x0409 tx timeout [ 159.994508][ T4345] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 159.999306][ T4345] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.002969][ T4345] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.019467][ T4345] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 160.030793][ T4345] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 160.033991][ T4345] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 161.168954][ T4337] Bluetooth: hci0: command 0x041b tx timeout [ 162.005701][ T4345] Bluetooth: hci6: command 0x0409 tx timeout [ 163.150984][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 163.989125][ T4345] Bluetooth: hci6: command 0x041b tx timeout [ 165.142912][ T4345] Bluetooth: hci0: command 0x0419 tx timeout [ 165.971798][ T4337] Bluetooth: hci6: command 0x040f tx timeout [ 167.968255][ T4345] Bluetooth: hci6: command 0x0419 tx timeout [ 168.426917][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.429793][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.482979][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 168.562802][ T4337] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:200' [ 168.564538][ T4337] CPU: 0 PID: 4337 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 168.565774][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 168.567461][ T4337] Workqueue: hci5 hci_rx_work [ 168.568349][ T4337] Call trace: [ 168.568942][ T4337] dump_backtrace+0x1c4/0x1f0 [ 168.569764][ T4337] show_stack+0x2c/0x3c [ 168.570537][ T4337] __dump_stack+0x30/0x40 [ 168.571315][ T4337] dump_stack_lvl+0xf4/0x15c [ 168.572157][ T4337] dump_stack+0x1c/0x5c [ 168.572937][ T4337] sysfs_create_dir_ns+0x244/0x264 [ 168.573902][ T4337] kobject_add_internal+0x5a8/0xb18 [ 168.574887][ T4337] kobject_add+0x144/0x20c [ 168.575703][ T4337] device_add+0x3dc/0xe4c [ 168.576503][ T4337] hci_conn_add_sysfs+0xb8/0x1bc [ 168.577418][ T4337] hci_sync_conn_complete_evt+0x5f8/0x944 [ 168.578462][ T4337] hci_event_packet+0x698/0xe60 [ 168.579353][ T4337] hci_rx_work+0x310/0xa70 [ 168.580138][ T4337] process_one_work+0x7e4/0x13bc [ 168.581029][ T4337] worker_thread+0x8cc/0xfe8 [ 168.581846][ T4337] kthread+0x254/0x2e0 [ 168.582598][ T4337] ret_from_fork+0x10/0x20 [ 168.584016][ T4337] kobject_add_internal failed for hci5:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 168.586428][ T4337] Bluetooth: hci5: failed to register connection device [ 169.448953][ T4624] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.149836][ T4345] Bluetooth: hci4: command 0x0406 tx timeout [ 170.588630][ T4337] Bluetooth: hci5: command 0x0409 tx timeout [ 170.687043][ T4624] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.728036][ T6713] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.873445][ T6687] loop5: detected capacity change from 0 to 65536 [ 170.987562][ T6728] loop3: detected capacity change from 0 to 256 [ 170.990579][ T6728] exfat: Bad value for 'dmask' [ 171.223727][ T6687] XFS (loop5): Mounting V5 Filesystem [ 171.369583][ T4624] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.421024][ T6641] chnl_net:caif_netlink_parms(): no params data found [ 171.473291][ T6721] loop3: detected capacity change from 0 to 2048 [ 171.492820][ T6668] chnl_net:caif_netlink_parms(): no params data found [ 171.551515][ T6641] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.556209][ T6641] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.564362][ T6641] device bridge_slave_0 entered promiscuous mode [ 171.614815][ T6641] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.616272][ T6641] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.618437][ T6641] device bridge_slave_1 entered promiscuous mode [ 171.643362][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.650220][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.652173][ T6668] device bridge_slave_0 entered promiscuous mode [ 171.723674][ T6721] loop3: p2 < > p3 < p5 > p4 [ 171.724544][ T6721] loop3: partition table partially beyond EOD, truncated [ 171.725915][ T6721] loop3: p2 start 4278190080 is beyond EOD, truncated [ 171.728918][ T6721] loop3: p4 size 8192 extends beyond EOD, truncated [ 171.731168][ T6721] loop3: p5 size 8192 extends beyond EOD, truncated [ 171.774808][ T4624] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.777793][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.779047][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.780756][ T6668] device bridge_slave_1 entered promiscuous mode [ 171.784415][ T6641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.793813][ T6641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.838556][ T6668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.873057][ T6673] udevd[6673]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 171.906080][ T6672] udevd[6672]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 171.909480][ T6641] team0: Port device team_slave_0 added [ 171.930536][ T6762] udevd[6762]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 171.935238][ T6668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.962584][ T6641] team0: Port device team_slave_1 added [ 171.968375][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.045835][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.129625][ T6641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.273463][ T6687] XFS (loop5): Ending clean mount [ 172.295818][ T6668] team0: Port device team_slave_0 added [ 172.299121][ T6668] team0: Port device team_slave_1 added [ 172.301220][ T5393] XFS (loop5): Unmounting Filesystem [ 172.309158][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.312389][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.332644][ T6641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.345763][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.347042][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.412471][ T6668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.416110][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.422361][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.443649][ T6668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.537731][ T4345] Bluetooth: hci5: command 0x0406 tx timeout [ 172.893814][ T6641] device hsr_slave_0 entered promiscuous mode [ 173.220832][ T6641] device hsr_slave_1 entered promiscuous mode [ 173.558344][ T6641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.560813][ T6641] Cannot create hsr debugfs directory [ 174.722736][ T6802] loop3: detected capacity change from 0 to 512 [ 175.128350][ T6668] device hsr_slave_0 entered promiscuous mode [ 175.130273][ T6802] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 175.131893][ T6802] System zones: 1-12 [ 175.151999][ T6802] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.679: missing EA_INODE flag [ 175.162679][ T6802] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.679: error while reading EA inode 12 err=-117 [ 175.168080][ T6802] EXT4-fs (loop3): 1 orphan inode deleted [ 175.169405][ T6802] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 175.837959][ T6819] No source specified [ 176.170049][ T6668] device hsr_slave_1 entered promiscuous mode [ 176.342193][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 176.539473][ T6668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.540811][ T6668] Cannot create hsr debugfs directory [ 176.572232][ T6808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.573871][ T6808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.974894][ T6641] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 177.058067][ T6844] __vm_enough_memory: pid: 6844, comm: syz.4.684, no enough memory for the allocation [ 177.456347][ T6838] bridge0: port 3(netdevsim0) entered blocking state [ 177.457684][ T6838] bridge0: port 3(netdevsim0) entered disabled state [ 177.459295][ T6838] device netdevsim0 entered promiscuous mode [ 177.461194][ T6843] netlink: 'syz.5.685': attribute type 10 has an invalid length. [ 178.409442][ T6869] No source specified [ 178.697867][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 178.701039][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 178.718560][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 178.721166][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 178.742901][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 178.755254][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 178.758241][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 178.759903][ T6641] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 178.854928][ T6871] loop4: detected capacity change from 0 to 512 [ 178.994281][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.002982][ T6871] bond0: option mode: unable to set because the bond device is up [ 179.003032][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.005179][ T6641] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 179.490036][ T6882] loop3: detected capacity change from 0 to 32768 [ 179.555250][ T6882] (syz.3.697,6882,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 179.561641][ T6882] (syz.3.697,6882,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 179.654990][ T6882] JBD2: Ignoring recovery information on journal [ 179.711366][ T6882] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 180.036887][ T4331] ocfs2: Unmounting device (7,3) on (node local) [ 180.306090][ T6872] bond0: (slave macvlan2): Opening slave failed [ 180.333644][ T6641] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 180.497314][ T6668] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 180.549690][ T6899] loop3: detected capacity change from 0 to 32768 [ 180.609853][ T6899] (syz.3.701,6899,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.617782][ T6899] (syz.3.701,6899,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.656098][ T6668] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 180.721036][ T6668] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 180.738395][ T6899] (syz.3.701,6899,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 180.773605][ T6668] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 180.933901][ T6899] JBD2: Ignoring recovery information on journal [ 181.285797][ T6899] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 181.433769][ T6899] ocfs2: Unmounting device (7,3) on (node local) [ 181.985054][ T6641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.361623][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.364463][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.368287][ T6641] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.377253][ T6668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.396350][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.398119][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.400379][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.401856][ T4474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.409147][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.424097][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.430045][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.435593][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.436928][ T4474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.444042][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.450626][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.465656][ T6668] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.472384][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.476171][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.483700][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.495915][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.519699][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.539219][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.540909][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.547766][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.548927][ T4474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.552753][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.561156][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.571417][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.572696][ T4474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.581404][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.583147][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.584679][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.585737][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 182.588528][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.591472][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.601178][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.607046][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.611993][ T6641] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.613679][ T6641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.646094][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.647909][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.649380][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.651523][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.653237][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.660761][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.672943][ T6668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.674717][ T6668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.686784][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.688318][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.690042][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.710468][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.712658][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.729863][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.737577][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.747272][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.762692][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.710'. [ 182.797163][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 183.000818][ T6968] netlink: 84 bytes leftover after parsing attributes in process `syz.3.711'. [ 183.052580][ T6668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.054656][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.056171][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.062468][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.063971][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.104696][ T6641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.814910][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.819092][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.825795][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.827858][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.830935][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.832648][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.841784][ T7002] device syzkaller0 entered promiscuous mode [ 183.844838][ T6641] device veth0_vlan entered promiscuous mode [ 183.852751][ T6641] device veth1_vlan entered promiscuous mode [ 183.991120][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.993021][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 183.995141][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.996727][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.006435][ T6668] device veth0_vlan entered promiscuous mode [ 184.011933][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.021317][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.028978][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.037923][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.051273][ T6668] device veth1_vlan entered promiscuous mode [ 184.189930][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.191698][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.193516][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.201781][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.217135][ T6641] device veth0_macvtap entered promiscuous mode [ 184.231904][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.233659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.235361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.249379][ T6641] device veth1_macvtap entered promiscuous mode [ 184.273367][ T6668] device veth0_macvtap entered promiscuous mode [ 184.295569][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.304367][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.306032][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.315216][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.316838][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.329503][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.331226][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.345947][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.347719][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.349636][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.351253][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.367446][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.371412][ T6641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.380070][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.384173][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.385966][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.402315][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.663154][ T6668] device veth1_macvtap entered promiscuous mode [ 184.792301][ T7034] __vm_enough_memory: pid: 7034, comm: syz.4.719, no enough memory for the allocation [ 185.365782][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.367544][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.369211][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.370982][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.387406][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.389062][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.400690][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.402692][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.404546][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.406354][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.407955][ T6641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.441305][ T6641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.444005][ T6641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.488087][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.490387][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.492056][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.496035][ T6641] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.497528][ T6641] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.500430][ T6641] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.501909][ T6641] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.522599][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.531965][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.542864][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.544742][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.546429][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.548146][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.549768][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.551509][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.590611][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.592530][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.594355][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.596283][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.597883][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.599662][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.629118][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.643927][ T7048] nvmet: transport type 0 not supported [ 185.651923][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.653700][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.770697][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.773799][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.775963][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.786965][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.793754][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.797862][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.805491][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.809618][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.815393][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.825512][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.831872][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.854631][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.858938][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.872144][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.882352][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.890964][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.892996][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.168088][ T6668] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.169597][ T6668] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.171122][ T6668] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.180850][ T6668] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.213723][ T4430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.215236][ T4430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.218532][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.294899][ T4474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.298672][ T4474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.301808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.356626][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.358149][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.359539][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.871113][ T7091] nvmet: transport type 0 not supported [ 187.991385][ T7098] __vm_enough_memory: pid: 7098, comm: syz.4.733, no enough memory for the allocation [ 188.117936][ T4623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.119595][ T4623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.160800][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.203382][ T7106] loop7: detected capacity change from 0 to 256 [ 188.464040][ T7112] __vm_enough_memory: pid: 7112, comm: syz.8.656, no enough memory for the allocation [ 189.551729][ T4345] Bluetooth: hci5: command 0x0406 tx timeout [ 189.750673][ T7137] loop8: detected capacity change from 0 to 4096 [ 189.757217][ T7141] nvmet: transport type 0 not supported [ 189.818196][ T7137] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 191.052447][ T7137] ntfs3: loop8: ntfs_set_state r=3 failed, -22. [ 191.538214][ T11] ntfs3: loop8: ntfs3_write_inode r=3 failed, -22. [ 191.562385][ T6668] ntfs3: loop8: ntfs_set_state r=3 failed, -22. [ 191.563790][ T6668] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 191.565673][ T6668] ntfs3: loop8: ntfs_set_state r=3 failed, -22. [ 191.577678][ T11] ntfs3: loop8: ntfs3_write_inode r=3 failed, -22. [ 191.580549][ T6668] ntfs3: loop8: ntfs_evict_inode r=3 failed, -22. [ 191.607073][ T7192] nvmet: transport type 0 not supported [ 191.841810][ T7209] __vm_enough_memory: pid: 7209, comm: syz.5.756, no enough memory for the allocation [ 195.334533][ T7250] nvmet: transport type 0 not supported [ 195.339563][ T7249] loop5: detected capacity change from 0 to 4096 [ 195.415524][ T7254] loop3: detected capacity change from 0 to 1024 [ 195.512762][ T7254] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.767: Invalid block bitmap block 0 in block_group 0 [ 195.523177][ T7254] Quota error (device loop3): write_blk: dquota write failed [ 195.524716][ T7254] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 195.526490][ T7254] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.767: Failed to acquire dquot type 0 [ 195.544372][ T7254] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.767: Freeing blocks not in datazone - block = 0, count = 4096 [ 195.569177][ T7254] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.767: Invalid inode bitmap blk 0 in block_group 0 [ 195.591184][ T39] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 195.592802][ T39] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 0 [ 195.604877][ T7254] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 195.668531][ T7254] EXT4-fs (loop3): 1 orphan inode deleted [ 195.669656][ T7254] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 195.982844][ T7246] loop4: detected capacity change from 0 to 32768 [ 196.025297][ T7246] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 196.041258][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 196.081896][ T7268] ip_tables: iptables: counters copy to user failed while replacing table [ 196.179080][ T7249] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 196.248248][ T7274] __vm_enough_memory: pid: 7274, comm: syz.4.770, no enough memory for the allocation [ 196.392517][ T6672] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 196.494857][ T5393] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 196.625543][ T7288] loop7: detected capacity change from 0 to 128 [ 196.771307][ T4624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.772903][ T4624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.778800][ T4624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.781570][ T4624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.802950][ T4624] device bridge_slave_1 left promiscuous mode [ 196.805346][ T4624] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.808128][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.811261][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.011290][ T7294] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4336] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[7294] [ 197.157341][ T7299] virtio-fs: tag not found [ 197.565643][ T4624] device bridge_slave_0 left promiscuous mode [ 197.566897][ T4624] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.131483][ T4624] device veth1_macvtap left promiscuous mode [ 199.132658][ T4624] device veth0_macvtap left promiscuous mode [ 199.133880][ T4624] device veth1_vlan left promiscuous mode [ 199.134959][ T4624] device veth0_vlan left promiscuous mode [ 200.569374][ T7329] "syz.7.784" (7329) uses obsolete ecb(arc4) skcipher [ 201.855123][ T4624] bond1 (unregistering): Released all slaves [ 202.548345][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.7.786'. [ 203.425643][ T7340] __vm_enough_memory: pid: 7340, comm: syz.7.787, no enough memory for the allocation [ 204.588247][ T4624] team0 (unregistering): Port device team_slave_1 removed [ 204.816581][ T4624] team0 (unregistering): Port device team_slave_0 removed [ 207.266644][ T7363] loop3: detected capacity change from 0 to 2048 [ 207.328115][ T7363] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 207.767252][ T6762] udevd[6762]: incorrect nilfs2 checksum on /dev/loop3 [ 208.361009][ T7388] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.487974][ T7390] loop5: detected capacity change from 0 to 2048 [ 208.831253][ T7404] loop4: detected capacity change from 0 to 256 [ 208.927191][ T7404] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 208.973262][ T7390] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 208.988915][ T7404] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 209.028125][ T7404] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 209.029710][ T7404] UDF-fs: Scanning with blocksize 512 failed [ 209.074256][ T7404] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 209.143566][ T7415] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.795: bg 0: block 345: padding at end of block bitmap is not set [ 209.159891][ T7404] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.162051][ T7415] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 113 with error 117 [ 209.166731][ T7415] EXT4-fs (loop5): This should not happen!! Data will be lost [ 209.166731][ T7415] [ 209.787893][ T7371] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 209.793604][ T7371] EXT4-fs (loop5): This should not happen!! Data will be lost [ 209.793604][ T7371] [ 209.802548][ T7371] EXT4-fs (loop5): Total free blocks count 0 [ 209.806921][ T7371] EXT4-fs (loop5): Free/Dirty block details [ 209.843458][ T7371] EXT4-fs (loop5): free_blocks=0 [ 209.863914][ T7371] EXT4-fs (loop5): dirty_blocks=272 [ 209.873734][ T7371] EXT4-fs (loop5): Block reservation details [ 210.457735][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.640132][ T7448] loop7: detected capacity change from 0 to 256 [ 211.422337][ T7464] __vm_enough_memory: pid: 7464, comm: syz.8.808, no enough memory for the allocation [ 211.615041][ T7469] __vm_enough_memory: pid: 7469, comm: syz.3.809, no enough memory for the allocation [ 212.617837][ T7483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.619426][ T7483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.749370][ T7487] loop4: detected capacity change from 0 to 512 [ 212.776678][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.8.817'. [ 212.779815][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.8.817'. [ 212.793986][ T7487] bond0: option mode: unable to set because the bond device is up [ 212.798409][ T7487] bond0: (slave macvlan2): Opening slave failed [ 213.355417][ T7480] loop5: detected capacity change from 0 to 32768 [ 213.371547][ T7480] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.813 (7480) [ 213.389026][ T7480] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.391032][ T7480] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm [ 213.404334][ T7480] BTRFS warning (device loop5): excessive commit interval 3581 [ 213.406908][ T7480] BTRFS info (device loop5): force zlib compression, level 3 [ 213.414101][ T7480] BTRFS info (device loop5): metadata ratio 107050 [ 213.415440][ T7480] BTRFS info (device loop5): turning on flush-on-commit [ 213.425147][ T7480] BTRFS info (device loop5): max_inline at 4096 [ 213.430932][ T7480] BTRFS info (device loop5): using free space tree [ 213.651737][ T7521] loop4: detected capacity change from 0 to 256 [ 213.890815][ T7480] BTRFS info (device loop5): enabling ssd optimizations [ 214.009249][ T5393] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.842114][ T4626] wlan1: Trigger new scan to find an IBSS to join [ 215.270441][ T7583] __vm_enough_memory: pid: 7583, comm: syz.8.828, no enough memory for the allocation [ 215.630571][ T7597] loop7: detected capacity change from 0 to 1024 [ 216.010092][ T7597] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.143024][ T7608] __vm_enough_memory: pid: 7608, comm: syz.4.834, no enough memory for the allocation [ 216.503229][ T7597] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 217.306201][ T7635] No source specified [ 218.284684][ T7658] loop3: detected capacity change from 0 to 512 [ 218.464652][ T7667] loop8: detected capacity change from 0 to 256 [ 218.652116][ T6641] EXT4-fs (loop7): unmounting filesystem. [ 218.854748][ T7658] bond1: option mode: unable to set because the bond device is up [ 218.893039][ T7678] md: array md0 already has disks! [ 218.894565][ T7678] md: could not open device unknown-block(1,1). [ 218.895693][ T7678] md: error, md_import_device() returned -16 [ 219.258723][ T4627] wlan1: Trigger new scan to find an IBSS to join [ 219.439952][ T7702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.468385][ T7702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.949555][ T7722] No source specified [ 220.871157][ T7737] loop4: detected capacity change from 0 to 1024 [ 220.910310][ T7737] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 221.099548][ T7753] loop8: detected capacity change from 0 to 512 [ 221.162641][ T7737] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 221.469522][ T39] wlan1: Creating new IBSS network, BSSID 96:d5:87:73:3a:4a [ 221.814069][ T7753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.829570][ T7761] device bond_slave_0 entered promiscuous mode [ 221.830941][ T7761] device bond_slave_1 entered promiscuous mode [ 221.832421][ T7761] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 221.853427][ T7761] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 221.925660][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 222.177940][ T7776] md: array md0 already has disks! [ 222.179625][ T7776] md: could not open device unknown-block(1,0). [ 222.180694][ T7776] md: error, md_import_device() returned -16 [ 222.182060][ T7776] md: could not open device unknown-block(1,1). [ 222.183117][ T7776] md: error, md_import_device() returned -16 [ 222.973427][ T4336] EXT4-fs (loop4): unmounting filesystem. [ 222.980229][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.981805][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.103075][ T7790] loop4: detected capacity change from 0 to 128 [ 223.118840][ T7790] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 223.157009][ T6762] udevd[6762]: incorrect ext4 checksum on /dev/loop4 [ 223.333343][ T7796] syz.4.868: attempt to access beyond end of device [ 223.333343][ T7796] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 223.678172][ T7803] loop3: detected capacity change from 0 to 256 [ 223.760464][ T7804] No source specified [ 224.890144][ T7827] overlayfs: filesystem on './file0' not supported as upperdir [ 224.964299][ T7826] md: array md0 already has disks! [ 224.965616][ T7826] md: could not open device unknown-block(1,0). [ 224.966729][ T7826] md: error, md_import_device() returned -16 [ 224.967900][ T7826] md: could not open device unknown-block(1,1). [ 224.969003][ T7826] md: error, md_import_device() returned -16 [ 225.115494][ T7830] loop5: detected capacity change from 0 to 1024 [ 225.189674][ T7836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.200913][ T7830] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.203161][ T7836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.598323][ T7830] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 225.685210][ T5393] EXT4-fs (loop5): unmounting filesystem. [ 226.673190][ T7867] loop4: detected capacity change from 0 to 512 [ 227.000431][ T7856] IPv6: sit1: Disabled Multicast RS [ 227.037524][ T7867] bond0: option mode: unable to set because the bond device is up [ 227.054557][ T7867] bond0: (slave macvlan2): Opening slave failed [ 227.122398][ T7876] loop3: detected capacity change from 0 to 512 [ 227.126650][ T7876] EXT4-fs: Ignoring removed i_version option [ 227.135511][ T7876] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.178233][ T7876] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 227.183089][ T7876] capability: warning: `syz.3.895' uses 32-bit capabilities (legacy support in use) [ 227.680652][ T7888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.960801][ T7888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.018037][ T7891] loop4: detected capacity change from 0 to 256 [ 228.555930][ T7896] loop7: detected capacity change from 0 to 512 [ 228.563414][ T7897] random: crng reseeded on system resumption [ 228.570566][ T7897] Restarting kernel threads ... done. [ 228.677438][ T7896] EXT4-fs (loop7): unsupported inode size: 65152 [ 228.678571][ T7896] EXT4-fs (loop7): blocksize: 4096 [ 228.869978][ T7905] md: array md0 already has disks! [ 228.871230][ T7905] md: could not open device unknown-block(1,0). [ 228.872329][ T7905] md: error, md_import_device() returned -16 [ 228.873521][ T7905] md: could not open device unknown-block(1,1). [ 228.874540][ T7905] md: error, md_import_device() returned -16 [ 229.013603][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 229.686333][ T7920] loop7: detected capacity change from 0 to 4096 [ 229.693182][ T7371] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.698997][ T7920] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.702558][ T7920] EXT4-fs: Ignoring removed orlov option [ 229.758409][ T7920] EXT4-fs (loop7): Test dummy encryption mode enabled [ 229.870971][ T7920] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 229.877351][ T7371] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.902056][ T7920] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 230.020340][ T7371] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.047695][ T6641] EXT4-fs (loop7): unmounting filesystem. [ 230.101951][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.103786][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.295717][ T7371] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.750767][ T7939] loop3: detected capacity change from 0 to 1024 [ 230.768906][ T7939] EXT4-fs: Ignoring removed bh option [ 230.904509][ T7942] affs: No valid root block on device nullb0 [ 230.919409][ T7942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.281970][ T7954] md: array md0 already has disks! [ 231.283235][ T7954] md: could not open device unknown-block(1,0). [ 231.284311][ T7954] md: error, md_import_device() returned -16 [ 231.285540][ T7954] md: could not open device unknown-block(1,1). [ 231.286663][ T7954] md: error, md_import_device() returned -16 [ 231.549785][ T7939] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 231.963842][ T7965] loop7: detected capacity change from 0 to 32768 [ 232.175386][ T7981] loop4: detected capacity change from 0 to 256 [ 232.249512][ T7965] XFS (loop7): Mounting V5 Filesystem [ 232.345157][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 232.881327][ T7965] XFS (loop7): Ending clean mount [ 232.933394][ T7965] XFS (loop7): Quotacheck needed: Please wait. [ 233.047906][ T7965] XFS (loop7): Quotacheck: Done. [ 233.203860][ T8011] kAFS: unparsable volume name [ 234.108425][ T7965] syz.7.919 (7965): drop_caches: 2 [ 234.151317][ T6641] XFS (loop7): Unmounting Filesystem [ 234.567244][ T8042] loop3: detected capacity change from 0 to 1024 [ 234.581340][ T8042] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 234.772405][ T8042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 235.012634][ T8054] md: array md0 already has disks! [ 235.013991][ T8054] md: could not open device unknown-block(1,0). [ 235.015045][ T8054] md: error, md_import_device() returned -16 [ 235.017726][ T8054] md: could not open device unknown-block(1,1). [ 235.018843][ T8054] md: error, md_import_device() returned -16 [ 235.344439][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 236.592540][ T8105] loop3: detected capacity change from 0 to 512 [ 236.652597][ T8105] bond1: option mode: unable to set because the bond device is up [ 237.270202][ T8131] md: array md0 already has disks! [ 237.273594][ T8131] md: could not open device unknown-block(1,0). [ 237.274699][ T8131] md: error, md_import_device() returned -16 [ 237.278088][ T8131] md: could not open device unknown-block(1,1). [ 237.279216][ T8131] md: error, md_import_device() returned -16 [ 237.585094][ T8141] kAFS: unparsable volume name [ 238.059772][ T8149] __vm_enough_memory: pid: 8149, comm: syz.4.944, no enough memory for the allocation [ 238.251947][ T8147] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 238.274490][ T8147] device-mapper: ioctl: error adding target to table [ 238.381097][ T8154] loop5: detected capacity change from 0 to 512 [ 238.601666][ T8154] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 239.007084][ T5393] EXT4-fs (loop5): unmounting filesystem. [ 239.050964][ T8177] __vm_enough_memory: pid: 8177, comm: syz.3.950, no enough memory for the allocation [ 239.180213][ T8183] device syzkaller0 entered promiscuous mode [ 240.635633][ T8239] loop4: detected capacity change from 0 to 256 [ 240.937015][ T8243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.939121][ T8243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.981299][ T8244] __vm_enough_memory: pid: 8244, comm: syz.5.961, no enough memory for the allocation [ 241.365579][ T8236] loop7: detected capacity change from 0 to 32768 [ 241.403591][ T8236] (syz.7.960,8236,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "jourVĪl_async_com" or missing value [ 241.413762][ T8236] (syz.7.960,8236,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 241.559060][ T7371] device hsr_slave_0 left promiscuous mode [ 241.637508][ T7371] device hsr_slave_1 left promiscuous mode [ 241.805774][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.807183][ T7371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.811192][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.812491][ T7371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.814232][ T7371] device bridge_slave_1 left promiscuous mode [ 241.815328][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.933399][ T7371] device bridge_slave_0 left promiscuous mode [ 241.934583][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.179183][ T8276] kAFS: unparsable volume name [ 242.229074][ T7371] device veth1_macvtap left promiscuous mode [ 242.230185][ T7371] device veth0_macvtap left promiscuous mode [ 242.232009][ T7371] device veth1_vlan left promiscuous mode [ 242.232979][ T7371] device veth0_vlan left promiscuous mode [ 242.469080][ T8283] loop5: detected capacity change from 0 to 8 [ 242.475498][ T8283] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 242.503284][ T6762] udevd[6762]: incorrect cramfs checksum on /dev/loop5 [ 243.119809][ T8283] syz.5.968 (8283): drop_caches: 2 [ 244.558745][ T7371] bond1 (unregistering): Released all slaves [ 244.768046][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.776606][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.545193][ T4337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.549336][ T4337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.565974][ T4337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.577758][ T4337] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.599089][ T4337] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 245.622811][ T4337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.727291][ C0] net_ratelimit: 72 callbacks suppressed [ 246.988419][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 246.989618][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 247.553934][ T7371] team0 (unregistering): Port device team_slave_1 removed [ 247.781067][ T7371] team0 (unregistering): Port device team_slave_0 removed [ 247.857469][ T4345] Bluetooth: hci2: command 0x0409 tx timeout [ 250.107743][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 250.705116][ T8316] loop7: detected capacity change from 0 to 512 [ 250.896512][ T8327] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 251.102460][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.978'. [ 251.263079][ T8316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.318939][ T8330] device bond_slave_0 entered promiscuous mode [ 251.320112][ T8330] device bond_slave_1 entered promiscuous mode [ 251.337065][ T8330] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 251.361852][ T8330] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 251.386088][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 251.588656][ T8339] loop3: detected capacity change from 0 to 1024 [ 251.628614][ T8339] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 251.807756][ T8351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.809445][ T8351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.142795][ T8339] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 252.220520][ T8302] chnl_net:caif_netlink_parms(): no params data found [ 252.366054][ T4345] Bluetooth: hci2: command 0x040f tx timeout [ 252.374945][ C1] net_ratelimit: 70 callbacks suppressed [ 252.405457][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 252.445804][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.462527][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.492901][ T8302] device bridge_slave_0 entered promiscuous mode [ 252.505469][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.515228][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.529312][ T8302] device bridge_slave_1 entered promiscuous mode [ 252.537623][ T28] INFO: task syz.2.430:5616 blocked for more than 143 seconds. [ 252.539160][ T3778] nf_conntrack: normal packet for 0000000002a78875 [ 252.540725][ T28] Not tainted syzkaller #0 [ 252.541516][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.543042][ T241] nf_conntrack: clean_from_lists(00000000429ab397) [ 252.543198][ T28] task:syz.2.430 state:D [ 252.544304][ T241] nf_conntrack: nf_ct_destroy(00000000429ab397) [ 252.544331][ T241] nf_conntrack: nf_ct_destroy: returning ct=00000000429ab397 to slab [ 252.545324][ T28] stack:0 pid:5616 ppid:4340 flags:0x00000001 [ 252.546206][ T241] nf_conntrack: clean_from_lists(00000000ec2b3dde) [ 252.549710][ T241] nf_conntrack: nf_ct_destroy(00000000ec2b3dde) [ 252.550231][ T8302] bridge0: bond_netdev_event received NETDEV_PRE_CHANGEADDR [ 252.550690][ T241] nf_conntrack: nf_ct_destroy: returning ct=00000000ec2b3dde to slab [ 252.553763][ T8371] async_waiting @ 8371 [ 252.554452][ T8371] async_continuing @ 8371 after 11 usec [ 252.557978][ T28] dump_backtrace(regs = 0000000000000000 tsk = 000000000555818f) [ 252.564122][ T8348] kcov: kcov_task_exit: t = ffff0000c7373800, kcov->t = ffff0000c7373800 [ 252.564201][ T8357] kcov: kcov_task_exit: t = ffff0000d49d3800, kcov->t = ffff0000d49d3800 [ 252.566146][ T8359] kcov: kcov_task_exit: t = ffff0000d1330000, kcov->t = ffff0000d1330000 [ 252.577498][ C0] tcp_conntracks: [ 252.577510][ C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 252.579322][ C0] wireguard: wg1: Receiving keepalive packet from peer 51 ([::1]:20001/0%0) [ 252.592951][ T7549] nf_conntrack: normal packet for 000000003f7d1ae5 [ 252.594352][ T28] Call trace: [ 252.595065][ T8372] kcov: kcov_start: t = ffff0000e541b800, size = 524288, area = ffff80002b203000 [ 252.596029][ T5393] send_to_group: group=000000007529ead3 mask=8 marks_mask=2008 marks_ignore_mask=0 data=00000000c90a9803 data_type=1 dir=0000000000000000 cookie=0 [ 252.599756][ T5393] inotify_handle_inode_event: group=000000007529ead3 mark=00000000af0adc1e mask=8 [ 252.601520][ T28] __switch_to+0x2f4/0x550 [ 252.602256][ T28] __schedule+0xdb4/0x1a6c [ 252.603235][ T28] schedule+0xc4/0x170 [ 252.603983][ T28] schedule_preempt_disabled+0x18/0x2c [ 252.604719][ T8302] net bridge0: siw: event 9 [ 252.605176][ T5393] fsnotify_insert_event: group=000000007529ead3 event=00000000e6b08122 [ 252.607598][ T28] __mutex_lock_common+0xb20/0x1f3c [ 252.608593][ T28] mutex_lock_nested+0x38/0x44 [ 252.608616][ C1] wireguard: wg1: Receiving keepalive packet from peer 33 (127.0.0.1:20001) [ 252.609583][ T8373] async_waiting @ 8373 [ 252.611814][ T8373] async_continuing @ 8373 after 4 usec [ 252.614478][ T3939] get_one_event: group=000000007529ead3 event=00000000e6b08122 [ 252.615973][ T3939] fsnotify_remove_first_event: group=000000007529ead3 event=00000000e6b08122 [ 252.617333][ T3939] inotify_read: group=000000007529ead3 kevent=00000000e6b08122 [ 252.618515][ T3939] copy_event_to_user: group=000000007529ead3 event=00000000e6b08122 [ 252.620056][ T3939] inotify_read: group=000000007529ead3 kevent=0000000000000000 [ 252.621777][ T8302] bridge0: port 2(bridge_slave_1) event 16 [ 252.622748][ T8302] bridge0: br_fill_info event 16 port bridge_slave_1 master bridge0 [ 252.624463][ T8302] bridge0: bond_netdev_event received NETDEV_CHANGEADDR [ 252.625643][ T8302] net bridge0: siw: event 8 [ 252.633027][ T28] nfsd_nrthreads+0x58/0xfc [ 252.633976][ T28] write_threads+0x1c0/0x310 [ 252.634314][ T8302] bridge0: toggle option: 11 state: 0 -> 0 [ 252.634760][ T28] nfsctl_transaction_write+0x114/0x164 [ 252.635696][ T8302] kobject: 'brport' (00000000859720a1): kobject_uevent_env [ 252.635715][ T8302] kobject: 'brport' (00000000859720a1): kobject_uevent_env: filter function caused the event to drop! [ 252.641018][ T7544] IPv6: now = 4294962698, schedule = 4294974700, rounded schedule = 4294974800 => 4294974700 [ 252.644617][ T3939] kobject: 'loop5' (00000000a710e13c): kobject_uevent_env [ 252.647470][ C0] nf_conntrack: normal packet for 00000000476568d3 [ 252.648793][ C0] tcp_conntracks: [ 252.648802][ C0] syn=0 ack=1 fin=0 rst=0 old=4 new=5 [ 252.654587][ T3939] kobject: 'loop5' (00000000a710e13c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 252.655426][ T8374] kcov: kcov_start: t = ffff0000d45fb800, size = 524288, area = ffff80002b604000 [ 252.659360][ T28] vfs_write+0x2a8/0x7c8 [ 252.662151][ T28] ksys_write+0x12c/0x228 [ 252.662928][ T28] __arm64_sys_write+0x7c/0x90 [ 252.668522][ T8309] inotify_handle_inode_event: group=000000007529ead3 mark=00000000af0adc1e mask=8000 [ 252.669957][ T28] invoke_syscall+0x98/0x290 [ 252.670423][ T8351] kcov: kcov_task_exit: t = ffff0000cdfd0000, kcov->t = ffff0000cdfd0000 [ 252.671027][ T28] el0_svc_common+0x13c/0x258 [ 252.679163][ T8309] fsnotify_insert_event: group=000000007529ead3 event=000000004e6314ca [ 252.680863][ T3939] get_one_event: group=000000007529ead3 event=000000004e6314ca [ 252.682326][ T3939] fsnotify_remove_first_event: group=000000007529ead3 event=000000004e6314ca [ 252.683828][ T8377] async_waiting @ 8377 [ 252.684534][ T8377] async_continuing @ 8377 after 8 usec [ 252.691716][ T8302] veth0_to_bond (uninitialized): bond_netdev_event received NETDEV_POST_INIT [ 252.693362][ T8302] (null): siw: event 17 [ 252.694417][ T8302] device: 'veth0_to_bond': device_add [ 252.695376][ T3939] inotify_read: group=000000007529ead3 kevent=000000004e6314ca [ 252.695681][ T28] do_el0_svc+0x5c/0x134 [ 252.696740][ T3939] copy_event_to_user: group=000000007529ead3 event=000000004e6314ca [ 252.697505][ T28] el0_svc+0x58/0x128 [ 252.698829][ T3939] inotify_read: group=000000007529ead3 kevent=0000000000000000 [ 252.699551][ T28] el0t_64_sync_handler+0x84/0xf0 [ 252.701810][ T28] el0t_64_sync+0x18c/0x190 [ 252.702690][ T28] [ 252.702690][ T28] Showing all locks held in the system: [ 252.712760][ T8302] kobject: 'veth0_to_bond' (00000000f91233f0): kobject_add_internal: parent: 'net', set: 'devices' [ 252.714722][ T241] nf_conntrack: clean_from_lists(00000000555d5528) [ 252.717372][ T6641] send_to_group: group=000000007529ead3 mask=8 marks_mask=2008 marks_ignore_mask=0 data=00000000a562aec4 data_type=1 dir=0000000000000000 cookie=0 [ 252.719838][ T6641] inotify_handle_inode_event: group=000000007529ead3 mark=00000000b81497de mask=8 [ 252.721361][ T6641] fsnotify_insert_event: group=000000007529ead3 event=000000003e8077e8 [ 252.727091][ T8302] net veth0_to_bond: No ACPI support [ 252.728536][ T8302] PM: Adding info for No Bus:veth0_to_bond [ 252.734639][ T8302] kobject: 'veth0_to_bond' (00000000f91233f0): kobject_uevent_env [ 252.736196][ T8302] kobject: 'veth0_to_bond' (00000000f91233f0): fill_kobj_path: path = '/devices/virtual/net/veth0_to_bond' [ 252.747562][ T4627] bond1: (slave macvlan2): Periodic Machine: Port=1, Last State=2, Curr State=4 [ 252.747810][ T28] 1 lock held by rcu_tasks_kthre/12: [ 252.754139][ T28] #0: ffff800015597db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 252.754419][ T241] nf_conntrack: clean_from_lists(00000000e920659d) [ 252.755809][ T28] 1 lock held by rcu_tasks_trace/13: [ 252.756845][ T241] nf_conntrack: nf_ct_destroy(00000000e920659d) [ 252.757666][ T28] #0: ffff8000155985d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 252.758783][ T8378] async_waiting @ 8378 [ 252.762004][ T3939] get_one_event: group=000000007529ead3 event=000000003e8077e8 [ 252.763406][ T3939] fsnotify_remove_first_event: group=000000007529ead3 event=000000003e8077e8 [ 252.765023][ T3939] inotify_read: group=000000007529ead3 kevent=000000003e8077e8 [ 252.766420][ T3939] copy_event_to_user: group=000000007529ead3 event=000000003e8077e8 [ 252.767896][ T3939] inotify_read: group=000000007529ead3 kevent=0000000000000000 [ 252.769674][ T8378] async_continuing @ 8378 after 3 usec [ 252.771425][ T8302] kobject: 'queues' (00000000f9e57590): kobject_add_internal: parent: 'veth0_to_bond', set: '' [ 252.777554][ T8302] kobject: 'queues' (00000000f9e57590): kobject_uevent_env [ 252.781648][ T8302] kobject: 'queues' (00000000f9e57590): kobject_uevent_env: filter function caused the event to drop! [ 252.788286][ T8302] kobject: 'rx-0' (00000000f2e086d6): kobject_add_internal: parent: 'queues', set: 'queues' [ 252.806869][ T28] 2 locks held by ksoftirqd/0/15: [ 252.809976][ T28] 1 lock held by khungtaskd/28: [ 252.815767][ T241] nf_conntrack: nf_ct_destroy: returning ct=00000000e920659d to slab [ 252.819052][ T8302] kobject: 'rx-0' (00000000f2e086d6): kobject_uevent_env [ 252.820934][ T28] #0: ffff800015597440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 252.821291][ T241] nf_conntrack: clean_from_lists(00000000514e08ef) [ 252.825468][ T8302] kobject: 'rx-0' (00000000f2e086d6): fill_kobj_path: path = '/devices/virtual/net/veth0_to_bond/queues/rx-0' [ 252.827146][ T3939] kobject: 'loop7' (0000000030374ea7): kobject_uevent_env [ 252.828888][ T3939] kobject: 'loop7' (0000000030374ea7): fill_kobj_path: path = '/devices/virtual/block/loop7' [ 252.832411][ T28] 2 locks held by kworker/u4:3/241: [ 252.835628][ T28] 1 lock held by klogd/3928: [ 252.837634][ T8302] kobject: 'rx-1' (00000000f7b98498): kobject_add_internal: parent: 'queues', set: 'queues' [ 252.840559][ T28] 2 locks held by getty/4081: [ 252.842442][ T8362] kobject: 'loop4' (0000000078304678): kobject_uevent_env [ 252.848316][ T28] #0: ffff0000d6b3f098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 252.849813][ T241] nf_conntrack: clean_from_lists(00000000d894c663) [ 252.851274][ T241] nf_conntrack: nf_ct_destroy(00000000d894c663) [ 252.852043][ T8302] kobject: 'rx-1' (00000000f7b98498): kobject_uevent_env [ 252.854478][ T8362] kobject: 'loop4' (0000000078304678): kobject_uevent_env: uevent_suppress caused the event to drop! [ 252.856537][ T8362] loop4: detected capacity change from 0 to 32768 [ 252.858420][ T28] #1: ffff80001ea332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 [ 252.864845][ T8309] inotify_handle_inode_event: group=000000007529ead3 mark=00000000b81497de mask=8000 [ 252.866899][ T8302] kobject: 'rx-1' (00000000f7b98498): fill_kobj_path: path = '/devices/virtual/net/veth0_to_bond/queues/rx-1' [ 252.870524][ T4625] bond1: (slave macvlan2): Periodic Machine: Port=1, Last State=4, Curr State=2 [ 252.872174][ T4625] bond1: (slave macvlan2): update lacpdu: actor port state c5 [ 252.873565][ T4625] bond1: (slave macvlan2): Sent LACPDU on port 1 [ 252.875317][ T8362] kobject: 'loop4' (0000000078304678): kobject_uevent_env [ 252.877087][ T8309] fsnotify_insert_event: group=000000007529ead3 event=0000000057166fa0 [ 252.880125][ T28] 2 locks held by kworker/u4:10/4623: [ 252.881198][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 252.883253][ T28] #1: ffff800020cc7c40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 252.884320][ T8362] kobject: 'loop4' (0000000078304678): kobject_uevent_env: uevent_suppress caused the event to drop! [ 252.885413][ T28] 3 locks held by kworker/u4:12/4625: [ 252.888312][ T28] #0: ffff00019f360398 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2bc/0x1a6c [ 252.890090][ T3939] get_one_event: group=000000007529ead3 event=0000000057166fa0 [ 252.890139][ T3939] fsnotify_remove_first_event: group=000000007529ead3 event=0000000057166fa0 [ 252.892942][ T241] nf_conntrack: nf_ct_destroy: returning ct=00000000d894c663 to slab [ 252.893710][ T8302] kobject: 'tx-0' (000000009f9bdbe4): kobject_add_internal: parent: 'queues', set: 'queues' [ 252.894420][ T3939] inotify_read: group=000000007529ead3 kevent=0000000057166fa0 [ 252.898644][ T8302] kobject: 'tx-0' (000000009f9bdbe4): kobject_uevent_env [ 252.905259][ T8302] kobject: 'tx-0' (000000009f9bdbe4): fill_kobj_path: path = '/devices/virtual/net/veth0_to_bond/queues/tx-0' [ 252.909373][ T241] nf_conntrack: clean_from_lists(00000000b2174236) [ 252.910824][ T8362] kobject: 'loop4' (0000000078304678): kobject_uevent_env [ 252.912254][ T8362] kobject: 'loop4' (0000000078304678): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 252.914115][ T8362] send_to_group: group=000000007529ead3 mask=8 marks_mask=2008 marks_ignore_mask=0 data=000000000fe2828a data_type=1 dir=0000000000000000 cookie=0 [ 252.917050][ T3939] copy_event_to_user: group=000000007529ead3 event=0000000057166fa0 [ 252.918578][ T3939] inotify_read: group=000000007529ead3 kevent=0000000000000000 [ 252.933061][ T8302] kobject: 'tx-1' (000000000110bbdc): kobject_add_internal: parent: 'queues', set: 'queues' [ 252.943295][ T28] #1: ffff00019f34cbc8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x35c/0x5b8 [ 252.948052][ T8362] inotify_handle_inode_event: group=000000007529ead3 mark=000000006b032dd7 mask=8 [ 252.951217][ T8326] inotify_handle_inode_event: group=000000007529ead3 mark=000000006b032dd7 mask=8000 [ 252.953060][ T8362] fsnotify_insert_event: group=000000007529ead3 event=00000000c1ccd129 [ 252.953476][ T8302] kobject: 'tx-1' (000000000110bbdc): kobject_uevent_env [ 252.955913][ T8302] kobject: 'tx-1' (000000000110bbdc): fill_kobj_path: path = '/devices/virtual/net/veth0_to_bond/queues/tx-1' [ 252.960957][ T8326] fsnotify_insert_event: group=000000007529ead3 event=0000000038add3b9 [ 252.962079][ T28] #2: ffff0000ce66b0d8 (&lo->lo_work_lock){..-.}-{2:2}, at: loop_process_work+0x9dc/0x200c [ 252.973086][ T8362] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.987 (8362) [ 252.974024][ T28] 3 locks held by kworker/u4:13/4626: [ 252.976687][ T241] nf_conntrack: nf_ct_destroy(00000000b2174236) [ 252.979631][ T3939] get_one_event: group=000000007529ead3 event=00000000c1ccd129 [ 252.980943][ T3939] fsnotify_remove_first_event: group=000000007529ead3 event=00000000c1ccd129 [ 252.982680][ T3939] inotify_read: group=000000007529ead3 kevent=00000000c1ccd129 [ 252.984167][ T3939] copy_event_to_user: group=000000007529ead3 event=00000000c1ccd129 [ 252.985711][ T3939] get_one_event: group=000000007529ead3 event=0000000038add3b9 [ 252.986518][ T241] nf_conntrack: nf_ct_destroy: returning ct=00000000b2174236 to slab [ 252.987186][ T3939] fsnotify_remove_first_event: group=000000007529ead3 event=0000000038add3b9 [ 252.992211][ T8362] device: 'btrfs-4': device_add [ 252.993744][ T241] nf_conntrack: clean_from_lists(000000003a833578) [ 252.993980][ T28] #0: [ 252.995430][ T8362] kobject: 'btrfs-4' (00000000b7407231): kobject_add_internal: parent: 'bdi', set: 'devices' [ 252.997970][ T241] nf_conntrack: nf_ct_destroy(000000003a833578) [ 252.998976][ T241] nf_conntrack: nf_ct_destroy: returning ct=000000003a833578 to slab [ 252.999457][ T28] ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 253.006722][ T8362] bdi btrfs-4: No ACPI support [ 253.007712][ T8362] PM: Adding info for No Bus:btrfs-4 [ 253.007948][ T8302] Registering net sysctl (net 00000000397c1478): net/ipv4/neigh/veth0_to_bond [ 253.008629][ T8362] kobject: 'btrfs-4' (00000000b7407231): kobject_uevent_env [ 253.017262][ T241] nf_conntrack: clean_from_lists(000000004135b007) [ 253.018583][ T241] nf_conntrack: nf_ct_destroy(000000004135b007) [ 253.019741][ T241] nf_conntrack: nf_ct_destroy: returning ct=000000004135b007 to slab [ 253.021189][ T28] #1: ffff800021407c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 253.028785][ T8362] kobject: 'btrfs-4' (00000000b7407231): fill_kobj_path: path = '/devices/virtual/bdi/btrfs-4' [ 253.030658][ T8362] debugfs: creating file 'btrfs-4' [ 253.031216][ T28] #2: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 253.031535][ T8362] debugfs: creating file 'stats' [ 253.034544][ T8302] procname=mcast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=00000000bb8de932 [ 253.041498][ T28] 3 locks held by syz.2.430/5613: [ 253.042361][ T28] #0: ffff0000c3d92ae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 253.047146][ T8302] procname=ucast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=0000000032fc5569 [ 253.053789][ T28] #1: ffff0001204f8460 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 253.058065][ C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) [ 253.060956][ T8362] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 253.063578][ T28] #2: ffff8000158242c8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xbc/0x9f0 [ 253.064178][ T8362] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 253.065780][ T8302] procname=app_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=000000000e238004 [ 253.067985][ T8362] BTRFS info (device loop4): force clearing of disk cache [ 253.073424][ T8302] procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=00000000f1eb5fe6 [ 253.076167][ T28] 3 locks held by syz.2.430/5616: [ 253.079571][ C1] wireguard: wg1: Receiving keepalive packet from peer 15 ([::1]:20001/0%0) [ 253.081348][ T8362] BTRFS info (device loop4): force zlib compression, level 3 [ 253.082985][ T28] #0: ffff0000d9d7e868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 253.084076][ T8362] BTRFS info (device loop4): disabling free space tree [ 253.088945][ T28] #1: ffff0001204f8460 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 253.089977][ T3939] inotify_read: group=000000007529ead3 kevent=0000000038add3b9 [ 253.091822][ T8302] procname=retrans_time mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=00000000208a31fd [ 253.091982][ T3939] copy_event_to_user: group=000000007529ead3 event=0000000038add3b9 [ 253.094519][ T8302] procname=base_reachable_time mode=644 proc_handler=neigh_proc_base_reachable_time data=00000000878e142d [ 253.095485][ T3939] inotify_read: group=000000007529ead3 kevent=0000000000000000 [ 253.101144][ T8362] BTRFS info (device loop4): max_inline at 0 [ 253.102113][ T8362] BTRFS info (device loop4): enabling free space tree [ 253.106694][ T28] #2: ffff8000158242c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nrthreads+0x58/0xfc [ 253.108948][ T8302] procname=delay_first_probe_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=00000000f89a9391 [ 253.114421][ T28] 4 locks held by kworker/u4:18/7371: [ 253.117387][ T8362] BTRFS info (device loop4): using free space tree [ 253.117778][ T28] #0: [ 253.120077][ T8302] procname=interval_probe_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies_positive data=0000000062fbd343 [ 253.123293][ T28] ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 253.140091][ T28] #1: ffff800021e17c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 253.144692][ T241] nf_conntrack: clean_from_lists(00000000bef1f430) [ 253.148477][ T241] nf_conntrack: nf_ct_destroy(00000000bef1f430) [ 253.148470][ T8302] procname=gc_stale_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=000000004c9a55de [ 253.149825][ T241] nf_conntrack: nf_ct_destroy: returning ct=00000000bef1f430 to slab [ 253.152318][ T28] #2: ffff800017a32350 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x144/0xa90 [ 253.162836][ T241] nf_conntrack: clean_from_lists(0000000016f7f801) [ 253.163006][ T8302] procname=unres_qlen_bytes mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=00000000abc082ed [ 253.166433][ T241] nf_conntrack: nf_ct_destroy(0000000016f7f801) [ 253.169415][ T28] #3: ffff0000f37253e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x114/0x2d4 [ 253.170304][ T241] nf_conntrack: nf_ct_destroy: returning ct=0000000016f7f801 to slab [ 253.174771][ T8302] procname=proxy_qlen mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=000000008176e88b [ 253.184767][ T28] 2 locks held by kworker/0:10/7544: [ 253.185756][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 253.193657][ T8302] procname=anycast_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=0000000030adf13e [ 253.198846][ T28] #1: ffff800021b57c40 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 253.206845][ T8302] procname=proxy_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=00000000f43a9dd1 [ 253.213001][ T28] 2 locks held by kworker/0:15/7549: [ 253.216373][ T28] #0: ffff0000c0021938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 253.222411][ T8302] procname=locktime mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=00000000b564e514 [ 253.228148][ C0] wireguard: wg0: Handshake for peer 20 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 253.228630][ T28] #1: [ 253.232940][ T4627] nf_conntrack: new packet for 00000000c24306bc [ 253.234600][ T4627] nf_nat: Already setup manip DST for ct 00000000c24306bc (status bits 0x198) [ 253.236285][ T4627] nf_nat: Already setup manip SRC for ct 00000000c24306bc (status bits 0x198) [ 253.242001][ T241] nf_conntrack: clean_from_lists(0000000086979f26) [ 253.244098][ T28] ffff800021e47c40 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 253.246536][ T8302] procname=unres_qlen mode=644 proc_handler=neigh_proc_dointvec_unres_qlen data=00000000abc082ed [ 253.252484][ T241] nf_conntrack: nf_ct_destroy(0000000086979f26) [ 253.253819][ T241] nf_conntrack: nf_ct_destroy: returning ct=0000000086979f26 to slab [ 253.254761][ T28] 3 locks held by syz.8.904/7908: [ 253.257476][ T8302] procname=retrans_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies data=00000000208a31fd [ 253.268814][ T8302] procname=base_reachable_time_ms mode=644 proc_handler=neigh_proc_base_reachable_time data=00000000878e142d [ 253.271713][ T8302] Registering net sysctl (net 00000000397c1478): net/ipv4/conf/veth0_to_bond [ 253.273415][ T8302] procname=forwarding mode=644 proc_handler=devinet_sysctl_forward data=0000000090dfa03b [ 253.279469][ T28] #0: ffff000132cfe868 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 253.287091][ T8302] procname=mc_forwarding mode=444 proc_handler=devinet_conf_proc data=00000000bff64469 [ 253.288976][ T8302] Not writable by anyone [ 253.289787][ T8302] procname=bc_forwarding mode=644 proc_handler=devinet_conf_proc data=000000000903dd3f [ 253.291764][ T28] #1: ffff000142a3a460 (sb_writers#22){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 253.293936][ T8362] BTRFS debug: btrfs_submit_dev_bio: rw 0 0x1000, sector=2056, dev=7340036 (/dev/loop4 id 1), size=4096 [ 253.302231][ T4625] BTRFS debug (device loop4): end_bio_extent_readpage: bi_sector=2056, err=0, mirror=1 [ 253.305277][ T8362] BTRFS debug: btrfs_submit_dev_bio: rw 0 0x1000, sector=10416, dev=7340036 (/dev/loop4 id 1), size=4096 [ 253.316067][ T28] #2: ffff8000158242c8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0xa4/0xa34 [ 253.317685][ T28] 1 lock held by syz-executor/8302: [ 253.318712][ T28] 3 locks held by udevd/8326: [ 253.319495][ T28] 1 lock held by syz.4.987/8362: [ 253.320320][ T28] #0: ffff00013f4d80e0 (&type->s_umount_key#71/1){+.+.}-{3:3}, at: alloc_super+0x1a0/0x840 [ 253.322064][ T28] 2 locks held by syz.3.988/8367: [ 253.323017][ T8302] procname=accept_redirects mode=644 proc_handler=devinet_conf_proc data=00000000992f20f7 [ 253.324906][ T8302] procname=secure_redirects mode=644 proc_handler=devinet_conf_proc data=00000000f863591a [ 253.332100][ T4627] BTRFS debug (device loop4): end_bio_extent_readpage: bi_sector=10416, err=0, mirror=1 [ 253.333999][ T7545] nf_conntrack: normal packet for 00000000120e6a80 [ 253.339339][ T8362] BTRFS debug: btrfs_submit_dev_bio: rw 0 0x1000, sector=10424, dev=7340036 (/dev/loop4 id 1), size=4096 [ 253.343060][ T241] nf_conntrack: clean_from_lists(00000000a17edc7e) [ 253.344354][ T241] nf_conntrack: nf_ct_destroy(00000000a17edc7e) [ 253.357453][ T4624] BTRFS debug (device loop4): end_bio_extent_readpage: bi_sector=10424, err=0, mirror=1 [ 253.359308][ T8362] BTRFS debug: btrfs_submit_dev_bio: rw 0 0x1000, sector=10376, dev=7340036 (/dev/loop4 id 1), size=4096 [ 253.366612][ T4627] BTRFS debug (device loop4): end_bio_extent_readpage: bi_sector=10376, err=0, mirror=1 [ 253.369319][ T8362] BTRFS debug: btrfs_submit_dev_bio: rw 0 0x1000, sector=10432, dev=7340036 (/dev/loop4 id 1), size=4096 [ 253.379617][ T8302] procname=shared_media mode=644 proc_handler=devinet_conf_proc data=000000006387e4e7 [ 253.381425][ T8302] procname=rp_filter mode=644 proc_handler=devinet_conf_proc data=0000000093b306bb [ 253.383062][ T28] #0: ffff800017a9b610 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 253.384433][ T28] #1: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 253.385890][ T28] 1 lock held by syz.3.988/8369: [ 253.386732][ T28] #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 253.388904][ T241] nf_conntrack: nf_ct_destroy: returning ct=00000000a17edc7e to slab [ 253.393029][ T4627] BTRFS debug (device loop4): end_bio_extent_readpage: bi_sector=10432, err=0, mirror=1 [ 253.395313][ T8362] BTRFS debug: btrfs_submit_dev_bio: rw 0 0x1000, sector=10408, dev=7340036 (/dev/loop4 id 1), size=4096 [ 253.405351][ T8302] procname=send_redirects mode=644 proc_handler=devinet_conf_proc data=000000003fd16bd7 [ 253.414208][ T4624] BTRFS debug (device loop4): end_bio_extent_readpage: bi_sector=10408, err=0, mirror=1 [ 253.416142][ T8362] BTRFS debug (device loop4): btrfs_submit_dev_bio: rw 0 0x1000, sector=10328, dev=7340036 (/dev/loop4 id 1), size=4096 [ 253.418727][ T8302] procname=accept_source_route mode=644 proc_handler=devinet_conf_proc data=000000004d28a6ed [ 253.427253][ T4624] BTRFS debug (device loop4): end_bio_extent_readpage: bi_sector=10328, err=0, mirror=1 [ 253.435053][ T28] 1 lock held by syz.3.988/8372: [ 253.435962][ T28] #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 253.437877][ T8362] BTRFS debug (device loop4): btrfs_submit_dev_bio: rw 0 0x1000, sector=10336, dev=7340036 (/dev/loop4 id 1), size=4096 [ 253.440173][ T8302] procname=accept_local mode=644 proc_handler=devinet_conf_proc data=00000000ce8b4646 [ 253.448682][ T28] 2 locks held by dhcpcd/8380: [ 253.449512][ T28] #0: ffff0001346d6130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x48/0xaf4 [ 253.451207][ T28] #1: ffff80001559d0f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3f8/0x780 [ 253.453470][ T8302] procname=src_valid_mark mode=644 proc_handler=devinet_conf_proc data=00000000857221e3 [ 253.455492][ T8302] procname=proxy_arp mode=644 proc_handler=devinet_conf_proc data=00000000610f2d44 [ 253.461247][ T4430] BTRFS debug (device loop4): end_bio_extent_readpage: bi_sector=10336, err=0, mirror=1 [ 253.468230][ T8362] kobject: '395ef67a-297e-477c-816d-cd80a5b93e5d' (0000000060a195f5): kobject_add_internal: parent: 'btrfs', set: 'btrfs' [ 253.470625][ T8362] kobject: 'devices' (00000000f3a00cab): kobject_add_internal: parent: '395ef67a-297e-477c-816d-cd80a5b93e5d', set: '' [ 253.475309][ T28] 1 lock held by udevadm/8395: [ 253.476198][ T28] 3 locks held by dhcpcd/8396: [ 253.477083][ T28] #0: ffff0000d3690130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x48/0xaf4 [ 253.478901][ T28] #1: ffff00019f381398 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2bc/0x1a6c [ 253.480803][ T8362] kobject: 'devinfo' (00000000bfdac2c6): kobject_add_internal: parent: '395ef67a-297e-477c-816d-cd80a5b93e5d', set: '' [ 253.483030][ T241] nf_conntrack: clean_from_lists(00000000098d8124) [ 253.483227][ T8362] kobject: '1' (000000004a840e7f): kobject_add_internal: parent: 'devinfo', set: '' [ 253.484316][ T241] nf_conntrack: nf_ct_destroy(00000000098d8124) [ 253.495116][ T8302] procname=medium_id mode=644 proc_handler=devinet_conf_proc data=00000000f45868da [ 253.498687][ T241] nf_conntrack: nf_ct_destroy: returning ct=00000000098d8124 to slab [ 253.508260][ T8302] procname=bootp_relay mode=644 proc_handler=devinet_conf_proc data=000000000da72eb5 [ 253.510209][ T8302] procname=log_martians mode=644 proc_handler=devinet_conf_proc data=00000000cab36ca7 [ 253.512056][ T8302] procname=tag mode=644 proc_handler=devinet_conf_proc data=00000000d31de27f [ 253.513545][ T28] #2: ffff00019f36dbc8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x35c/0x5b8 [ 253.515828][ T8362] kobject: 'discard' (000000003c92a714): kobject_add_internal: parent: '395ef67a-297e-477c-816d-cd80a5b93e5d', set: '' [ 253.519488][ T28] [ 253.519664][ T8374] kcov: kcov_task_exit: t = ffff0000d45fb800, kcov->t = ffff0000d45fb800 [ 253.521792][ T28] ============================================= [ 253.521792][ T28] [ 253.523296][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 253.524469][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 253.525694][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 253.527517][ T28] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000) [ 253.528920][ T28] Call trace: [ 253.529516][ T28] dump_backtrace+0x1c4/0x1f0 [ 253.530397][ T28] show_stack+0x2c/0x3c [ 253.531169][ T28] __dump_stack+0x30/0x40 [ 253.531958][ T28] dump_stack_lvl+0xf4/0x15c [ 253.532892][ T28] dump_stack+0x1c/0x5c [ 253.533693][ T28] panic+0x2f8/0x7ac [ 253.534438][ T28] hung_task_panic+0x0/0x2c [ 253.535296][ T28] kthread+0x254/0x2e0 [ 253.536062][ T28] ret_from_fork+0x10/0x20 [ 253.536909][ T28] SMP: stopping secondary CPUs [ 253.537814][ T28] Kernel Offset: disabled [ 253.538599][ T28] CPU features: 0x0a0000,000f0097,a65bfea7 [ 253.539643][ T28] Memory Limit: none [ 253.802458][ T28] Rebooting in 86400 seconds..