last executing test programs: 6m58.038713565s ago: executing program 1 (id=426): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) write(0xffffffffffffffff, &(0x7f00000001c0)='bi', 0x2) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000500), 0x1000) 6m52.719344326s ago: executing program 1 (id=434): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000b40)={0x2, 0x0, [{0xae8, 0x0, 0x3e}, {0x40000090, 0x0, 0xffff}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 6m51.633329347s ago: executing program 1 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000f00)={0x2, 0x0, 0x16, 0x19, 0xcc, &(0x7f0000000b00)="beff36e6158ead3c1b83b0103a9974faeae4c309c080f50a889040d6f6ef4c9ce7e01677b04cf3740f9857bdaf7503448367fde0e5f3d1ccbf26d41783ad875ea405fcb1134a208526d31322f0d64abf366e4c96dba61ec33c8be0385dc908224a834942a8eae5a74b067d327b45ecf03e8c8f10c7f3ee9a8913ce8d49a65d7b4db0e15ad8fd4badac0d51c1d5cad0534d371a53d769c3bfb9d98a5054a9229b26d22e8e8153f48daa839ff1c99d1b52960ab4f448d5f785a2eab46f64080333fc240a4405c5792d97b069985c6bb8a2e0969a376cb8674ef0dc7f2734c8d0585f0a67b3a865289ba924b005ea818886dad344c63d2aa16808fb05be3218ecbee305b11936e58cd74cbd2d69264d6b8a55d3b8bd59cf413b780ad4ec6d54bff9b765a91f64729e837cab6cf2046097b19631f77aba44f7d1fd1a6ccaf42e856f9dda07d67356569f1161690e4ce55957c427b52b7187c3dcf9504f80ea108ee036bd99ec692e34e914799bafc9c6d07b65bac60b9e7b7b3b5bfe7649d6d91dd9743dfa439699af1b4e5b7349dded152fc386c4da5cf9b94e7ff592fc409ea7cd32ec3bfd2ac360685086ae58e249a247e747dc899a1e590eb1a5a625995b0c24773056448d825b2a8a1fa8a0a5dc9b568d6f682d62ebffe85fd1db7d2d62eab28dbd74c8d47f3a1d60a875e1430981797bf265fcb6fedf5129e7cb40a65c723d47a675386ab9fba3e34e03284799b7e248b8397a32b6a0c1f389fe41352ae93abe0b8daaa6fb1609539af9a9675c7aed584c81cbbdc2e0531c0aff84f350ff1a0dec901cb4ab2bd5a2c134f4fca3d33e0f238edb8c3a7faf77f59ab670b4551757fb0dcab91ec4df5faa6089195f0a79c4f9c65a6d5e38bc7a544f929e1663b85c7c32765792f08bd3b2bc25bfda1ea140711ee03667666e412273f6f6644cba35c038d7257c7fe021931883d38a5dde3b7e8317a448869df431bf0c22eb6becca3189857380c6a4152fd7226a864b4ab006411d377b1ce53e59adf1460258e9066eca412aae99acf5b092b148feb537eaa7114b32973ff4f7ebf8ca8b65a5a84ba980e650aa8c89d4c8d995ddc1af0847fb9bbe0d613e9d8d97be68304acdb30753fc3e3face438715d215bacedccc9d15942fa630e4a07e5d3c22d7238b4daf8bfff2a31e65d8978cc0fe9067bd6d9ed52b3cd46561433d0a880660ce961b643c03dc5c01911cb6da45ec104db3eaaea0fb8679afb5a3cea3497ceded859c2df6d182acc0ce1b568e74754f336c7f9e954f6ecbb4f63eea5407db0534549bb7c474892368d0678d0ab30bfdc4fbb10e1eaeba95fe958793071130393616a939bd46bec45d9329a1690e188d2f266d1a7903c2800efbb21a28b78aefc885fbf88ab49d7b7e7966a41b1a28ade5c321c70ca49263be4fc19a187add34fefcbe8"}) keyctl$clear(0x3, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0) r4 = dup(r3) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000100)=""/60, 0x3c}], 0x1) 6m50.361226056s ago: executing program 1 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000f00)={0x2, 0x0, 0x16, 0x19, 0xcc, &(0x7f0000000b00)="beff36e6158ead3c1b83b0103a9974faeae4c309c080f50a889040d6f6ef4c9ce7e01677b04cf3740f9857bdaf7503448367fde0e5f3d1ccbf26d41783ad875ea405fcb1134a208526d31322f0d64abf366e4c96dba61ec33c8be0385dc908224a834942a8eae5a74b067d327b45ecf03e8c8f10c7f3ee9a8913ce8d49a65d7b4db0e15ad8fd4badac0d51c1d5cad0534d371a53d769c3bfb9d98a5054a9229b26d22e8e8153f48daa839ff1c99d1b52960ab4f448d5f785a2eab46f64080333fc240a4405c5792d97b069985c6bb8a2e0969a376cb8674ef0dc7f2734c8d0585f0a67b3a865289ba924b005ea818886dad344c63d2aa16808fb05be3218ecbee305b11936e58cd74cbd2d69264d6b8a55d3b8bd59cf413b780ad4ec6d54bff9b765a91f64729e837cab6cf2046097b19631f77aba44f7d1fd1a6ccaf42e856f9dda07d67356569f1161690e4ce55957c427b52b7187c3dcf9504f80ea108ee036bd99ec692e34e914799bafc9c6d07b65bac60b9e7b7b3b5bfe7649d6d91dd9743dfa439699af1b4e5b7349dded152fc386c4da5cf9b94e7ff592fc409ea7cd32ec3bfd2ac360685086ae58e249a247e747dc899a1e590eb1a5a625995b0c24773056448d825b2a8a1fa8a0a5dc9b568d6f682d62ebffe85fd1db7d2d62eab28dbd74c8d47f3a1d60a875e1430981797bf265fcb6fedf5129e7cb40a65c723d47a675386ab9fba3e34e03284799b7e248b8397a32b6a0c1f389fe41352ae93abe0b8daaa6fb1609539af9a9675c7aed584c81cbbdc2e0531c0aff84f350ff1a0dec901cb4ab2bd5a2c134f4fca3d33e0f238edb8c3a7faf77f59ab670b4551757fb0dcab91ec4df5faa6089195f0a79c4f9c65a6d5e38bc7a544f929e1663b85c7c32765792f08bd3b2bc25bfda1ea140711ee03667666e412273f6f6644cba35c038d7257c7fe021931883d38a5dde3b7e8317a448869df431bf0c22eb6becca3189857380c6a4152fd7226a864b4ab006411d377b1ce53e59adf1460258e9066eca412aae99acf5b092b148feb537eaa7114b32973ff4f7ebf8ca8b65a5a84ba980e650aa8c89d4c8d995ddc1af0847fb9bbe0d613e9d8d97be68304acdb30753fc3e3face438715d215bacedccc9d15942fa630e4a07e5d3c22d7238b4daf8bfff2a31e65d8978cc0fe9067bd6d9ed52b3cd46561433d0a880660ce961b643c03dc5c01911cb6da45ec104db3eaaea0fb8679afb5a3cea3497ceded859c2df6d182acc0ce1b568e74754f336c7f9e954f6ecbb4f63eea5407db0534549bb7c474892368d0678d0ab30bfdc4fbb10e1eaeba95fe958793071130393616a939bd46bec45d9329a1690e188d2f266d1a7903c2800efbb21a28b78aefc885fbf88ab49d7b7e7966a41b1a28ade5c321c70ca49263be4fc19a187add34fefcbe8"}) keyctl$clear(0x3, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0) r4 = dup(r3) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000100)=""/60, 0x3c}], 0x1) 6m48.707181502s ago: executing program 1 (id=443): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) io_setup(0x20fe, 0x0) r4 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0, 0x2b}, 0x8, 0x0, 0xb00, 0x24}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/all/keep_addr_on_down\x00', 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'lo\x00'}) 6m45.668420474s ago: executing program 1 (id=450): socket$inet6(0xa, 0x3, 0x8000000003c) close(0x3) mount$afs(&(0x7f0000000e00)=@cell={0x25, 'syz0:', 'syz1', '.backup'}, &(0x7f0000000e40)='.\x00', &(0x7f0000000e80), 0x3000000, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000080)) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r3, 0x40246f4c, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syncfs(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000100)) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) 6m30.536515164s ago: executing program 32 (id=450): socket$inet6(0xa, 0x3, 0x8000000003c) close(0x3) mount$afs(&(0x7f0000000e00)=@cell={0x25, 'syz0:', 'syz1', '.backup'}, &(0x7f0000000e40)='.\x00', &(0x7f0000000e80), 0x3000000, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000080)) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r3, 0x40246f4c, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syncfs(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000100)) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) 20.223347784s ago: executing program 0 (id=1118): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000b40)={0x2, 0x0, [{0xae8, 0x0, 0x3e}, {0x40000090, 0x0, 0xffff}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x111) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000040)={0x401, 0x1}) 18.805667768s ago: executing program 0 (id=1120): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) 17.638395843s ago: executing program 2 (id=1122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0xfffffff2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x2882026, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2000080, &(0x7f0000000440)=ANY=[@ANYBLOB='noswap,mpol=interleave']) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x400a8, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16.213043099s ago: executing program 2 (id=1125): syz_mount_image$fuse(0x0, 0x0, 0x4a10, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324902007f"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000600), 0x2, r4}, 0x38) syz_usb_connect$uac1(0x3, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xfb, 0xb0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x52c, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x80, 0x2, 0x80, 0x3a}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x8, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x91, 0x0, 0xfd, {0x7, 0x25, 0x1, 0xc, 0x9, 0x107}}}}}}}}]}}, 0x0) 12.876493663s ago: executing program 2 (id=1130): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000b40)={0x2, 0x0, [{0xae8, 0x0, 0x3e}, {0x40000090, 0x0, 0xffff}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x111) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000040)={0x401, 0x1}) 12.711899875s ago: executing program 0 (id=1131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x40, r3, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000000540)="$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") utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 11.275217012s ago: executing program 4 (id=1132): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) writev(r4, &(0x7f0000010b40)=[{&(0x7f0000000440)="b766", 0x2}], 0x1) splice(r4, 0x0, r3, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24041091}, 0x844) 11.087860299s ago: executing program 2 (id=1133): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000200)='0x5678\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/f1\x00') vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227}}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) write(r1, 0x0, 0x0) nanosleep(&(0x7f00000003c0)={0x0, 0x5f5e100}, 0x0) write(r1, &(0x7f0000000400)='\n\x00', 0x1) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0105865, &(0x7f00000007c0)={&(0x7f0000000440)=0x7fffffffffffffff, 0x6, &(0x7f0000000480)=[{}, {}, {}], &(0x7f0000000780)}) 10.759715862s ago: executing program 3 (id=1134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0x2e44) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x6, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r5, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x20000000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 9.987591341s ago: executing program 4 (id=1135): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x40, r3, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) getpid() syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000000540)="$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") utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8.80420188s ago: executing program 3 (id=1136): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000500), 0x1000) 8.693638541s ago: executing program 0 (id=1137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) io_submit(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000006a80)=ANY=[@ANYBLOB], 0x38}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 8.602537459s ago: executing program 2 (id=1138): syz_mount_image$fuse(0x0, 0x0, 0x4a10, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324902007f"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000600), 0x2, r4}, 0x38) syz_usb_connect$uac1(0x3, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0xfb, 0xb0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x52c, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x80, 0x2, 0x80, 0x3a}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x8, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x91, 0x0, 0xfd, {0x7, 0x25, 0x1, 0xc, 0x9, 0x107}}}}}}}}]}}, 0x0) 7.069803195s ago: executing program 0 (id=1139): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) 4.898774544s ago: executing program 3 (id=1140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 4.780938017s ago: executing program 2 (id=1141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x2, &(0x7f0000000040)={0xffffffff, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffb, 0x4}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1ff}, 0x0, 0x0, 0x4, 0xb, 0x2, 0x51bbc576, 0x40, 0x7}}], 0xb0}, 0x0) 3.653146895s ago: executing program 3 (id=1142): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000b40)={0x2, 0x0, [{0xae8, 0x0, 0x3e}, {0x40000090, 0x0, 0xffff}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x111) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000040)={0x401, 0x1}) 2.593787809s ago: executing program 4 (id=1143): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2004110}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x20, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008080}, 0x4010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x68, r9, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x68}}, 0x4000001) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 2.462373704s ago: executing program 3 (id=1144): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800010a000000000000000004"], 0x1c}}, 0x0) 2.27577659s ago: executing program 4 (id=1145): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000500), 0x1000) 1.347055989s ago: executing program 3 (id=1146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x40, r3, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000000540)="$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") utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.247665459s ago: executing program 4 (id=1147): symlink(0x0, 0x0) socket$inet(0x2, 0x1, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x2, 0x0, 0x1, 0x40, 0xffffffffffffffff, 0x1}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpid() r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@nullb, 0x0, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.004623875s ago: executing program 0 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$inet(r3, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 0s ago: executing program 4 (id=1149): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts. [ 76.088458][ T5760] cgroup: Unknown subsys name 'net' [ 76.234480][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.909259][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.003640][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.016975][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.024806][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.033130][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.041055][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.048685][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.174297][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.182941][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.196850][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.205336][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.213758][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.222131][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.230097][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.238771][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.247157][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.254885][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.262650][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.299251][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.354123][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.362763][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.372573][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.381706][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.390375][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.397978][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.578147][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 80.720128][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.728057][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.735393][ T5772] bridge_slave_0: entered allmulticast mode [ 80.742998][ T5772] bridge_slave_0: entered promiscuous mode [ 80.774630][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.783339][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.791848][ T5772] bridge_slave_1: entered allmulticast mode [ 80.801417][ T5772] bridge_slave_1: entered promiscuous mode [ 80.851893][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.869718][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.948582][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 80.964990][ T5772] team0: Port device team_slave_0 added [ 80.979401][ T5772] team0: Port device team_slave_1 added [ 81.044529][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.051711][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.078031][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.139289][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.147629][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.175161][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.236078][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.243327][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.251227][ T5779] bridge_slave_0: entered allmulticast mode [ 81.258593][ T5779] bridge_slave_0: entered promiscuous mode [ 81.271890][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 81.291509][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.299076][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.306744][ T5779] bridge_slave_1: entered allmulticast mode [ 81.314264][ T5779] bridge_slave_1: entered promiscuous mode [ 81.321391][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 81.418392][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.431168][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.458081][ T5772] hsr_slave_0: entered promiscuous mode [ 81.464774][ T5772] hsr_slave_1: entered promiscuous mode [ 81.571543][ T5779] team0: Port device team_slave_0 added [ 81.580525][ T5779] team0: Port device team_slave_1 added [ 81.604821][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.613070][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.621359][ T5784] bridge_slave_0: entered allmulticast mode [ 81.629105][ T5784] bridge_slave_0: entered promiscuous mode [ 81.643266][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.650694][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.658557][ T5784] bridge_slave_1: entered allmulticast mode [ 81.665709][ T5784] bridge_slave_1: entered promiscuous mode [ 81.736192][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.744159][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.751767][ T5777] bridge_slave_0: entered allmulticast mode [ 81.759647][ T5777] bridge_slave_0: entered promiscuous mode [ 81.773379][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.780869][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.788145][ T5777] bridge_slave_1: entered allmulticast mode [ 81.795532][ T5777] bridge_slave_1: entered promiscuous mode [ 81.824755][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.834095][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.860566][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.892955][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.905292][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.918855][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.926904][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.953529][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.980561][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.991808][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.076935][ T5085] Bluetooth: hci0: command tx timeout [ 82.105165][ T5777] team0: Port device team_slave_0 added [ 82.117483][ T5779] hsr_slave_0: entered promiscuous mode [ 82.124354][ T5779] hsr_slave_1: entered promiscuous mode [ 82.130958][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.138936][ T5779] Cannot create hsr debugfs directory [ 82.155197][ T5784] team0: Port device team_slave_0 added [ 82.164565][ T5784] team0: Port device team_slave_1 added [ 82.172291][ T5777] team0: Port device team_slave_1 added [ 82.209529][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.224432][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.251063][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.294147][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.301341][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.328360][ T5085] Bluetooth: hci2: command tx timeout [ 82.328556][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.349672][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.357114][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.383365][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.406165][ T5085] Bluetooth: hci1: command tx timeout [ 82.423959][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.434065][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.463288][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.476593][ T5085] Bluetooth: hci3: command tx timeout [ 82.580531][ T5784] hsr_slave_0: entered promiscuous mode [ 82.587209][ T5784] hsr_slave_1: entered promiscuous mode [ 82.593412][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.602007][ T5784] Cannot create hsr debugfs directory [ 82.652987][ T5777] hsr_slave_0: entered promiscuous mode [ 82.662858][ T5777] hsr_slave_1: entered promiscuous mode [ 82.669338][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.677286][ T5777] Cannot create hsr debugfs directory [ 82.769200][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.815379][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.827257][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.870354][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.056349][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.072786][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.087121][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.100933][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.185763][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.198702][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.212833][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.229604][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.349361][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.361448][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.383760][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.394856][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.490665][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.521515][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.534699][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.571364][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.578895][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.630900][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.641661][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.648901][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.667869][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.712238][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.719459][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.748300][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.755492][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.782961][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.812930][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.838279][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.845442][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.872251][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.879436][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.909377][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.974706][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.032136][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.039378][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.124056][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.131294][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.156790][ T5085] Bluetooth: hci0: command tx timeout [ 84.328541][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.403078][ T5085] Bluetooth: hci2: command tx timeout [ 84.428049][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.477815][ T5085] Bluetooth: hci1: command tx timeout [ 84.556705][ T5085] Bluetooth: hci3: command tx timeout [ 84.583610][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.664154][ T5772] veth0_vlan: entered promiscuous mode [ 84.703455][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.723027][ T5772] veth1_vlan: entered promiscuous mode [ 84.793369][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.823725][ T5784] veth0_vlan: entered promiscuous mode [ 84.866309][ T5772] veth0_macvtap: entered promiscuous mode [ 84.882143][ T5784] veth1_vlan: entered promiscuous mode [ 84.896916][ T5779] veth0_vlan: entered promiscuous mode [ 84.908525][ T5772] veth1_macvtap: entered promiscuous mode [ 84.930308][ T5779] veth1_vlan: entered promiscuous mode [ 85.018651][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.027967][ T5784] veth0_macvtap: entered promiscuous mode [ 85.049494][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.065672][ T5779] veth0_macvtap: entered promiscuous mode [ 85.082993][ T5777] veth0_vlan: entered promiscuous mode [ 85.095186][ T5779] veth1_macvtap: entered promiscuous mode [ 85.103102][ T5784] veth1_macvtap: entered promiscuous mode [ 85.122041][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.131528][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.140748][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.149949][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.184294][ T5777] veth1_vlan: entered promiscuous mode [ 85.211031][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.222607][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.234500][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.245445][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.257206][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.267334][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.279622][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.293091][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.320544][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.331515][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.342977][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.352201][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.365222][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.375358][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.386265][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.398221][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.439820][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.449302][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.458855][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.467887][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.490920][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.501347][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.513085][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.522743][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.573194][ T5777] veth0_macvtap: entered promiscuous mode [ 85.585429][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.593618][ T5777] veth1_macvtap: entered promiscuous mode [ 85.615510][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.702693][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.715723][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.725756][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.739709][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.750098][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.761801][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.773954][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.783012][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.788690][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.802579][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.812915][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.823397][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.831085][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.850423][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.861623][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.873047][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.913668][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.923795][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.934887][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.945917][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.023284][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.055177][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.098480][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.125764][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.184939][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.212965][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.237654][ T5085] Bluetooth: hci0: command tx timeout [ 86.278208][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.300134][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.477156][ T5085] Bluetooth: hci2: command tx timeout [ 86.480565][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.506154][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.556349][ T5085] Bluetooth: hci1: command tx timeout [ 86.686612][ T5085] Bluetooth: hci3: command tx timeout [ 86.995215][ T5837] syz.1.2[5837]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.359377][ T5837] loop1: detected capacity change from 0 to 40427 [ 87.424059][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.433873][ T5837] F2FS-fs (loop1): invalid crc value [ 87.472391][ T5837] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.500842][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.546344][ T5837] F2FS-fs (loop1): Start checkpoint disabled! [ 87.589808][ T5837] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 87.813698][ T5837] syz.1.2: attempt to access beyond end of device [ 87.813698][ T5837] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.443794][ T5085] Bluetooth: hci0: command tx timeout [ 89.225949][ C0] sched: RT throttling activated [ 89.226062][ T5782] Bluetooth: hci2: command tx timeout [ 89.236693][ T5782] Bluetooth: hci1: command tx timeout [ 89.242151][ T5782] Bluetooth: hci3: command tx timeout [ 90.615874][ T5852] syz.1.2: attempt to access beyond end of device [ 90.615874][ T5852] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 90.630506][ T5852] syz.1.2: attempt to access beyond end of device [ 90.630506][ T5852] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 90.646773][ T5852] syz.1.2: attempt to access beyond end of device [ 90.646773][ T5852] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 90.660962][ T5852] syz.1.2: attempt to access beyond end of device [ 90.660962][ T5852] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 90.674986][ T5852] syz.1.2: attempt to access beyond end of device [ 90.674986][ T5852] loop1: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 90.689744][ T5852] syz.1.2: attempt to access beyond end of device [ 90.689744][ T5852] loop1: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 90.703694][ T5852] syz.1.2: attempt to access beyond end of device [ 90.703694][ T5852] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 90.719488][ T5852] syz.1.2: attempt to access beyond end of device [ 90.719488][ T5852] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 90.734521][ T5852] syz.1.2: attempt to access beyond end of device [ 90.734521][ T5852] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 91.672910][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 91.724189][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 92.027557][ T9] cfg80211: failed to load regulatory.db [ 92.802427][ T5870] serio: Serial port ttyS3 [ 94.103831][ T5877] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.175191][ T5879] loop0: detected capacity change from 0 to 4096 [ 94.182806][ T5879] ======================================================= [ 94.182806][ T5879] WARNING: The mand mount option has been deprecated and [ 94.182806][ T5879] and is ignored by this kernel. Remove the mand [ 94.182806][ T5879] option from the mount to silence this warning. [ 94.182806][ T5879] ======================================================= [ 94.259072][ T5882] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.006550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.713182][ T5932] ip_tables: iptables: counters copy to user failed while replacing table [ 100.873888][ T5935] mmap: syz.0.22 (5935) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.252561][ T5947] sctp: [Deprecated]: syz.3.25 (pid 5947) Use of int in max_burst socket option. [ 103.252561][ T5947] Use struct sctp_assoc_value instead [ 104.126440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.138794][ T5954] xt_policy: too many policy elements [ 107.095114][ T5970] bridge_slave_0: left allmulticast mode [ 107.102167][ T5970] bridge_slave_0: left promiscuous mode [ 107.112724][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.159029][ T5974] xt_nfacct: accounting object `syz0' does not exist [ 107.274433][ T5970] bridge_slave_1: left allmulticast mode [ 107.294727][ T5970] bridge_slave_1: left promiscuous mode [ 107.325787][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.361068][ T5970] bond0: (slave bond_slave_0): Releasing backup interface [ 107.442871][ T5970] bond0: (slave bond_slave_1): Releasing backup interface [ 107.525092][ T5970] team0: Port device team_slave_0 removed [ 107.557982][ T5970] team0: Port device team_slave_1 removed [ 107.572774][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.580763][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.590190][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.600610][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.667498][ T5975] team0: Port device xfrm0 added [ 107.682497][ T5978] tipc: Started in network mode [ 107.690581][ T5978] tipc: Node identity caced8d1ce12, cluster identity 4711 [ 107.705282][ T5978] tipc: Enabled bearer , priority 0 [ 107.742630][ T5975] syz.1.33 (5975) used greatest stack depth: 20072 bytes left [ 107.766716][ T5981] bridge_slave_0: left allmulticast mode [ 107.772643][ T5981] bridge_slave_0: left promiscuous mode [ 107.779986][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.807685][ T5981] bridge_slave_1: left allmulticast mode [ 107.822764][ T5981] bridge_slave_1: left promiscuous mode [ 107.830977][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.859972][ T5972] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.870595][ T5981] bond0: (slave bond_slave_0): Releasing backup interface [ 107.881256][ T5972] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 107.908945][ T5981] bond0: (slave bond_slave_1): Releasing backup interface [ 107.930419][ T5972] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 107.951931][ T5972] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.969140][ T5972] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 107.972606][ T5981] team0: Port device team_slave_0 removed [ 107.992459][ T5972] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.008748][ T5981] team0: Port device team_slave_1 removed [ 108.025236][ T5972] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.034988][ T5972] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.042165][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.051559][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.069192][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.078958][ T5972] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.079712][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.107337][ T5972] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.113453][ T5972] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.133568][ T5972] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.219300][ T5982] team0: Port device xfrm0 added [ 108.253600][ T5980] tipc: Started in network mode [ 108.286038][ T5980] tipc: Node identity 46cd50ad55cf, cluster identity 4711 [ 108.293566][ T5980] tipc: Enabled bearer , priority 0 [ 108.482399][ T5994] loop0: detected capacity change from 0 to 256 [ 108.534853][ T5994] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 108.697998][ T5762] tipc: Node number set to 81582289 [ 108.773563][ T5996] jffs2: notice: (5996) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 109.287891][ T5996] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 109.434710][ T5762] tipc: Node number set to 318918829 [ 111.706012][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.712184][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.726022][ T5085] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.732124][ T5085] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.928394][ T6011] syzkaller0: entered promiscuous mode [ 111.950651][ T6011] syzkaller0: entered allmulticast mode [ 112.033756][ T6015] netlink: 'syz.3.43': attribute type 10 has an invalid length. [ 112.076916][ T6015] syz_tun: entered promiscuous mode [ 112.144402][ T6015] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 113.171879][ T6044] Zero length message leads to an empty skb [ 113.854605][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.860928][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.867096][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.873172][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.826042][ T6065] UBIFS error (pid: 6065): cannot open "(null)", error -22 [ 115.949851][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.963392][ T5782] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.969534][ T5085] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.977783][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.046586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 124.504649][ T6115] Mass Storage Function, version: 2009/09/11 [ 124.511113][ T6115] LUN: removable file: (no medium) [ 129.013496][ T6139] syz.0.59 uses obsolete (PF_INET,SOCK_PACKET) [ 129.237607][ T28] audit: type=1326 audit(1790977863.696:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.3.67" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d86d9e159 code=0x7fc00000 [ 129.601075][ T6142] netlink: 'syz.2.69': attribute type 1 has an invalid length. [ 129.619491][ T6143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'. [ 129.711862][ T6146] loop3: detected capacity change from 0 to 1024 [ 129.745103][ T6146] EXT4-fs: Ignoring removed bh option [ 129.946163][ T6146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.164878][ T6146] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 130.190089][ T6154] overlayfs: failed to resolve 'upper': -2 [ 132.695982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 133.273852][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.282750][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.358800][ T5762] IPVS: starting estimator thread 0... [ 134.336117][ T6175] IPVS: using max 21 ests per chain, 50400 per kthread [ 134.542815][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.246345][ T6177] syz.0.74 (6177) used greatest stack depth: 19832 bytes left [ 136.458772][ T6186] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 138.104209][ T6186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.80'. [ 138.140063][ T6186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.475345][ T6195] o2cb: This node has not been configured. [ 138.481935][ T6195] o2cb: Cluster check failed. Fix errors before retrying. [ 138.489543][ T6195] (syz.3.81,6195,0):user_dlm_register:674 ERROR: status = -22 [ 138.497144][ T6195] (syz.3.81,6195,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 138.768689][ T6191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.144210][ T6191] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.208777][ T6191] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.226112][ T6191] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.234983][ T6191] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.303448][ T6191] bond1: (slave geneve2): making interface the new active one [ 139.329456][ T6191] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 141.973071][ T6219] syz.1.86 (6219): /proc/6218/oom_adj is deprecated, please use /proc/6218/oom_score_adj instead. [ 147.184547][ T6235] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 148.466012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 149.155967][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.92'. [ 149.206564][ T6243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.439422][ T6245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.487774][ T6245] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 149.546642][ T6245] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 149.557099][ T6245] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 149.566704][ T6245] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 149.582842][ T6245] bond1: (slave geneve2): making interface the new active one [ 149.594484][ T6245] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 149.756747][ T5830] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 151.696441][ T5830] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 151.738152][ T5830] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 151.802331][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.878508][ T5830] usb 1-1: Product: syz [ 151.915624][ T5830] usb 1-1: Manufacturer: syz [ 151.960004][ T5830] usb 1-1: SerialNumber: syz [ 152.335564][ T5830] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 152.530234][ T5830] usb 1-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 152.673525][ T5830] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 152.806626][ T5830] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 153.289458][ T6271] loop3: detected capacity change from 0 to 32768 [ 153.327201][ T5830] usb 1-1: USB disconnect, device number 2 [ 153.496427][ T6281] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 153.571661][ T6277] udevd[6277]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.724933][ T6271] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 154.258891][ T6271] XFS (loop3): Ending clean mount [ 154.288541][ T6271] XFS (loop3): Quotacheck needed: Please wait. [ 154.634482][ T6271] XFS (loop3): Quotacheck: Done. [ 155.640529][ T6301] kAFS: No cell specified [ 155.831289][ T5779] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.548821][ T6308] loop0: detected capacity change from 0 to 164 [ 157.483394][ T6313] rock: directory entry would overflow storage [ 157.490138][ T6313] rock: sig=0x4f50, size=4, remaining=3 [ 157.495785][ T6313] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 157.968994][ T6317] loop1: detected capacity change from 0 to 1024 [ 158.001815][ T6317] EXT4-fs: Ignoring removed bh option [ 158.211770][ T6325] nvmet: adding nsid 1 to subsystem testsubsys [ 158.230678][ T6317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.274431][ T6324] null_blk: disk nullb1 created [ 158.676092][ T5863] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 158.890171][ T5863] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 158.918705][ T5863] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 158.930410][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.968433][ T5863] usb 1-1: Product: syz [ 160.446450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 160.595979][ T5863] usb 1-1: Manufacturer: syz [ 160.600832][ T5863] usb 1-1: SerialNumber: syz [ 161.688618][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.045463][ T5863] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 162.054042][ T5863] usb 1-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 162.061431][ T5863] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 162.068636][ T5863] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 162.555715][ T5863] usb 1-1: USB disconnect, device number 3 [ 162.789996][ T6277] udevd[6277]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.190868][ T6360] kAFS: No cell specified [ 171.863225][ T6416] syzkaller0: entered promiscuous mode [ 171.878553][ T6416] syzkaller0: entered allmulticast mode [ 171.943250][ T6416] simple: /dev/video#_1 [ 172.237671][ T6425] loop2: detected capacity change from 0 to 164 [ 173.017807][ T6431] rock: directory entry would overflow storage [ 173.024150][ T6431] rock: sig=0x4f50, size=4, remaining=3 [ 173.030161][ T6431] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 174.712461][ T6445] loop2: detected capacity change from 0 to 512 [ 174.727188][ T6445] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 174.845734][ T6445] EXT4-fs (loop2): 1 orphan inode deleted [ 174.854598][ T6445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.874519][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 174.894169][ T6445] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.905266][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1 [ 174.976719][ T5830] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.984432][ T5863] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 175.180202][ T5830] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 175.193234][ T5863] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 175.207894][ T5863] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 175.218194][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.226530][ T5830] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 175.235745][ T5863] usb 4-1: Product: syz [ 175.240312][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.248857][ T5863] usb 4-1: Manufacturer: syz [ 175.253554][ T5863] usb 4-1: SerialNumber: syz [ 175.261824][ T5830] usb 1-1: Product: syz [ 175.317018][ T5830] usb 1-1: Manufacturer: syz [ 175.322515][ T5830] usb 1-1: SerialNumber: syz [ 175.677242][ T5863] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 175.729277][ T5863] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 175.768807][ T5863] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 175.793339][ T5863] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 175.882100][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.915176][ T5863] usb 4-1: USB disconnect, device number 2 [ 176.078635][ T6384] udevd[6384]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.154934][ T5830] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 177.173918][ T5830] usb 1-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 177.183801][ T5830] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 177.195129][ T5830] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 177.245588][ T5830] usb 1-1: USB disconnect, device number 4 [ 177.286978][ T6384] udevd[6384]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.803508][ T6466] syzkaller0: entered promiscuous mode [ 178.850666][ T6466] syzkaller0: entered allmulticast mode [ 183.354465][ T6499] netlink: 'syz.3.152': attribute type 1 has an invalid length. [ 183.510286][ T6501] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 183.553656][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 1588 [ 183.736658][ T6499] veth3: entered promiscuous mode [ 183.768064][ T6499] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 183.799845][ T6501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.152'. [ 183.852384][ T49] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 183.863940][ T6501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.086294][ T34] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 185.666743][ T5830] Process accounting resumed [ 186.552053][ T6525] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 188.366038][ T5810] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 188.575185][ T5810] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 188.623569][ T5810] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 188.646903][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.654995][ T5810] usb 3-1: Product: syz [ 189.976136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 190.356460][ T5810] usb 3-1: Manufacturer: syz [ 190.361154][ T5810] usb 3-1: SerialNumber: syz [ 190.408559][ T6559] netlink: 'syz.3.167': attribute type 1 has an invalid length. [ 190.490974][ T6561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 190.517785][ T6561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.656459][ T5810] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 190.664994][ T5810] usb 3-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 190.690001][ T5810] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 190.701686][ T5810] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 190.742169][ T5810] usb 3-1: USB disconnect, device number 2 [ 190.769245][ T6559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.794424][ T6559] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 191.985931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 192.636100][ T6559] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 192.645003][ T6559] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 192.660412][ T6562] udevd[6562]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.736489][ T6559] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 192.778802][ T6559] bond2: (slave geneve2): making interface the new active one [ 192.797329][ T6559] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 193.800782][ T5810] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 194.246024][ T6575] ceph: No mds server is up or the cluster is laggy [ 194.383511][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.395599][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.933470][ T5810] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 195.451353][ T5810] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 196.305690][ T6594] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 199.118265][ T5810] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 199.344179][ T6611] syzkaller0: entered promiscuous mode [ 199.354344][ T5810] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 199.374530][ T6611] syzkaller0: entered allmulticast mode [ 199.399102][ T5810] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 199.410269][ T6611] tipc: Started in network mode [ 199.415232][ T6611] tipc: Node identity 96305ad9a278, cluster identity 4711 [ 199.426558][ T6611] tipc: Enabled bearer , priority 0 [ 199.428015][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.451669][ T5810] usb 3-1: Product: syz [ 199.456080][ T5810] usb 3-1: Manufacturer: syz [ 199.462669][ T5810] usb 3-1: SerialNumber: syz [ 199.475713][ T6611] tipc: Resetting bearer [ 199.515798][ T6610] tipc: Resetting bearer [ 199.564399][ T6610] tipc: Disabling bearer [ 199.697392][ T5810] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 199.715973][ T5810] usb 3-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 199.723399][ T5810] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 199.747531][ T5810] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 199.817798][ T5810] usb 3-1: USB disconnect, device number 3 [ 199.892502][ T6562] udevd[6562]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.501982][ T6621] Bluetooth: MGMT ver 1.22 [ 201.245557][ T6629] loop1: detected capacity change from 0 to 512 [ 201.314884][ T6629] EXT4-fs (loop1): 1 orphan inode deleted [ 201.327498][ T6597] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 201.347666][ T6629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.377605][ T6597] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:11: Failed to release dquot type 1 [ 201.411028][ T6629] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.930099][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.834861][ T9] IPVS: starting estimator thread 0... [ 205.946104][ T6650] IPVS: using max 19 ests per chain, 45600 per kthread [ 209.586314][ T5863] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 209.817338][ T5863] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 209.957423][ T6685] netlink: 'syz.0.199': attribute type 1 has an invalid length. [ 210.153745][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.199'. [ 210.199568][ T5762] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 210.219622][ T6687] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.317812][ T5863] usb 4-1: config 0 interface 0 has no altsetting 0 [ 210.340713][ T5863] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 210.350254][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 210.358801][ T5863] usb 4-1: Product: syz [ 210.363109][ T5863] usb 4-1: Manufacturer: syz [ 210.367956][ T5863] usb 4-1: SerialNumber: syz [ 210.394326][ T5863] usb 4-1: config 0 descriptor?? [ 210.435286][ T5762] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 210.483103][ T5863] usb 4-1: selecting invalid altsetting 0 [ 210.528991][ T5762] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 210.585832][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.647282][ T5762] usb 2-1: Product: syz [ 210.651531][ T5762] usb 2-1: Manufacturer: syz [ 210.689472][ T6671] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 210.701093][ T5762] usb 2-1: SerialNumber: syz [ 210.724791][ T9] usb 4-1: USB disconnect, device number 3 [ 212.305920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 212.475927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 213.760900][ T6700] loop3: detected capacity change from 0 to 512 [ 214.456941][ T5762] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 214.465466][ T5762] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 214.505993][ T5762] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 214.542672][ T5762] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 214.621631][ T5762] usb 2-1: USB disconnect, device number 2 [ 215.743972][ T5762] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 215.758114][ T6562] udevd[6562]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.873705][ T6700] EXT4-fs (loop3): Test dummy encryption mode enabled [ 215.880622][ T6700] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 215.913320][ T6700] EXT4-fs (loop3): 1 truncate cleaned up [ 215.920586][ T6700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.975775][ T6715] FAULT_INJECTION: forcing a failure. [ 215.975775][ T6715] name failslab, interval 1, probability 0, space 0, times 1 [ 216.018485][ T6715] CPU: 1 PID: 6715 Comm: syz.0.202 Not tainted syzkaller #0 [ 216.025850][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 216.036244][ T6715] Call Trace: [ 216.039568][ T6715] [ 216.042529][ T6715] dump_stack_lvl+0x18c/0x250 [ 216.047284][ T6715] ? show_regs_print_info+0x20/0x20 [ 216.052528][ T6715] ? load_image+0x420/0x420 [ 216.057073][ T6715] ? __might_sleep+0xe0/0xe0 [ 216.061753][ T6715] ? __lock_acquire+0x7d80/0x7d80 [ 216.066821][ T6715] should_fail_ex+0x394/0x4c0 [ 216.071546][ T6715] should_failslab+0x9/0x20 [ 216.076106][ T6715] slab_pre_alloc_hook+0x59/0x300 [ 216.081185][ T6715] ? lockdep_softirqs_off+0x440/0x440 [ 216.086593][ T6715] ? mempool_init_node+0x12f/0x480 [ 216.091735][ T6715] ? mempool_init_node+0x12f/0x480 [ 216.096884][ T6715] __kmem_cache_alloc_node+0x53/0x250 [ 216.102296][ T6715] ? mempool_init_node+0x12f/0x480 [ 216.107441][ T6715] __kmalloc_node+0xa6/0x240 [ 216.112076][ T6715] ? __init_waitqueue_head+0xa8/0x140 [ 216.117488][ T6715] mempool_init_node+0x12f/0x480 [ 216.122470][ T6715] ? msgpool_alloc+0x1b0/0x1b0 [ 216.127269][ T6715] ? msgpool_alloc+0x1b0/0x1b0 [ 216.132063][ T6715] ? ceph_msgpool_init+0x180/0x180 [ 216.137211][ T6715] mempool_create+0x81/0xc0 [ 216.141755][ T6715] ceph_msgpool_init+0xa7/0x180 [ 216.146640][ T6715] ceph_osdc_init+0x54f/0x8c0 [ 216.151365][ T6715] ceph_create_client+0x246/0x300 [ 216.156443][ T6715] ceph_get_tree+0x1ca/0x1800 [ 216.161168][ T6715] ? bpf_lsm_capable+0x9/0x10 [ 216.165873][ T6715] ? security_capable+0x89/0xb0 [ 216.170775][ T6715] vfs_get_tree+0x8c/0x280 [ 216.175225][ T6715] vfs_cmd_create+0xe3/0x230 [ 216.179860][ T6715] __se_sys_fsconfig+0x70a/0x850 [ 216.184837][ T6715] ? __x64_sys_fsconfig+0xc0/0xc0 [ 216.189910][ T6715] ? lockdep_hardirqs_on+0x98/0x150 [ 216.195142][ T6715] ? __x64_sys_fsconfig+0x20/0xc0 [ 216.200199][ T6715] do_syscall_64+0x55/0xb0 [ 216.204655][ T6715] ? clear_bhb_loop+0x40/0x90 [ 216.209381][ T6715] ? clear_bhb_loop+0x40/0x90 [ 216.214109][ T6715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.220051][ T6715] RIP: 0033:0x7f4bbbf9e159 [ 216.224504][ T6715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.244140][ T6715] RSP: 002b:00007f4bbce8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 216.252588][ T6715] RAX: ffffffffffffffda RBX: 00007f4bbc225fa0 RCX: 00007f4bbbf9e159 [ 216.260599][ T6715] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 216.268598][ T6715] RBP: 00007f4bbc03506b R08: 0000000000000000 R09: 0000000000000000 [ 216.276595][ T6715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.284592][ T6715] R13: 00007f4bbc226038 R14: 00007f4bbc225fa0 R15: 00007ffe30520038 [ 216.292612][ T6715] [ 216.583470][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.812204][ T5762] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 216.844836][ T5762] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 216.905945][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.914042][ T5762] usb 2-1: Product: syz [ 219.141642][ T5762] usb 2-1: Manufacturer: syz [ 219.157436][ T5762] usb 2-1: SerialNumber: syz [ 219.267148][ T5762] usb 2-1: can't set config #1, error -71 [ 219.288490][ T5762] usb 2-1: USB disconnect, device number 3 [ 220.426162][ T5811] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 220.669233][ T5811] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 220.769287][ T5811] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 220.856388][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.896214][ T5811] usb 1-1: Product: syz [ 220.913443][ T5811] usb 1-1: Manufacturer: syz [ 220.986264][ T5811] usb 1-1: SerialNumber: syz [ 221.196158][ T5762] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 221.241715][ T5811] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 221.288196][ T5811] usb 1-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 221.355990][ T5811] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 221.376093][ T5811] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 221.442199][ T5811] usb 1-1: USB disconnect, device number 5 [ 221.456145][ T5762] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 221.508478][ T5762] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 221.565944][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.575622][ T6562] udevd[6562]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.576412][ T5762] usb 2-1: Product: syz [ 221.657568][ T5762] usb 2-1: Manufacturer: syz [ 221.662258][ T5762] usb 2-1: SerialNumber: syz [ 221.926848][ T6753] bond0: (slave syz_tun): Releasing backup interface [ 222.015739][ T6753] bridge_slave_0: left allmulticast mode [ 222.048667][ T6753] bridge_slave_0: left promiscuous mode [ 222.073892][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.115736][ T6753] bridge_slave_1: left allmulticast mode [ 222.138441][ T6753] bridge_slave_1: left promiscuous mode [ 222.172365][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.214350][ T6753] bond0: (slave bond_slave_0): Releasing backup interface [ 222.258001][ T6753] bond0: (slave bond_slave_1): Releasing backup interface [ 222.365316][ T6753] team0: Port device team_slave_0 removed [ 222.430758][ T6753] team0: Port device team_slave_1 removed [ 222.452331][ T6753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.460117][ T6753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.470856][ T6753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.479870][ T6753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.514128][ T6753] bond1: (slave ip6gretap1): Removing an active aggregator [ 222.552152][ T6753] bond1: (slave ip6gretap1): Releasing backup interface [ 222.575792][ T6753] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 62:b3:0c:89:b5:ac - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 222.642594][ T6753] bond1: (slave veth3): Releasing backup interface [ 222.670519][ T6753] bond2: (slave geneve2): Releasing active interface [ 222.683107][ T6753] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 222.692861][ T6753] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 222.702356][ T6753] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 222.714093][ T6753] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 222.739065][ T6754] team0: Mode changed to "broadcast" [ 224.156970][ T5762] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 224.170929][ T5762] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 224.178849][ T5762] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 224.191115][ T5762] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 224.225581][ T5762] usb 2-1: USB disconnect, device number 4 [ 224.281178][ T6562] udevd[6562]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.607784][ T6766] loop2: detected capacity change from 0 to 256 [ 226.042212][ T6765] futex_wake_op: syz.2.216 tries to shift op by 144; fix this program [ 226.376770][ T6766] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 226.492206][ T28] audit: type=1800 audit(1790977960.906:3): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.216" name="file1" dev="loop2" ino=1048611 res=0 errno=0 [ 227.408255][ T6776] loop1: detected capacity change from 0 to 1024 [ 228.347056][ T6776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.869375][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.098100][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'. [ 231.871301][ T6801] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 232.734366][ T6805] loop2: detected capacity change from 0 to 512 [ 232.774079][ T6805] EXT4-fs (loop2): Test dummy encryption mode enabled [ 232.812464][ T6805] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 232.846299][ T6805] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.228: bad orphan inode 131083 [ 232.867813][ T6805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.943587][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.962973][ T5812] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 234.315011][ T5811] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 234.521442][ T6828] bio_check_eod: 72 callbacks suppressed [ 234.521460][ T6828] syz.0.231: attempt to access beyond end of device [ 234.521460][ T6828] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 234.541765][ T6816] ceph: No mds server is up or the cluster is laggy [ 234.656472][ T6828] syz.0.231: attempt to access beyond end of device [ 234.656472][ T6828] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 234.693349][ T6828] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 234.715438][ T6828] syz.0.231: attempt to access beyond end of device [ 234.715438][ T6828] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 234.729295][ T6828] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 234.740777][ T6828] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 234.756884][ T6828] UDF-fs: Scanning with blocksize 512 failed [ 234.778566][ T6828] syz.0.231: attempt to access beyond end of device [ 234.778566][ T6828] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 234.817609][ T6828] syz.0.231: attempt to access beyond end of device [ 234.817609][ T6828] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 234.830689][ T789] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 234.892827][ T6828] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 234.903105][ T6828] syz.0.231: attempt to access beyond end of device [ 234.903105][ T6828] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 234.921102][ T6828] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 234.935378][ T6828] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 235.167665][ T789] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 235.240971][ T6828] UDF-fs: Scanning with blocksize 1024 failed [ 235.546214][ T789] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 235.567220][ T6828] syz.0.231: attempt to access beyond end of device [ 235.567220][ T6828] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 235.593481][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.642628][ T789] usb 3-1: Product: syz [ 235.668233][ T789] usb 3-1: Manufacturer: syz [ 235.672915][ T789] usb 3-1: SerialNumber: syz [ 235.709035][ T6828] syz.0.231: attempt to access beyond end of device [ 235.709035][ T6828] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 235.961782][ T6828] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 236.060200][ T6828] syz.0.231: attempt to access beyond end of device [ 236.060200][ T6828] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 236.165506][ T6828] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 236.246348][ T6828] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 236.298780][ T6828] UDF-fs: Scanning with blocksize 2048 failed [ 236.346311][ T6828] syz.0.231: attempt to access beyond end of device [ 236.346311][ T6828] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 236.451167][ T6828] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 236.538947][ T6828] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 236.610508][ T6828] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 236.667611][ T6828] UDF-fs: Scanning with blocksize 4096 failed [ 236.703723][ T6828] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 239.636657][ T6849] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 240.376212][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 241.363277][ T789] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 241.371862][ T789] usb 3-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 241.379566][ T789] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 241.387144][ T789] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 241.671473][ T5762] usb 3-1: USB disconnect, device number 4 [ 241.695796][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 1588 [ 252.196031][ T5812] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 252.448850][ T5812] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 252.493651][ T5812] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 252.515931][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.544363][ T5812] usb 1-1: Product: syz [ 252.554651][ T6909] netlink: 'syz.2.252': attribute type 10 has an invalid length. [ 252.565936][ T5812] usb 1-1: Manufacturer: syz [ 252.570594][ T5812] usb 1-1: SerialNumber: syz [ 252.696734][ T6909] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 254.241830][ T6916] FAULT_INJECTION: forcing a failure. [ 254.241830][ T6916] name failslab, interval 1, probability 0, space 0, times 0 [ 254.273287][ T6916] CPU: 1 PID: 6916 Comm: syz.3.248 Not tainted syzkaller #0 [ 254.280667][ T6916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 254.290767][ T6916] Call Trace: [ 254.294113][ T6916] [ 254.297092][ T6916] dump_stack_lvl+0x18c/0x250 [ 254.301836][ T6916] ? show_regs_print_info+0x20/0x20 [ 254.307093][ T6916] ? load_image+0x420/0x420 [ 254.311653][ T6916] ? __might_sleep+0xe0/0xe0 [ 254.316293][ T6916] ? __lock_acquire+0x7d80/0x7d80 [ 254.321371][ T6916] should_fail_ex+0x394/0x4c0 [ 254.326107][ T6916] should_failslab+0x9/0x20 [ 254.330702][ T6916] slab_pre_alloc_hook+0x59/0x300 [ 254.335788][ T6916] ? lockdep_softirqs_off+0x440/0x440 [ 254.341205][ T6916] ? mempool_init_node+0x12f/0x480 [ 254.346365][ T6916] ? mempool_init_node+0x12f/0x480 [ 254.351532][ T6916] __kmem_cache_alloc_node+0x53/0x250 [ 254.356980][ T6916] ? mempool_init_node+0x12f/0x480 [ 254.362135][ T6916] __kmalloc_node+0xa6/0x240 [ 254.366779][ T6916] ? __init_waitqueue_head+0xa8/0x140 [ 254.372207][ T6916] mempool_init_node+0x12f/0x480 [ 254.377203][ T6916] ? msgpool_alloc+0x1b0/0x1b0 [ 254.382021][ T6916] ? msgpool_alloc+0x1b0/0x1b0 [ 254.386829][ T6916] ? ceph_msgpool_init+0x180/0x180 [ 254.391988][ T6916] mempool_create+0x81/0xc0 [ 254.396553][ T6916] ceph_msgpool_init+0xa7/0x180 [ 254.401451][ T6916] ceph_osdc_init+0x54f/0x8c0 [ 254.406195][ T6916] ceph_create_client+0x246/0x300 [ 254.411273][ T6916] ceph_get_tree+0x1ca/0x1800 [ 254.416005][ T6916] ? bpf_lsm_capable+0x9/0x10 [ 254.420725][ T6916] ? security_capable+0x89/0xb0 [ 254.425631][ T6916] vfs_get_tree+0x8c/0x280 [ 254.430109][ T6916] vfs_cmd_create+0xe3/0x230 [ 254.434755][ T6916] __se_sys_fsconfig+0x70a/0x850 [ 254.439757][ T6916] ? __x64_sys_fsconfig+0xc0/0xc0 [ 254.444849][ T6916] ? lockdep_hardirqs_on+0x98/0x150 [ 254.450096][ T6916] ? __x64_sys_fsconfig+0x20/0xc0 [ 254.455198][ T6916] do_syscall_64+0x55/0xb0 [ 254.459676][ T6916] ? clear_bhb_loop+0x40/0x90 [ 254.464410][ T6916] ? clear_bhb_loop+0x40/0x90 [ 254.469156][ T6916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.475102][ T6916] RIP: 0033:0x7f1d86d9e159 [ 254.479567][ T6916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.499224][ T6916] RSP: 002b:00007f1d84ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 254.507696][ T6916] RAX: ffffffffffffffda RBX: 00007f1d87025fa0 RCX: 00007f1d86d9e159 [ 254.515720][ T6916] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 254.523726][ T6916] RBP: 00007f1d86e3506b R08: 0000000000000000 R09: 0000000000000000 [ 254.531752][ T6916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.539791][ T6916] R13: 00007f1d87026038 R14: 00007f1d87025fa0 R15: 00007ffc9c1720e8 [ 254.547845][ T6916] [ 254.880053][ T51] Bluetooth: hci2: ISO packet for unknown connection handle 1588 [ 255.007408][ T5812] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 255.036026][ T5812] usb 1-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 255.043415][ T5812] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 255.144003][ T6932] FAULT_INJECTION: forcing a failure. [ 255.144003][ T6932] name fail_futex, interval 1, probability 0, space 0, times 1 [ 255.157076][ T6932] CPU: 1 PID: 6932 Comm: syz.1.263 Not tainted syzkaller #0 [ 255.164413][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 255.174516][ T6932] Call Trace: [ 255.177834][ T6932] [ 255.180804][ T6932] dump_stack_lvl+0x18c/0x250 [ 255.185540][ T6932] ? show_regs_print_info+0x20/0x20 [ 255.190794][ T6932] ? load_image+0x420/0x420 [ 255.195343][ T6932] ? verify_lock_unused+0x140/0x140 [ 255.200601][ T6932] should_fail_ex+0x394/0x4c0 [ 255.205329][ T6932] get_futex_key+0x136/0x1030 [ 255.210064][ T6932] ? futex_setup_timer+0xc0/0xc0 [ 255.215039][ T6932] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 255.220730][ T6932] ? preempt_schedule+0xc0/0xd0 [ 255.225643][ T6932] futex_wait_setup+0xbc/0x270 [ 255.230452][ T6932] ? futex_wait_multiple+0x920/0x920 [ 255.235786][ T6932] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 255.241752][ T6932] ? _raw_spin_unlock+0x40/0x40 [ 255.246683][ T6932] futex_wait+0x1bc/0x5c0 [ 255.251101][ T6932] ? futex_wait_setup+0x270/0x270 [ 255.256215][ T6932] ? file_end_write+0x159/0x250 [ 255.261147][ T6932] do_futex+0x2ff/0x3e0 [ 255.265363][ T6932] ? __ia32_sys_get_robust_list+0x110/0x110 [ 255.271325][ T6932] __se_sys_futex+0x3a9/0x440 [ 255.276065][ T6932] ? __x64_sys_futex+0xf0/0xf0 [ 255.280883][ T6932] ? __x64_sys_futex+0x21/0xf0 [ 255.285694][ T6932] do_syscall_64+0x55/0xb0 [ 255.290157][ T6932] ? clear_bhb_loop+0x40/0x90 [ 255.294881][ T6932] ? clear_bhb_loop+0x40/0x90 [ 255.299630][ T6932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.305580][ T6932] RIP: 0033:0x7fe46c99e159 [ 255.310040][ T6932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.329787][ T6932] RSP: 002b:00007fe46d7de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 255.338256][ T6932] RAX: ffffffffffffffda RBX: 00007fe46cc26188 RCX: 00007fe46c99e159 [ 255.346278][ T6932] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe46cc26188 [ 255.354288][ T6932] RBP: 00007fe46cc26180 R08: 0000000000000000 R09: 0000000000000000 [ 255.362318][ T6932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.370336][ T6932] R13: 00007fe46cc26218 R14: 00007fff3479b8a0 R15: 00007fff3479b988 [ 255.378377][ T6932] [ 255.761123][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.786935][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.831226][ T5812] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 255.923142][ T5812] usb 1-1: USB disconnect, device number 6 [ 256.038440][ T6906] udevd[6906]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.193704][ T6955] loop3: detected capacity change from 0 to 512 [ 261.260389][ T6953] FAULT_INJECTION: forcing a failure. [ 261.260389][ T6953] name failslab, interval 1, probability 0, space 0, times 0 [ 261.286251][ T6953] CPU: 1 PID: 6953 Comm: syz.1.264 Not tainted syzkaller #0 [ 261.293629][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 261.303738][ T6953] Call Trace: [ 261.307076][ T6953] [ 261.310056][ T6953] dump_stack_lvl+0x18c/0x250 [ 261.313429][ T6955] EXT4-fs (loop3): Test dummy encryption mode enabled [ 261.314823][ T6953] ? show_regs_print_info+0x20/0x20 [ 261.326868][ T6953] ? load_image+0x420/0x420 [ 261.331409][ T6953] ? __might_sleep+0xe0/0xe0 [ 261.336040][ T6953] ? __lock_acquire+0x7d80/0x7d80 [ 261.341115][ T6953] should_fail_ex+0x394/0x4c0 [ 261.345836][ T6953] should_failslab+0x9/0x20 [ 261.350382][ T6953] slab_pre_alloc_hook+0x59/0x300 [ 261.355441][ T6953] ? lockdep_softirqs_off+0x440/0x440 [ 261.360851][ T6953] ? mempool_init_node+0x12f/0x480 [ 261.365994][ T6953] ? mempool_init_node+0x12f/0x480 [ 261.371146][ T6953] __kmem_cache_alloc_node+0x53/0x250 [ 261.376674][ T6953] ? mempool_init_node+0x12f/0x480 [ 261.381890][ T6953] __kmalloc_node+0xa6/0x240 [ 261.386532][ T6953] ? __init_waitqueue_head+0xa8/0x140 [ 261.391975][ T6953] mempool_init_node+0x12f/0x480 [ 261.396949][ T6953] ? msgpool_alloc+0x1b0/0x1b0 [ 261.401775][ T6953] ? msgpool_alloc+0x1b0/0x1b0 [ 261.406568][ T6953] ? ceph_msgpool_init+0x180/0x180 [ 261.411712][ T6953] mempool_create+0x81/0xc0 [ 261.416254][ T6953] ceph_msgpool_init+0xa7/0x180 [ 261.421137][ T6953] ceph_osdc_init+0x54f/0x8c0 [ 261.425855][ T6953] ceph_create_client+0x246/0x300 [ 261.430924][ T6953] ceph_get_tree+0x1ca/0x1800 [ 261.435665][ T6953] ? bpf_lsm_capable+0x9/0x10 [ 261.440386][ T6953] ? security_capable+0x89/0xb0 [ 261.445324][ T6953] vfs_get_tree+0x8c/0x280 [ 261.449786][ T6953] vfs_cmd_create+0xe3/0x230 [ 261.454422][ T6953] __se_sys_fsconfig+0x70a/0x850 [ 261.459417][ T6953] ? __x64_sys_fsconfig+0xc0/0xc0 [ 261.464492][ T6953] ? lockdep_hardirqs_on+0x98/0x150 [ 261.469736][ T6953] ? __x64_sys_fsconfig+0x20/0xc0 [ 261.474803][ T6953] do_syscall_64+0x55/0xb0 [ 261.479257][ T6953] ? clear_bhb_loop+0x40/0x90 [ 261.483970][ T6953] ? clear_bhb_loop+0x40/0x90 [ 261.488681][ T6953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.494606][ T6953] RIP: 0033:0x7fe46c99e159 [ 261.499056][ T6953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.518712][ T6953] RSP: 002b:00007fe46d820028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 261.527168][ T6953] RAX: ffffffffffffffda RBX: 00007fe46cc25fa0 RCX: 00007fe46c99e159 [ 261.535165][ T6953] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 261.543183][ T6953] RBP: 00007fe46ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 261.551186][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.559191][ T6953] R13: 00007fe46cc26038 R14: 00007fe46cc25fa0 R15: 00007fff3479b988 [ 261.567205][ T6953] [ 261.578329][ T6955] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 261.670736][ T6955] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.262: bad orphan inode 131083 [ 261.725640][ T6955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.744145][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.893852][ T6971] loop0: detected capacity change from 0 to 1024 [ 262.987196][ T6971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.006930][ T9] IPVS: starting estimator thread 0... [ 267.035963][ T789] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 267.052723][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.106203][ T6985] IPVS: using max 17 ests per chain, 40800 per kthread [ 268.246268][ T6987] Set syz1 is full, maxelem 6117 reached [ 268.354975][ T6992] loop1: detected capacity change from 0 to 764 [ 269.447016][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 1588 [ 269.506070][ T7004] loop2: detected capacity change from 0 to 256 [ 272.127640][ T7015] ceph: No mds server is up or the cluster is laggy [ 273.978721][ T7029] bio_check_eod: 2 callbacks suppressed [ 273.978737][ T7029] syz.3.279: attempt to access beyond end of device [ 273.978737][ T7029] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 274.006253][ T7029] syz.3.279: attempt to access beyond end of device [ 274.006253][ T7029] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 274.038670][ T7029] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 274.056855][ T7029] syz.3.279: attempt to access beyond end of device [ 274.056855][ T7029] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 274.091566][ T7029] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 274.152782][ T7029] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 274.194611][ T7029] UDF-fs: Scanning with blocksize 512 failed [ 274.277087][ T7029] syz.3.279: attempt to access beyond end of device [ 274.277087][ T7029] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 274.316363][ T7029] syz.3.279: attempt to access beyond end of device [ 274.316363][ T7029] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 274.356109][ T7029] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 274.394144][ T7029] syz.3.279: attempt to access beyond end of device [ 274.394144][ T7029] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 274.426421][ T7029] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 274.475974][ T7029] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 274.540125][ T7029] UDF-fs: Scanning with blocksize 1024 failed [ 274.556959][ T7029] syz.3.279: attempt to access beyond end of device [ 274.556959][ T7029] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 274.625794][ T7029] syz.3.279: attempt to access beyond end of device [ 274.625794][ T7029] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 274.672826][ T7029] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 274.704691][ T7029] syz.3.279: attempt to access beyond end of device [ 274.704691][ T7029] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 274.749686][ T7029] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 274.786955][ T7029] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 274.872328][ T7029] UDF-fs: Scanning with blocksize 2048 failed [ 274.912680][ T7029] syz.3.279: attempt to access beyond end of device [ 274.912680][ T7029] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 274.975762][ T7029] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 275.034678][ T7029] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 275.099976][ T7029] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 275.145436][ T7029] UDF-fs: Scanning with blocksize 4096 failed [ 275.184944][ T7029] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 289.445223][ T7119] loop0: detected capacity change from 0 to 32768 [ 290.014046][ T7127] sctp: [Deprecated]: syz.2.296 (pid 7127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.014046][ T7127] Use struct sctp_sack_info instead [ 291.377930][ T7134] loop2: detected capacity change from 0 to 32768 [ 291.432291][ T7134] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 291.662559][ T7134] XFS (loop2): Ending clean mount [ 291.675753][ T7134] XFS (loop2): Quotacheck needed: Please wait. [ 291.760679][ T7134] XFS (loop2): Quotacheck: Done. [ 293.078487][ T7152] loop3: detected capacity change from 0 to 512 [ 293.110861][ T7152] EXT4-fs (loop3): Test dummy encryption mode enabled [ 293.158383][ T7152] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 293.331513][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 293.340612][ T7152] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.310: bad orphan inode 131083 [ 293.434652][ T7152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.356289][ T7152] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 296.399120][ T7152] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.199758][ T7225] input: syz1 as /devices/virtual/input/input9 [ 298.829211][ T7236] sctp: [Deprecated]: syz.3.315 (pid 7236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.829211][ T7236] Use struct sctp_sack_info instead [ 299.673397][ T7238] loop2: detected capacity change from 0 to 4096 [ 304.033260][ T7258] netlink: 'syz.3.323': attribute type 1 has an invalid length. [ 307.558336][ T7283] netlink: 112 bytes leftover after parsing attributes in process `syz.0.329'. [ 315.733137][ T7328] tc action pedit offset must be on 32 bit boundaries [ 315.822038][ T7319] Set syz1 is full, maxelem 6117 reached [ 317.217153][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.240720][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.384845][ T7343] FAULT_INJECTION: forcing a failure. [ 318.384845][ T7343] name failslab, interval 1, probability 0, space 0, times 0 [ 318.397726][ T7343] CPU: 1 PID: 7343 Comm: syz.2.340 Not tainted syzkaller #0 [ 318.405071][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 318.415186][ T7343] Call Trace: [ 318.418512][ T7343] [ 318.421480][ T7343] dump_stack_lvl+0x18c/0x250 [ 318.426225][ T7343] ? show_regs_print_info+0x20/0x20 [ 318.431485][ T7343] ? load_image+0x420/0x420 [ 318.436039][ T7343] ? __might_sleep+0xe0/0xe0 [ 318.440717][ T7343] ? __lock_acquire+0x7d80/0x7d80 [ 318.445802][ T7343] should_fail_ex+0x394/0x4c0 [ 318.450537][ T7343] should_failslab+0x9/0x20 [ 318.455118][ T7343] slab_pre_alloc_hook+0x59/0x300 [ 318.460215][ T7343] ? rng_is_initialized+0x40/0x40 [ 318.465286][ T7343] ? ceph_create_client+0x6f/0x300 [ 318.470454][ T7343] __kmem_cache_alloc_node+0x53/0x250 [ 318.475883][ T7343] ? ceph_create_client+0x6f/0x300 [ 318.481049][ T7343] kmalloc_trace+0x2a/0xe0 [ 318.485522][ T7343] ceph_create_client+0x6f/0x300 [ 318.490528][ T7343] ceph_get_tree+0x1ca/0x1800 [ 318.495256][ T7343] ? bpf_lsm_capable+0x9/0x10 [ 318.499973][ T7343] ? security_capable+0x89/0xb0 [ 318.504881][ T7343] vfs_get_tree+0x8c/0x280 [ 318.509350][ T7343] vfs_cmd_create+0xe3/0x230 [ 318.513995][ T7343] __se_sys_fsconfig+0x70a/0x850 [ 318.518992][ T7343] ? __x64_sys_fsconfig+0xc0/0xc0 [ 318.524077][ T7343] ? lockdep_hardirqs_on+0x98/0x150 [ 318.529341][ T7343] ? __x64_sys_fsconfig+0x20/0xc0 [ 318.534526][ T7343] do_syscall_64+0x55/0xb0 [ 318.539005][ T7343] ? clear_bhb_loop+0x40/0x90 [ 318.543747][ T7343] ? clear_bhb_loop+0x40/0x90 [ 318.548482][ T7343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.554432][ T7343] RIP: 0033:0x7fc8c0d9e159 [ 318.558913][ T7343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.578574][ T7343] RSP: 002b:00007fc8c1c39028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 318.587038][ T7343] RAX: ffffffffffffffda RBX: 00007fc8c1026090 RCX: 00007fc8c0d9e159 [ 318.595054][ T7343] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 318.603098][ T7343] RBP: 00007fc8c0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 318.611118][ T7343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.619128][ T7343] R13: 00007fc8c1026128 R14: 00007fc8c1026090 R15: 00007ffe34c26f38 [ 318.627162][ T7343] [ 322.668171][ T7377] Set syz1 is full, maxelem 6117 reached [ 324.427764][ T7386] syz.0.348 (7386) used greatest stack depth: 19576 bytes left [ 325.917930][ T7399] syz.2.358 (7399): attempted to duplicate a private mapping with mremap. This is not supported. [ 330.851305][ T7423] wlan0 speed is unknown, defaulting to 1000 [ 330.857932][ T7423] wlan0 speed is unknown, defaulting to 1000 [ 330.867875][ T7423] wlan0 speed is unknown, defaulting to 1000 [ 330.882299][ T7423] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 330.901284][ T7423] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 330.994384][ T7423] wlan0 speed is unknown, defaulting to 1000 [ 331.003724][ T7423] wlan0 speed is unknown, defaulting to 1000 [ 331.011518][ T7423] wlan0 speed is unknown, defaulting to 1000 [ 331.022037][ T7423] wlan0 speed is unknown, defaulting to 1000 [ 334.306921][ T7454] loop2: detected capacity change from 0 to 1024 [ 334.494721][ T7454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 334.508775][ T7454] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.976014][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 335.278695][ T7460] sd 0:0:1:0: PR command failed: 1026 [ 335.284546][ T7460] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 335.291482][ T7460] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 337.143694][ T7468] netlink: 'syz.1.375': attribute type 1 has an invalid length. [ 337.482846][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'. [ 340.418735][ T51] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 348.579910][ T7544] ip6t_REJECT: ECHOREPLY is not supported [ 349.866569][ T7561] FAULT_INJECTION: forcing a failure. [ 349.866569][ T7561] name failslab, interval 1, probability 0, space 0, times 0 [ 349.915775][ T7561] CPU: 0 PID: 7561 Comm: syz.0.396 Not tainted syzkaller #0 [ 349.923183][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 349.933535][ T7561] Call Trace: [ 349.936846][ T7561] [ 349.939823][ T7561] dump_stack_lvl+0x18c/0x250 [ 349.944546][ T7561] ? show_regs_print_info+0x20/0x20 [ 349.949779][ T7561] ? load_image+0x420/0x420 [ 349.954311][ T7561] ? __lock_acquire+0x7d80/0x7d80 [ 349.959473][ T7561] should_fail_ex+0x394/0x4c0 [ 349.964196][ T7561] should_failslab+0x9/0x20 [ 349.968734][ T7561] slab_pre_alloc_hook+0x59/0x300 [ 349.973805][ T7561] ? kvmalloc_node+0x70/0x180 [ 349.978515][ T7561] ? kvmalloc_node+0x70/0x180 [ 349.983245][ T7561] __kmem_cache_alloc_node+0x53/0x250 [ 349.988661][ T7561] ? kvmalloc_node+0x70/0x180 [ 349.993367][ T7561] __kmalloc_node+0xa6/0x240 [ 349.997999][ T7561] kvmalloc_node+0x70/0x180 [ 350.002547][ T7561] ceph_msg_new2+0x162/0x490 [ 350.007176][ T7561] msgpool_alloc+0x80/0x1b0 [ 350.011717][ T7561] ? ceph_msgpool_init+0x180/0x180 [ 350.016858][ T7561] mempool_init_node+0x1e9/0x480 [ 350.021856][ T7561] ? msgpool_alloc+0x1b0/0x1b0 [ 350.026648][ T7561] ? ceph_msgpool_init+0x180/0x180 [ 350.031797][ T7561] mempool_create+0x81/0xc0 [ 350.036341][ T7561] ceph_msgpool_init+0xa7/0x180 [ 350.041231][ T7561] ceph_osdc_init+0x54f/0x8c0 [ 350.045952][ T7561] ceph_create_client+0x246/0x300 [ 350.051019][ T7561] ceph_get_tree+0x1ca/0x1800 [ 350.055738][ T7561] ? bpf_lsm_capable+0x9/0x10 [ 350.060445][ T7561] ? security_capable+0x89/0xb0 [ 350.065344][ T7561] vfs_get_tree+0x8c/0x280 [ 350.069808][ T7561] vfs_cmd_create+0xe3/0x230 [ 350.074436][ T7561] __se_sys_fsconfig+0x70a/0x850 [ 350.079435][ T7561] ? __x64_sys_fsconfig+0xc0/0xc0 [ 350.084519][ T7561] ? lockdep_hardirqs_on+0x98/0x150 [ 350.089766][ T7561] ? __x64_sys_fsconfig+0x20/0xc0 [ 350.094850][ T7561] do_syscall_64+0x55/0xb0 [ 350.099298][ T7561] ? clear_bhb_loop+0x40/0x90 [ 350.104011][ T7561] ? clear_bhb_loop+0x40/0x90 [ 350.108727][ T7561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.114656][ T7561] RIP: 0033:0x7f4bbbf9e159 [ 350.119130][ T7561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.138766][ T7561] RSP: 002b:00007f4bbce6e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 350.147229][ T7561] RAX: ffffffffffffffda RBX: 00007f4bbc226090 RCX: 00007f4bbbf9e159 [ 350.155221][ T7561] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 350.163229][ T7561] RBP: 00007f4bbc03506b R08: 0000000000000000 R09: 0000000000000000 [ 350.171240][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.179240][ T7561] R13: 00007f4bbc226128 R14: 00007f4bbc226090 R15: 00007ffe30520038 [ 350.187251][ T7561] [ 352.734595][ T7580] wlan0 speed is unknown, defaulting to 1000 [ 352.740867][ T7580] wlan0 speed is unknown, defaulting to 1000 [ 352.747732][ T7580] wlan0 speed is unknown, defaulting to 1000 [ 352.766950][ T7580] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 352.794606][ T7580] wlan0 speed is unknown, defaulting to 1000 [ 352.802395][ T7580] wlan0 speed is unknown, defaulting to 1000 [ 352.811284][ T7580] wlan0 speed is unknown, defaulting to 1000 [ 352.819114][ T7580] wlan0 speed is unknown, defaulting to 1000 [ 357.647227][ T7619] ceph: No mds server is up or the cluster is laggy [ 362.685897][ T7660] ceph: No mds server is up or the cluster is laggy [ 378.281169][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.287562][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.925982][ T7783] overlayfs: workdir and upperdir must be separate subtrees [ 380.754387][ T7318] syz.2.336 (7318) used greatest stack depth: 19064 bytes left [ 396.948317][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 397.081011][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 397.093697][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 397.189109][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 397.198380][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 397.206606][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 397.217090][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 397.705350][ T7814] wlan0 speed is unknown, defaulting to 1000 [ 399.293158][ T5781] Bluetooth: hci4: command tx timeout [ 399.905657][ T7814] chnl_net:caif_netlink_parms(): no params data found [ 400.716562][ T7208] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.775828][ T7208] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 402.053659][ T5781] Bluetooth: hci4: command tx timeout [ 402.128438][ T7208] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.170594][ T7208] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 402.336850][ T7208] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.357934][ T7208] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 402.373671][ T7814] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.381153][ T7814] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.395634][ T7814] bridge_slave_0: entered allmulticast mode [ 402.403628][ T7814] bridge_slave_0: entered promiscuous mode [ 402.419745][ T7814] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.547858][ T7814] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.555373][ T7814] bridge_slave_1: entered allmulticast mode [ 402.564257][ T7814] bridge_slave_1: entered promiscuous mode [ 402.597441][ T7814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.538347][ T7208] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.585936][ T7208] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 403.651280][ T7814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.750610][ T7814] team0: Port device team_slave_0 added [ 403.768736][ T7814] team0: Port device team_slave_1 added [ 403.816757][ T7814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.832047][ T7814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.875435][ T7814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.924659][ T7814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.962297][ T7814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.035660][ T7814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.077105][ T5781] Bluetooth: hci4: command tx timeout [ 404.966704][ T7868] loop2: detected capacity change from 0 to 164 [ 405.192801][ T7814] hsr_slave_0: entered promiscuous mode [ 405.362148][ T7814] hsr_slave_1: entered promiscuous mode [ 406.383740][ T5781] Bluetooth: hci4: command tx timeout [ 406.433140][ T7873] rock: directory entry would overflow storage [ 406.440056][ T7873] rock: sig=0x4f50, size=4, remaining=3 [ 406.445664][ T7873] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 406.667657][ T7814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.689571][ T7814] Cannot create hsr debugfs directory [ 407.284605][ T7208] tipc: Disabling bearer [ 407.347921][ T7208] tipc: Left network mode [ 414.746757][ T7923] process 'syz.0.486' launched './file0' with NULL argv: empty string added [ 415.595637][ T7208] team0: Port device xfrm0 removed [ 415.621796][ T7924] siw: device registration error -23 [ 415.675077][ T7814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 415.767454][ T7814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 415.905225][ T7814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 415.989935][ T7814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.435593][ T7208] IPVS: stopping master sync thread 6281 ... [ 416.449594][ T7814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.675494][ T7814] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.927431][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.934810][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.982480][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.989708][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.697557][ T7814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.945864][ T7208] hsr_slave_0: left promiscuous mode [ 417.952525][ T7208] hsr_slave_1: left promiscuous mode [ 420.270097][ T7208] veth1_macvtap: left promiscuous mode [ 420.288483][ T7208] veth0_macvtap: left promiscuous mode [ 420.320124][ T7208] veth1_vlan: left promiscuous mode [ 420.583023][ T7208] veth0_vlan: left promiscuous mode [ 421.573408][ T7963] loop2: detected capacity change from 0 to 512 [ 421.588196][ T7963] EXT4-fs: inline encryption not supported [ 421.621208][ T7963] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 421.709970][ T7963] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.492: corrupted in-inode xattr: e_value size too large [ 421.799028][ T7963] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.492: couldn't read orphan inode 15 (err -117) [ 421.866898][ T7208] bond2 (unregistering): Released all slaves [ 421.898163][ T7963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.957822][ T7208] bond1 (unregistering): (slave geneve2): Releasing active interface [ 422.226893][ T7208] bond1 (unregistering): Released all slaves [ 422.803732][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.345799][ T7208] bond0 (unregistering): Released all slaves [ 427.615124][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 429.037987][ T8027] loop2: detected capacity change from 0 to 512 [ 429.071362][ T8027] EXT4-fs (loop2): Test dummy encryption mode enabled [ 429.078359][ T8027] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 429.215790][ T8027] EXT4-fs (loop2): 1 truncate cleaned up [ 429.229014][ T8027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.711332][ T7814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.773850][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.064359][ T7208] IPVS: stop unused estimator thread 0... [ 432.547293][ T5811] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 434.078426][ T7814] veth0_vlan: entered promiscuous mode [ 434.106997][ T5811] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 434.135244][ T7814] veth1_vlan: entered promiscuous mode [ 434.158347][ T5811] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 434.197065][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.246748][ T5811] usb 3-1: Product: syz [ 434.250996][ T5811] usb 3-1: Manufacturer: syz [ 434.288088][ T5811] usb 3-1: SerialNumber: syz [ 434.367942][ T5811] usb 3-1: can't set config #1, error -71 [ 434.403550][ T7814] veth0_macvtap: entered promiscuous mode [ 434.415148][ T7814] veth1_macvtap: entered promiscuous mode [ 434.429616][ T5811] usb 3-1: USB disconnect, device number 6 [ 434.446795][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.484666][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.497122][ T8086] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 434.523652][ T8086] CIFS: Attempting to mount //127.0.0.1/share [ 434.543128][ T7814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.574888][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.626132][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.651089][ T7814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.715958][ T7814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.726752][ T7814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.737773][ T7814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.749626][ T7814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.941295][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.974745][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.068908][ T7199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.086711][ T7199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.267032][ T8086] CIFS: VFS: Error connecting to socket. Aborting operation. [ 435.274890][ T8086] CIFS: VFS: cifs_mount failed w/return code = -4 [ 437.858445][ T8117] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.356982][ T8127] FAULT_INJECTION: forcing a failure. [ 438.356982][ T8127] name failslab, interval 1, probability 0, space 0, times 0 [ 438.415315][ T8127] CPU: 1 PID: 8127 Comm: syz.4.523 Not tainted syzkaller #0 [ 438.422708][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 438.432811][ T8127] Call Trace: [ 438.436137][ T8127] [ 438.439118][ T8127] dump_stack_lvl+0x18c/0x250 [ 438.443899][ T8127] ? show_regs_print_info+0x20/0x20 [ 438.449159][ T8127] ? load_image+0x420/0x420 [ 438.453727][ T8127] ? __might_sleep+0xe0/0xe0 [ 438.458377][ T8127] ? __lock_acquire+0x7d80/0x7d80 [ 438.463486][ T8127] should_fail_ex+0x394/0x4c0 [ 438.468230][ T8127] should_failslab+0x9/0x20 [ 438.472793][ T8127] slab_pre_alloc_hook+0x59/0x300 [ 438.477967][ T8127] ? lockdep_softirqs_off+0x440/0x440 [ 438.483400][ T8127] ? mempool_init_node+0x12f/0x480 [ 438.488596][ T8127] ? mempool_init_node+0x12f/0x480 [ 438.493769][ T8127] __kmem_cache_alloc_node+0x53/0x250 [ 438.499224][ T8127] ? mempool_init_node+0x12f/0x480 [ 438.504410][ T8127] __kmalloc_node+0xa6/0x240 [ 438.509046][ T8127] ? __init_waitqueue_head+0xa8/0x140 [ 438.514473][ T8127] mempool_init_node+0x12f/0x480 [ 438.519462][ T8127] ? msgpool_alloc+0x1b0/0x1b0 [ 438.524311][ T8127] ? msgpool_alloc+0x1b0/0x1b0 [ 438.529108][ T8127] ? ceph_msgpool_init+0x180/0x180 [ 438.534268][ T8127] mempool_create+0x81/0xc0 [ 438.538812][ T8127] ceph_msgpool_init+0xa7/0x180 [ 438.543700][ T8127] ceph_osdc_init+0x54f/0x8c0 [ 438.548433][ T8127] ceph_create_client+0x246/0x300 [ 438.553501][ T8127] ceph_get_tree+0x1ca/0x1800 [ 438.558211][ T8127] ? bpf_lsm_capable+0x9/0x10 [ 438.562913][ T8127] ? security_capable+0x89/0xb0 [ 438.567800][ T8127] vfs_get_tree+0x8c/0x280 [ 438.572255][ T8127] vfs_cmd_create+0xe3/0x230 [ 438.576904][ T8127] __se_sys_fsconfig+0x70a/0x850 [ 438.581913][ T8127] ? __x64_sys_fsconfig+0xc0/0xc0 [ 438.586994][ T8127] ? lockdep_hardirqs_on+0x98/0x150 [ 438.592222][ T8127] ? __x64_sys_fsconfig+0x20/0xc0 [ 438.597289][ T8127] do_syscall_64+0x55/0xb0 [ 438.601750][ T8127] ? clear_bhb_loop+0x40/0x90 [ 438.606465][ T8127] ? clear_bhb_loop+0x40/0x90 [ 438.611177][ T8127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.617111][ T8127] RIP: 0033:0x7f4b2499e159 [ 438.621565][ T8127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.641206][ T8127] RSP: 002b:00007f4b258e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 438.649659][ T8127] RAX: ffffffffffffffda RBX: 00007f4b24c25fa0 RCX: 00007f4b2499e159 [ 438.657666][ T8127] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 438.665668][ T8127] RBP: 00007f4b24a3506b R08: 0000000000000000 R09: 0000000000000000 [ 438.673754][ T8127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.681771][ T8127] R13: 00007f4b24c26038 R14: 00007f4b24c25fa0 R15: 00007fffc1e245f8 [ 438.689798][ T8127] [ 439.526779][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.538873][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.583198][ T8142] loop4: detected capacity change from 0 to 2048 [ 439.623481][ T8142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.656313][ T8142] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.483285][ T7814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.529703][ T5812] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 440.733592][ T5812] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 440.781497][ T5812] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 440.824390][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.839696][ T5811] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 440.871851][ T5812] usb 3-1: Product: syz [ 440.876147][ T5812] usb 3-1: Manufacturer: syz [ 440.910308][ T5812] usb 3-1: SerialNumber: syz [ 441.127053][ T5811] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 441.370498][ T5811] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 441.712858][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.774217][ T5811] usb 1-1: Product: syz [ 441.817973][ T5811] usb 1-1: Manufacturer: syz [ 441.868506][ T5811] usb 1-1: SerialNumber: syz [ 441.992812][ T8172] loop4: detected capacity change from 0 to 512 [ 442.045035][ T8172] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.530: corrupted in-inode xattr: invalid ea_ino [ 442.107135][ T8172] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.530: couldn't read orphan inode 15 (err -117) [ 442.161885][ T8172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.227306][ T7814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.882183][ T8191] loop4: detected capacity change from 0 to 32768 [ 444.268221][ T8191] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 444.499644][ T8191] XFS (loop4): Ending clean mount [ 444.527251][ T8191] XFS (loop4): Quotacheck needed: Please wait. [ 444.686118][ T5812] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 444.721770][ T5812] usb 3-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 444.751486][ T8191] XFS (loop4): Quotacheck: Done. [ 444.784442][ T5812] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 444.816477][ T5812] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 444.896638][ T8210] overlayfs: failed to clone upperpath [ 445.032131][ T5812] usb 3-1: USB disconnect, device number 7 [ 445.417451][ T8207] udevd[8207]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.699824][ T7814] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 445.726153][ T5811] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 445.742111][ T5811] usb 1-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 445.749525][ T5811] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 445.756878][ T5811] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 445.795955][ T5811] usb 1-1: USB disconnect, device number 7 [ 445.874184][ T8207] udevd[8207]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 446.583329][ T8219] ceph: No mds server is up or the cluster is laggy [ 452.497773][ T8289] sd 0:0:1:0: PR command failed: 1026 [ 452.503323][ T8289] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 452.510263][ T8289] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 455.204231][ T5811] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 455.430764][ T5811] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 455.498422][ T5811] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 455.538321][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.574144][ T5811] usb 5-1: Product: syz [ 455.588732][ T5811] usb 5-1: Manufacturer: syz [ 455.608948][ T5811] usb 5-1: SerialNumber: syz [ 455.900866][ T8305] loop2: detected capacity change from 0 to 32768 [ 455.966050][ T8305] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 456.130909][ T8305] XFS (loop2): Ending clean mount [ 456.354075][ T28] audit: type=1800 audit(1792026767.409:4): pid=8305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.552" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 457.252729][ T8349] gadgetfs: bound to dummy_udc driver [ 457.672386][ T5810] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 457.852652][ C0] gadgetfs: connected [ 457.860341][ T5810] gadgetfs: disconnected [ 458.080719][ T8344] gadgetfs: suspended from state 2 [ 458.354012][ T5772] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 459.706595][ T5810] usb 1-1: device not accepting address 8, error -71 [ 459.720260][ T5811] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 459.728848][ T5811] usb 5-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 459.736334][ T5811] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 459.746835][ T5811] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 459.831367][ T5811] usb 5-1: USB disconnect, device number 2 [ 459.951395][ T8312] udevd[8312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.629684][ T8404] FAULT_INJECTION: forcing a failure. [ 462.629684][ T8404] name failslab, interval 1, probability 0, space 0, times 0 [ 462.684361][ T8404] CPU: 1 PID: 8404 Comm: syz.2.565 Not tainted syzkaller #0 [ 462.691740][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 462.701842][ T8404] Call Trace: [ 462.705175][ T8404] [ 462.708153][ T8404] dump_stack_lvl+0x18c/0x250 [ 462.712934][ T8404] ? show_regs_print_info+0x20/0x20 [ 462.718208][ T8404] ? load_image+0x420/0x420 [ 462.722768][ T8404] ? __lock_acquire+0x7d80/0x7d80 [ 462.727877][ T8404] should_fail_ex+0x394/0x4c0 [ 462.732616][ T8404] should_failslab+0x9/0x20 [ 462.737176][ T8404] slab_pre_alloc_hook+0x59/0x300 [ 462.742260][ T8404] ? kvmalloc_node+0x70/0x180 [ 462.746994][ T8404] ? kvmalloc_node+0x70/0x180 [ 462.751783][ T8404] __kmem_cache_alloc_node+0x53/0x250 [ 462.757223][ T8404] ? kvmalloc_node+0x70/0x180 [ 462.761958][ T8404] __kmalloc_node+0xa6/0x240 [ 462.766608][ T8404] kvmalloc_node+0x70/0x180 [ 462.771167][ T8404] ceph_msg_new2+0x162/0x490 [ 462.775810][ T8404] msgpool_alloc+0x80/0x1b0 [ 462.780363][ T8404] ? ceph_msgpool_init+0x180/0x180 [ 462.785533][ T8404] mempool_init_node+0x1e9/0x480 [ 462.790532][ T8404] ? msgpool_alloc+0x1b0/0x1b0 [ 462.795348][ T8404] ? ceph_msgpool_init+0x180/0x180 [ 462.800498][ T8404] mempool_create+0x81/0xc0 [ 462.805079][ T8404] ceph_msgpool_init+0xa7/0x180 [ 462.809984][ T8404] ceph_osdc_init+0x54f/0x8c0 [ 462.814723][ T8404] ceph_create_client+0x246/0x300 [ 462.819830][ T8404] ceph_get_tree+0x1ca/0x1800 [ 462.824577][ T8404] ? bpf_lsm_capable+0x9/0x10 [ 462.829299][ T8404] ? security_capable+0x89/0xb0 [ 462.834220][ T8404] vfs_get_tree+0x8c/0x280 [ 462.838690][ T8404] vfs_cmd_create+0xe3/0x230 [ 462.843343][ T8404] __se_sys_fsconfig+0x70a/0x850 [ 462.848346][ T8404] ? __x64_sys_fsconfig+0xc0/0xc0 [ 462.853475][ T8404] ? lockdep_hardirqs_on+0x98/0x150 [ 462.858748][ T8404] ? __x64_sys_fsconfig+0x20/0xc0 [ 462.863880][ T8404] do_syscall_64+0x55/0xb0 [ 462.868357][ T8404] ? clear_bhb_loop+0x40/0x90 [ 462.873104][ T8404] ? clear_bhb_loop+0x40/0x90 [ 462.877841][ T8404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.883796][ T8404] RIP: 0033:0x7fc8c0d9e159 [ 462.888260][ T8404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.907921][ T8404] RSP: 002b:00007fc8c1c5a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 462.916398][ T8404] RAX: ffffffffffffffda RBX: 00007fc8c1025fa0 RCX: 00007fc8c0d9e159 [ 462.924436][ T8404] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 462.932445][ T8404] RBP: 00007fc8c0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 462.940455][ T8404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.948476][ T8404] R13: 00007fc8c1026038 R14: 00007fc8c1025fa0 R15: 00007ffe34c26f38 [ 462.956553][ T8404] [ 464.608385][ T8422] loop2: detected capacity change from 0 to 512 [ 465.149770][ T8422] EXT4-fs (loop2): Test dummy encryption mode enabled [ 465.156661][ T8422] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 465.272702][ T8422] EXT4-fs (loop2): 1 truncate cleaned up [ 465.280433][ T8422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.720693][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.189564][ T8457] FAULT_INJECTION: forcing a failure. [ 468.189564][ T8457] name failslab, interval 1, probability 0, space 0, times 0 [ 468.212604][ T8457] CPU: 0 PID: 8457 Comm: syz.2.574 Not tainted syzkaller #0 [ 468.220023][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 468.230112][ T8457] Call Trace: [ 468.233401][ T8457] [ 468.236343][ T8457] dump_stack_lvl+0x18c/0x250 [ 468.241071][ T8457] ? show_regs_print_info+0x20/0x20 [ 468.246302][ T8457] ? load_image+0x420/0x420 [ 468.250852][ T8457] ? __might_sleep+0xe0/0xe0 [ 468.255496][ T8457] ? __lock_acquire+0x7d80/0x7d80 [ 468.260564][ T8457] should_fail_ex+0x394/0x4c0 [ 468.265309][ T8457] should_failslab+0x9/0x20 [ 468.269889][ T8457] slab_pre_alloc_hook+0x59/0x300 [ 468.274988][ T8457] ? lockdep_softirqs_off+0x440/0x440 [ 468.280397][ T8457] ? mempool_init_node+0x12f/0x480 [ 468.285563][ T8457] ? mempool_init_node+0x12f/0x480 [ 468.290706][ T8457] __kmem_cache_alloc_node+0x53/0x250 [ 468.296132][ T8457] ? mempool_init_node+0x12f/0x480 [ 468.301277][ T8457] __kmalloc_node+0xa6/0x240 [ 468.305935][ T8457] ? __init_waitqueue_head+0xa8/0x140 [ 468.311356][ T8457] mempool_init_node+0x12f/0x480 [ 468.316332][ T8457] ? msgpool_alloc+0x1b0/0x1b0 [ 468.321132][ T8457] ? msgpool_alloc+0x1b0/0x1b0 [ 468.325928][ T8457] ? ceph_msgpool_init+0x180/0x180 [ 468.331067][ T8457] mempool_create+0x81/0xc0 [ 468.335606][ T8457] ceph_msgpool_init+0xa7/0x180 [ 468.340489][ T8457] ceph_osdc_init+0x54f/0x8c0 [ 468.345215][ T8457] ceph_create_client+0x246/0x300 [ 468.350279][ T8457] ceph_get_tree+0x1ca/0x1800 [ 468.355011][ T8457] ? bpf_lsm_capable+0x9/0x10 [ 468.359717][ T8457] ? security_capable+0x89/0xb0 [ 468.364602][ T8457] vfs_get_tree+0x8c/0x280 [ 468.369056][ T8457] vfs_cmd_create+0xe3/0x230 [ 468.373692][ T8457] __se_sys_fsconfig+0x70a/0x850 [ 468.378671][ T8457] ? __x64_sys_fsconfig+0xc0/0xc0 [ 468.383735][ T8457] ? lockdep_hardirqs_on+0x98/0x150 [ 468.388962][ T8457] ? __x64_sys_fsconfig+0x20/0xc0 [ 468.394040][ T8457] do_syscall_64+0x55/0xb0 [ 468.398490][ T8457] ? clear_bhb_loop+0x40/0x90 [ 468.403200][ T8457] ? clear_bhb_loop+0x40/0x90 [ 468.407919][ T8457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.413847][ T8457] RIP: 0033:0x7fc8c0d9e159 [ 468.418299][ T8457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.437954][ T8457] RSP: 002b:00007fc8c1c5a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 468.446417][ T8457] RAX: ffffffffffffffda RBX: 00007fc8c1025fa0 RCX: 00007fc8c0d9e159 [ 468.454418][ T8457] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 468.462424][ T8457] RBP: 00007fc8c0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 468.470471][ T8457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.478493][ T8457] R13: 00007fc8c1026038 R14: 00007fc8c1025fa0 R15: 00007ffe34c26f38 [ 468.486520][ T8457] [ 468.489605][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.426791][ T8468] netlink: 'syz.3.576': attribute type 10 has an invalid length. [ 469.451478][ T8468] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 470.629147][ T8485] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8485] [ 471.062073][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 472.398955][ T8500] loop2: detected capacity change from 0 to 512 [ 472.856695][ T8500] EXT4-fs (loop2): Test dummy encryption mode enabled [ 472.863593][ T8500] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 473.082933][ T8500] EXT4-fs (loop2): 1 truncate cleaned up [ 473.090471][ T8500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.934771][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.845786][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 475.263600][ T8527] FAULT_INJECTION: forcing a failure. [ 475.263600][ T8527] name failslab, interval 1, probability 0, space 0, times 0 [ 475.341217][ T8527] CPU: 1 PID: 8527 Comm: syz.2.587 Not tainted syzkaller #0 [ 475.348599][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 475.358710][ T8527] Call Trace: [ 475.362026][ T8527] [ 475.365003][ T8527] dump_stack_lvl+0x18c/0x250 [ 475.369742][ T8527] ? show_regs_print_info+0x20/0x20 [ 475.374993][ T8527] ? load_image+0x420/0x420 [ 475.379556][ T8527] ? __might_sleep+0xe0/0xe0 [ 475.384210][ T8527] ? __lock_acquire+0x7d80/0x7d80 [ 475.389299][ T8527] should_fail_ex+0x394/0x4c0 [ 475.394039][ T8527] should_failslab+0x9/0x20 [ 475.398597][ T8527] slab_pre_alloc_hook+0x59/0x300 [ 475.403686][ T8527] kmem_cache_alloc+0x5a/0x2c0 [ 475.408511][ T8527] ? ceph_msg_new2+0x3a/0x490 [ 475.413254][ T8527] ceph_msg_new2+0x3a/0x490 [ 475.417803][ T8527] ? mempool_init_node+0x12f/0x480 [ 475.422983][ T8527] msgpool_alloc+0x80/0x1b0 [ 475.427539][ T8527] ? ceph_msgpool_init+0x180/0x180 [ 475.432708][ T8527] mempool_init_node+0x1e9/0x480 [ 475.437717][ T8527] ? msgpool_alloc+0x1b0/0x1b0 [ 475.442529][ T8527] ? ceph_msgpool_init+0x180/0x180 [ 475.447689][ T8527] mempool_create+0x81/0xc0 [ 475.452251][ T8527] ceph_msgpool_init+0xa7/0x180 [ 475.457156][ T8527] ceph_osdc_init+0x54f/0x8c0 [ 475.461900][ T8527] ceph_create_client+0x246/0x300 [ 475.467000][ T8527] ceph_get_tree+0x1ca/0x1800 [ 475.471739][ T8527] ? bpf_lsm_capable+0x9/0x10 [ 475.476455][ T8527] ? security_capable+0x89/0xb0 [ 475.481362][ T8527] vfs_get_tree+0x8c/0x280 [ 475.485838][ T8527] vfs_cmd_create+0xe3/0x230 [ 475.490493][ T8527] __se_sys_fsconfig+0x70a/0x850 [ 475.495494][ T8527] ? __x64_sys_fsconfig+0xc0/0xc0 [ 475.500583][ T8527] ? lockdep_hardirqs_on+0x98/0x150 [ 475.505832][ T8527] ? __x64_sys_fsconfig+0x20/0xc0 [ 475.510919][ T8527] do_syscall_64+0x55/0xb0 [ 475.515390][ T8527] ? clear_bhb_loop+0x40/0x90 [ 475.520115][ T8527] ? clear_bhb_loop+0x40/0x90 [ 475.524834][ T8527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.530790][ T8527] RIP: 0033:0x7fc8c0d9e159 [ 475.535264][ T8527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.554933][ T8527] RSP: 002b:00007fc8c1c5a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 475.563407][ T8527] RAX: ffffffffffffffda RBX: 00007fc8c1025fa0 RCX: 00007fc8c0d9e159 [ 475.571428][ T8527] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 475.579454][ T8527] RBP: 00007fc8c0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 475.587476][ T8527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.595502][ T8527] R13: 00007fc8c1026038 R14: 00007fc8c1025fa0 R15: 00007ffe34c26f38 [ 475.603544][ T8527] [ 475.617095][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 475.666782][ T9] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 476.221196][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.229384][ T9] usb 5-1: Product: syz [ 476.233665][ T9] usb 5-1: Manufacturer: syz [ 476.238309][ T9] usb 5-1: SerialNumber: syz [ 481.346995][ T9] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 481.367879][ T9] usb 5-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 481.375256][ T9] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 481.420285][ T9] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 482.394385][ T5810] usb 5-1: USB disconnect, device number 3 [ 482.539747][ T8581] ceph: No mds server is up or the cluster is laggy [ 489.438399][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 491.019634][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 491.059211][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 491.091917][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.129916][ T9] usb 3-1: Product: syz [ 491.148810][ T9] usb 3-1: Manufacturer: syz [ 491.164930][ T9] usb 3-1: SerialNumber: syz [ 491.213878][ T9] usb 3-1: can't set config #1, error -71 [ 493.251366][ T9] usb 3-1: USB disconnect, device number 8 [ 494.236690][ T8684] loop4: detected capacity change from 0 to 512 [ 494.666559][ T8684] EXT4-fs (loop4): Test dummy encryption mode enabled [ 494.673582][ T8684] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 494.745023][ T8684] EXT4-fs (loop4): 1 truncate cleaned up [ 494.759361][ T8684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.074064][ T7814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.244373][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 498.352456][ T8711] tipc: Enabled bearer , priority 0 [ 498.440915][ T8715] loop4: detected capacity change from 0 to 512 [ 498.496840][ T8715] EXT4-fs (loop4): Test dummy encryption mode enabled [ 498.503983][ T8715] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 498.753342][ T8715] EXT4-fs (loop4): 1 truncate cleaned up [ 498.766057][ T8715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.943430][ T8711] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 499.052814][ T8711] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 499.070777][ T8711] tipc: Resetting bearer [ 499.189121][ T8710] tipc: Disabling bearer [ 499.315386][ T7814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.514098][ T8736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.625'. [ 500.885576][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.892758][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.367036][ T8769] loop2: detected capacity change from 0 to 512 [ 506.259748][ T8769] EXT4-fs (loop2): Test dummy encryption mode enabled [ 506.266715][ T8769] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 506.335451][ T8769] EXT4-fs (loop2): 1 truncate cleaned up [ 506.342939][ T8769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.698775][ T8778] sd 0:0:1:0: PR command failed: 1026 [ 506.704392][ T8778] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 506.711359][ T8778] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 506.832001][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.726530][ T8820] netlink: 'syz.0.639': attribute type 10 has an invalid length. [ 511.906075][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.913506][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.214386][ T8820] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.221729][ T8820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.229432][ T8820] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.236706][ T8820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.442489][ T8830] loop2: detected capacity change from 0 to 512 [ 512.474629][ T8830] EXT4-fs (loop2): Test dummy encryption mode enabled [ 512.481533][ T8830] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 513.008027][ T8820] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 513.115615][ T8830] EXT4-fs (loop2): 1 truncate cleaned up [ 513.122911][ T8830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.194280][ T8822] netlink: 'syz.0.639': attribute type 10 has an invalid length. [ 513.417865][ T8822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.491549][ T8822] team0: Port device bond0 added [ 513.917818][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.015528][ T28] audit: type=1326 audit(1792026830.133:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.4.642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b2499e159 code=0x0 [ 523.406863][ T8486] Bluetooth: hci4: command 0x0406 tx timeout [ 528.523127][ T8918] loop2: detected capacity change from 0 to 512 [ 528.562096][ T8918] EXT4-fs (loop2): Test dummy encryption mode enabled [ 528.569137][ T8918] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 528.624443][ T8918] EXT4-fs (loop2): 1 truncate cleaned up [ 528.631705][ T8918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.004712][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.294216][ T8943] FAULT_INJECTION: forcing a failure. [ 532.294216][ T8943] name fail_futex, interval 1, probability 0, space 0, times 0 [ 532.308189][ T8943] CPU: 0 PID: 8943 Comm: syz.4.665 Not tainted syzkaller #0 [ 532.315529][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 532.325629][ T8943] Call Trace: [ 532.328954][ T8943] [ 532.331950][ T8943] dump_stack_lvl+0x18c/0x250 [ 532.336722][ T8943] ? show_regs_print_info+0x20/0x20 [ 532.341988][ T8943] ? load_image+0x420/0x420 [ 532.346575][ T8943] ? asan.module_dtor+0x20/0x20 [ 532.351503][ T8943] should_fail_ex+0x394/0x4c0 [ 532.356258][ T8943] get_futex_key+0x136/0x1030 [ 532.361105][ T8943] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 532.367156][ T8943] ? futex_setup_timer+0xc0/0xc0 [ 532.372146][ T8943] ? lock_chain_count+0x20/0x20 [ 532.377063][ T8943] futex_wake+0x127/0x4f0 [ 532.381453][ T8943] ? lockdep_hardirqs_on+0x98/0x150 [ 532.386714][ T8943] ? futex_wake_mark+0x150/0x150 [ 532.391710][ T8943] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 532.397393][ T8943] ? __mutex_unlock_slowpath+0x1c2/0x6c0 [ 532.403086][ T8943] do_futex+0x35d/0x3e0 [ 532.407293][ T8943] ? bpf_lsm_capable+0x9/0x10 [ 532.412015][ T8943] ? __ia32_sys_get_robust_list+0x110/0x110 [ 532.417964][ T8943] __se_sys_futex+0x3a9/0x440 [ 532.422697][ T8943] ? __x64_sys_fsconfig+0xc0/0xc0 [ 532.427797][ T8943] ? __x64_sys_futex+0xf0/0xf0 [ 532.432614][ T8943] ? __x64_sys_futex+0x21/0xf0 [ 532.437421][ T8943] do_syscall_64+0x55/0xb0 [ 532.441883][ T8943] ? clear_bhb_loop+0x40/0x90 [ 532.446607][ T8943] ? clear_bhb_loop+0x40/0x90 [ 532.451342][ T8943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.457298][ T8943] RIP: 0033:0x7f4b2499e159 [ 532.461794][ T8943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.481469][ T8943] RSP: 002b:00007f4b258a00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 532.489938][ T8943] RAX: ffffffffffffffda RBX: 00007f4b24c26188 RCX: 00007f4b2499e159 [ 532.497952][ T8943] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4b24c2618c [ 532.505976][ T8943] RBP: 00007f4b24c26180 R08: 00000000007475d4 R09: 0000000000000000 [ 532.513994][ T8943] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 532.522010][ T8943] R13: 00007f4b24c26218 R14: 00007fffc1e24510 R15: 00007fffc1e245f8 [ 532.530043][ T8943] [ 535.628749][ T8959] wlan0 speed is unknown, defaulting to 1000 [ 539.343221][ T8975] netlink: 'syz.4.674': attribute type 1 has an invalid length. [ 539.358305][ T8975] netlink: 'syz.4.674': attribute type 2 has an invalid length. [ 539.402485][ T8975] tipc: Started in network mode [ 539.420693][ T8975] tipc: Node identity ac14140f, cluster identity 4711 [ 539.428582][ T8975] tipc: New replicast peer: 255.255.255.255 [ 539.451481][ T8975] tipc: Enabled bearer , priority 10 [ 540.569123][ T789] tipc: Node number set to 2886997007 [ 541.080610][ T8988] Console: switching to colour VGA+ 80x25 [ 541.522510][ T8988] Console: switching to colour frame buffer device 128x48 [ 543.535829][ T9013] loop2: detected capacity change from 0 to 512 [ 544.273653][ T9013] EXT4-fs (loop2): Test dummy encryption mode enabled [ 544.280972][ T9013] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 544.328450][ T9013] EXT4-fs (loop2): 1 truncate cleaned up [ 544.335378][ T9013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.881268][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.139994][ T9041] loop2: detected capacity change from 0 to 512 [ 547.557982][ T9041] EXT4-fs (loop2): Test dummy encryption mode enabled [ 547.564962][ T9041] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 547.609456][ T9041] EXT4-fs (loop2): 1 truncate cleaned up [ 547.616909][ T9041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.205426][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.802008][ T9108] sd 0:0:1:0: PR command failed: 1026 [ 557.807958][ T9108] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 557.814750][ T9108] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 559.008296][ T9117] loop4: detected capacity change from 0 to 512 [ 559.092459][ T9117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.795135][ T7814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.569246][ T9131] loop4: detected capacity change from 0 to 512 [ 560.972953][ T9131] EXT4-fs (loop4): Test dummy encryption mode enabled [ 560.980061][ T9131] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 561.209279][ T9131] EXT4-fs (loop4): 1 truncate cleaned up [ 561.216451][ T9131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.978939][ T7814] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.386037][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.392507][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.515279][ T9153] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 562.524890][ T9153] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 562.536100][ T9152] sd 0:0:1:0: PR command failed: 1026 [ 562.541590][ T9152] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 562.548425][ T9152] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 563.156181][ T9149] loop4: detected capacity change from 0 to 256 [ 563.281718][ T9149] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 563.338329][ T9149] bio_check_eod: 2 callbacks suppressed [ 563.338350][ T9149] syz.4.719: attempt to access beyond end of device [ 563.338350][ T9149] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 563.493893][ T9160] loop2: detected capacity change from 0 to 1024 [ 565.326284][ T9149] syz.4.719: attempt to access beyond end of device [ 565.326284][ T9149] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 565.385767][ T28] audit: type=1800 audit(1792026876.510:6): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.719" name="file1" dev="loop4" ino=1048631 res=0 errno=0 [ 568.002805][ T9185] sd 0:0:1:0: PR command failed: 1026 [ 568.009234][ T9185] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 568.015986][ T9185] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 575.618367][ T9226] sd 0:0:1:0: PR command failed: 1026 [ 575.624477][ T9226] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 575.631369][ T9226] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 577.483410][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 577.526728][ T9241] loop2: detected capacity change from 0 to 256 [ 577.781692][ T9241] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 583.886332][ T9287] loop4: detected capacity change from 0 to 1024 [ 584.280433][ T9289] Console: switching to colour VGA+ 80x25 [ 584.488656][ T9289] Console: switching to colour frame buffer device 128x48 [ 586.819112][ T9312] CIFS: Attempting to mount //127.0.0.1/share [ 587.527896][ T9312] CIFS: VFS: Error connecting to socket. Aborting operation. [ 587.545435][ T9312] CIFS: VFS: cifs_mount failed w/return code = -4 [ 591.157670][ T9339] loop2: detected capacity change from 0 to 2048 [ 591.231135][ T9339] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 596.311780][ T9377] netlink: 'syz.2.782': attribute type 10 has an invalid length. [ 596.502265][ T9381] netlink: 'syz.2.782': attribute type 10 has an invalid length. [ 596.660495][ T9381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.849344][ T9381] team0: Device bond0 is of different type [ 600.284433][ T9420] dlm: Unknown command passed to DLM device : 3 [ 600.284433][ T9420] [ 602.176779][ T789] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 602.399201][ T789] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 602.419997][ T789] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 602.435454][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.558609][ T789] usb 5-1: Product: syz [ 602.562881][ T789] usb 5-1: Manufacturer: syz [ 603.007357][ T789] usb 5-1: SerialNumber: syz [ 604.376453][ T789] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 604.384975][ T789] usb 5-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 604.422249][ T789] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 604.481505][ T789] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 604.845449][ T9455] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 604.855534][ T9455] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 605.072486][ T789] usb 5-1: USB disconnect, device number 4 [ 605.320305][ T9434] udevd[9434]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.351321][ T5810] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 611.700098][ T5810] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 612.132375][ T5810] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 612.170695][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.178771][ T5810] usb 1-1: Product: syz [ 612.210789][ T5810] usb 1-1: Manufacturer: syz [ 612.225779][ T5810] usb 1-1: SerialNumber: syz [ 613.705656][ T5810] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 613.733479][ T5810] usb 1-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 613.752647][ T5810] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 613.781074][ T5810] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 613.869833][ T5810] usb 1-1: USB disconnect, device number 10 [ 614.489838][ T9520] loop2: detected capacity change from 0 to 8192 [ 614.799139][ T9520] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 614.812883][ T9520] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 614.823144][ T9520] REISERFS (device loop2): using ordered data mode [ 614.829841][ T9520] reiserfs: using flush barriers [ 614.855564][ T9520] REISERFS warning (device loop2): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 615.063374][ T9523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.814'. [ 615.614879][ T9515] udevd[9515]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.292750][ T9580] FAULT_INJECTION: forcing a failure. [ 623.292750][ T9580] name failslab, interval 1, probability 0, space 0, times 0 [ 623.347782][ T9580] CPU: 0 PID: 9580 Comm: syz.2.831 Not tainted syzkaller #0 [ 623.355168][ T9580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 623.365303][ T9580] Call Trace: [ 623.368637][ T9580] [ 623.371615][ T9580] dump_stack_lvl+0x18c/0x250 [ 623.376386][ T9580] ? show_regs_print_info+0x20/0x20 [ 623.381654][ T9580] ? load_image+0x420/0x420 [ 623.386221][ T9580] ? __might_sleep+0xe0/0xe0 [ 623.390850][ T9580] ? __lock_acquire+0x7d80/0x7d80 [ 623.395898][ T9580] should_fail_ex+0x394/0x4c0 [ 623.400624][ T9580] should_failslab+0x9/0x20 [ 623.405152][ T9580] slab_pre_alloc_hook+0x59/0x300 [ 623.410211][ T9580] kmem_cache_alloc+0x5a/0x2c0 [ 623.414996][ T9580] ? ceph_msg_new2+0x3a/0x490 [ 623.419700][ T9580] ceph_msg_new2+0x3a/0x490 [ 623.424244][ T9580] ? mempool_init_node+0x12f/0x480 [ 623.429405][ T9580] msgpool_alloc+0x80/0x1b0 [ 623.433939][ T9580] ? ceph_msgpool_init+0x180/0x180 [ 623.439080][ T9580] mempool_init_node+0x1e9/0x480 [ 623.444060][ T9580] ? msgpool_alloc+0x1b0/0x1b0 [ 623.448901][ T9580] ? ceph_msgpool_init+0x180/0x180 [ 623.454041][ T9580] mempool_create+0x81/0xc0 [ 623.458580][ T9580] ceph_msgpool_init+0xa7/0x180 [ 623.463460][ T9580] ceph_osdc_init+0x54f/0x8c0 [ 623.468193][ T9580] ceph_create_client+0x246/0x300 [ 623.473261][ T9580] ceph_get_tree+0x1ca/0x1800 [ 623.477980][ T9580] ? bpf_lsm_capable+0x9/0x10 [ 623.482681][ T9580] ? security_capable+0x89/0xb0 [ 623.487562][ T9580] vfs_get_tree+0x8c/0x280 [ 623.492007][ T9580] vfs_cmd_create+0xe3/0x230 [ 623.496637][ T9580] __se_sys_fsconfig+0x70a/0x850 [ 623.501628][ T9580] ? __x64_sys_fsconfig+0xc0/0xc0 [ 623.506716][ T9580] ? lockdep_hardirqs_on+0x98/0x150 [ 623.511948][ T9580] ? __x64_sys_fsconfig+0x20/0xc0 [ 623.517004][ T9580] do_syscall_64+0x55/0xb0 [ 623.521445][ T9580] ? clear_bhb_loop+0x40/0x90 [ 623.526152][ T9580] ? clear_bhb_loop+0x40/0x90 [ 623.530890][ T9580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.536836][ T9580] RIP: 0033:0x7fc8c0d9e159 [ 623.541295][ T9580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.560930][ T9580] RSP: 002b:00007fc8c1c5a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 623.569374][ T9580] RAX: ffffffffffffffda RBX: 00007fc8c1025fa0 RCX: 00007fc8c0d9e159 [ 623.577384][ T9580] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 623.585392][ T9580] RBP: 00007fc8c0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 623.593406][ T9580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.601400][ T9580] R13: 00007fc8c1026038 R14: 00007fc8c1025fa0 R15: 00007ffe34c26f38 [ 623.609412][ T9580] [ 623.735182][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.741561][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.972780][ T9587] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 623.982260][ T9587] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 629.378551][ T9623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.842'. [ 630.735606][ T9627] xt_TCPMSS: Only works on TCP SYN packets [ 631.289123][ T789] IPVS: starting estimator thread 0... [ 631.999316][ T9633] IPVS: using max 19 ests per chain, 45600 per kthread [ 632.843915][ T9636] ceph: No mds server is up or the cluster is laggy [ 634.942141][ T9670] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 634.951503][ T9670] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 643.961632][ T9744] CIFS: Attempting to mount //127.0.0.1/share [ 644.258384][ T9744] CIFS: VFS: Error connecting to socket. Aborting operation. [ 644.278828][ T9744] CIFS: VFS: cifs_mount failed w/return code = -4 [ 645.640291][ T9761] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7814] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9761] [ 648.227737][ T9786] netlink: 76 bytes leftover after parsing attributes in process `syz.4.884'. [ 648.328054][ T9783] overlayfs: failed to clone upperpath [ 648.565736][ T9788] loop2: detected capacity change from 0 to 1024 [ 648.728419][ T9788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.272828][ T28] audit: type=1800 audit(1792026960.381:7): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.885" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 649.588566][ T28] audit: type=1800 audit(1792026960.401:8): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.885" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 649.753135][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.009523][ T9805] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 652.859780][ T9837] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9837] [ 652.889088][ T51] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 654.926900][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 655.541538][ T9854] loop2: detected capacity change from 0 to 164 [ 659.041122][ T9882] af_packet: tpacket_rcv: packet too big, clamped from 324 to 4294967272. macoff=96 [ 660.740218][ T9900] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9900] [ 660.817125][ T9899] loop2: detected capacity change from 0 to 512 [ 661.156462][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 661.716949][ T9899] EXT4-fs (loop2): Test dummy encryption mode enabled [ 661.723938][ T9899] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 661.794367][ T9899] EXT4-fs (loop2): 1 truncate cleaned up [ 661.801457][ T9899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.935803][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.069942][ T9946] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9946] [ 669.119601][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 669.748375][ T9948] loop2: detected capacity change from 0 to 512 [ 669.757177][ T9948] EXT4-fs (loop2): Test dummy encryption mode enabled [ 669.764149][ T9948] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 669.791961][ T9948] EXT4-fs (loop2): 1 truncate cleaned up [ 669.799385][ T9948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.572523][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.323608][ T9980] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 672.332617][ T9980] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 679.137785][T10022] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 679.146893][T10022] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 685.111811][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.118278][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.942464][T10091] Illegal XDP return value 4294967294 on prog (id 38) dev N/A, expect packet loss! [ 688.022103][T10099] futex_wake_op: syz.2.964 tries to shift op by 144; fix this program [ 688.041397][T10099] loop2: detected capacity change from 0 to 256 [ 688.152192][T10099] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 688.186139][ T28] audit: type=1800 audit(1792026999.412:9): pid=10099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.964" name="file1" dev="loop2" ino=1048651 res=0 errno=0 [ 688.276841][T10099] syz.2.964: attempt to access beyond end of device [ 688.276841][T10099] loop2: rw=0, sector=256, nr_sectors = 8 limit=256 [ 690.610114][T10127] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 690.620315][T10127] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 690.633638][T10122] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5779] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10122] [ 690.805042][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 692.680089][T10148] futex_wake_op: syz.0.977 tries to shift op by 144; fix this program [ 697.136980][T10178] Bluetooth: ISO socket layer initialized [ 699.871836][T10196] netlink: 'syz.3.993': attribute type 49 has an invalid length. [ 700.653030][T10212] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 700.662166][T10212] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 706.057553][T10272] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 706.067581][T10272] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 707.516645][T10283] loop2: detected capacity change from 0 to 512 [ 707.563844][T10283] EXT4-fs: inline encryption not supported [ 707.593239][T10283] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 707.651778][T10283] EXT4-fs (loop2): Invalid default hash set in the superblock [ 708.475702][T10294] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 708.484773][T10294] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 708.682016][T10203] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 708.950765][T10298] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 710.907708][T10316] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 710.916991][T10316] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 712.994461][ T6780] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 713.758768][ T6780] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 713.795662][ T6780] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 713.820396][ T6780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.841293][ T6780] usb 3-1: Product: syz [ 713.855126][ T6780] usb 3-1: Manufacturer: syz [ 713.866645][ T6780] usb 3-1: SerialNumber: syz [ 715.170281][ T6780] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 715.188020][ T6780] usb 3-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 715.262661][ T6780] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 715.280778][ T6780] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 715.307121][ T6780] usb 3-1: USB disconnect, device number 9 [ 715.388267][T10203] udevd[10203]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.411322][T10358] loop2: detected capacity change from 0 to 128 [ 715.756512][T10358] EXT4-fs (loop2): Test dummy encryption mode enabled [ 716.206279][T10358] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 716.332944][T10358] ext4 filesystem being mounted at /244/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 716.811620][T10377] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 716.821413][T10377] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 718.321844][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 722.768894][T10418] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 722.778241][T10418] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 724.305734][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 724.317068][T10435] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1044'. [ 724.326172][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1044'. [ 724.335787][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 727.223409][T10465] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 727.232753][T10465] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 729.467293][ T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 729.674430][ T27] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 729.720334][ T27] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 729.747062][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.766832][ T27] usb 3-1: Product: syz [ 729.771222][ T27] usb 3-1: Manufacturer: syz [ 729.775859][ T27] usb 3-1: SerialNumber: syz [ 732.669084][ T27] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 732.679056][ T27] usb 3-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 732.687011][ T27] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 732.709333][ T27] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 732.783170][ T27] usb 3-1: USB disconnect, device number 10 [ 733.930588][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 734.869642][T10522] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 734.879406][T10522] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 735.298771][T10483] udevd[10483]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.401566][T10529] capability: warning: `syz.4.1064' uses deprecated v2 capabilities in a way that may be insecure [ 737.256048][T10546] loop2: detected capacity change from 0 to 512 [ 737.313222][T10546] EXT4-fs (loop2): Test dummy encryption mode enabled [ 737.320069][T10546] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 737.469795][T10546] EXT4-fs (loop2): 1 truncate cleaned up [ 737.477032][T10546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.722326][ T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 738.924657][ T27] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 738.952346][ T27] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 738.998882][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.033298][ T27] usb 1-1: Product: syz [ 739.037551][ T27] usb 1-1: Manufacturer: syz [ 739.063308][T10568] netlink: 'syz.3.1074': attribute type 10 has an invalid length. [ 739.078776][ T27] usb 1-1: SerialNumber: syz [ 740.628510][ T27] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 740.637372][ T27] usb 1-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 740.645238][ T27] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 740.652496][ T27] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 740.731663][T10587] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 740.740950][T10587] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 741.452674][ T27] usb 1-1: USB disconnect, device number 11 [ 742.084491][T10520] udevd[10520]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 742.825024][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 742.835122][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 742.842581][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 742.852677][ T51] Workqueue: hci4 hci_rx_work [ 742.857410][ T51] Call Trace: [ 742.860731][ T51] [ 742.863700][ T51] dump_stack_lvl+0x18c/0x250 [ 742.868432][ T51] ? show_regs_print_info+0x20/0x20 [ 742.873696][ T51] ? load_image+0x420/0x420 [ 742.878376][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 742.883528][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 742.888599][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 742.893339][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 742.898598][ T51] kobject_add_internal+0x617/0xc90 [ 742.903859][ T51] kobject_add+0x164/0x240 [ 742.908327][ T51] ? preempt_schedule_thunk+0x1a/0x30 [ 742.913784][ T51] ? kobject_init+0x1d0/0x1d0 [ 742.918516][ T51] ? get_device_parent+0x366/0x390 [ 742.923711][ T51] device_add+0x3fa/0xc40 [ 742.928102][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 742.933128][ T51] le_conn_complete_evt+0xe9a/0x1480 [ 742.938496][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 742.944795][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 742.950506][ T51] ? mutex_unlock+0x10/0x10 [ 742.955057][ T51] ? skb_pull_data+0xf0/0x1f0 [ 742.959787][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 742.965394][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 742.971515][ T51] hci_event_packet+0x7b4/0x1280 [ 742.976505][ T51] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 742.982201][ T51] ? bis_list+0x290/0x290 [ 742.986603][ T51] ? kcov_remote_start+0x1b7/0x810 [ 742.991790][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 742.997060][ T51] hci_rx_work+0x43a/0xd60 [ 743.001524][ T51] ? process_scheduled_works+0x975/0x1600 [ 743.007282][ T51] process_scheduled_works+0xa60/0x1600 [ 743.012892][ T51] ? worker_attach_to_pool+0x370/0x370 [ 743.018398][ T51] ? assign_work+0x3cc/0x5d0 [ 743.023036][ T51] worker_thread+0xa5e/0xfe0 [ 743.027683][ T51] kthread+0x2fa/0x390 [ 743.031774][ T51] ? pr_cont_work+0x550/0x550 [ 743.036482][ T51] ? kthread_blkcg+0xd0/0xd0 [ 743.041102][ T51] ret_from_fork+0x48/0x80 [ 743.045548][ T51] ? kthread_blkcg+0xd0/0xd0 [ 743.050165][ T51] ret_from_fork_asm+0x11/0x20 [ 743.054968][ T51] [ 743.127890][ T51] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 743.142787][ T51] Bluetooth: hci4: failed to register connection device [ 743.216735][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.205610][T10611] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 744.603249][T10618] device-mapper: table: 248:1: multipath: not enough priority group arguments (-EINVAL) [ 744.613873][T10618] device-mapper: ioctl: error adding target to table [ 746.372013][T10633] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 746.381621][T10633] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 746.849054][T10635] sd 0:0:1:0: PR command failed: 1026 [ 746.854610][T10635] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 746.861453][T10635] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 746.878594][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.884973][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.219679][T10652] loop2: detected capacity change from 0 to 512 [ 748.241697][T10652] EXT4-fs (loop2): Test dummy encryption mode enabled [ 748.248616][T10652] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 748.300677][T10652] EXT4-fs (loop2): 1 truncate cleaned up [ 748.308141][T10652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 751.810467][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.826469][T10691] sd 0:0:1:0: PR command failed: 1026 [ 753.832156][T10691] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 753.839163][T10691] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 756.298631][ T28] audit: type=1326 audit(1792027067.347:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10707 comm="syz.2.1105" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8c0d9e159 code=0x0 [ 757.349545][ T5810] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 757.547030][ T5810] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 757.584436][ T5810] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 757.614254][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.665927][ T5810] usb 1-1: Product: syz [ 757.670175][ T5810] usb 1-1: Manufacturer: syz [ 757.722501][ T5810] usb 1-1: SerialNumber: syz [ 757.812702][ T5810] usb 1-1: can't set config #1, error -71 [ 757.824791][ T5810] usb 1-1: USB disconnect, device number 12 [ 758.620539][T10726] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 758.629727][T10726] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 759.043952][T10728] loop2: detected capacity change from 0 to 512 [ 759.072042][T10728] EXT4-fs (loop2): Test dummy encryption mode enabled [ 759.078901][T10728] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 759.138771][T10728] EXT4-fs (loop2): 1 truncate cleaned up [ 759.146169][T10728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.913006][T10737] netlink: 'syz.4.1111': attribute type 10 has an invalid length. [ 759.981954][T10737] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.990112][T10737] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.036817][T10737] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.044162][T10737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.053269][T10737] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.060517][T10737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.107316][T10737] bond0: (slave bridge0): Enslaving as an active interface with an up link Stopping sshd: [ 762.820263][T10776] sd 0:0:1:0: PR command failed: 1026 [ 762.825751][T10776] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 762.832568][T10776] sd 0:0:1:0: Add. Sense: Invalid command operation code stopped /usr/sbin/sshd (pid 5527) OK [ 763.823018][T10785] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 763.832496][T10785] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 764.649178][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. Stopping crond: stopped /usr/sbin/crond (pid 5512) OK Stopping dhcpcd... [ 766.141816][ T51] Bluetooth: hci1: command 0x0c1a tx timeout stopped /sbin/dhcpcd (pid 5434) [ 766.908192][ T789] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 767.111627][ T789] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 767.383336][ T789] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 767.423576][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.442125][ T789] usb 3-1: Product: syz Stopping network: [ 767.456773][ T789] usb 3-1: Manufacturer: syz [ 767.462907][ T789] usb 3-1: SerialNumber: syz [ 769.393492][ T789] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 769.416632][ T789] usb 3-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 769.425559][ T789] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 769.447179][ T789] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 769.522040][ T789] usb 3-1: USB disconnect, device number 11 [ 769.656071][T10520] udevd[10520]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.934259][T10843] sd 0:0:1:0: PR command failed: 1026 [ 770.939806][T10843] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 770.946620][T10843] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 772.250560][ T28] audit: type=1800 audit(1792027083.495:11): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1133" name="UDC" dev="configfs" ino=22339 res=0 errno=0 OK [ 774.019822][ T28] audit: type=1326 audit(1792027085.296:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10864 comm="syz.0.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bbbf9e159 code=0x0 Stopping iptables: [ 775.383560][ T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd OK [ 775.605890][ T27] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 775.640899][ T27] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 Stopping system message bus: [ 775.673390][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.681487][ T27] usb 3-1: Product: syz [ 775.703429][ T27] usb 3-1: Manufacturer: syz [ 775.713396][ T27] usb 3-1: SerialNumber: syz done [ 777.485347][ T27] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 777.512794][ T27] usb 3-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 777.520192][ T27] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 777.543999][ T27] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 777.625189][ T27] usb 3-1: USB disconnect, device number 12 Stopping klogd: [ 782.705268][ T27] IPVS: starting estimator thread 0... [ 782.800678][T10937] IPVS: using max 19 ests per chain, 45600 per kthread serialport: VM disconnected.