last executing test programs: 3.800068133s ago: executing program 4 (id=378): r0 = socket$can_bcm(0x1d, 0x2, 0x2) dup2(r0, r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x38, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="05000000020801000000000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}}, 0x0) 3.293329306s ago: executing program 1 (id=387): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x200, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1d4, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1c4, 0x1, [@m_tunnel_key={0x1c0, 0xf, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x146, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.124619851s ago: executing program 0 (id=390): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af014a31ba377a1b2cc32b38d3aa2a70297400"/54, 0x36}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 2.986955211s ago: executing program 1 (id=393): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40070) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.916635881s ago: executing program 0 (id=395): syz_open_dev$loop(0x0, 0xfffffbff7ffffffb, 0x1222e2) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.385848171s ago: executing program 1 (id=399): io_submit(0x0, 0x1, &(0x7f0000002300)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000080)="0ff45e62121223c9c947552953608c7efd990682030cb287fc", 0x19}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd11, &(0x7f0000000000)="0400000000000000000000006e01") 2.172383836s ago: executing program 3 (id=402): fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setgroups(0x0, 0x0) 2.029405203s ago: executing program 4 (id=403): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 1.964231432s ago: executing program 3 (id=404): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 1.963597599s ago: executing program 1 (id=405): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af014a31ba377a1b2cc32b38d3aa2a70297400"/54, 0x36}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.762913094s ago: executing program 2 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='naa.600140', 0xa) 1.76273779s ago: executing program 4 (id=407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, 0x0) 1.743605879s ago: executing program 0 (id=408): sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="e2ef1844abff7ff7de1f69086e5910eff9d5118be02d46215f9f363921c4ce3a81ca005e350f15d62c5034f03cb36acf8135e91dbe14fb360753d990af056bc62a8bcf37a1b4bb8421b5e2094ed981f76a0f3c281666509900ca0ac43df449f1017bb601c476c6844de625e1e2d2315cd4ab9084e0df00edbf2bc8e5fc0ef1954f6f8add464c85398aea048dc243d236", 0x90}], 0x1}, 0x4000091) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.652424932s ago: executing program 3 (id=409): r0 = socket(0x10, 0x3, 0x9) sendmmsg$unix(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)='|', 0x1}], 0x1, 0x0, 0x0, 0x4044804}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1, 0x0, 0x0, 0x8000}}], 0x2, 0x24004800) 1.617438775s ago: executing program 1 (id=410): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000540)="$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") bpf$OBJ_GET_PROG(0x7, &(0x7f0000001bc0)=@generic={&(0x7f0000001b80)='./file1\x00', 0x0, 0x10}, 0x18) 1.530671074s ago: executing program 2 (id=411): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000640)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @opaque="172c046f6aef8d2f"}}}}}}, 0x0) 1.427978912s ago: executing program 3 (id=412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.367444457s ago: executing program 0 (id=413): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0xa}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3123, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x1, 0x2000000000, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x4, 0xffffffffffffffff, 0x2, 0x0, 0x80000000000, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x3, 0x1, 0x42, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r6}, 0x38) 1.303024949s ago: executing program 4 (id=414): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setgroups(0x0, 0x0) 1.239697051s ago: executing program 2 (id=415): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_SEND_ZC={0x2f, 0xa, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x7b, 0x11}) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 1.094887194s ago: executing program 4 (id=416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f00000021c0)=[{&(0x7f0000002400)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000100)="00000000020057", 0x7}], 0x2) 1.031520746s ago: executing program 1 (id=417): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='0x', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000002100)='usbip-vudc.0', 0xc) 1.00629291s ago: executing program 3 (id=418): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) 329.05831ms ago: executing program 0 (id=419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e032800008c71ef288563"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xffdd) 216.238758ms ago: executing program 2 (id=420): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af014a31ba377a1b2cc32b38d3aa2a70297400"/54, 0x36}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 214.503144ms ago: executing program 3 (id=421): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='naa.600140', 0xa) 149.089171ms ago: executing program 2 (id=422): r0 = socket(0x10, 0x3, 0x9) sendmmsg$unix(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)='|', 0x1}], 0x1, 0x0, 0x0, 0x4044804}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1, &(0x7f0000002c40), 0x0, 0x8000}}], 0x2, 0x24004800) 87.389647ms ago: executing program 4 (id=423): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept(r0, 0x0, 0x0) 46.222371ms ago: executing program 2 (id=424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, 0x0) 0s ago: executing program 0 (id=425): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000640)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @opaque="172c046f6aef8d2f"}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 65.431597][ T5603] cgroup: Unknown subsys name 'net' [ 65.540941][ T5603] cgroup: Unknown subsys name 'cpuset' [ 65.549933][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.895158][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.041472][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.042151][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.062133][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.062654][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.071762][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.073338][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.074021][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.074553][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.075252][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.075548][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.077778][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.078413][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.086176][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.087031][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.087239][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.087809][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.089360][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.091686][ T4934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.103719][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.104332][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.218790][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.226161][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.227191][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.228605][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.229549][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.767300][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.767484][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.769039][ T5618] bridge_slave_0: entered allmulticast mode [ 70.770837][ T5618] bridge_slave_0: entered promiscuous mode [ 70.775341][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.775435][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.775554][ T5618] bridge_slave_1: entered allmulticast mode [ 70.777288][ T5618] bridge_slave_1: entered promiscuous mode [ 70.905237][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.961839][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.020118][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.020234][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.020607][ T5615] bridge_slave_0: entered allmulticast mode [ 71.022303][ T5615] bridge_slave_0: entered promiscuous mode [ 71.051741][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.051900][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.052017][ T5614] bridge_slave_0: entered allmulticast mode [ 71.053700][ T5614] bridge_slave_0: entered promiscuous mode [ 71.073497][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.073665][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.076588][ T5615] bridge_slave_1: entered allmulticast mode [ 71.079204][ T5615] bridge_slave_1: entered promiscuous mode [ 71.081156][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.081297][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.081405][ T5628] bridge_slave_0: entered allmulticast mode [ 71.083513][ T5628] bridge_slave_0: entered promiscuous mode [ 71.095059][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.095162][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.095526][ T5614] bridge_slave_1: entered allmulticast mode [ 71.097448][ T5614] bridge_slave_1: entered promiscuous mode [ 71.102463][ T5618] team0: Port device team_slave_0 added [ 71.133601][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.133699][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.133811][ T5628] bridge_slave_1: entered allmulticast mode [ 71.137076][ T5628] bridge_slave_1: entered promiscuous mode [ 71.151000][ T5625] Bluetooth: hci3: command tx timeout [ 71.151219][ T5630] Bluetooth: hci1: command tx timeout [ 71.165013][ T5618] team0: Port device team_slave_1 added [ 71.194850][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.228817][ T5630] Bluetooth: hci2: command tx timeout [ 71.229011][ T5630] Bluetooth: hci0: command tx timeout [ 71.242912][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.266254][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.267250][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.267263][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.267284][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.289891][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.301263][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.308952][ T5625] Bluetooth: hci4: command tx timeout [ 71.335019][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.335675][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.335687][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.335708][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.375827][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.375981][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.376345][ T5617] bridge_slave_0: entered allmulticast mode [ 71.379894][ T5617] bridge_slave_0: entered promiscuous mode [ 71.392159][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.392228][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.402844][ T5615] team0: Port device team_slave_0 added [ 71.406425][ T5628] team0: Port device team_slave_0 added [ 71.406621][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.407672][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.407789][ T5617] bridge_slave_1: entered allmulticast mode [ 71.410108][ T5617] bridge_slave_1: entered promiscuous mode [ 71.498417][ T5615] team0: Port device team_slave_1 added [ 71.500739][ T5628] team0: Port device team_slave_1 added [ 71.523643][ T5614] team0: Port device team_slave_0 added [ 71.559843][ T5618] hsr_slave_0: entered promiscuous mode [ 71.560859][ T5618] hsr_slave_1: entered promiscuous mode [ 71.565146][ T5614] team0: Port device team_slave_1 added [ 71.579386][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.579413][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.579451][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.600040][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.616566][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.616582][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.616603][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.639668][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.639685][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.639995][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.642301][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.642314][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.642335][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.646034][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.670057][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.670072][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.670094][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.705735][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.705752][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.705775][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.779074][ T5617] team0: Port device team_slave_0 added [ 71.813903][ T5615] hsr_slave_0: entered promiscuous mode [ 71.816391][ T5615] hsr_slave_1: entered promiscuous mode [ 71.817149][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 71.817248][ T5615] Cannot create hsr debugfs directory [ 71.851683][ T5617] team0: Port device team_slave_1 added [ 71.907461][ T5628] hsr_slave_0: entered promiscuous mode [ 71.908703][ T5628] hsr_slave_1: entered promiscuous mode [ 71.909359][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 71.909375][ T5628] Cannot create hsr debugfs directory [ 71.943177][ T5614] hsr_slave_0: entered promiscuous mode [ 71.944189][ T5614] hsr_slave_1: entered promiscuous mode [ 71.944809][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 71.944825][ T5614] Cannot create hsr debugfs directory [ 71.947912][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.947926][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.947947][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.996800][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.996817][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.996839][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.208180][ T5617] hsr_slave_0: entered promiscuous mode [ 72.209195][ T5617] hsr_slave_1: entered promiscuous mode [ 72.209826][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 72.209843][ T5617] Cannot create hsr debugfs directory [ 72.472772][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.484122][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.485548][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.497158][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.521159][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.531424][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.533727][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.541703][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.633380][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.642883][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.643707][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.654693][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.666475][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.679829][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.681236][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.694236][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.767132][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.778139][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.789772][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.802383][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.810035][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.820085][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.837179][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.846468][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.915834][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.925928][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.931356][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.937141][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.954238][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.964080][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.965018][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.973931][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.003141][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.072505][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.100672][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.110538][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.129688][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.139279][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.142893][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.143243][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.157385][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.167140][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.194366][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.203697][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.206316][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.206409][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.237921][ T5625] Bluetooth: hci1: command tx timeout [ 73.237963][ T5630] Bluetooth: hci3: command tx timeout [ 73.257439][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.307974][ T5625] Bluetooth: hci0: command tx timeout [ 73.308019][ T5625] Bluetooth: hci2: command tx timeout [ 73.312536][ T5618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.367294][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.388032][ T5630] Bluetooth: hci4: command tx timeout [ 73.417436][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.431138][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.431259][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.469731][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.480546][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.480662][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.525823][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.563120][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.563188][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.600787][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.621319][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.621433][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.623712][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.624051][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.625939][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.626033][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.693693][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.874566][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.911038][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.911175][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.967451][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.967621][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.072699][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.781885][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.926502][ T5618] veth0_vlan: entered promiscuous mode [ 74.970626][ T5618] veth1_vlan: entered promiscuous mode [ 75.050665][ T5628] veth0_vlan: entered promiscuous mode [ 75.061892][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.094491][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.119989][ T5628] veth1_vlan: entered promiscuous mode [ 75.149725][ T5618] veth0_macvtap: entered promiscuous mode [ 75.173576][ T5618] veth1_macvtap: entered promiscuous mode [ 75.204931][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.245854][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.250790][ T5615] veth0_vlan: entered promiscuous mode [ 75.270003][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.283009][ T5628] veth0_macvtap: entered promiscuous mode [ 75.307440][ T5615] veth1_vlan: entered promiscuous mode [ 75.313116][ T5630] Bluetooth: hci1: command tx timeout [ 75.318488][ T5630] Bluetooth: hci3: command tx timeout [ 75.322690][ T5628] veth1_macvtap: entered promiscuous mode [ 75.369903][ T5614] veth0_vlan: entered promiscuous mode [ 75.376550][ T5614] veth1_vlan: entered promiscuous mode [ 75.388639][ T5630] Bluetooth: hci2: command tx timeout [ 75.388928][ T5630] Bluetooth: hci0: command tx timeout [ 75.452077][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.464254][ T5617] veth0_vlan: entered promiscuous mode [ 75.478114][ T5625] Bluetooth: hci4: command tx timeout [ 75.484556][ T1113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.484736][ T1113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.484786][ T1113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.484819][ T1113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.506294][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.546886][ T5617] veth1_vlan: entered promiscuous mode [ 75.556786][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.557037][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.584418][ T5615] veth0_macvtap: entered promiscuous mode [ 75.589857][ T5615] veth1_macvtap: entered promiscuous mode [ 75.597795][ T1102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.638968][ T1121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.642738][ T5614] veth0_macvtap: entered promiscuous mode [ 75.652661][ T5614] veth1_macvtap: entered promiscuous mode [ 75.685017][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.685065][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.702393][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.711556][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.731659][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.765917][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.862504][ T5617] veth0_macvtap: entered promiscuous mode [ 75.888220][ T1102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.888398][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.888430][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.934550][ T5617] veth1_macvtap: entered promiscuous mode [ 75.951827][ T5618] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.037654][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.074340][ T5809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.085303][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.117424][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.117467][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.147636][ T1121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.147703][ T1121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.147752][ T1121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.147783][ T1121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.147808][ T1121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.147838][ T1121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.147869][ T1121] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.147899][ T1121] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.163631][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.163651][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.181861][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.268861][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.269707][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.269745][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.269777][ T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.389705][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.389752][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.446592][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.456864][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.556474][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.556493][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.659606][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.659650][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.825970][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.826013][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.156804][ T5831] mmap: syz.1.2 (5831) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.322355][ T5827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.387851][ T5625] Bluetooth: hci3: command tx timeout [ 77.387897][ T5625] Bluetooth: hci1: command tx timeout [ 77.478696][ T5630] Bluetooth: hci0: command tx timeout [ 77.478743][ T5630] Bluetooth: hci2: command tx timeout [ 77.548336][ T5625] Bluetooth: hci4: command tx timeout [ 78.717131][ T5868] netlink: 44 bytes leftover after parsing attributes in process `syz.1.24'. [ 78.726241][ T30] audit: type=1326 audit(1786058140.321:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16379e0d9 code=0x7ffc0000 [ 78.726296][ T30] audit: type=1326 audit(1786058140.331:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16379e0d9 code=0x7ffc0000 [ 78.726345][ T30] audit: type=1326 audit(1786058140.331:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16379e0d9 code=0x7ffc0000 [ 78.785737][ T30] audit: type=1326 audit(1786058140.341:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fc16379e0d9 code=0x7ffc0000 [ 78.785786][ T30] audit: type=1326 audit(1786058140.341:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16379e0d9 code=0x7ffc0000 [ 78.785820][ T30] audit: type=1326 audit(1786058140.341:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16379e0d9 code=0x7ffc0000 [ 78.785856][ T30] audit: type=1326 audit(1786058140.341:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16379e0d9 code=0x7ffc0000 [ 78.785890][ T30] audit: type=1326 audit(1786058140.341:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16379e0d9 code=0x7ffc0000 [ 78.785923][ T30] audit: type=1326 audit(1786058140.341:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc16379e0d9 code=0x7ffc0000 [ 78.785957][ T30] audit: type=1326 audit(1786058140.351:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.3.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fc16379e0d9 code=0x7ffc0000 [ 79.474462][ T5886] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.596908][ T5893] netlink: 44 bytes leftover after parsing attributes in process `syz.3.37'. [ 80.030301][ T5904] loop1: detected capacity change from 0 to 512 [ 80.046289][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 80.193164][ T5871] loop4: detected capacity change from 0 to 32768 [ 80.347868][ T5904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.689356][ T5871] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.25 (5871) [ 80.846870][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.885790][ T5871] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 80.902195][ T5871] BTRFS info (device loop4): using crc32c checksum algorithm [ 81.031171][ T5912] tipc: Started in network mode [ 81.031238][ T5912] tipc: Node identity a60755b02703, cluster identity 4711 [ 81.032660][ T5912] tipc: Enabled bearer , priority 0 [ 81.038555][ T5912] syzkaller0: entered promiscuous mode [ 81.038574][ T5912] syzkaller0: entered allmulticast mode [ 81.060643][ T5912] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 81.100946][ T5928] jffs2: notice: (5928) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 81.261631][ T5871] BTRFS info (device loop4): enabling ssd optimizations [ 81.272661][ T5871] BTRFS info (device loop4): turning on async discard [ 81.280516][ T5871] BTRFS info (device loop4): enabling free space tree [ 81.328688][ T5920] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 81.390795][ T5935] tipc: Resetting bearer [ 81.432239][ T5911] tipc: Resetting bearer [ 81.477785][ T5939] Zero length message leads to an empty skb [ 82.025114][ T5911] tipc: Disabling bearer [ 82.170576][ T5948] loop2: detected capacity change from 0 to 512 [ 82.198390][ T5948] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.198432][ T5948] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.259652][ T5948] EXT4-fs (loop2): 1 truncate cleaned up [ 82.261516][ T5948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.232250][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.303507][ T5958] loop0: detected capacity change from 0 to 128 [ 83.316323][ T5618] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 83.958426][ T5967] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5614] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5967] [ 83.986291][ T5967] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 83.986624][ T5967] FAT-fs (loop0): Filesystem has been set read-only [ 83.997386][ T5965] netlink: 260 bytes leftover after parsing attributes in process `syz.0.51'. [ 83.997999][ T5965] netlink: 104 bytes leftover after parsing attributes in process `syz.0.51'. [ 83.998022][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 84.234644][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'. [ 84.419579][ T5972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.57'. [ 84.902087][ T5989] loop4: detected capacity change from 0 to 128 [ 85.240584][ T5996] loop3: detected capacity change from 0 to 1024 [ 85.260506][ T5996] EXT4-fs: Ignoring removed orlov option [ 85.670392][ T5996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.841910][ T191] cfg80211: failed to load regulatory.db [ 87.499507][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.602945][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 87.602989][ T30] audit: type=1800 audit(1786058149.211:56): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.68" name="ipv4_port" dev="configfs" ino=9564 res=0 errno=0 [ 87.621221][ T30] audit: type=1800 audit(1786058149.231:57): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.68" name="num" dev="configfs" ino=8778 res=0 errno=0 [ 87.625292][ T30] audit: type=1800 audit(1786058149.231:58): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.68" name="local" dev="configfs" ino=8779 res=0 errno=0 [ 87.738967][ T6017] loop4: detected capacity change from 0 to 128 [ 88.005797][ T30] audit: type=1800 audit(1786058149.611:59): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.75" name="enable" dev="configfs" ino=8814 res=0 errno=0 [ 88.093301][ T6027] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5618] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[6027] [ 88.102623][ T6027] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 88.102655][ T6027] FAT-fs (loop4): Filesystem has been set read-only [ 88.107055][ T6027] netlink: 260 bytes leftover after parsing attributes in process `syz.4.71'. [ 88.108740][ T6027] netlink: 104 bytes leftover after parsing attributes in process `syz.4.71'. [ 88.109031][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 88.798241][ T6039] loop2: detected capacity change from 0 to 128 [ 88.842964][ T6039] FAT-fs (loop2): data area starts beyond volume (33 > 0) [ 88.851418][ T6039] FAT-fs (loop2): Can't find a valid FAT filesystem [ 88.916787][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 89.655968][ T6039] loop2: detected capacity change from 0 to 2048 [ 90.082994][ T6039] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 90.933576][ T6061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.86'. [ 91.123232][ T30] audit: type=1800 audit(1786058152.731:60): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.87" name="zoned" dev="configfs" ino=9649 res=0 errno=0 [ 91.187969][ T30] audit: type=1800 audit(1786058152.791:61): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.87" name="zone_nr_conv" dev="configfs" ino=8885 res=0 errno=0 [ 92.925666][ T6098] Set syz1 is full, maxelem 4096 reached [ 93.040678][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 95.238769][ T6154] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 96.264877][ T6171] netlink: 96 bytes leftover after parsing attributes in process `syz.1.126'. [ 96.304475][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 98.678515][ T6180] loop4: detected capacity change from 0 to 1024 [ 98.683111][ T6180] ======================================================= [ 98.683111][ T6180] WARNING: The mand mount option has been deprecated and [ 98.683111][ T6180] and is ignored by this kernel. Remove the mand [ 98.683111][ T6180] option from the mount to silence this warning. [ 98.683111][ T6180] ======================================================= [ 98.683565][ T6180] EXT4-fs: Ignoring removed oldalloc option [ 98.683700][ T6180] EXT4-fs: Ignoring removed bh option [ 98.985222][ T6180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 98.985302][ T6180] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.240018][ T154] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 1) [ 99.299253][ T154] EXT4-fs (loop4): Remounting filesystem read-only [ 99.313924][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.129338][ T6205] syz.2.134 (6205) used greatest stack depth: 17552 bytes left [ 101.652849][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 101.756640][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 102.788822][ T6222] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 102.788888][ T6222] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 102.788954][ T6222] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 102.808421][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.867199][ T6222] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.933355][ T6222] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 102.980294][ T25] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 103.011869][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.011918][ T25] usb 1-1: Product: syz [ 103.011939][ T25] usb 1-1: Manufacturer: syz [ 103.011951][ T25] usb 1-1: SerialNumber: syz [ 103.626288][ T6251] netlink: 96 bytes leftover after parsing attributes in process `syz.2.154'. [ 104.074311][ T6254] wireguard0: entered promiscuous mode [ 105.491412][ T25] usb 1-1: 1:1 : no cluster descriptor [ 105.516275][ T25] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 105.757055][ T25] usb 1-1: USB disconnect, device number 2 [ 105.966864][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.151558][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.163'. [ 107.744622][ T6307] jffs2: notice: (6307) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.923872][ T6315] jffs2: notice: (6315) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.154275][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.630520][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 108.725373][ T6331] loop1: detected capacity change from 0 to 128 [ 108.732715][ T6331] FAT-fs (loop1): data area starts beyond volume (33 > 0) [ 108.732746][ T6331] FAT-fs (loop1): Can't find a valid FAT filesystem [ 108.938392][ T10] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 108.950983][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.951034][ T10] usb 3-1: Product: syz [ 108.951063][ T10] usb 3-1: Manufacturer: syz [ 108.951082][ T10] usb 3-1: SerialNumber: syz [ 109.080831][ T6336] loop1: detected capacity change from 0 to 2048 [ 109.212971][ T6336] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 109.618949][ T30] audit: type=1800 audit(1786058171.201:62): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.181" name="ipv4_address" dev="configfs" ino=10431 res=0 errno=0 [ 109.772486][ T6342] overlay: Unknown parameter 'seclabel' [ 110.373003][ T6359] jffs2: notice: (6359) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 110.570843][ T10] usb 3-1: 1:1 : no cluster descriptor [ 110.580273][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 110.679358][ T10] usb 3-1: USB disconnect, device number 2 [ 110.788781][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.789652][ T6365] netlink: 96 bytes leftover after parsing attributes in process `syz.3.190'. [ 111.001072][ T5738] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.178080][ T5738] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 111.268291][ T5738] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.269196][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.347481][ T5738] as10x_usb: device has been detected [ 112.379943][ T5738] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 112.605918][ T5738] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 112.782944][ T5738] as10x_usb: error during firmware upload part1 [ 112.803564][ T5738] Registered device Abilis Systems DVB-Titan [ 113.606320][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 113.893058][ T5738] usb 2-1: USB disconnect, device number 2 [ 113.953940][ T5738] Unregistered device Abilis Systems DVB-Titan [ 113.958780][ T5738] as10x_usb: device has been disconnected [ 114.067098][ T6401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.347651][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.377697][ T5738] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.424148][ T6409] syzkaller0: entered promiscuous mode [ 114.429956][ T6409] syzkaller0: entered allmulticast mode [ 114.499328][ T10] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 114.513173][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.513216][ T10] usb 4-1: Product: syz [ 114.513245][ T10] usb 4-1: Manufacturer: syz [ 114.513262][ T10] usb 4-1: SerialNumber: syz [ 114.539250][ T5738] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 114.550636][ T5738] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.550702][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.580735][ T5738] usb 2-1: config 0 descriptor?? [ 114.599035][ T5738] pwc: Askey VC010 type 2 USB webcam detected. [ 114.666372][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 114.753359][ T6423] netlink: 96 bytes leftover after parsing attributes in process `syz.0.211'. [ 115.003229][ T5738] pwc: recv_control_msg error -32 req 02 val 2b00 [ 115.011266][ T5738] pwc: recv_control_msg error -32 req 02 val 2700 [ 115.020281][ T5738] pwc: recv_control_msg error -71 req 02 val 2c00 [ 115.027180][ T5738] pwc: recv_control_msg error -71 req 04 val 1000 [ 115.028385][ T5738] pwc: recv_control_msg error -71 req 04 val 1300 [ 115.036498][ T5738] pwc: recv_control_msg error -71 req 04 val 1400 [ 115.058757][ T5738] pwc: recv_control_msg error -71 req 02 val 2000 [ 115.065814][ T5738] pwc: recv_control_msg error -71 req 02 val 2100 [ 115.073259][ T5738] pwc: recv_control_msg error -71 req 04 val 1500 [ 115.081067][ T5738] pwc: recv_control_msg error -71 req 02 val 2500 [ 115.090502][ T5738] pwc: recv_control_msg error -71 req 02 val 2400 [ 115.097733][ T5738] pwc: recv_control_msg error -71 req 02 val 2600 [ 115.104804][ T5738] pwc: recv_control_msg error -71 req 02 val 2900 [ 115.112429][ T5738] pwc: recv_control_msg error -71 req 02 val 2800 [ 115.123473][ T5738] pwc: recv_control_msg error -71 req 04 val 1100 [ 115.130423][ T5738] pwc: recv_control_msg error -71 req 04 val 1200 [ 115.170770][ T5738] pwc: Registered as video103. [ 115.179559][ T5738] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 115.204364][ T5738] usb 2-1: USB disconnect, device number 3 [ 115.684699][ T6430] netlink: 88 bytes leftover after parsing attributes in process `syz.1.212'. [ 117.515140][ T10] usb 4-1: 1:1 : no cluster descriptor [ 117.540937][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 117.680379][ T10] usb 4-1: USB disconnect, device number 2 [ 117.815053][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 117.883976][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.037856][ T6460] netlink: 88 bytes leftover after parsing attributes in process `syz.0.224'. [ 118.292068][ T6468] jffs2: notice: (6468) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 118.927856][ T6485] loop0: detected capacity change from 0 to 2048 [ 119.020737][ T6485] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 119.179159][ T6488] jffs2: notice: (6488) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.342377][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 119.462588][ T6501] netlink: NAT attribute has 5 unknown bytes [ 119.462648][ T6501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.626936][ T6504] netlink: 88 bytes leftover after parsing attributes in process `syz.4.241'. [ 120.148153][ T6513] loop2: detected capacity change from 0 to 256 [ 121.503600][ T6514] ufs: You didn't specify the type of your ufs filesystem [ 121.503600][ T6514] [ 121.503600][ T6514] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 121.503600][ T6514] [ 121.503600][ T6514] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 122.571190][ T6514] ufs: ufstype=old is supported read-only [ 122.763506][ T6526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.942885][ T6534] jffs2: notice: (6534) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.974462][ T6540] netlink: 88 bytes leftover after parsing attributes in process `syz.4.254'. [ 123.036229][ T30] audit: type=1800 audit(1786058184.641:63): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.255" name="ipv4_address" dev="configfs" ino=10737 res=0 errno=0 [ 123.059622][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.208292][ T25] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 123.209303][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.209349][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.221309][ T25] usb 2-1: config 0 descriptor?? [ 123.234686][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 123.695311][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 123.705764][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 123.754710][ T25] pwc: recv_control_msg error -71 req 02 val 2c00 [ 123.757466][ T25] pwc: recv_control_msg error -71 req 04 val 1000 [ 123.758920][ T25] pwc: recv_control_msg error -71 req 04 val 1300 [ 123.759317][ T25] pwc: recv_control_msg error -71 req 04 val 1400 [ 123.759756][ T25] pwc: recv_control_msg error -71 req 02 val 2000 [ 123.760152][ T25] pwc: recv_control_msg error -71 req 02 val 2100 [ 123.760580][ T25] pwc: recv_control_msg error -71 req 04 val 1500 [ 123.760969][ T25] pwc: recv_control_msg error -71 req 02 val 2500 [ 123.761406][ T25] pwc: recv_control_msg error -71 req 02 val 2400 [ 123.761790][ T25] pwc: recv_control_msg error -71 req 02 val 2600 [ 123.762168][ T25] pwc: recv_control_msg error -71 req 02 val 2900 [ 123.762556][ T25] pwc: recv_control_msg error -71 req 02 val 2800 [ 123.763089][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 123.763472][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 123.831912][ T25] pwc: Registered as video103. [ 123.868354][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 123.988697][ T25] usb 2-1: USB disconnect, device number 4 [ 124.171421][ T6537] loop2: detected capacity change from 0 to 40427 [ 124.211746][ T6537] F2FS-fs (loop2): invalid crc value [ 124.437482][ T6537] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 124.484689][ T6537] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 124.492995][ T6537] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 124.504296][ T6537] F2FS-fs (loop2): Start checkpoint disabled! [ 124.530958][ T6537] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 124.533906][ T6537] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 124.672775][ T6566] netlink: 88 bytes leftover after parsing attributes in process `syz.1.265'. [ 124.962322][ T6537] F2FS-fs (loop2): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 125.533642][ T6583] netlink: 32 bytes leftover after parsing attributes in process `syz.3.268'. [ 125.638565][ T1113] kworker/u8:9: attempt to access beyond end of device [ 125.638565][ T1113] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.639647][ T1113] CPU: 1 UID: 0 PID: 1113 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 125.639671][ T1113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.639682][ T1113] Workqueue: writeback wb_workfn (flush-7:2) [ 125.639732][ T1113] Call Trace: [ 125.639742][ T1113] [ 125.639750][ T1113] dump_stack_lvl+0xe8/0x150 [ 125.639776][ T1113] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 125.639804][ T1113] f2fs_write_end_io+0x1215/0x16f0 [ 125.639830][ T1113] ? blkg_put+0x22/0x240 [ 125.639866][ T1113] __submit_merged_bio+0x258/0x6a0 [ 125.639886][ T1113] ? rcu_is_watching+0x15/0xb0 [ 125.639911][ T1113] __submit_merged_write_cond+0x3c9/0x4e0 [ 125.639940][ T1113] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 125.639984][ T1113] f2fs_write_data_pages+0x2a27/0x36f0 [ 125.640040][ T1113] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 125.640077][ T1113] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 125.640154][ T1113] ? __lock_acquire+0x6df/0x2e50 [ 125.640199][ T1113] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 125.640223][ T1113] do_writepages+0x338/0x560 [ 125.640245][ T1113] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.640277][ T1113] ? reacquire_held_locks+0x117/0x1a0 [ 125.640296][ T1113] ? writeback_sb_inodes+0x450/0x1b00 [ 125.640325][ T1113] __writeback_single_inode+0x136/0x1220 [ 125.640353][ T1113] ? do_raw_spin_unlock+0xf5/0x210 [ 125.640379][ T1113] writeback_sb_inodes+0x9de/0x1b00 [ 125.640427][ T1113] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 125.640492][ T1113] ? rcu_is_watching+0x15/0xb0 [ 125.640511][ T1113] ? queue_io+0x2d3/0x470 [ 125.640538][ T1113] wb_writeback+0x41c/0xad0 [ 125.640565][ T1113] ? queue_io+0x2a1/0x470 [ 125.640594][ T1113] ? __pfx_wb_writeback+0x10/0x10 [ 125.640616][ T1113] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.640653][ T1113] wb_workfn+0x431/0x10f0 [ 125.640677][ T1113] ? update_se+0x90/0x1020 [ 125.640711][ T1113] ? __pfx_wb_workfn+0x10/0x10 [ 125.640738][ T1113] ? update_protect_slice+0x128/0x210 [ 125.640777][ T1113] ? lock_acquire+0x115/0x350 [ 125.640811][ T1113] ? rcu_is_watching+0x15/0xb0 [ 125.640831][ T1113] ? process_scheduled_works+0x97e/0x1630 [ 125.640853][ T1113] process_scheduled_works+0xc4e/0x1630 [ 125.640905][ T1113] ? __pfx_process_scheduled_works+0x10/0x10 [ 125.640932][ T1113] ? assign_work+0x3cf/0x5d0 [ 125.640958][ T1113] worker_thread+0xa47/0xfb0 [ 125.641006][ T1113] kthread+0x388/0x470 [ 125.641023][ T1113] ? __pfx_worker_thread+0x10/0x10 [ 125.641043][ T1113] ? __pfx_kthread+0x10/0x10 [ 125.641060][ T1113] ret_from_fork+0x514/0xb70 [ 125.641089][ T1113] ? __pfx_ret_from_fork+0x10/0x10 [ 125.641115][ T1113] ? __switch_to+0xc89/0x1420 [ 125.641140][ T1113] ? __pfx_kthread+0x10/0x10 [ 125.641158][ T1113] ret_from_fork_asm+0x1a/0x30 [ 125.641199][ T1113] [ 125.641206][ T1113] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 126.991742][ T6601] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 126.991771][ T6601] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 126.992670][ T6601] vhci_hcd vhci_hcd.0: Device attached [ 127.143482][ T6602] vhci_hcd: connection closed [ 127.146369][ T1121] vhci_hcd vhci_hcd.4: stop threads [ 127.146807][ T1121] vhci_hcd vhci_hcd.4: release socket [ 127.149936][ T1121] vhci_hcd vhci_hcd.4: disconnect device [ 127.199111][ T191] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 127.396940][ T6616] loop3: detected capacity change from 0 to 8 [ 127.406875][ T6616] SQUASHFS error: Unable to read inode 0x11f [ 129.728446][ T6631] wireguard0: entered promiscuous mode [ 130.310577][ T6657] jffs2: notice: (6657) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.549859][ T6664] Bluetooth: MGMT ver 1.23 [ 131.693834][ T6681] jffs2: notice: (6681) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 132.238709][ T6692] team0: Device xfrm0 is of different type [ 132.256218][ T6696] jffs2: notice: (6696) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 132.676645][ T30] audit: type=1800 audit(1786058194.281:64): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.308" name="ipv4_port" dev="configfs" ino=11116 res=0 errno=0 [ 132.680833][ T30] audit: type=1800 audit(1786058194.281:65): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.308" name="num" dev="configfs" ino=11117 res=0 errno=0 [ 132.832003][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.839255][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.647811][ T6722] loop0: detected capacity change from 0 to 8 [ 133.662756][ T6722] SQUASHFS error: Unable to read inode 0x11f [ 133.890302][ T30] audit: type=1800 audit(1786058195.501:66): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.320" name="ipv4_port" dev="configfs" ino=11981 res=0 errno=0 [ 133.912757][ T30] audit: type=1800 audit(1786058195.521:67): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.320" name="num" dev="configfs" ino=11982 res=0 errno=0 [ 134.239178][ T6741] jffs2: notice: (6741) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 135.354383][ T6771] jffs2: notice: (6771) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 136.404550][ T6823] jffs2: notice: (6823) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 136.416460][ T6819] loop4: detected capacity change from 0 to 4096 [ 136.545157][ T6819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.106390][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.221818][ T6849] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.399316][ T6852] jffs2: notice: (6852) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 138.741873][ T30] audit: type=1800 audit(1786058200.351:68): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.371" name="num" dev="configfs" ino=12185 res=0 errno=0 [ 138.861870][ T30] audit: type=1800 audit(1786058200.471:69): pid=6865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.371" name="ipv4_port" dev="configfs" ino=12468 res=0 errno=0 [ 140.062329][ T6876] loop1: detected capacity change from 0 to 256 [ 141.728633][ T6889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.979714][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 142.013567][ T30] audit: type=1800 audit(1786058203.621:70): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.386" name="ipv4_port" dev="configfs" ino=12531 res=0 errno=0 [ 142.016347][ T30] audit: type=1800 audit(1786058203.621:71): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.386" name="num" dev="configfs" ino=12532 res=0 errno=0 [ 142.131044][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 142.132047][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.132093][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.141778][ T10] usb 5-1: config 0 descriptor?? [ 142.159598][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 142.283374][ T6917] team0: Device xfrm0 is of different type [ 142.565673][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 142.566365][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 142.567402][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 142.570102][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 142.580123][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 142.581408][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 142.584035][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 142.584500][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 142.584911][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 142.585302][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 142.585758][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 142.586248][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 142.586648][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 142.587783][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 142.588372][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 142.588756][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 142.601081][ T10] pwc: Registered as video103. [ 142.634447][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 142.729810][ T10] usb 5-1: USB disconnect, device number 2 [ 142.909935][ T6930] netlink: 84 bytes leftover after parsing attributes in process `syz.3.398'. [ 143.027380][ T6928] syzkaller0: entered promiscuous mode [ 143.027426][ T6928] syzkaller0: entered allmulticast mode [ 143.803656][ T6956] loop1: detected capacity change from 0 to 512 [ 143.804595][ T6956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.804637][ T6956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.832293][ T6956] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 143.915760][ T6956] EXT4-fs (loop1): 1 truncate cleaned up [ 143.959192][ T6956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.879919][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.206441][ T6980] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 145.302513][ T6995] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN PTI [ 145.314451][ T6995] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 145.322884][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.3.421 Not tainted syzkaller #0 PREEMPT(full) [ 145.332260][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.342322][ T6995] RIP: 0010:configfs_depend_item_unlocked+0x96/0x420 [ 145.349024][ T6995] Code: df e8 0e 88 00 00 89 c5 31 ff 89 c6 e8 43 34 4e ff 85 ed 74 0a e8 fa 2f 4e ff 4d 89 fd eb 6c 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 4e 05 bd ff 4c 8b 6b 60 48 89 df e8 d2 87 [ 145.368657][ T6995] RSP: 0018:ffffc9000501fad8 EFLAGS: 00010206 [ 145.374752][ T6995] RAX: 000000000000000c RBX: 0000000000000000 RCX: 0000000000000002 [ 145.382746][ T6995] RDX: ffff88802ae38000 RSI: 0000000000000000 RDI: 0000000000000060 [ 145.390730][ T6995] RBP: 0000000000000000 R08: ffffffff9058947f R09: 1ffffffff20b128f [ 145.398732][ T6995] R10: dffffc0000000000 R11: fffffbfff20b1290 R12: ffffffff8f723be0 [ 145.406972][ T6995] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888057db0c00 [ 145.414963][ T6995] FS: 00007fc1646856c0(0000) GS:ffff888125018000(0000) knlGS:0000000000000000 [ 145.423914][ T6995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.430520][ T6995] CR2: 00007f0e3272d300 CR3: 000000005b77e000 CR4: 00000000003526f0 [ 145.438514][ T6995] Call Trace: [ 145.441807][ T6995] [ 145.444743][ T6995] usbg_make_tpg+0x1f6/0x590 [ 145.449344][ T6995] ? configfs_mkdir+0x4b0/0x9e0 [ 145.454222][ T6995] ? __pfx___mutex_lock+0x10/0x10 [ 145.459308][ T6995] ? __pfx_usbg_make_tpg+0x10/0x10 [ 145.464455][ T6995] ? do_raw_spin_lock+0x12b/0x2f0 [ 145.469510][ T6995] target_fabric_make_tpg+0xa8/0x6d0 [ 145.474870][ T6995] configfs_mkdir+0x4f6/0x9e0 [ 145.479562][ T6995] ? d_splice_alias+0x12/0x30 [ 145.484335][ T6995] ? __pfx_configfs_mkdir+0x10/0x10 [ 145.489544][ T6995] ? generic_permission+0x2bf/0x670 [ 145.494755][ T6995] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 145.499799][ T6995] vfs_mkdir+0x40c/0x620 [ 145.504082][ T6995] filename_mkdirat+0x285/0x510 [ 145.508970][ T6995] ? __pfx_filename_mkdirat+0x10/0x10 [ 145.514368][ T6995] ? do_getname+0x151/0x250 [ 145.518891][ T6995] __se_sys_mkdirat+0x35/0x150 [ 145.523660][ T6995] do_syscall_64+0x166/0x510 [ 145.528255][ T6995] ? trace_irq_disable+0x3b/0x140 [ 145.533281][ T6995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.539347][ T6995] ? clear_bhb_loop+0x40/0x90 [ 145.544019][ T6995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.549905][ T6995] RIP: 0033:0x7fc16379e0d9 [ 145.554325][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.573927][ T6995] RSP: 002b:00007fc164685028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 145.582373][ T6995] RAX: ffffffffffffffda RBX: 00007fc163a26090 RCX: 00007fc16379e0d9 [ 145.590346][ T6995] RDX: 00000000000001ff RSI: 0000200000000740 RDI: ffffffffffffff9c [ 145.598315][ T6995] RBP: 00007fc163835024 R08: 0000000000000000 R09: 0000000000000000 [ 145.606285][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.614335][ T6995] R13: 00007fc163a26128 R14: 00007fc163a26090 R15: 00007ffcbea5e778 [ 145.622317][ T6995] [ 145.625333][ T6995] Modules linked in: [ 145.630568][ T6995] ---[ end trace 0000000000000000 ]--- [ 145.677972][ T6995] RIP: 0010:configfs_depend_item_unlocked+0x96/0x420 [ 145.678024][ T6995] Code: df e8 0e 88 00 00 89 c5 31 ff 89 c6 e8 43 34 4e ff 85 ed 74 0a e8 fa 2f 4e ff 4d 89 fd eb 6c 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 4e 05 bd ff 4c 8b 6b 60 48 89 df e8 d2 87 [ 145.678050][ T6995] RSP: 0018:ffffc9000501fad8 EFLAGS: 00010206 [ 145.678074][ T6995] RAX: 000000000000000c RBX: 0000000000000000 RCX: 0000000000000002 [ 145.678089][ T6995] RDX: ffff88802ae38000 RSI: 0000000000000000 RDI: 0000000000000060 [ 145.678106][ T6995] RBP: 0000000000000000 R08: ffffffff9058947f R09: 1ffffffff20b128f [ 145.678122][ T6995] R10: dffffc0000000000 R11: fffffbfff20b1290 R12: ffffffff8f723be0 [ 145.678140][ T6995] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888057db0c00 [ 145.678158][ T6995] FS: 00007fc1646856c0(0000) GS:ffff888125018000(0000) knlGS:0000000000000000 [ 145.678178][ T6995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.678194][ T6995] CR2: 0000200000000100 CR3: 000000005b77e000 CR4: 00000000003526f0 [ 145.678218][ T6995] Kernel panic - not syncing: Fatal exception [ 145.780401][ T6995] Kernel Offset: disabled [ 145.784770][ T6995] Rebooting in 86400 seconds..