last executing test programs: 2m3.748492401s ago: executing program 1 (id=407): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x300884c, &(0x7f0000000240)={[{@debug}]}, 0x3, 0x515, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x2141, 0x59) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 2m3.292559311s ago: executing program 1 (id=413): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008680)=""/5, 0x5}, 0x8000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m2.92755193s ago: executing program 1 (id=416): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x40106185, &(0x7f0000000000)) 2m1.248914239s ago: executing program 1 (id=423): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x126) 2m1.012793535s ago: executing program 1 (id=424): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2821ab78a5f3d6b6", "06968e081f6e5ed4cc03ec1d7bc183f0", '\x00', "ac4f47a4e0f276d4"}, 0x28) 1m59.93680908s ago: executing program 1 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r3, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r3, @ANYBLOB="0800020001"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 1m59.769030634s ago: executing program 32 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r3, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r3, @ANYBLOB="0800020001"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 1m35.071661481s ago: executing program 4 (id=610): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 1m34.65674197s ago: executing program 4 (id=613): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) setuid(0xee00) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x20000000, 0x327, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) 1m33.657344874s ago: executing program 4 (id=616): mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) recvmmsg$unix(r2, &(0x7f0000005280), 0x400018e, 0x10040, 0x0) 1m32.635867427s ago: executing program 4 (id=624): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="61636c2c6e6f61636c2c6e6f61636c2c757365725f78617474722c6e6f757365725f78617474722c63616368655f73747261746567793d7265616461686561642c00fecc7fc2093271a7673d5b886b1fe81e2b7fbafb139d20c1e055e58cdda20264d746e65e4e180fc9adfb6132b24173b3cb1a8a51955fcb93d089261e9aafbb8f8fa1db5d78bc"], 0x1, 0x192, &(0x7f0000000540)="$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") execve(&(0x7f0000000100)='./file2\x00', 0x0, 0x0) 1m31.66468998s ago: executing program 4 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./pipe\x00', 0xff) mount(0x0, &(0x7f0000000300)='./pipe\x00', &(0x7f0000000400)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0xb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) 1m31.2090156s ago: executing program 4 (id=641): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0x42) 1m30.891784298s ago: executing program 33 (id=641): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0x42) 38.9722928s ago: executing program 0 (id=1053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x10}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_COMMENT={0x9, 0x13, 'test\x00'}]}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 38.604192639s ago: executing program 0 (id=1056): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @mcast2, 0x1}, 0x1c) 38.410379104s ago: executing program 0 (id=1060): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0, 0x4040}, 0x40441d4) bind$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) recvmsg(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffe7f, 0x0}, 0x62) 38.203983978s ago: executing program 0 (id=1062): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 37.887089486s ago: executing program 0 (id=1065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1e5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040001, &(0x7f0000000140)={0xa, 0x2, 0xffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}, 0x1c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 37.556884233s ago: executing program 0 (id=1067): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2000000c}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) 37.146109203s ago: executing program 34 (id=1067): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2000000c}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) 19.325973189s ago: executing program 6 (id=1239): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) mlockall(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 16.617448472s ago: executing program 6 (id=1271): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x5, 0x2, &(0x7f0000000080)={0x11, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 14.288528917s ago: executing program 6 (id=1287): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff), &(0x7f0000000000)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000008, 0x13, r0, 0x80000000) 13.877516706s ago: executing program 6 (id=1294): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") syz_clone(0x11, 0x0, 0xc, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2020c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000840)=""/73, 0x49) getdents(r0, 0xfffffffffffffffd, 0x58) 13.246325651s ago: executing program 6 (id=1302): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000040)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRES32, @ANYRES64=0x0], 0x7, 0x257, &(0x7f0000000540)="$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") 12.604821376s ago: executing program 6 (id=1311): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x10000000}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) write(r0, &(0x7f0000000540)="fb", 0x1) 12.406750931s ago: executing program 35 (id=1311): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x10000000}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) write(r0, &(0x7f0000000540)="fb", 0x1) 6.169971816s ago: executing program 5 (id=1354): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000005, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e20, 0x409, @ipv4={'\x00', '\xff\xff', @local}, 0x80ab}, 0x1c) 5.648694498s ago: executing program 5 (id=1357): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f00000000c0)='\t', 0x1, 0x240058d4, &(0x7f0000000300)={0x11, 0x8100, r1, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) 5.520367281s ago: executing program 5 (id=1358): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000040)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRES32, @ANYRES64=0x0], 0x7, 0x257, &(0x7f0000000540)="$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") 4.72584665s ago: executing program 7 (id=1364): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2000000000000) 4.064429505s ago: executing program 2 (id=1367): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.728940703s ago: executing program 2 (id=1368): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x400) 3.382849141s ago: executing program 3 (id=1370): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0xa7e, r0}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.02214159s ago: executing program 5 (id=1371): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 2.670926108s ago: executing program 7 (id=1372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x1}}], 0x2, 0x0) 2.546289071s ago: executing program 3 (id=1373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) ptrace(0x4208, r0) tkill(r0, 0x12) 2.342759035s ago: executing program 7 (id=1374): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aa", 0xf, 0x40, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.188562489s ago: executing program 3 (id=1375): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0}, 0x67}], 0x1, 0x40000102, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.934835635s ago: executing program 3 (id=1376): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x825, 0x18bd, 0x400000000a000000, 0x3, 0x43, 0x52e6ac5d, 0x2000fff7fffe, 0x9657, 0x5, 0xfc2, 0x8000000000000, 0x5, 0x80000000, 0x80000000000000, 0x919, 0xfffffffffffffffe, 0x85, 0x17, 0x3, 0x100000000, 0x5, 0x600000002, 0xfffffffffffffffc, 0x7, 0xa}) ptrace(0x10, r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1.897166486s ago: executing program 7 (id=1377): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r1, r2, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000340)="10", 0x1, 0x8081, 0x0, 0x0) 1.677939741s ago: executing program 7 (id=1378): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x100000000000000, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 1.527137085s ago: executing program 3 (id=1379): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xb375) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0xff9e) 1.428258627s ago: executing program 5 (id=1380): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', 0x12140c5, &(0x7f0000000580)={[{@fat=@quiet}, {@shortname_mixed}, {@fat=@sys_immutable}, {@utf8no}, {@fat=@nfs}, {@utf8}, {@shortname_win95}, {@utf8no}, {}, {@utf8}, {@numtail}, {@numtail}, {@utf8no}]}, 0x0, 0x2c4, &(0x7f0000002880)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 1.162270643s ago: executing program 3 (id=1381): r0 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r0, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008050}}], 0x1, 0x1) 939.845308ms ago: executing program 5 (id=1382): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdfeffff000000000400000085000000360000001801000020646c3c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r0, r2, 0x25, 0x4, @val=@tracing={0x0, 0x5}}, 0x20) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @empty, @val={@void, {0x8100, 0x6}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0xfffe}}}}}}, 0x0) 816.825641ms ago: executing program 2 (id=1383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) 547.418138ms ago: executing program 2 (id=1384): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x4) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000240)=""/229, 0xe5, 0x40010010, 0x0, 0x0) 344.095532ms ago: executing program 2 (id=1385): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c}]}, @NFT_MSG_DELFLOWTABLE={0x24c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x40000000}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x110, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0xfe45, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x2dc}}, 0x0) 160.624847ms ago: executing program 7 (id=1386): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0x10, 0xfffd, 0xfffffffffffffffb, 0x8001, 0x1bd, 0x1fe, 0x4a, 0x28, 0x0, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 0s ago: executing program 2 (id=1387): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(r0, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) kernel console output (not intermixed with test programs): [ 149.794190][ T4328] device hsr_slave_0 left promiscuous mode [ 149.812372][ T4328] device hsr_slave_1 left promiscuous mode [ 149.825197][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.852043][ T4328] device bridge_slave_1 left promiscuous mode [ 149.874513][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.881285][ T6435] loop3: detected capacity change from 0 to 40427 [ 149.889408][ T4328] device bridge_slave_0 left promiscuous mode [ 149.900214][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.912038][ T6435] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 149.937196][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 149.948122][ T6435] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 149.998212][ T6435] F2FS-fs (loop3): invalid crc value [ 150.072127][ T6435] F2FS-fs (loop3): Found nat_bits in checkpoint [ 150.236109][ T6435] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 150.243266][ T6435] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 150.404450][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 150.925155][ T4283] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.935811][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 150.989200][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 151.038529][ T4288] Bluetooth: hci5: command 0x1003 tx timeout [ 151.045822][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 151.074960][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.114453][ T4283] usb 4-1: Using ep0 maxpacket: 16 [ 151.132922][ T4283] usb 4-1: unable to get BOS descriptor or descriptor too short [ 151.150595][ T4283] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 151.173653][ T4283] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 151.193322][ T4283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.209347][ T4283] usb 4-1: Product: syz [ 151.223886][ T4283] usb 4-1: Manufacturer: syz [ 151.228725][ T4283] usb 4-1: SerialNumber: syz [ 151.292414][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.789952][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 151.789968][ T27] audit: type=1800 audit(159.748:1774): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154426 res=0 errno=0 [ 151.831609][ T27] audit: type=1800 audit(159.788:1775): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154440 res=0 errno=0 [ 151.947157][ T4328] bond0 (unregistering): (slave team0): Releasing backup interface [ 152.040422][ T4328] bond0 (unregistering): Released all slaves [ 152.133772][ T6410] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.141557][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.150327][ T6410] device bridge_slave_1 entered promiscuous mode [ 152.162699][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.668'. [ 152.202364][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'. [ 152.300833][ T6410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.326066][ T6410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.480911][ T6410] team0: Port device team_slave_0 added [ 152.487987][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 152.548587][ T6410] team0: Port device team_slave_1 added [ 152.689163][ T6410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.718560][ T6410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.733574][ T4283] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 152.815540][ T4283] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 152.819255][ T6410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.857631][ T4283] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 152.903194][ T6410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.920192][ T6410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.001803][ T4283] usb 4-1: USB disconnect, device number 4 [ 153.003575][ T27] audit: type=1800 audit(160.958:1776): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154373 res=0 errno=0 [ 153.080606][ T6410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.106712][ T27] audit: type=1800 audit(160.958:1777): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=154416 res=0 errno=0 [ 153.179705][ T27] audit: type=1800 audit(160.958:1778): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=154380 res=0 errno=0 [ 153.229589][ T27] audit: type=1800 audit(160.958:1779): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=154381 res=0 errno=0 [ 153.283430][ T6410] device hsr_slave_0 entered promiscuous mode [ 153.303057][ T6410] device hsr_slave_1 entered promiscuous mode [ 153.314083][ T27] audit: type=1800 audit(160.958:1780): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=154402 res=0 errno=0 [ 153.337478][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.364510][ T27] audit: type=1800 audit(160.958:1781): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=154403 res=0 errno=0 [ 153.392734][ T6410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.404038][ T6410] Cannot create hsr debugfs directory [ 153.473853][ T27] audit: type=1800 audit(160.958:1782): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=154382 res=0 errno=0 [ 153.554804][ T27] audit: type=1800 audit(160.958:1783): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=154404 res=0 errno=0 [ 153.603189][ T6515] loop5: detected capacity change from 0 to 32768 [ 153.775827][ T6515] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 153.829013][ T6515] JBD2: Ignoring recovery information on journal [ 153.981054][ T6515] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 154.023112][ T4299] tipc: Subscription rejected, illegal request [ 154.046789][ T6410] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 154.099887][ T6410] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 154.135893][ T6410] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 154.156191][ T6410] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 154.415193][ T6410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.485038][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.512960][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.540172][ T6410] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.564609][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 154.596663][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.631531][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.668866][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.676070][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.683153][ T5619] ocfs2: Unmounting device (7,5) on (node local) [ 154.706214][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.760103][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.796961][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.831141][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.838356][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.899395][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.937793][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.709160][ T6557] loop5: detected capacity change from 0 to 131072 [ 155.727631][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.740308][ T6557] F2FS-fs (loop5): invalid crc value [ 155.782394][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.814897][ T6557] F2FS-fs (loop5): Found nat_bits in checkpoint [ 155.821291][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.860474][ T6557] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 155.877878][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.923255][ T6557] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 155.944897][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.995042][ T6410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.036989][ T6410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.072376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.119407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.155251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.174289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.185992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.370356][ T6542] loop0: detected capacity change from 0 to 40427 [ 156.537799][ T6542] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 156.571020][ T6542] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 156.635308][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 156.644795][ T6542] F2FS-fs (loop0): invalid crc value [ 156.765292][ T6542] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 156.938892][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.970925][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.000472][ T6410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.652848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.683690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.714042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.723892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.734782][ T6410] device veth0_vlan entered promiscuous mode [ 157.751248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.759797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.770441][ T6410] device veth1_vlan entered promiscuous mode [ 157.812346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.826819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.842429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.852083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.869409][ T6410] device veth0_macvtap entered promiscuous mode [ 157.887923][ T6410] device veth1_macvtap entered promiscuous mode [ 157.912917][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.926932][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.950547][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.967801][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.978199][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.988932][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.000637][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.013904][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.023266][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.032426][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.043344][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.062246][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.076418][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.104299][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.124342][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.144357][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.164282][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.185723][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.205484][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.225335][ T5411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.254856][ T6410] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.263690][ T6410] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.294403][ T6410] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.303154][ T6410] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.409146][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 158.409158][ T27] audit: type=1800 audit(166.368:1797): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158762 res=0 errno=0 [ 158.447548][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.460222][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.473035][ T27] audit: type=1800 audit(166.418:1798): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158933 res=0 errno=0 [ 158.492658][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.522463][ T5411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.545413][ T5411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.557088][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.746965][ T27] audit: type=1800 audit(166.708:1799): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159104 res=0 errno=0 [ 158.771016][ T6626] xt_hashlimit: size too large, truncated to 1048576 [ 161.002350][ T6688] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 161.010955][ T6691] xt_hashlimit: size too large, truncated to 1048576 [ 161.112878][ T27] audit: type=1800 audit(169.068:1800): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159986 res=0 errno=0 [ 161.169654][ T27] audit: type=1800 audit(169.068:1801): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160001 res=0 errno=0 [ 161.261606][ T4318] infiniband s`z1: ib_query_port failed (-19) [ 161.283258][ T6688] siw: device registration error -19 [ 162.199998][ T6725] FAULT_INJECTION: forcing a failure. [ 162.199998][ T6725] name failslab, interval 1, probability 0, space 0, times 0 [ 162.213379][ T6725] CPU: 1 PID: 6725 Comm: syz.5.694 Not tainted syzkaller #0 [ 162.220664][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.230712][ T6725] Call Trace: [ 162.233983][ T6725] [ 162.236907][ T6725] dump_stack_lvl+0x188/0x24e [ 162.241614][ T6725] ? show_regs_print_info+0x12/0x12 [ 162.246807][ T6725] ? load_image+0x410/0x410 [ 162.251308][ T6725] should_fail_ex+0x390/0x4c0 [ 162.255983][ T6725] should_failslab+0x5/0x20 [ 162.260479][ T6725] slab_pre_alloc_hook+0x59/0x300 [ 162.265492][ T6725] ? netlink_table_grab+0x255/0x2e0 [ 162.270679][ T6725] ? netlink_realloc_groups+0x114/0x270 [ 162.276214][ T6725] __kmem_cache_alloc_node+0x4f/0x270 [ 162.281616][ T6725] ? netlink_realloc_groups+0x114/0x270 [ 162.287155][ T6725] __kmalloc_node_track_caller+0xa0/0x240 [ 162.292867][ T6725] ? apparmor_capable+0x12c/0x190 [ 162.297886][ T6725] krealloc+0x6a/0x100 [ 162.301953][ T6725] netlink_realloc_groups+0x114/0x270 [ 162.307328][ T6725] netlink_setsockopt+0x319/0x700 [ 162.312344][ T6725] ? aa_af_perm+0x340/0x340 [ 162.316839][ T6725] ? netlink_ioctl+0x10/0x10 [ 162.321457][ T6725] ? aa_sock_opt_perm+0x74/0x100 [ 162.326398][ T6725] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 162.331933][ T6725] ? security_socket_setsockopt+0x7a/0xa0 [ 162.337664][ T6725] ? netlink_ioctl+0x10/0x10 [ 162.342267][ T6725] __sys_setsockopt+0x2bf/0x3d0 [ 162.347115][ T6725] __x64_sys_setsockopt+0xb1/0xc0 [ 162.352132][ T6725] do_syscall_64+0x4c/0xa0 [ 162.356543][ T6725] ? clear_bhb_loop+0x60/0xb0 [ 162.361213][ T6725] ? clear_bhb_loop+0x60/0xb0 [ 162.365881][ T6725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.371772][ T6725] RIP: 0033:0x7f9e7d19e199 [ 162.376178][ T6725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.395779][ T6725] RSP: 002b:00007f9e7e09d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 162.404184][ T6725] RAX: ffffffffffffffda RBX: 00007f9e7d425fa0 RCX: 00007f9e7d19e199 [ 162.412148][ T6725] RDX: 0000000000000002 RSI: 000000000000010e RDI: 0000000000000003 [ 162.420137][ T6725] RBP: 00007f9e7d235888 R08: 0000000000000004 R09: 0000000000000000 [ 162.428103][ T6725] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.436071][ T6725] R13: 00007f9e7d426038 R14: 00007f9e7d425fa0 R15: 00007fff11651d18 [ 162.444045][ T6725] [ 163.012606][ T27] audit: type=1800 audit(170.968:1802): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160863 res=0 errno=0 [ 163.073029][ T27] audit: type=1800 audit(170.978:1803): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=160867 res=0 errno=0 [ 163.132989][ T27] audit: type=1800 audit(170.988:1804): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160946 res=0 errno=0 [ 163.184305][ T27] audit: type=1800 audit(170.988:1805): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=160950 res=0 errno=0 [ 163.341325][ T6752] loop6: detected capacity change from 0 to 128 [ 163.419069][ T27] audit: type=1800 audit(171.378:1806): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37954 res=0 errno=0 [ 163.475098][ T6752] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 163.667825][ T6410] EXT4-fs (loop6): unmounting filesystem. [ 163.679175][ T27] audit: type=1800 audit(171.638:1807): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161080 res=0 errno=0 [ 164.313562][ T6789] loop5: detected capacity change from 0 to 1024 [ 164.408893][ T6789] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 164.605537][ T27] audit: type=1800 audit(172.558:1808): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161145 res=0 errno=0 [ 164.674297][ T27] audit: type=1800 audit(172.588:1809): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=161149 res=0 errno=0 [ 164.737931][ T5619] EXT4-fs (loop5): unmounting filesystem. [ 164.752354][ T27] audit: type=1800 audit(172.588:1810): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161228 res=0 errno=0 [ 164.834852][ T27] audit: type=1800 audit(172.588:1811): pid=4261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=161232 res=0 errno=0 [ 165.256759][ T27] audit: type=1800 audit(173.218:1812): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=53175 res=0 errno=0 [ 165.313680][ T27] audit: type=1800 audit(173.238:1813): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=53198 res=0 errno=0 [ 165.524471][ T4358] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 165.644365][ T4319] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 165.740631][ T4358] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7 [ 165.766038][ T4358] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 165.800625][ T4358] usb 7-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 165.824051][ T4358] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.836402][ T4319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.853536][ T4358] usb 7-1: Product: syz [ 165.866621][ T4358] usb 7-1: Manufacturer: syz [ 165.874827][ T4319] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.881062][ T4358] usb 7-1: SerialNumber: syz [ 165.915070][ T27] audit: type=1800 audit(173.878:1814): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161323 res=0 errno=0 [ 165.957429][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.983665][ T6838] loop0: detected capacity change from 0 to 2048 [ 166.004299][ T4319] usb 4-1: Product: syz [ 166.019751][ T27] audit: type=1800 audit(173.878:1815): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=161366 res=0 errno=0 [ 166.049586][ T4319] usb 4-1: Manufacturer: syz [ 166.058383][ T4319] usb 4-1: SerialNumber: syz [ 166.190591][ T4358] disable ehci-hcd to run US-144 [ 166.198789][ T4358] disable ehci-hcd to run US-144 [ 166.205967][ T4358] usb 7-1: USB disconnect, device number 2 [ 166.214122][ T6838] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 166.468672][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.882062][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 167.093856][ T4319] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 167.110640][ T4319] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 167.141529][ T4319] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 167.241814][ T6864] netlink: 'syz.2.737': attribute type 10 has an invalid length. [ 167.495787][ T4319] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 167.569350][ T4319] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 167.627258][ T4319] usb 4-1: USB disconnect, device number 5 [ 167.634043][ T4319] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 167.675165][ T4358] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 167.874397][ T4358] usb 7-1: Using ep0 maxpacket: 16 [ 167.881654][ T4358] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.903588][ T6890] loop0: detected capacity change from 0 to 1024 [ 167.932995][ T4358] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.963677][ T4358] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 167.983951][ T6890] hfsplus: keylen 65060 too large [ 167.991999][ T6890] hfsplus: xattr search failed [ 168.002566][ T4358] usb 7-1: config 0 interface 0 has no altsetting 0 [ 168.022416][ T4358] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 168.026685][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.5.747'. [ 168.059542][ T4358] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.098546][ T4358] usb 7-1: config 0 descriptor?? [ 168.528703][ T4358] hid (null): invalid report_size 62792 [ 168.547095][ T4358] hid (null): unknown global tag 0xc [ 168.565862][ T4358] hid (null): report_id 21808 is invalid [ 168.583705][ T4358] hid (null): unknown global tag 0xc [ 168.605400][ T4358] hid (null): invalid report_count 1023410300 [ 168.626565][ T27] kauditd_printk_skb: 39 callbacks suppressed [ 168.626578][ T27] audit: type=1800 audit(176.588:1855): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162068 res=0 errno=0 [ 168.697300][ T6927] netlink: 'syz.3.755': attribute type 1 has an invalid length. [ 168.748383][ T4358] usb 7-1: USB disconnect, device number 3 [ 168.813559][ T6927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.870000][ T6931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.879923][ T6931] bond2: (slave batadv0): Enslaving as a backup interface with an up link [ 168.917710][ T4299] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 168.934534][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 169.076692][ T34] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 169.787218][ T27] audit: type=1800 audit(177.748:1856): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162477 res=0 errno=0 [ 169.794934][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 169.814799][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 169.843794][ T6982] loop5: detected capacity change from 0 to 2048 [ 169.890269][ T27] audit: type=1800 audit(177.838:1857): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162498 res=0 errno=0 [ 169.910056][ T4358] libceph: connect (1)[c::]:6789 error -101 [ 169.931971][ T4358] libceph: mon0 (1)[c::]:6789 connect error [ 169.947654][ T6986] loop0: detected capacity change from 0 to 512 [ 169.968766][ T27] audit: type=1800 audit(177.928:1858): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 169.976504][ T6986] EXT4-fs: Ignoring removed nobh option [ 170.026764][ T6986] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 170.055443][ T6982] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 170.077107][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 170.083165][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 170.102189][ T6986] EXT4-fs (loop0): 1 truncate cleaned up [ 170.116278][ T6986] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 170.234734][ T4358] libceph: connect (1)[c::]:6789 error -101 [ 170.244322][ T4358] libceph: mon0 (1)[c::]:6789 connect error [ 170.398635][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 170.436102][ T6995] syz.5.771 (6995) used greatest stack depth: 20704 bytes left [ 170.446053][ T6998] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 170.533717][ T6972] ceph: No mds server is up or the cluster is laggy [ 170.552398][ T6979] ceph: No mds server is up or the cluster is laggy [ 170.596332][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 170.614762][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 170.622701][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 170.651334][ T5619] EXT4-fs (loop5): unmounting filesystem. [ 170.755875][ T4358] libceph: connect (1)[c::]:6789 error -101 [ 170.761928][ T4358] libceph: mon0 (1)[c::]:6789 connect error [ 171.228200][ T7018] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.262416][ T7018] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.352444][ T7031] netlink: 'syz.5.782': attribute type 10 has an invalid length. [ 171.514468][ T7018] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.536191][ T7032] PID 7032 killed due to inadequate hugepage pool [ 171.559683][ T7018] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.736208][ T7018] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.799584][ T7018] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.064970][ T7018] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.094527][ T7018] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.975999][ T7018] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.005110][ T7018] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.065734][ T7018] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.093316][ T7018] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.135939][ T7018] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.174407][ T7018] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.213690][ T7018] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.244660][ T7018] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.387741][ T7141] ip_tables: iptables: counters copy to user failed while replacing table [ 173.428245][ T7141] tipc: Started in network mode [ 173.433492][ T7141] tipc: Node identity ac1414aa, cluster identity 4711 [ 173.485081][ T7141] tipc: Enabling of bearer rejected, failed to enable media [ 173.685931][ T27] audit: type=1800 audit(181.648:1859): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163062 res=0 errno=0 [ 174.172431][ T7143] loop5: detected capacity change from 0 to 32768 [ 174.199717][ T27] audit: type=1800 audit(182.158:1860): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37847 res=0 errno=0 [ 174.225623][ T7143] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.796 (7143) [ 174.282917][ T7143] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.291697][ T27] audit: type=1800 audit(182.228:1861): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163083 res=0 errno=0 [ 174.320453][ T7143] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 174.357835][ T7143] BTRFS info (device loop5): enabling auto defrag [ 174.379168][ T7143] BTRFS info (device loop5): disabling auto defrag [ 174.396048][ T7143] BTRFS info (device loop5): using free space tree [ 174.741464][ T7143] BTRFS info (device loop5): enabling ssd optimizations [ 174.910579][ T27] audit: type=1800 audit(182.868:1862): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163173 res=0 errno=0 [ 174.941507][ T7209] loop6: detected capacity change from 0 to 512 [ 174.986665][ T7209] EXT4-fs: Ignoring removed oldalloc option [ 174.987422][ T5619] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.004609][ T27] audit: type=1800 audit(182.958:1863): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37954 res=0 errno=0 [ 175.111514][ T7209] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 175.289590][ T7209] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.810: Invalid block bitmap block 1768304430 in block_group 0 [ 175.351148][ T7209] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 175.377779][ T7209] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.810: Invalid inode bitmap blk 3302764 in block_group 0 [ 175.412889][ T7209] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 175.582183][ T27] audit: type=1800 audit(183.538:1864): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37954 res=0 errno=0 [ 175.628036][ T6410] EXT4-fs (loop6): unmounting filesystem. [ 175.643825][ T7227] device veth0_macvtap left promiscuous mode [ 175.650300][ T6277] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 175.838385][ T6277] usb 4-1: not running at top speed; connect to a high speed hub [ 175.858466][ T6277] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 175.878537][ T27] audit: type=1800 audit(183.828:1865): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=139410 res=0 errno=0 [ 175.910945][ T6277] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 175.927464][ T7234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.935583][ T27] audit: type=1800 audit(183.838:1866): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=139414 res=0 errno=0 [ 175.937984][ T7234] team0: Port device bond1 added [ 175.955489][ T27] audit: type=1800 audit(183.838:1867): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=139418 res=0 errno=0 [ 175.979853][ T27] audit: type=1800 audit(183.838:1868): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=139417 res=0 errno=0 [ 175.988283][ T6277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.098596][ T6277] usb 4-1: Product: syz [ 176.103000][ T6277] usb 4-1: Manufacturer: syz [ 176.127510][ T6277] usb 4-1: SerialNumber: syz [ 176.153289][ T6277] oti6858 4-1:1.0: oti6858 converter detected [ 176.162348][ T6277] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 176.303084][ T7253] netlink: 27 bytes leftover after parsing attributes in process `syz.2.820'. [ 176.756537][ T26] usb 4-1: USB disconnect, device number 6 [ 176.791407][ T26] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 176.813605][ T26] oti6858 4-1:1.0: device disconnected [ 176.878680][ T7280] device gre1 entered promiscuous mode [ 177.634321][ T6277] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 177.824528][ T6277] usb 7-1: Using ep0 maxpacket: 16 [ 177.832307][ T6277] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 177.864904][ T6277] usb 7-1: config 0 has no interface number 0 [ 177.889120][ T6277] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 177.918405][ T6277] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 177.958185][ T6277] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 177.980723][ T6277] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.012970][ T6277] usb 7-1: Product: syz [ 178.045141][ T6277] usb 7-1: Manufacturer: syz [ 178.072472][ T6277] usb 7-1: SerialNumber: syz [ 178.093651][ T3932] device veth0_macvtap entered promiscuous mode [ 178.099274][ T6277] usb 7-1: config 0 descriptor?? [ 178.119080][ T7299] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 178.144780][ T7299] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 178.390697][ T7299] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 178.434498][ T7299] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 178.665113][ T6277] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 178.803263][ T7350] kAFS: bad VL server IP address [ 178.834896][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 178.834911][ T27] audit: type=1800 audit(186.788:1889): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164972 res=0 errno=0 [ 179.110841][ T7365] loop5: detected capacity change from 0 to 256 [ 179.469996][ T6277] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 179.505228][ T6277] asix: probe of 7-1:0.34 failed with error -71 [ 179.543328][ T27] audit: type=1800 audit(187.498:1890): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164706 res=0 errno=0 [ 179.554774][ T6277] usb 7-1: USB disconnect, device number 4 [ 179.575543][ T7383] netlink: 52 bytes leftover after parsing attributes in process `syz.3.859'. [ 179.590563][ T27] audit: type=1800 audit(187.508:1891): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=164749 res=0 errno=0 [ 179.643686][ T27] audit: type=1800 audit(187.508:1892): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=164713 res=0 errno=0 [ 179.665056][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.672374][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.704401][ T27] audit: type=1800 audit(187.508:1893): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=164714 res=0 errno=0 [ 179.759990][ T27] audit: type=1800 audit(187.508:1894): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=164735 res=0 errno=0 [ 179.761939][ T7387] netlink: 52 bytes leftover after parsing attributes in process `syz.3.859'. [ 179.812973][ T27] audit: type=1800 audit(187.508:1895): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=164736 res=0 errno=0 [ 179.867047][ T27] audit: type=1800 audit(187.508:1896): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=164715 res=0 errno=0 [ 179.953307][ T27] audit: type=1800 audit(187.508:1897): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=164737 res=0 errno=0 [ 179.993802][ T27] audit: type=1800 audit(187.548:1898): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164924 res=0 errno=0 [ 180.579254][ T7429] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 180.825206][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880563d5800: rx timeout, send abort [ 180.925627][ T7444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.878'. [ 180.956485][ T7444] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 180.965387][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 181.023260][ T7448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.878'. [ 181.073159][ T7448] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 181.104011][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 181.325313][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888059768000: rx timeout, send abort [ 181.333882][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880563d5800: abort rx timeout. Force session deactivation [ 181.793766][ T7483] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.829499][ T7483] loop5: detected capacity change from 0 to 512 [ 181.833653][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888059768000: abort rx timeout. Force session deactivation [ 181.843645][ T7483] EXT4-fs: Invalid want_extra_isize 1 [ 182.815863][ T7513] loop0: detected capacity change from 0 to 256 [ 182.858843][ T7513] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 182.912593][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.903'. [ 182.949249][ T7519] bridge0: port 1(veth0) entered blocking state [ 182.976461][ T7519] bridge0: port 1(veth0) entered disabled state [ 183.005741][ T7519] device veth0 entered promiscuous mode [ 183.019605][ T7519] bridge0: port 1(veth0) entered blocking state [ 183.026045][ T7519] bridge0: port 1(veth0) entered forwarding state [ 183.030007][ T7523] FAULT_INJECTION: forcing a failure. [ 183.030007][ T7523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.051622][ T7523] CPU: 1 PID: 7523 Comm: syz.0.904 Not tainted syzkaller #0 [ 183.058950][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.069018][ T7523] Call Trace: [ 183.072297][ T7523] [ 183.075224][ T7523] dump_stack_lvl+0x188/0x24e [ 183.079908][ T7523] ? show_regs_print_info+0x12/0x12 [ 183.085104][ T7523] ? load_image+0x410/0x410 [ 183.089607][ T7523] ? __might_fault+0xa6/0x120 [ 183.094295][ T7523] should_fail_ex+0x390/0x4c0 [ 183.098979][ T7523] copyout+0x1b/0x120 [ 183.102962][ T7523] _copy_to_iter+0x482/0x1050 [ 183.107645][ T7523] ? iov_iter_init+0x1f0/0x1f0 [ 183.112409][ T7523] ? verify_lock_unused+0x140/0x140 [ 183.117606][ T7523] get_random_bytes_user+0x1cd/0x3d0 [ 183.122892][ T7523] ? mix_interrupt_randomness+0x2d0/0x2d0 [ 183.128605][ T7523] ? __fsnotify_parent+0x72a/0x820 [ 183.133711][ T7523] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 183.140302][ T7523] ? common_file_perm+0x171/0x1c0 [ 183.145332][ T7523] do_iter_read+0x629/0xb10 [ 183.149843][ T7523] ? vfs_iter_read+0xa0/0xa0 [ 183.154452][ T7523] ? __import_iovec+0x306/0x510 [ 183.159304][ T7523] ? import_iovec+0x6f/0xa0 [ 183.163812][ T7523] do_readv+0x260/0x460 [ 183.167967][ T7523] ? generic_file_rw_checks+0x270/0x270 [ 183.173513][ T7523] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 183.179486][ T7523] ? lock_chain_count+0x20/0x20 [ 183.184333][ T7523] ? lockdep_hardirqs_on+0x94/0x140 [ 183.189534][ T7523] do_syscall_64+0x4c/0xa0 [ 183.193942][ T7523] ? clear_bhb_loop+0x60/0xb0 [ 183.198613][ T7523] ? clear_bhb_loop+0x60/0xb0 [ 183.203287][ T7523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.209172][ T7523] RIP: 0033:0x7f1a87f9e199 [ 183.213581][ T7523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.233188][ T7523] RSP: 002b:00007f1a861f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 183.241598][ T7523] RAX: ffffffffffffffda RBX: 00007f1a88225fa0 RCX: 00007f1a87f9e199 [ 183.249564][ T7523] RDX: 0000000000000001 RSI: 0000200000001340 RDI: 0000000000000003 [ 183.257530][ T7523] RBP: 00007f1a88035888 R08: 0000000000000000 R09: 0000000000000000 [ 183.265493][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.273454][ T7523] R13: 00007f1a88226038 R14: 00007f1a88225fa0 R15: 00007ffeed803a18 [ 183.281430][ T7523] [ 183.361862][ T7525] device bond1 entered promiscuous mode [ 183.519567][ T7536] loop0: detected capacity change from 0 to 512 [ 183.541959][ T7536] EXT4-fs: Ignoring removed orlov option [ 183.608343][ T7536] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.907: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 1281, max 0(0), depth 0(0) [ 183.706563][ T7536] EXT4-fs (loop0): Remounting filesystem read-only [ 183.724053][ T7536] EXT4-fs (loop0): get root inode failed [ 183.730329][ T7536] EXT4-fs (loop0): mount failed [ 184.239641][ T7102] rpcbind: server 127.0.0.1 not responding, timed out [ 184.520369][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 184.520385][ T27] audit: type=1800 audit(192.468:1902): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=53125 res=0 errno=0 [ 184.576571][ T27] audit: type=1800 audit(192.478:1903): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=53148 res=0 errno=0 [ 184.775553][ T7224] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 184.988818][ T7224] usb 6-1: Using ep0 maxpacket: 16 [ 185.002428][ T7224] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 185.029495][ T7224] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.057961][ T7224] usb 6-1: Product: syz [ 185.087652][ T7224] usb 6-1: Manufacturer: syz [ 185.113222][ T7224] usb 6-1: SerialNumber: syz [ 185.142378][ T7586] loop6: detected capacity change from 0 to 16 [ 185.192186][ T7586] erofs: (device loop6): mounted with root inode @ nid 36. [ 185.801734][ T7605] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 185.894623][ T7607] bond1: (slave gretap1): making interface the new active one [ 185.905458][ T7607] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 185.942054][ T7607] syz.2.935 (7607) used greatest stack depth: 19504 bytes left [ 186.507377][ T7631] netlink: 'syz.3.943': attribute type 15 has an invalid length. [ 186.525817][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 186.553484][ T7224] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 186.558868][ T7631] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 186.568999][ T7631] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 186.577839][ T7631] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 186.586180][ T7631] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 186.593945][ T7224] usb 6-1: USB disconnect, device number 2 [ 186.600889][ T27] audit: type=1800 audit(194.558:1904): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=165949 res=0 errno=0 [ 186.644288][ T27] audit: type=1800 audit(194.558:1905): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=165992 res=0 errno=0 [ 186.678718][ T7631] netlink: 'syz.3.943': attribute type 15 has an invalid length. [ 186.691599][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 186.704827][ T27] audit: type=1800 audit(194.558:1906): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=165956 res=0 errno=0 [ 186.786948][ T27] audit: type=1800 audit(194.558:1907): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=165957 res=0 errno=0 [ 186.844347][ T27] audit: type=1800 audit(194.558:1908): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=165978 res=0 errno=0 [ 186.902309][ T27] audit: type=1800 audit(194.558:1909): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=165979 res=0 errno=0 [ 186.951201][ T27] audit: type=1800 audit(194.558:1910): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=165958 res=0 errno=0 [ 186.984515][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.945'. [ 187.001705][ T7618] loop0: detected capacity change from 0 to 32768 [ 187.044043][ T7618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.939 (7618) [ 187.088893][ T27] audit: type=1800 audit(194.558:1911): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=165980 res=0 errno=0 [ 187.139616][ T7618] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.181748][ T7618] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 187.211008][ T7618] BTRFS info (device loop0): enabling auto defrag [ 187.237410][ T7618] BTRFS info (device loop0): disabling auto defrag [ 187.274513][ T7618] BTRFS info (device loop0): using free space tree [ 187.281902][ T7644] FAULT_INJECTION: forcing a failure. [ 187.281902][ T7644] name failslab, interval 1, probability 0, space 0, times 0 [ 187.343919][ T7644] CPU: 1 PID: 7644 Comm: syz.3.946 Not tainted syzkaller #0 [ 187.351274][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.361352][ T7644] Call Trace: [ 187.364662][ T7644] [ 187.367605][ T7644] dump_stack_lvl+0x188/0x24e [ 187.372317][ T7644] ? show_regs_print_info+0x12/0x12 [ 187.377544][ T7644] ? load_image+0x410/0x410 [ 187.382080][ T7644] ? __might_sleep+0xd0/0xd0 [ 187.386692][ T7644] ? __lock_acquire+0x7ea0/0x7ea0 [ 187.391754][ T7644] should_fail_ex+0x390/0x4c0 [ 187.396468][ T7644] should_failslab+0x5/0x20 [ 187.400997][ T7644] slab_pre_alloc_hook+0x59/0x300 [ 187.406055][ T7644] kmem_cache_alloc+0x56/0x2f0 [ 187.410838][ T7644] ? __anon_vma_prepare+0x64/0x430 [ 187.415978][ T7644] __anon_vma_prepare+0x64/0x430 [ 187.420933][ T7644] ? __lock_acquire+0x7ea0/0x7ea0 [ 187.425998][ T7644] do_huge_pmd_anonymous_page+0x1137/0x1510 [ 187.431923][ T7644] ? count_memcg_event_mm+0x36b/0x3c0 [ 187.437319][ T7644] ? count_memcg_event_mm+0x8a/0x3c0 [ 187.442625][ T7644] ? vma_thp_gfp_mask+0x160/0x160 [ 187.447680][ T7644] ? hugepage_vma_check+0x46d/0x540 [ 187.452904][ T7644] handle_mm_fault+0x11f0/0x3d40 [ 187.457882][ T7644] ? numa_migrate_prep+0x250/0x250 [ 187.463035][ T7644] ? check_vma_flags+0x45c/0x4c0 [ 187.468002][ T7644] __get_user_pages+0x40d/0xec0 [ 187.472902][ T7644] ? populate_vma_page_range+0x2b0/0x2b0 [ 187.478576][ T7644] populate_vma_page_range+0x214/0x2b0 [ 187.484063][ T7644] __mm_populate+0x25c/0x380 [ 187.488681][ T7644] ? check_vma_flags+0x4c0/0x4c0 [ 187.493649][ T7644] ? up_write+0x1b6/0x410 [ 187.498002][ T7644] ? do_mlock+0x194/0x640 [ 187.502357][ T7644] do_mlock+0x53a/0x640 [ 187.506542][ T7644] ? lru_gen_add_folio+0xe20/0xe20 [ 187.511671][ T7644] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 187.517677][ T7644] ? lock_chain_count+0x20/0x20 [ 187.522554][ T7644] ? syscall_enter_from_user_mode+0x21/0x80 [ 187.528479][ T7644] __x64_sys_mlock+0x5c/0x70 [ 187.533092][ T7644] do_syscall_64+0x4c/0xa0 [ 187.537529][ T7644] ? clear_bhb_loop+0x60/0xb0 [ 187.542305][ T7644] ? clear_bhb_loop+0x60/0xb0 [ 187.547010][ T7644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.552924][ T7644] RIP: 0033:0x7f4810f9e199 [ 187.557362][ T7644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.576990][ T7644] RSP: 002b:00007f4811e4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 187.585428][ T7644] RAX: ffffffffffffffda RBX: 00007f4811225fa0 RCX: 00007f4810f9e199 [ 187.593417][ T7644] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000c00000 [ 187.601413][ T7644] RBP: 00007f4811035888 R08: 0000000000000000 R09: 0000000000000000 [ 187.609404][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.617395][ T7644] R13: 00007f4811226038 R14: 00007f4811225fa0 R15: 00007ffd7dea7ce8 [ 187.625405][ T7644] [ 187.649685][ T7659] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 187.754619][ T7618] BTRFS info (device loop0): enabling ssd optimizations [ 187.923027][ T7676] loop5: detected capacity change from 0 to 1024 [ 188.036517][ T7676] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 188.162410][ T4271] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.713283][ T5619] EXT4-fs (loop5): unmounting filesystem. [ 189.127265][ T7725] netlink: 'syz.0.958': attribute type 1 has an invalid length. [ 189.297985][ T7728] bond2: (slave gretap1): making interface the new active one [ 189.306807][ T7728] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 190.537267][ T7769] loop0: detected capacity change from 0 to 8 [ 190.573233][ T27] kauditd_printk_skb: 368 callbacks suppressed [ 190.573247][ T27] audit: type=1800 audit(198.528:2280): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 190.584905][ T7769] SQUASHFS error: Failed to read block 0x62b: -5 [ 190.666937][ T7769] SQUASHFS error: Unable to read metadata cache entry [629] [ 190.699763][ T7769] SQUASHFS error: Unable to read inode 0x11f [ 191.044533][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 191.050683][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 191.063212][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 191.402796][ T7791] syz.3.975 (7791): attempted to duplicate a private mapping with mremap. This is not supported. [ 191.730518][ T7805] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 191.832131][ T7805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.922587][ T7809] loop5: detected capacity change from 0 to 1024 [ 191.956246][ T7812] bond2: (slave ip6erspan1): making interface the new active one [ 191.970816][ T7809] EXT4-fs: quotafile must be on filesystem root [ 191.996318][ T27] audit: type=1800 audit(199.958:2281): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37847 res=0 errno=0 [ 192.017125][ T7812] bond2: (slave ip6erspan1): Enslaving as an active interface with an up link [ 192.076059][ T7111] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 192.134420][ T7222] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 192.253619][ T7829] loop5: detected capacity change from 0 to 7 [ 192.265314][ T4265] Dev loop5: unable to read RDB block 7 [ 192.271451][ T4265] loop5: AHDI p1 p2 p3 [ 192.277690][ T4265] loop5: partition table partially beyond EOD, truncated [ 192.290587][ T7827] loop6: detected capacity change from 0 to 512 [ 192.298570][ T4265] loop5: p1 start 1818582900 is beyond EOD, truncated [ 192.305974][ T4265] loop5: p3 start 335544320 is beyond EOD, truncated [ 192.314437][ T7222] usb 4-1: Using ep0 maxpacket: 32 [ 192.321346][ T7222] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 192.343817][ T7222] usb 4-1: config 2 has no interface number 0 [ 192.362364][ T7222] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 192.394645][ T7222] usb 4-1: config 2 interface 88 has no altsetting 0 [ 192.432791][ T7222] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 192.435120][ T7829] Dev loop5: unable to read RDB block 7 [ 192.454388][ T7222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 192.462435][ T7222] usb 4-1: Product: syz [ 192.465497][ T7829] loop5: AHDI p1 p2 p3 [ 192.474450][ T7829] loop5: partition table partially beyond EOD, truncated [ 192.482234][ T7222] usb 4-1: Manufacturer: syz [ 192.494292][ T7222] usb 4-1: SerialNumber: syz [ 192.504381][ T7829] loop5: p1 start 1818582900 is beyond EOD, truncated [ 192.511201][ T7829] loop5: p3 start 335544320 is beyond EOD, truncated [ 192.525855][ T7817] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 192.748704][ T7817] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 193.169625][ T7860] loop5: detected capacity change from 0 to 256 [ 193.209692][ T7860] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 193.232654][ T27] audit: type=1800 audit(201.188:2282): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37847 res=0 errno=0 [ 193.987870][ T7222] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 194.010259][ T7222] asix 4-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 194.051097][ T7222] asix: probe of 4-1:2.88 failed with error -71 [ 194.079023][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.083641][ T7222] usb 4-1: USB disconnect, device number 7 [ 194.091435][ T27] audit: type=1800 audit(202.048:2283): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=167913 res=0 errno=0 [ 194.098334][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.152426][ T27] audit: type=1800 audit(202.048:2284): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=167956 res=0 errno=0 [ 194.184546][ T27] audit: type=1800 audit(202.048:2285): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=167920 res=0 errno=0 [ 194.220130][ T27] audit: type=1800 audit(202.048:2286): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=167921 res=0 errno=0 [ 194.277000][ T27] audit: type=1800 audit(202.048:2287): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=167942 res=0 errno=0 [ 194.340110][ T27] audit: type=1800 audit(202.078:2288): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=167943 res=0 errno=0 [ 194.384632][ T27] audit: type=1800 audit(202.088:2289): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=167922 res=0 errno=0 [ 194.935907][ T7918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1010'. [ 195.764248][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 195.822380][ T7952] loop0: detected capacity change from 0 to 1024 [ 195.842955][ T7948] device gretap0 entered promiscuous mode [ 195.862450][ T7948] device macvtap1 entered promiscuous mode [ 195.911774][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 195.911787][ T27] audit: type=1800 audit(203.868:2293): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37312 res=0 errno=0 [ 195.961805][ T7963] device gretap0 left promiscuous mode [ 195.981973][ T7952] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 196.034468][ T7963] device macvtap1 left promiscuous mode [ 196.164100][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 197.373805][ T8006] device gretap0 entered promiscuous mode [ 197.410190][ T8006] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 198.430021][ T27] audit: type=1800 audit(206.388:2294): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=45485 res=0 errno=0 [ 198.508134][ T27] audit: type=1800 audit(206.428:2295): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="vendor" dev="sysfs" ino=45334 res=0 errno=0 [ 198.596636][ T27] audit: type=1800 audit(206.428:2296): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=45331 res=0 errno=0 [ 198.665854][ T27] audit: type=1800 audit(206.428:2297): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="removable" dev="sysfs" ino=45491 res=0 errno=0 [ 198.775128][ T8045] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 198.783014][ T27] audit: type=1800 audit(206.738:2298): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=45329 res=0 errno=0 [ 198.828662][ T27] audit: type=1800 audit(206.738:2299): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=45319 res=0 errno=0 [ 198.882576][ T27] audit: type=1800 audit(206.738:2300): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=43302 res=0 errno=0 [ 198.969199][ T27] audit: type=1800 audit(206.898:2301): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168477 res=0 errno=0 [ 199.096263][ T8060] netlink: 'syz.5.1050': attribute type 4 has an invalid length. [ 199.144113][ T27] audit: type=1800 audit(207.098:2302): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=45616 res=0 errno=0 [ 199.146179][ T8060] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1050'. [ 199.357060][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 199.407770][ T8073] loop6: detected capacity change from 0 to 256 [ 199.783339][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 199.988480][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1058'. [ 200.015399][ T8091] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 200.129412][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.156865][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.185282][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.231224][ T8102] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 200.367008][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.437876][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.465378][ T8105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.505146][ T8105] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 201.118631][ T8124] loop5: detected capacity change from 0 to 256 [ 201.183490][ T8124] exfat: Deprecated parameter 'utf8' [ 201.193068][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 201.193082][ T27] audit: type=1800 audit(209.148:2307): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37847 res=0 errno=0 [ 201.249596][ T8124] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 201.799686][ T8148] FAULT_INJECTION: forcing a failure. [ 201.799686][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 201.848607][ T8148] CPU: 0 PID: 8148 Comm: syz.3.1076 Not tainted syzkaller #0 [ 201.856049][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.866127][ T8148] Call Trace: [ 201.869437][ T8148] [ 201.872404][ T8148] dump_stack_lvl+0x188/0x24e [ 201.877117][ T8148] ? show_regs_print_info+0x12/0x12 [ 201.882357][ T8148] ? load_image+0x410/0x410 [ 201.886894][ T8148] ? __might_sleep+0xd0/0xd0 [ 201.891509][ T8148] ? __lock_acquire+0x7ea0/0x7ea0 [ 201.896572][ T8148] should_fail_ex+0x390/0x4c0 [ 201.901291][ T8148] should_failslab+0x5/0x20 [ 201.905820][ T8148] slab_pre_alloc_hook+0x59/0x300 [ 201.910880][ T8148] ? __request_module+0x338/0xa00 [ 201.915947][ T8148] __kmem_cache_alloc_node+0x4f/0x270 [ 201.921347][ T8148] ? __request_module+0x338/0xa00 [ 201.926471][ T8148] __kmalloc_node_track_caller+0xa0/0x240 [ 201.932192][ T8148] kstrdup+0x37/0x70 [ 201.936101][ T8148] __request_module+0x338/0xa00 [ 201.940962][ T8148] ? do_vfs_ioctl+0x1be3/0x1d40 [ 201.945818][ T8148] ? copy_regset_to_user+0x1f0/0x1f0 [ 201.951157][ T8148] ? apparmor_capable+0x12c/0x190 [ 201.956205][ T8148] ? bpf_lsm_capable+0x5/0x10 [ 201.960896][ T8148] ? security_capable+0x85/0xb0 [ 201.965754][ T8148] ? capable+0x84/0xe0 [ 201.969827][ T8148] ? dev_load+0x1d/0x1e0 [ 201.974073][ T8148] ? wext_ioctl_dispatch+0x470/0x470 [ 201.979373][ T8148] ? iw_handler_get_private+0x1e0/0x1e0 [ 201.984915][ T8148] wext_ioctl_dispatch+0xaa/0x470 [ 201.989941][ T8148] ? iw_handler_get_private+0x1e0/0x1e0 [ 201.995521][ T8148] wext_handle_ioctl+0x114/0x1d0 [ 202.000458][ T8148] ? call_commit_handler+0xf0/0xf0 [ 202.005619][ T8148] sock_ioctl+0x143/0x700 [ 202.009952][ T8148] ? sock_poll+0x420/0x420 [ 202.014410][ T8148] ? bpf_lsm_file_ioctl+0x5/0x10 [ 202.019377][ T8148] ? security_file_ioctl+0x7c/0xa0 [ 202.024538][ T8148] ? sock_poll+0x420/0x420 [ 202.028995][ T8148] __se_sys_ioctl+0xfa/0x170 [ 202.033598][ T8148] do_syscall_64+0x4c/0xa0 [ 202.038018][ T8148] ? clear_bhb_loop+0x60/0xb0 [ 202.042700][ T8148] ? clear_bhb_loop+0x60/0xb0 [ 202.047378][ T8148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.053272][ T8148] RIP: 0033:0x7f4810f9e199 [ 202.057721][ T8148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.077340][ T8148] RSP: 002b:00007f4811e4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.085765][ T8148] RAX: ffffffffffffffda RBX: 00007f4811225fa0 RCX: 00007f4810f9e199 [ 202.093740][ T8148] RDX: 0000200000000040 RSI: 0000000000008b1a RDI: 0000000000000003 [ 202.101714][ T8148] RBP: 00007f4811035888 R08: 0000000000000000 R09: 0000000000000000 [ 202.109697][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.117665][ T8148] R13: 00007f4811226038 R14: 00007f4811225fa0 R15: 00007ffd7dea7ce8 [ 202.125655][ T8148] [ 202.129838][ T27] audit: type=1800 audit(209.868:2308): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168802 res=0 errno=0 [ 202.171280][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.183784][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.191688][ T27] audit: type=1800 audit(210.118:2309): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168812 res=0 errno=0 [ 202.211082][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.219229][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.229926][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 202.240800][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.277833][ T27] audit: type=1800 audit(210.218:2310): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168831 res=0 errno=0 [ 202.297214][ T27] audit: type=1800 audit(210.228:2311): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168842 res=0 errno=0 [ 202.730096][ T8156] chnl_net:caif_netlink_parms(): no params data found [ 202.851802][ T8156] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.907599][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.916569][ T8156] device bridge_slave_0 entered promiscuous mode [ 202.943685][ T8156] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.957466][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.966780][ T8156] device bridge_slave_1 entered promiscuous mode [ 202.992945][ T8156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.031125][ T8156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.108777][ T8156] team0: Port device team_slave_0 added [ 203.136540][ T8156] team0: Port device team_slave_1 added [ 203.179296][ T8193] loop6: detected capacity change from 0 to 512 [ 203.189828][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.202747][ T8195] loop3: detected capacity change from 0 to 512 [ 203.205240][ T8193] EXT4-fs: inline encryption not supported [ 203.223657][ T27] audit: type=1800 audit(211.178:2312): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37954 res=0 errno=0 [ 203.235512][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.276951][ T8193] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 203.309730][ T8193] EXT4-fs (loop6): orphan cleanup on readonly fs [ 203.324303][ T8193] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.1087: inode #15: comm syz.6.1087: iget: illegal inode # [ 203.337657][ T8193] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1087: couldn't read orphan inode 15 (err -117) [ 203.344347][ T8156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.362197][ T8193] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 203.391504][ T8195] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1088: invalid indirect mapped block 4294967295 (level 1) [ 203.427880][ T8195] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1088: invalid indirect mapped block 4294967295 (level 1) [ 203.442327][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.472342][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.518887][ T8195] EXT4-fs (loop3): 2 truncates cleaned up [ 203.533135][ T8195] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 203.553328][ T8156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.646655][ T6410] EXT4-fs (loop6): unmounting filesystem. [ 203.723089][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 203.731379][ T8156] device hsr_slave_0 entered promiscuous mode [ 203.780580][ T8156] device hsr_slave_1 entered promiscuous mode [ 203.824493][ T8156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.841021][ T8156] Cannot create hsr debugfs directory [ 204.078422][ T27] audit: type=1800 audit(212.038:2313): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=46683 res=0 errno=0 [ 204.144532][ T27] audit: type=1800 audit(212.038:2314): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=46682 res=0 errno=0 [ 204.320042][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 204.356561][ T27] audit: type=1800 audit(212.308:2315): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175500 res=0 errno=0 [ 204.372592][ T8156] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 204.386693][ T8156] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 204.391149][ T8212] loop3: detected capacity change from 0 to 1024 [ 204.436848][ T8156] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 204.483310][ T27] audit: type=1800 audit(212.438:2316): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 204.505756][ T8156] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 204.849077][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'. [ 204.906382][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'. [ 205.112404][ T8156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.252531][ T8224] loop3: detected capacity change from 0 to 256 [ 205.263539][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.285108][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.335924][ T8156] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.401611][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.417248][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.481590][ T7095] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.488763][ T7095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.576331][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.608688][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.641897][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.683255][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.690462][ T7095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.704401][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.782256][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.828532][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.903982][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.924746][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.943182][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.958119][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.116895][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.140214][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.170798][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.187476][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.224934][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.323790][ T8257] netlink: 'syz.2.1108': attribute type 39 has an invalid length. [ 206.410215][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 206.862174][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.884170][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.929332][ T8277] loop5: detected capacity change from 0 to 512 [ 206.937821][ T8156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.954882][ T8277] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 206.961899][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 206.961912][ T27] audit: type=1800 audit(214.918:2319): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37847 res=0 errno=0 [ 207.021700][ T8277] EXT4-fs (loop5): 1 truncate cleaned up [ 207.042884][ T8282] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 207.043419][ T8277] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 207.071415][ T8282] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 207.320697][ T5619] EXT4-fs (loop5): unmounting filesystem. [ 208.105176][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.128837][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.197815][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.235084][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.255839][ T8156] device veth0_vlan entered promiscuous mode [ 208.275718][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.294864][ T7102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.319383][ T8156] device veth1_vlan entered promiscuous mode [ 208.438219][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.447901][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.476512][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.484445][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 208.533212][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.558366][ T8156] device veth0_macvtap entered promiscuous mode [ 208.579875][ T8156] device veth1_macvtap entered promiscuous mode [ 208.633535][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.671129][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.703417][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.727674][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.755713][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.807231][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.824243][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.847499][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.866315][ T8156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.880312][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.907092][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.949749][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.976495][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.003380][ T8323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 209.027305][ T8323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.055956][ T8323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.073961][ T8323] device bridge_slave_0 left promiscuous mode [ 209.097327][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.135619][ T8323] device bridge_slave_1 left promiscuous mode [ 209.141913][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.223178][ T8323] bond0: (slave bond_slave_0): Releasing backup interface [ 209.262652][ T8323] bond0: (slave bond_slave_1): Releasing backup interface [ 209.360849][ T8323] team0: Port device team_slave_0 removed [ 209.408417][ T8323] team0: Port device team_slave_1 removed [ 209.420908][ T8323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.430655][ T8323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.473904][ T8323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.487365][ T8323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.554842][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.579813][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.615794][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.626549][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.637266][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.647945][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.660986][ T8156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.683019][ T8326] team0: Mode changed to "loadbalance" [ 209.722248][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.740039][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.767356][ T8156] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.789053][ T8156] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.813669][ T8156] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.843058][ T8156] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.942929][ T27] audit: type=1800 audit(217.898:2320): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=176297 res=0 errno=0 [ 210.022629][ T7095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.031360][ T27] audit: type=1800 audit(217.988:2321): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=176468 res=0 errno=0 [ 210.043436][ T7095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.089470][ T7109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.157553][ T7095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.173585][ T7095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.212568][ T7109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.321799][ T27] audit: type=1800 audit(218.278:2322): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=176640 res=0 errno=0 [ 210.378447][ T27] audit: type=1800 audit(218.278:2323): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=176654 res=0 errno=0 [ 210.556751][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 210.790874][ T8384] device syzkaller1 entered promiscuous mode [ 211.693484][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 211.855349][ T8425] FAULT_INJECTION: forcing a failure. [ 211.855349][ T8425] name failslab, interval 1, probability 0, space 0, times 0 [ 211.869340][ T8425] CPU: 0 PID: 8425 Comm: syz.6.1155 Not tainted syzkaller #0 [ 211.876757][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.886844][ T8425] Call Trace: [ 211.890157][ T8425] [ 211.893122][ T8425] dump_stack_lvl+0x188/0x24e [ 211.897837][ T8425] ? show_regs_print_info+0x12/0x12 [ 211.903060][ T8425] ? load_image+0x410/0x410 [ 211.907594][ T8425] ? verify_lock_unused+0x140/0x140 [ 211.912821][ T8425] ? verify_lock_unused+0x140/0x140 [ 211.918058][ T8425] should_fail_ex+0x390/0x4c0 [ 211.922775][ T8425] should_failslab+0x5/0x20 [ 211.927294][ T8425] slab_pre_alloc_hook+0x59/0x300 [ 211.932334][ T8425] ? report_access+0x15b/0x5e0 [ 211.937105][ T8425] __kmem_cache_alloc_node+0x4f/0x270 [ 211.942473][ T8425] ? report_access+0x15b/0x5e0 [ 211.947228][ T8425] kmalloc_trace+0x26/0xe0 [ 211.951639][ T8425] report_access+0x15b/0x5e0 [ 211.956226][ T8425] ? __lock_acquire+0x7ea0/0x7ea0 [ 211.961248][ T8425] ? task_is_descendant+0x510/0x510 [ 211.966440][ T8425] ? yama_ptrace_access_check+0x76/0xb10 [ 211.972070][ T8425] ? yama_ptrace_access_check+0x76/0xb10 [ 211.977712][ T8425] yama_ptrace_access_check+0x8ae/0xb10 [ 211.983254][ T8425] ? yama_ptrace_access_check+0x76/0xb10 [ 211.988882][ T8425] security_ptrace_access_check+0x65/0x90 [ 211.994601][ T8425] ptrace_attach+0x1ef/0x6c0 [ 211.999221][ T8425] __se_sys_ptrace+0x1be/0x3c0 [ 212.003995][ T8425] ? __x64_sys_ptrace+0xa0/0xa0 [ 212.008854][ T8425] ? lockdep_hardirqs_on+0x94/0x140 [ 212.014066][ T8425] do_syscall_64+0x4c/0xa0 [ 212.018485][ T8425] ? clear_bhb_loop+0x60/0xb0 [ 212.023157][ T8425] ? clear_bhb_loop+0x60/0xb0 [ 212.027840][ T8425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.033728][ T8425] RIP: 0033:0x7fe97779e199 [ 212.038135][ T8425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.057748][ T8425] RSP: 002b:00007fe9785ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 212.066186][ T8425] RAX: ffffffffffffffda RBX: 00007fe977a25fa0 RCX: 00007fe97779e199 [ 212.074172][ T8425] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010 [ 212.082140][ T8425] RBP: 00007fe977835888 R08: 0000000000000000 R09: 0000000000000000 [ 212.090108][ T8425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.098068][ T8425] R13: 00007fe977a26038 R14: 00007fe977a25fa0 R15: 00007ffed488ed88 [ 212.106052][ T8425] [ 212.223471][ T8432] loop3: detected capacity change from 0 to 128 [ 212.530750][ T8447] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 212.530750][ T8447] The task syz.5.1162 (8447) triggered the difference, watch for misbehavior. [ 212.721511][ T8449] netlink: 41 bytes leftover after parsing attributes in process `syz.7.1163'. [ 213.500942][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1168'. [ 213.629451][ T8455] loop7: detected capacity change from 0 to 32768 [ 213.663809][ T8473] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.1172'. [ 213.786471][ T8455] XFS (loop7): Mounting V5 Filesystem [ 213.922048][ T8455] XFS (loop7): Ending clean mount [ 213.949266][ T8487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1173'. [ 214.065470][ T8494] loop3: detected capacity change from 0 to 256 [ 214.090336][ T27] audit: type=1800 audit(222.048:2324): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 214.188574][ T27] audit: type=1800 audit(222.148:2325): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177217 res=0 errno=0 [ 214.307307][ T8156] XFS (loop7): Unmounting Filesystem [ 214.339117][ T8500] IPv6: Can't replace route, no match found [ 214.604317][ T4316] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 214.814449][ T4316] usb 7-1: Using ep0 maxpacket: 32 [ 214.821849][ T4316] usb 7-1: unable to get BOS descriptor or descriptor too short [ 214.841201][ T4316] usb 7-1: config 12 has an invalid interface number: 193 but max is 1 [ 214.864144][ T4316] usb 7-1: config 12 has an invalid interface number: 143 but max is 1 [ 214.882986][ T4316] usb 7-1: config 12 has no interface number 0 [ 214.923491][ T4316] usb 7-1: config 12 has no interface number 1 [ 214.930059][ T4316] usb 7-1: config 12 interface 143 altsetting 248 endpoint 0x3 has invalid maxpacket 1007, setting to 64 [ 214.956664][ T4316] usb 7-1: config 12 interface 143 altsetting 248 bulk endpoint 0x5 has invalid maxpacket 1024 [ 214.984662][ T4316] usb 7-1: config 12 interface 193 has no altsetting 0 [ 214.991581][ T4316] usb 7-1: config 12 interface 143 has no altsetting 0 [ 215.025878][ T4316] usb 7-1: string descriptor 0 read error: -22 [ 215.043589][ T4316] usb 7-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=20.3e [ 215.069085][ T4316] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.104889][ T27] audit: type=1800 audit(223.058:2326): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177237 res=0 errno=0 [ 215.193340][ T27] audit: type=1800 audit(223.058:2327): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=177277 res=0 errno=0 [ 215.256364][ T27] audit: type=1800 audit(223.058:2328): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=177244 res=0 errno=0 [ 215.288848][ T27] audit: type=1800 audit(223.058:2329): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=177245 res=0 errno=0 [ 215.308793][ T27] audit: type=1800 audit(223.058:2330): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=177246 res=0 errno=0 [ 215.333225][ T27] audit: type=1800 audit(223.118:2331): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177345 res=0 errno=0 [ 215.360509][ T27] audit: type=1800 audit(223.128:2332): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177295 res=0 errno=0 [ 215.368340][ T4316] usb 7-1: USB disconnect, device number 5 [ 215.386820][ T8538] device batadv_slave_0 entered promiscuous mode [ 215.492566][ T8537] device batadv_slave_0 left promiscuous mode [ 216.043891][ T8555] loop7: detected capacity change from 0 to 512 [ 216.056674][ T8558] FAULT_INJECTION: forcing a failure. [ 216.056674][ T8558] name failslab, interval 1, probability 0, space 0, times 0 [ 216.073384][ T8555] EXT4-fs: inline encryption not supported [ 216.082524][ T8558] CPU: 0 PID: 8558 Comm: syz.6.1203 Not tainted syzkaller #0 [ 216.089943][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.100232][ T8558] Call Trace: [ 216.103526][ T8558] [ 216.106466][ T8558] dump_stack_lvl+0x188/0x24e [ 216.111160][ T8558] ? show_regs_print_info+0x12/0x12 [ 216.116368][ T8558] ? load_image+0x410/0x410 [ 216.120883][ T8558] ? __might_sleep+0xd0/0xd0 [ 216.125482][ T8558] ? __lock_acquire+0x7ea0/0x7ea0 [ 216.130508][ T8558] should_fail_ex+0x390/0x4c0 [ 216.135193][ T8558] should_failslab+0x5/0x20 [ 216.139690][ T8558] slab_pre_alloc_hook+0x59/0x300 [ 216.144731][ T8558] ? xprt_alloc+0x4d7/0x790 [ 216.149236][ T8558] __kmem_cache_alloc_node+0x4f/0x270 [ 216.154617][ T8558] ? xprt_alloc+0x4d7/0x790 [ 216.159209][ T8558] kmalloc_trace+0x26/0xe0 [ 216.163751][ T8558] xprt_alloc+0x4d7/0x790 [ 216.168120][ T8558] xs_setup_xprt+0x9e/0x3b0 [ 216.172639][ T8558] xs_setup_tcp+0x7c/0x700 [ 216.177094][ T8558] xprt_create_transport+0x14e/0x630 [ 216.182397][ T8558] rpc_create+0x413/0x7e0 [ 216.186734][ T8558] ? rpc_cleanup_clids+0x20/0x20 [ 216.191687][ T8558] ? net_generic+0x1e/0x240 [ 216.196200][ T8558] ? net_generic+0x1e/0x240 [ 216.200715][ T8558] nfs_create_rpc_client+0x4cc/0x6d0 [ 216.206004][ T8558] ? nfs_init_timeout_values+0x410/0x410 [ 216.211652][ T8558] ? __init_waitqueue_head+0xa4/0x140 [ 216.217040][ T8558] nfs4_alloc_client+0x79a/0xc20 [ 216.222000][ T8558] ? nfs40_shutdown_client+0x80/0x80 [ 216.227292][ T8558] ? nfs_get_client+0x9db/0xd80 [ 216.232146][ T8558] ? __lock_acquire+0x7ea0/0x7ea0 [ 216.237172][ T8558] ? do_raw_spin_lock+0x128/0x2f0 [ 216.242234][ T8558] ? do_raw_spin_unlock+0x11d/0x230 [ 216.247429][ T8558] nfs_get_client+0x9f4/0xd80 [ 216.252126][ T8558] nfs4_set_client+0x36e/0x500 [ 216.256899][ T8558] ? nfs4_create_referral_server+0x5b0/0x5b0 [ 216.262889][ T8558] nfs4_create_server+0x4c2/0x10c0 [ 216.268009][ T8558] ? nfs4_set_ds_client+0x490/0x490 [ 216.273207][ T8558] ? get_nfs_version+0x1e7/0x200 [ 216.278155][ T8558] ? nfs_get_tree+0x10b6/0x1520 [ 216.283008][ T8558] nfs4_try_get_tree+0x45/0x110 [ 216.287859][ T8558] vfs_get_tree+0x88/0x270 [ 216.292363][ T8558] do_new_mount+0x247/0xa40 [ 216.296868][ T8558] __se_sys_mount+0x2e3/0x3d0 [ 216.301547][ T8558] ? __x64_sys_mount+0xc0/0xc0 [ 216.306309][ T8558] ? lockdep_hardirqs_on+0x94/0x140 [ 216.311505][ T8558] ? __x64_sys_mount+0x1c/0xc0 [ 216.316277][ T8558] do_syscall_64+0x4c/0xa0 [ 216.320697][ T8558] ? clear_bhb_loop+0x60/0xb0 [ 216.325375][ T8558] ? clear_bhb_loop+0x60/0xb0 [ 216.330054][ T8558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.335942][ T8558] RIP: 0033:0x7fe97779e199 [ 216.340380][ T8558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.359987][ T8558] RSP: 002b:00007fe9785ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 216.368402][ T8558] RAX: ffffffffffffffda RBX: 00007fe977a25fa0 RCX: 00007fe97779e199 [ 216.376368][ T8558] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 216.384334][ T8558] RBP: 00007fe977835888 R08: 0000200000000140 R09: 0000000000000000 [ 216.392328][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.400315][ T8558] R13: 00007fe977a26038 R14: 00007fe977a25fa0 R15: 00007ffed488ed88 [ 216.408311][ T8558] [ 216.473740][ T8555] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 216.565515][ T8555] EXT4-fs (loop7): 1 truncate cleaned up [ 216.571225][ T8555] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 216.684072][ T8565] loop6: detected capacity change from 0 to 128 [ 216.747956][ T27] audit: type=1800 audit(224.708:2333): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37954 res=0 errno=0 [ 216.788456][ T8565] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 216.906602][ T8156] EXT4-fs (loop7): unmounting filesystem. [ 217.070844][ T6410] EXT4-fs (loop6): unmounting filesystem. [ 217.099541][ T8582] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 217.099541][ T8582] Q&|x6 [ 217.222070][ T7223] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 217.248798][ T7223] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 217.279001][ T4316] libceph: mon0 (2)0.0.0.0:6789 socket closed (con state V2_BANNER_PREFIX) [ 217.515392][ T7223] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 217.556414][ T22] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 217.960479][ T4288] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 217.971064][ T4288] CPU: 1 PID: 4288 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 217.978654][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.988732][ T4288] Workqueue: hci0 hci_rx_work [ 217.993442][ T4288] Call Trace: [ 217.996740][ T4288] [ 217.999682][ T4288] dump_stack_lvl+0x188/0x24e [ 218.004376][ T4288] ? show_regs_print_info+0x12/0x12 [ 218.009589][ T4288] ? load_image+0x410/0x410 [ 218.014112][ T4288] sysfs_create_dir_ns+0x26a/0x290 [ 218.019228][ T4288] ? __lock_acquire+0x7ea0/0x7ea0 [ 218.024258][ T4288] ? sysfs_warn_dup+0xa0/0xa0 [ 218.028941][ T4288] ? do_raw_spin_unlock+0x11d/0x230 [ 218.034155][ T4288] kobject_add_internal+0x617/0xca0 [ 218.039392][ T4288] kobject_add+0x160/0x230 [ 218.043823][ T4288] ? kobject_init+0x1c0/0x1c0 [ 218.048510][ T4288] ? __raw_spin_lock_init+0x41/0x100 [ 218.053816][ T4288] ? klist_children_get+0x50/0x50 [ 218.058862][ T4288] ? get_device_parent+0x121/0x3e0 [ 218.063997][ T4288] device_add+0x470/0x1050 [ 218.068431][ T4288] hci_conn_add_sysfs+0xd1/0x1e0 [ 218.073376][ T4288] hci_sync_conn_complete_evt+0x707/0xab0 [ 218.079105][ T4288] ? hci_remote_ext_features_evt+0xb50/0xb50 [ 218.085086][ T4288] hci_event_packet+0x806/0x1290 [ 218.090026][ T4288] ? lock_chain_count+0x20/0x20 [ 218.094874][ T4288] ? bis_list+0x280/0x280 [ 218.099199][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 218.105086][ T4288] ? kcov_remote_start+0x50f/0x810 [ 218.110195][ T4288] ? lockdep_hardirqs_on+0x94/0x140 [ 218.115399][ T4288] ? hci_send_to_monitor+0x9c/0x4a0 [ 218.120597][ T4288] hci_rx_work+0x3eb/0xd40 [ 218.125011][ T4288] ? _raw_spin_unlock+0x40/0x40 [ 218.129861][ T4288] ? process_one_work+0x7b4/0x1160 [ 218.134967][ T4288] process_one_work+0x8ab/0x1160 [ 218.139913][ T4288] ? worker_detach_from_pool+0x240/0x240 [ 218.145549][ T4288] ? _raw_spin_lock_irq+0xb7/0xf0 [ 218.150598][ T4288] ? _raw_spin_lock_irqsave+0x100/0x100 [ 218.156138][ T4288] ? wq_worker_running+0x97/0x190 [ 218.161160][ T4288] worker_thread+0xaf5/0x12a0 [ 218.165845][ T4288] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 218.171737][ T4288] kthread+0x29d/0x330 [ 218.175795][ T4288] ? worker_clr_flags+0x1a0/0x1a0 [ 218.180815][ T4288] ? kthread_blkcg+0xd0/0xd0 [ 218.185401][ T4288] ret_from_fork+0x1f/0x30 [ 218.189825][ T4288] [ 218.198331][ T7223] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 218.198868][ T26] libceph: mon0 (2)0.0.0.0:6789 socket closed (con state V2_BANNER_PREFIX) [ 218.215422][ T4288] kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 218.229304][ T4288] Bluetooth: hci0: failed to register connection device [ 218.235805][ T8586] ceph: No mds server is up or the cluster is laggy [ 218.243427][ T8591] ceph: No mds server is up or the cluster is laggy [ 218.601937][ T8640] loop3: detected capacity change from 0 to 1024 [ 219.304443][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 219.304457][ T27] audit: type=1800 audit(227.258:2338): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1243" name="resource0" dev="sysfs" ino=81844 res=0 errno=0 [ 219.443992][ T8655] x86/PAT: syz.5.1243:8655 freeing invalid memtype [mem 0xfe004000-0xfe005fff] [ 219.611314][ T27] audit: type=1800 audit(227.568:2339): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178043 res=0 errno=0 [ 219.667726][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1248'. [ 219.711021][ T27] audit: type=1800 audit(227.618:2340): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177958 res=0 errno=0 [ 219.769575][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1248'. [ 219.905718][ T8682] loop3: detected capacity change from 0 to 512 [ 219.949912][ T8682] EXT4-fs: Ignoring removed orlov option [ 219.994849][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 220.056196][ T8682] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 220.297087][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 220.686151][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'. [ 220.691165][ T8680] loop7: detected capacity change from 0 to 32768 [ 220.782585][ T8680] loop7: p1 p3 < > [ 221.411648][ T27] audit: type=1800 audit(229.368:2341): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178150 res=0 errno=0 [ 221.481582][ T27] audit: type=1800 audit(229.368:2342): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="dev" dev="sysfs" ino=38100 res=0 errno=0 [ 221.551617][ T27] audit: type=1800 audit(229.398:2343): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178122 res=0 errno=0 [ 221.616511][ T27] audit: type=1800 audit(229.398:2344): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="size" dev="sysfs" ino=178155 res=0 errno=0 [ 221.664552][ T27] audit: type=1800 audit(229.398:2345): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="start" dev="sysfs" ino=178154 res=0 errno=0 [ 221.714393][ T27] audit: type=1800 audit(229.498:2346): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="size" dev="sysfs" ino=178127 res=0 errno=0 [ 221.756694][ T27] audit: type=1800 audit(229.498:2347): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="start" dev="sysfs" ino=178126 res=0 errno=0 [ 221.910112][ T7224] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 221.954269][ T6277] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 222.114300][ T7224] usb 4-1: Using ep0 maxpacket: 16 [ 222.123375][ T7224] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.155380][ T6277] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 222.170983][ T6277] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.184384][ T7224] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 222.197559][ T6277] usb 7-1: Product: syz [ 222.214247][ T6277] usb 7-1: Manufacturer: syz [ 222.218892][ T6277] usb 7-1: SerialNumber: syz [ 222.237627][ T7224] usb 4-1: config 0 interface 0 has no altsetting 0 [ 222.255641][ T6277] usb 7-1: config 0 descriptor?? [ 222.260822][ T7224] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 222.284694][ T7224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.315237][ T7224] usb 4-1: config 0 descriptor?? [ 222.498654][ T6277] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 006 [ 222.741179][ T8764] netlink: 'syz.5.1276': attribute type 1 has an invalid length. [ 222.743357][ T7224] input: HID 04f3:074d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04F3:074D.000A/input/input10 [ 222.789173][ T7224] elan 0003:04F3:074D.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.3-1/input0 [ 222.860697][ T8764] device bond2 entered promiscuous mode [ 222.903432][ T8764] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.986011][ T8768] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.026978][ T8768] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 223.084503][ T8768] bond2: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 223.132549][ T8768] bond2: (slave gre2): making interface the new active one [ 223.159970][ T8768] device gre2 entered promiscuous mode [ 223.186852][ T8768] bond2: (slave gre2): Enslaving as an active interface with an up link [ 223.210845][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 223.306642][ T8772] i2c i2c-1: failure reading status [ 223.321150][ T6276] usb 7-1: USB disconnect, device number 6 [ 223.396292][ T7224] usb 4-1: USB disconnect, device number 8 [ 223.507941][ T4288] Bluetooth: hci4: link tx timeout [ 223.508317][ T8789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1280'. [ 223.514111][ T4288] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 223.539288][ T4288] Bluetooth: hci4: link tx timeout [ 223.545292][ T4288] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 223.561252][ T4288] Bluetooth: hci4: link tx timeout [ 223.566804][ T4288] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 223.818344][ T8800] capability: warning: `syz.7.1285' uses 32-bit capabilities (legacy support in use) [ 224.498669][ T8825] loop6: detected capacity change from 0 to 4096 [ 224.528575][ T8825] EXT4-fs: Ignoring removed nobh option [ 224.541558][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 224.541571][ T27] audit: type=1800 audit(232.498:2388): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37954 res=0 errno=0 [ 224.570109][ T8825] EXT4-fs: Ignoring removed bh option [ 224.577039][ T4288] Bluetooth: hci4: link tx timeout [ 224.582266][ T4288] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 224.590584][ T4288] Bluetooth: hci4: link tx timeout [ 224.595800][ T4288] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 224.612120][ T8825] EXT4-fs (loop6): Test dummy encryption mode enabled [ 224.661796][ T8825] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 225.132151][ T6784] EXT4-fs (loop6): unmounting filesystem. [ 225.150493][ T27] audit: type=1326 audit(233.108:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8849 comm="syz.7.1304" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd354b9e199 code=0x0 [ 225.289060][ T4288] Bluetooth: hci4: link tx timeout [ 225.296246][ T4288] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 225.569549][ T27] audit: type=1800 audit(233.528:2390): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179107 res=0 errno=0 [ 225.604290][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 225.641858][ T7093] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.752756][ T7093] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.860054][ T8871] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1314'. [ 225.864500][ T8874] loop3: detected capacity change from 0 to 512 [ 225.883064][ T7093] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.893697][ T8871] netlink: zone id is out of range [ 225.908663][ T8871] netlink: zone id is out of range [ 225.925144][ T8874] EXT4-fs: Ignoring removed bh option [ 225.936919][ T8871] netlink: zone id is out of range [ 225.961244][ T27] audit: type=1800 audit(233.918:2391): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37633 res=0 errno=0 [ 225.963772][ T8871] netlink: zone id is out of range [ 226.004946][ T8871] netlink: zone id is out of range [ 226.010168][ T8871] netlink: zone id is out of range [ 226.055400][ T8874] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.1315: corrupted in-inode xattr [ 226.067529][ T8871] netlink: zone id is out of range [ 226.088702][ T8871] netlink: zone id is out of range [ 226.106903][ T8874] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1315: couldn't read orphan inode 15 (err -117) [ 226.151072][ T8871] netlink: zone id is out of range [ 226.186433][ T8871] netlink: zone id is out of range [ 226.193016][ T27] audit: type=1800 audit(234.148:2392): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179172 res=0 errno=0 [ 226.230186][ T8874] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 226.252912][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.262981][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.271195][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.283436][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.291002][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 226.298748][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.353560][ T27] audit: type=1800 audit(234.148:2393): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179182 res=0 errno=0 [ 226.397315][ T7093] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.481143][ T8873] loop5: detected capacity change from 0 to 32768 [ 226.491297][ T27] audit: type=1800 audit(234.278:2394): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179201 res=0 errno=0 [ 226.571639][ T27] audit: type=1800 audit(234.288:2395): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=179212 res=0 errno=0 [ 226.593407][ T27] audit: type=1800 audit(234.528:2396): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37847 res=0 errno=0 [ 226.664381][ T8873] XFS (loop5): Mounting V5 Filesystem [ 226.747459][ T27] audit: type=1800 audit(234.708:2397): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=180083 res=0 errno=0 [ 226.802808][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 226.914503][ T8873] XFS (loop5): Ending clean mount [ 227.269655][ T8877] chnl_net:caif_netlink_parms(): no params data found [ 227.393484][ T5619] XFS (loop5): Unmounting Filesystem [ 227.854309][ T8877] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.878888][ T8931] loop5: detected capacity change from 0 to 128 [ 227.912038][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.925358][ T8877] device bridge_slave_0 entered promiscuous mode [ 228.083229][ T8877] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.098994][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.134514][ T8877] device bridge_slave_1 entered promiscuous mode [ 228.282447][ T8877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.315003][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 228.339235][ T8877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.526348][ T8877] team0: Port device team_slave_0 added [ 228.662146][ T8877] team0: Port device team_slave_1 added [ 228.772606][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.785448][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.815912][ T4287] Bluetooth: hci4: link tx timeout [ 228.821084][ T4287] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 228.832257][ T8877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.909134][ T8964] loop5: detected capacity change from 0 to 8 [ 228.984419][ T8964] SQUASHFS error: zlib decompression failed, data probably corrupt [ 229.013658][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.014460][ T8964] SQUASHFS error: Failed to read block 0x9b: -5 [ 229.023094][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.034894][ T8964] SQUASHFS error: Unable to read metadata cache entry [99] [ 229.060492][ T8877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.113215][ T8964] SQUASHFS error: Unable to read inode 0x127 [ 229.241398][ T8877] device hsr_slave_0 entered promiscuous mode [ 229.258776][ T8877] device hsr_slave_1 entered promiscuous mode [ 229.292419][ T8877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.315237][ T8877] Cannot create hsr debugfs directory [ 229.357608][ T7093] device hsr_slave_0 left promiscuous mode [ 229.388910][ T7093] device hsr_slave_1 left promiscuous mode [ 229.450321][ T8980] loop7: detected capacity change from 0 to 16 [ 229.459261][ T7093] device veth1_macvtap left promiscuous mode [ 229.474048][ T7093] device veth0_macvtap left promiscuous mode [ 229.493404][ T7093] device veth1_vlan left promiscuous mode [ 229.521781][ T7093] device veth0_vlan left promiscuous mode [ 229.532791][ T8980] erofs: (device loop7): mounted with root inode @ nid 36. [ 229.595123][ T4288] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 229.869699][ T8993] loop3: detected capacity change from 0 to 1024 [ 229.939560][ T8993] EXT4-fs: Ignoring removed bh option [ 229.996457][ T8993] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 230.028758][ T8993] EXT4-fs (loop3): shut down requested (2) [ 230.140999][ T8993] EXT4-fs (loop3): unmounting filesystem. [ 230.394616][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 230.858326][ T9004] loop7: detected capacity change from 0 to 32768 [ 230.926419][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 230.926433][ T27] audit: type=1800 audit(238.878:2427): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=38061 res=0 errno=0 [ 230.977934][ T9004] XFS (loop7): Mounting V5 Filesystem [ 231.040388][ T9004] XFS (loop7): Ending clean mount [ 231.237885][ T8156] XFS (loop7): Unmounting Filesystem [ 231.628027][ T9031] loop5: detected capacity change from 0 to 40427 [ 231.647667][ T27] audit: type=1800 audit(239.598:2428): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37847 res=0 errno=0 [ 231.680235][ T9031] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 231.690569][ T9031] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 231.700954][ T9031] F2FS-fs (loop5): invalid crc value [ 231.715579][ T9031] F2FS-fs (loop5): Found nat_bits in checkpoint [ 231.815848][ T9031] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 231.823090][ T9031] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 231.999639][ T5619] syz-executor: attempt to access beyond end of device [ 231.999639][ T5619] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 232.474886][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 232.835285][ T7093] bond0 (unregistering): Released all slaves [ 232.909426][ T8989] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 232.955351][ T27] audit: type=1800 audit(240.918:2429): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185591 res=0 errno=0 [ 232.974698][ T9053] tipc: Started in network mode [ 232.979546][ T9053] tipc: Node identity 1000004, cluster identity 4711 [ 232.988171][ T9053] tipc: Node number set to 16777220 [ 233.018553][ T9054] tipc: Enabled bearer , priority 0 [ 233.025124][ T4316] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 233.060810][ T27] audit: type=1800 audit(240.918:2430): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=185595 res=0 errno=0 [ 233.149648][ T27] audit: type=1800 audit(240.928:2431): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=185674 res=0 errno=0 [ 233.234429][ T4316] usb 6-1: Using ep0 maxpacket: 32 [ 233.241028][ T27] audit: type=1800 audit(240.928:2432): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=185678 res=0 errno=0 [ 233.265765][ T4316] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 233.294537][ T4316] usb 6-1: config 0 has no interface number 0 [ 233.300680][ T4316] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.317156][ T27] audit: type=1800 audit(241.148:2433): pid=8877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=46683 res=0 errno=0 [ 233.342502][ T4316] usb 6-1: config 0 interface 85 has no altsetting 0 [ 233.355552][ T27] audit: type=1800 audit(241.148:2434): pid=8877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=46682 res=0 errno=0 [ 233.367970][ T4316] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 233.454471][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.484431][ T4316] usb 6-1: Product: syz [ 233.518942][ T4316] usb 6-1: Manufacturer: syz [ 233.523584][ T4316] usb 6-1: SerialNumber: syz [ 233.556324][ T4316] usb 6-1: config 0 descriptor?? [ 233.614130][ T27] audit: type=1800 audit(241.568:2435): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=186964 res=0 errno=0 [ 233.651559][ T9074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1365'. [ 233.654588][ T27] audit: type=1800 audit(241.578:2436): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=53225 res=0 errno=0 [ 233.686056][ T8877] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 233.709595][ T8877] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 233.727035][ T8877] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 233.760325][ T8877] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 233.858313][ T6276] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 233.946757][ T8877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.983175][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.002076][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.019724][ T8877] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.032870][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.042660][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.046120][ T6276] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 234.056529][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.067635][ T7113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.087777][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.094169][ T6276] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 234.106166][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.126591][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.133103][ T6276] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.135312][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.149942][ T7113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.182886][ T9071] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 234.193902][ T4316] appletouch 6-1:0.85: Geyser mode initialized. [ 234.207097][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.207915][ T6276] opticon 8-1:1.0: opticon converter detected [ 234.216743][ T4316] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input11 [ 234.251772][ T6276] usb 8-1: opticon converter now attached to ttyUSB0 [ 234.255052][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.299394][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.367746][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.382427][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.435436][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.492092][ T8877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.512705][ T9051] loop5: detected capacity change from 0 to 128 [ 234.541132][ T8877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.554399][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 234.578840][ T22] usb 6-1: USB disconnect, device number 3 [ 234.623936][ T22] appletouch 6-1:0.85: input: appletouch disconnected [ 234.636135][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.648689][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.727542][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.749368][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.786674][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.836202][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.882689][ T4321] usb 8-1: USB disconnect, device number 2 [ 234.926636][ T4321] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 234.957688][ T4321] opticon 8-1:1.0: device disconnected [ 235.537744][ T5412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.564576][ T5412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.596946][ T8877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.853007][ T9151] loop5: detected capacity change from 0 to 128 [ 236.863385][ T5412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.876649][ T5412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.906673][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 236.906687][ T27] audit: type=1800 audit(244.868:2480): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37847 res=0 errno=0 [ 236.955313][ T4288] Bluetooth: hci4: link tx timeout [ 236.960506][ T4288] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 236.969562][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.016656][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.050476][ T8877] device veth0_vlan entered promiscuous mode [ 237.074144][ T27] audit: type=1800 audit(245.028:2481): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187989 res=0 errno=0 [ 237.126167][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.143982][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.189521][ T8877] device veth1_vlan entered promiscuous mode [ 237.215826][ T27] audit: type=1800 audit(245.038:2482): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188072 res=0 errno=0 [ 237.270249][ T5619] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 237.314411][ T27] audit: type=1800 audit(245.038:2483): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=188076 res=0 errno=0 [ 237.336987][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.348260][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.361374][ T5619] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 237.396532][ T27] audit: type=1800 audit(245.038:2484): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=187993 res=0 errno=0 [ 237.404610][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.472931][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.527650][ T8877] device veth0_macvtap entered promiscuous mode [ 237.576639][ T8877] device veth1_macvtap entered promiscuous mode [ 237.795518][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.832447][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.884830][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.917141][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.964967][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.999197][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.018979][ T9169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1385'. [ 238.045134][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.076503][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.151576][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.252925][ T4321] ------------[ cut here ]------------ [ 238.259056][ T4321] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 238.302802][ T4321] WARNING: CPU: 1 PID: 4321 at fs/sysfs/group.c:280 sysfs_remove_group+0x177/0x290 [ 238.312821][ T4321] Modules linked in: [ 238.317210][ T4321] CPU: 1 PID: 4321 Comm: kworker/1:5 Not tainted syzkaller #0 [ 238.324720][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.335279][ T4321] Workqueue: events delete_netdev [ 238.340338][ T4321] RIP: 0010:sysfs_remove_group+0x177/0x290 [ 238.346231][ T4321] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 9b 27 cb ff 49 8b 17 48 c7 c7 60 76 9c 8a 48 89 de e8 d9 3e 45 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 83 cb 79 ff [ 238.365905][ T4321] RSP: 0018:ffffc900040878e0 EFLAGS: 00010246 [ 238.372090][ T4321] RAX: b34011d01cec0700 RBX: ffffffff8b8c5100 RCX: ffff88802de2da00 [ 238.380126][ T4321] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 238.388143][ T4321] RBP: 000000000000008f R08: ffffc90004087567 R09: 1ffff92000810eac [ 238.396179][ T4321] R10: dffffc0000000000 R11: fffff52000810ead R12: 1ffffffff1718934 [ 238.404198][ T4321] R13: dffffc0000000000 R14: ffff88805f28f0e8 R15: ffff88801af89c20 [ 238.412188][ T4321] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 238.421182][ T4321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.427816][ T4321] CR2: 00007f74ea2b3048 CR3: 0000000055ce5000 CR4: 00000000003506e0 [ 238.435892][ T4321] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.443883][ T4321] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.451925][ T4321] Call Trace: [ 238.455247][ T4321] [ 238.458188][ T4321] ? netdev_queue_update_kobjects+0x3a2/0x480 [ 238.464331][ T4321] netdev_queue_update_kobjects+0x3dd/0x480 [ 238.470254][ T4321] netdev_unregister_kobject+0x104/0x250 [ 238.475954][ T4321] unregister_netdevice_many_notify+0x14b6/0x1990 [ 238.482410][ T4321] ? unregister_netdevice_many+0x20/0x20 [ 238.488119][ T4321] ? __mutex_lock+0x7f6/0xae0 [ 238.492838][ T4321] unregister_netdevice_queue+0x2e5/0x330 [ 238.498633][ T4321] ? list_netdevice+0x640/0x640 [ 238.503589][ T4321] ? read_lock_is_recursive+0x10/0x10 [ 238.509034][ T4321] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 238.514973][ T4321] ? _raw_spin_unlock+0x40/0x40 [ 238.519846][ T4321] ? process_one_work+0x7b4/0x1160 [ 238.525023][ T4321] ? process_one_work+0x7b4/0x1160 [ 238.530166][ T4321] lowpan_unregister_netdev+0x18/0x20 [ 238.535609][ T4321] unregister_dev+0x70/0x1a0 [ 238.540222][ T4321] ? process_one_work+0x7b4/0x1160 [ 238.545401][ T4321] process_one_work+0x8ab/0x1160 [ 238.550387][ T4321] ? worker_detach_from_pool+0x240/0x240 [ 238.556094][ T4321] ? _raw_spin_lock_irq+0xb7/0xf0 [ 238.561200][ T4321] ? _raw_spin_lock_irqsave+0x100/0x100 [ 238.566814][ T4321] ? wq_worker_running+0x97/0x190 [ 238.571858][ T4321] worker_thread+0xaf5/0x12a0 [ 238.576629][ T4321] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 238.582557][ T4321] kthread+0x29d/0x330 [ 238.586686][ T4321] ? worker_clr_flags+0x1a0/0x1a0 [ 238.591730][ T4321] ? kthread_blkcg+0xd0/0xd0 [ 238.596386][ T4321] ret_from_fork+0x1f/0x30 [ 238.600843][ T4321] [ 238.603895][ T4321] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 238.611177][ T4321] CPU: 1 PID: 4321 Comm: kworker/1:5 Not tainted syzkaller #0 [ 238.618641][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.628792][ T4321] Workqueue: events delete_netdev [ 238.633838][ T4321] Call Trace: [ 238.637135][ T4321] [ 238.640074][ T4321] dump_stack_lvl+0x188/0x24e [ 238.644755][ T4321] ? memcpy+0x3c/0x60 [ 238.648729][ T4321] ? show_regs_print_info+0x12/0x12 [ 238.653922][ T4321] ? load_image+0x410/0x410 [ 238.658427][ T4321] panic+0x2d3/0x710 [ 238.662323][ T4321] ? bpf_jit_dump+0xd0/0xd0 [ 238.666826][ T4321] ? ret_from_fork+0x1f/0x30 [ 238.671414][ T4321] __warn+0x2f8/0x4f0 [ 238.675390][ T4321] ? sysfs_remove_group+0x177/0x290 [ 238.680588][ T4321] ? sysfs_remove_group+0x177/0x290 [ 238.685781][ T4321] report_bug+0x2ba/0x4f0 [ 238.690102][ T4321] ? sysfs_remove_group+0x177/0x290 [ 238.695307][ T4321] handle_bug+0x3a/0x70 [ 238.699457][ T4321] exc_invalid_op+0x16/0x40 [ 238.703952][ T4321] asm_exc_invalid_op+0x16/0x20 [ 238.708796][ T4321] RIP: 0010:sysfs_remove_group+0x177/0x290 [ 238.714600][ T4321] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 9b 27 cb ff 49 8b 17 48 c7 c7 60 76 9c 8a 48 89 de e8 d9 3e 45 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 83 cb 79 ff [ 238.734204][ T4321] RSP: 0018:ffffc900040878e0 EFLAGS: 00010246 [ 238.740266][ T4321] RAX: b34011d01cec0700 RBX: ffffffff8b8c5100 RCX: ffff88802de2da00 [ 238.748236][ T4321] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 238.756194][ T4321] RBP: 000000000000008f R08: ffffc90004087567 R09: 1ffff92000810eac [ 238.764155][ T4321] R10: dffffc0000000000 R11: fffff52000810ead R12: 1ffffffff1718934 [ 238.772123][ T4321] R13: dffffc0000000000 R14: ffff88805f28f0e8 R15: ffff88801af89c20 [ 238.780102][ T4321] ? netdev_queue_update_kobjects+0x3a2/0x480 [ 238.786172][ T4321] netdev_queue_update_kobjects+0x3dd/0x480 [ 238.792062][ T4321] netdev_unregister_kobject+0x104/0x250 [ 238.797687][ T4321] unregister_netdevice_many_notify+0x14b6/0x1990 [ 238.804102][ T4321] ? unregister_netdevice_many+0x20/0x20 [ 238.809737][ T4321] ? __mutex_lock+0x7f6/0xae0 [ 238.814420][ T4321] unregister_netdevice_queue+0x2e5/0x330 [ 238.820160][ T4321] ? list_netdevice+0x640/0x640 [ 238.825008][ T4321] ? read_lock_is_recursive+0x10/0x10 [ 238.830408][ T4321] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 238.836293][ T4321] ? _raw_spin_unlock+0x40/0x40 [ 238.841133][ T4321] ? process_one_work+0x7b4/0x1160 [ 238.846236][ T4321] ? process_one_work+0x7b4/0x1160 [ 238.851335][ T4321] lowpan_unregister_netdev+0x18/0x20 [ 238.856697][ T4321] unregister_dev+0x70/0x1a0 [ 238.861275][ T4321] ? process_one_work+0x7b4/0x1160 [ 238.866377][ T4321] process_one_work+0x8ab/0x1160 [ 238.871316][ T4321] ? worker_detach_from_pool+0x240/0x240 [ 238.876948][ T4321] ? _raw_spin_lock_irq+0xb7/0xf0 [ 238.881960][ T4321] ? _raw_spin_lock_irqsave+0x100/0x100 [ 238.887498][ T4321] ? wq_worker_running+0x97/0x190 [ 238.892513][ T4321] worker_thread+0xaf5/0x12a0 [ 238.897191][ T4321] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 238.903082][ T4321] kthread+0x29d/0x330 [ 238.907142][ T4321] ? worker_clr_flags+0x1a0/0x1a0 [ 238.912162][ T4321] ? kthread_blkcg+0xd0/0xd0 [ 238.916742][ T4321] ret_from_fork+0x1f/0x30 [ 238.921161][ T4321] [ 238.924431][ T4321] Kernel Offset: disabled [ 238.928869][ T4321] Rebooting in 86400 seconds..