last executing test programs: 20m33.691769784s ago: executing program 3 (id=314): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000340)={0xfffffbff, 0x237f, 0x8007fffd, 0x0, 0xe, "dce4f0020100000000001b347d5c00010200"}) 20m33.488480066s ago: executing program 3 (id=316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) r3 = getpid() syz_pidfd_open(r3, 0x0) 20m33.284635368s ago: executing program 3 (id=317): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0xfab8) close(r2) write(r0, &(0x7f0000000080)='4', 0x1) 20m32.894516608s ago: executing program 3 (id=320): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x210a, 0x2000002}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x0, 0x320}, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x8000, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x0, 0x1d3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x200072}}], 0x1, 0x0, 0x0) 20m32.664537035s ago: executing program 3 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x1, 0x154) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000280)=r1, 0x12) 20m32.450612039s ago: executing program 3 (id=326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000580)={0x2, 0x0, @pic={0xd, 0x2, 0x3, 0x40, 0x4, 0x80, 0x9, 0x61, 0x0, 0x1, 0xf9, 0x6, 0x2, 0x0, 0x6a, 0x6}}) 20m17.287035053s ago: executing program 32 (id=326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000580)={0x2, 0x0, @pic={0xd, 0x2, 0x3, 0x40, 0x4, 0x80, 0x9, 0x61, 0x0, 0x1, 0xf9, 0x6, 0x2, 0x0, 0x6a, 0x6}}) 16m14.484597746s ago: executing program 4 (id=900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x5453, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 16m10.387093805s ago: executing program 4 (id=901): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c8200a0006000100011802"], 0xf) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) 16m9.128600293s ago: executing program 4 (id=904): unshare(0x28000600) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) 16m8.784659303s ago: executing program 4 (id=907): socket$packet(0x11, 0x3, 0x300) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c001) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000100)='./file1\x00', 0x3804c52, &(0x7f0000000000)=ANY=[@ANYBLOB='nocompress,session=0x0000000000000013,nocompress,showassoc,check=strict,iocharset=cp437,cruft,unhide,norock,sbsector=0x00\x00\x00\x00\x00\n\x00\x00\x00000001,map=off,mode=0x000 000000000006,uid=', @ANYRESDEC, @ANYRES16=0x0], 0x3, 0x9bf, &(0x7f0000001640)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 16m6.688543292s ago: executing program 4 (id=909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'macvtap0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) r8 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000080)=r4, 0x12) 16m2.364595887s ago: executing program 4 (id=912): r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x5c4, &(0x7f0000000c40)="$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") fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, r1, 0x0) 16m1.946897283s ago: executing program 33 (id=912): r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x5c4, &(0x7f0000000c40)="$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") fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, r1, 0x0) 29.475132563s ago: executing program 2 (id=2394): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda0602000060fde80001dd0000040d000600ea110000000500", 0x27}], 0x1) 28.425297956s ago: executing program 2 (id=2397): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3a00006, &(0x7f0000000080)={[{@norecovery}, {@quota}]}, 0x3, 0x610, &(0x7f0000000500)="$eJzs3c9vG1UeAPDv2EmaNNUmjVa72z1sI61WrbTbpEnbVYQ4tFdUReWHuMCB0KSlNG2jJghSkJpK5YKEuCCExIkD5b+Ail57ghMHLpxQpQhQuSFhZHsmiRM7P5zEU3U+H8n1zHuevO80+Xpmnt8bB1BYw9V/ShFHImIuiRhIllbquiKtHK6/7vGv712sPpKoVF78eSiStCx7fZI+96cb90bEt98kMVTe2O784q2rU7OzMzfT9dGFa3Oj84u3Tly5NnV55vLM9fH/j0+cOX1mYuxkW/t1e2PRb+fvvvn2wAeTr3zx2e/J2Jc/TCZxNp5LX7h2P/bKcAzX/k+SjVX9E3vdWE7K6d9JpVKpZGVJV74xsX3Z7687Iv4eA1GO1V/eQLz/fK7BAfuqktTfu4EiStrK/769DwTosOw8ILu2X38dXMrlrATohOVz9Q6AjfnfVe8bjN5a38DBx0ms7dZJIqK9nrlGhyLi4YPJu5ceTN6NfeqHA5pbuhMR/2iW/0kt/wejNwZr+V9qyP/qecGF9Lla/kKb7a/vKpb/0Dn1/O/dNP+jRf6/Vn2+Xc/h19tqvXftyht9Dfnf1+4uAQAAAAAAQGHdPxcR/1v5/L9n9fO30sr4n2gy/qc/Is7uQfvD69Y3fv5ferQHzQBNLJ+LeLbp+N9SNvp3sLxmCutgdCeXrszOnIyIv0TE8eg+UF0f26SNEx8Ofdqqbjgd/5c9qu0/TMcCpnE86jrQuM301MLULnYZSC3fifI/m47/TVaO/0mT43/1nWFum20M/efehVZ1W+c/sF8qn0cca3r8X71rRbL5/TlGa+cDo9lZwUb/evejr1q1327+u8UE7N7ynYiDm+f/YLL2fj3zO2/j1GJXpVVdu+f/PclLtbsK9aRl70wtLNwci+hJzperpQ3l4zuPGZ5GWT5k+VLN/+P/Xs3/cpP+v2bn/30RsbTuZye/NM4pzvztj/4fW8Xj/B/yU83/6R0d/3e+MH5v8OtW7W/v+H+6dqw/npbo/4O6T7I07eluKG+Sjl3NqjoeMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BUoRcSiS0sjKcqk0MhLRHxF/jYOl2RvzC/+9dOOt69PVutr3/5eyb/odqK8n2ff/D65ZH1+3fioiDkfEx+W+2vrIxRuz03nvPAAAAAAAAAAAAAAAAAAAADwh+lvM/6/6qZx3dMC+68o7ACA3TfL/uzziADrP8R+KS/5Dccl/KC75D8Ul/6G4Ns//Vyc6FgjQcY7/UFzyHwAAAAAAniqHj97/PomIpWf6ao+qnrSuO9fIgP1WyjsAIDdu8QPFZegPFJdrfCDZor635UZbbbmZuYu72BgAAAAAAAAAAAAACufYEfP/oajM/4fiMv8fiiub/3805ziAznOND8QWM/mbzv/fcqs1XGgAAAAAAAAAAAAAwK7NL966OjU7O3PTwsttbJWNas49+PYWKpXK7Wr4T0o8e7+QpCPUO9JoNhS+83vas50dzOb6be8nb3yvONCh9yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDRnwEAAP//4Fgg0g==") syz_mount_image$vfat(&(0x7f0000005880), &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xb58a, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 27.345299693s ago: executing program 2 (id=2399): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="201265000000e001a27c0e2ed78576e1ece28ae870ef2be735289426ca2d99b52be8211ba8cc221e650e2207cb58aaa34fcfeaf4c79e6fde679b"], 0x0, 0x0}) 26.656192356s ago: executing program 2 (id=2400): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xf, &(0x7f0000000380)=@string={0xf, 0x3, "9b4e39bfe74286e678e4bd0434"}}, {0x0, 0x0}, {0x19, &(0x7f00000005c0)=@string={0x19, 0x3, "5d86018b32eb03a4d2322810a0756f2aac9e8884a99c45"}}]}) syz_usb_connect$cdc_ncm(0x7, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 25.944978633s ago: executing program 2 (id=2404): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda0602000060fde80001dd0000040d000600ea11000000050000", 0x28}], 0x1) 25.810689999s ago: executing program 2 (id=2406): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x3e9, 0x4, 0x70bd27, 0x25dfdbfe, {0x40, 0x0, 0x1, r0, 0x8, 0x400005, 0x9, 0x6, 0x0, 0x2, 0x800}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004814) 8.126265814s ago: executing program 5 (id=2453): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) keyctl$setperm(0x5, r5, 0x4221030) keyctl$KEYCTL_MOVE(0x3, r5, 0x0, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) 5.211508426s ago: executing program 5 (id=2462): openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0) iopl(0x3) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={0x0}, 0x18) 5.093388029s ago: executing program 1 (id=2456): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) fanotify_init(0x2, 0x2) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) fstat(r1, &(0x7f0000000180)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bacff6b94ff5e41400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011e567c4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006208000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000000000000000000ff000000000000800300000000", @ANYRES32=r4, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f90000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600"], 0x0, 0x0, 0x0}) fchown(r2, r4, r5) 5.053447236s ago: executing program 5 (id=2457): request_key(&(0x7f0000001d40)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b40)=0xe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x1}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000640)={{0x6, 0x4, 0x1, 0x3, 'syz0\x00'}, 0x0, [0x7fff, 0x5, 0x1, 0x8, 0x6, 0x720, 0x4, 0x7, 0x8, 0x5, 0x4, 0x4, 0x7e, 0x3ff, 0x1, 0x7, 0xa9, 0x1000, 0x19564bd4, 0x3, 0x800, 0xfffffffffffff62d, 0x3, 0x8, 0x3e, 0x2, 0x9, 0x1, 0x0, 0x9, 0x1, 0xffffffffffffff09, 0x5, 0x3, 0x8, 0x1, 0x3, 0x7, 0x7, 0x2, 0x6b, 0x800, 0x7, 0x6, 0xf676, 0x2, 0x9, 0x8000000000000000, 0x10001, 0x5, 0x9, 0x9, 0x0, 0x2, 0x8000000000000001, 0x0, 0x7fffffffffffffff, 0x6, 0x5, 0x8, 0x8, 0x6, 0x7, 0x3, 0x81, 0x65c, 0x6, 0x2, 0xb3, 0x400, 0x0, 0x9, 0x6f, 0x0, 0x6, 0x81, 0x3, 0x4, 0x7, 0x6, 0x1, 0x7ffffffd, 0x4, 0xfece, 0x201d1db0, 0x8, 0x9, 0x3, 0xffff, 0x100, 0x0, 0x20000000000040, 0xb, 0x4, 0x8000000000000000, 0x0, 0x5, 0x800, 0x5, 0x1, 0x2000000000000002, 0x1d, 0xffffffffffff8000, 0x0, 0x1, 0x4, 0x3, 0x400075c, 0x4, 0x0, 0x7, 0x0, 0x3, 0x5, 0xa, 0xfffffffffffffff8, 0x5, 0x2, 0xffffffffffff0262, 0x7ddb, 0x1, 0x7ff, 0x6, 0x10000, 0x4, 0x750d, 0x6]}) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000002000)=""/4096, 0x1000}, {0x0}, {0x0}], 0x4}, 0x1}], 0x2, 0x40002000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id\x00', 0x0, 0x0) 4.88032261s ago: executing program 5 (id=2458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000012000101000000000000000000000000000000000000000004000000000000000300"/55, @ANYRES32=0x0, @ANYBLOB="00000000070000000003"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 4.732595128s ago: executing program 0 (id=2459): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 3.952987358s ago: executing program 5 (id=2460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ptrace$peeksig(0x4209, r1, 0x0, &(0x7f0000000240)=[{}]) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./trace/error_log\x00', 0x118) futex(&(0x7f000000cffc)=0xfffffffd, 0x6, 0x2, 0x0, 0x0, 0x400000) mmap(&(0x7f00007a5000/0x4000)=nil, 0x4000, 0x1000007, 0x204031, r3, 0xec77a000) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000ff0f800007000000ddfffffffe5004e320ebb20191ae2e75261073eb364b2caa930a42dfade3d48d56ba572e1af98068f463ac1ac901eb9705122bad7fcb276433875dbdea72e27ec8f89dfbcc97ba86fc3780c4c6014015624765aa6a0bc49d5ef5bd49224fe57a0571728b007ccde5d2e90b61d2bf", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={0xffffffffffffffff, r5}, 0xc) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000000)={0x210a, r5}, 0x0) 3.858112267s ago: executing program 1 (id=2461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) 3.744423319s ago: executing program 0 (id=2463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.743588511s ago: executing program 1 (id=2464): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8413, &(0x7f0000000280)={[{@i_version}, {}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@acl}, {@data_err_ignore}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@resgid}, {@sysvgroups}]}, 0x18, 0x56a, &(0x7f0000000780)="$eJzs3c9vHFcdAPDvjL3+kTixCxygEm2hRWkEWce12lgcSpEQnCqByj249tqysrYje93GVqU44g9AQqggcePSCxJ/ABJU6oVjhVQJroAACVWQwgEk6KBZz65dezbZuutdx/58pMm892bfft+b3RnPvJ3MBHBuvVRMH2ZZdjUiJovytJi+mGd2I56KiA/uv7GQT0lk2St/TyIpylrvlTWNxsW9KvkbjMS3Il5Njsbd3N65NV+v1zaK/HRj9fb05vbOtZXV+eXacm1tdnbmhbkbc8/PXf8k3Vu6WCQuRcSL3/jrmz9465sv/uorr//p5t+GWq2+G4f68TENlxcf7HQlxvLZ+H7JxjGDnUatFdD87ox3V+de8RUBAKC/8uPSTxXH+VdjMoY6Hc4CAAAAj6zsaxPx36T1290RIx3KAQAAgEdIGhETkaTV4nrfiUjTajWa1/B+Ji6k9fXNxpeX1rfWFvNlEVNRSZdW6rXrxfWeU1FJ8vxMM72ff+5QfjYiHksjfjQ53sxXF9bri4Me/AAAAIBz4uKh8/9/Tabp6KAbBQAAAPTe1KAbAAAAAJw45/8AAABw9jn/BwAAgDPt2y+/nE9Z6/nXi69tb91af+3aYm3zVnV1a6G6sL5xu7q8vr7cvGff6gPfrP3owLWtO9ON2mZjLCJurq5vrTVuruw9AhsAAADov8eefPv3SUTsfnW8OeVGDiz/T/GcgIE1EDgx7SG7SIr5yNEX/fHy3vwvfWoU0BdDBzNvDq4dQP81//6PH6vq8WoBp0Zl0A0ABi7ZT06WLR9LhssrvlvMv9BtJIcNAAAwKFc+1/n3//SBNXcfvBg49WzEcH4NDboBwMA0R/VLLvkr5WABzpRK+wggGXBLgEF52Nbf8eYd73Yb4cD/IRrttg4AANBLE80pSavF8N5EpGm1GnGp+ViASrK0Uq9dj4jLEfG7ycponp9p1kyMGAAAAAAAAAAAAAAAAAAAAAAAAABAl7IsiQwAAAA40yLS0eSdvXv5X5l8ZuLw+MBI8u/JKB4R+vpPX/nxnflGY2MmL/9Hu7zxk6L8uaPjC8N9GcUAAACA86HbR2q3ztNb5/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Esf3H9joTX1M+77X4+IqbL4wzHWnI9FJSIu/DOJ4QP1kogY6kH83XsR8dmy+EnerHbIsvjjJx8/poq1UBb/Yg/iw3n2dr7/eals+0vjqea8fPsbjvhI/rg67/+ivf8b6rD9X+oyxuPv/WL6IwVv7e85378X8fhw+f6nFT/pEP/pLuN/77s7O+VLxtqpsvgHY003Vm9Pb27vXFtZnV+uLdfWZmdnXpi7Mff83PXppZV6rfg3Im4c2S3+8PO//LBT2/L+X+gQf+oh/X+my/7/77079z8dr+bJSln8Z58uif+bn7XX0eH4afG370tFOl9+pZXe3Usf9MTPf/vEg/q/2KH/D/v8n+2y/1e/8/0/d/lSAKAPNrd3bs3X67WNRyaRDUWULRruUCs/S+9zUyNOw4o6mkiLD/20tGfgibv7Jb/+w966eTKO/83MsuwTrt4ky7K7PejgRPFJd13ryuW9FyftkgHtkAAAgBOzfxpw4NeJywNuFAAAAAAAAAAAAAAAAAAAAJwzm9vvnPhd1g7H3G2nkl7cQhsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCf+HwAA//9l69qG") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) 2.433682161s ago: executing program 0 (id=2465): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) 2.096668846s ago: executing program 0 (id=2466): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000300)=ANY=[], 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.704831671s ago: executing program 0 (id=2467): pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(r0, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5603, 0x9521) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) pidfd_getfd(r1, r1, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x20}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0x4800a}, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x179) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f00000002c0)) 1.497159571s ago: executing program 0 (id=2468): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000100)=ANY=[@ANYBLOB="d64d8913a0882fb539ae09151f60c9df3cb3af7ff5d8", @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x0, 0x55e, &(0x7f0000001080)="$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") socket$packet(0x11, 0x3, 0x300) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x2004, 0x0, 0x2, 0x8}, 0x20) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 623.442999ms ago: executing program 5 (id=2469): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[], 0xa8}}, 0x40080) 266.007738ms ago: executing program 1 (id=2470): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 100.66319ms ago: executing program 1 (id=2471): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc, 0x11, r3, 0xd92a7000) 0s ago: executing program 1 (id=2472): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e079c0814"], 0xa) kernel console output (not intermixed with test programs): 675] ? lockdep_unlock+0x146/0x2e0 [ 224.166962][ T7675] ? lockdep_lock+0x230/0x230 [ 224.171678][ T7675] ? add_lock_to_list+0x191/0x280 [ 224.176712][ T7675] ? __lock_acquire+0x357f/0x7d80 [ 224.181763][ T7675] ? verify_lock_unused+0x140/0x140 [ 224.186970][ T7675] ? cgroup_rstat_updated+0xd5/0x360 [ 224.192273][ T7675] reclaim_folio_list+0xf6/0x3a0 [ 224.197233][ T7675] ? __mod_memcg_lruvec_state+0x1ac/0x280 [ 224.202963][ T7675] ? reclaim_pages+0x690/0x690 [ 224.207748][ T7675] reclaim_pages+0x574/0x690 [ 224.212341][ T7675] ? madvise_cold_or_pageout_pte_range+0x1d92/0x2030 [ 224.219032][ T7675] ? folio_isolate_lru+0xef0/0xef0 [ 224.224154][ T7675] ? do_raw_spin_unlock+0x121/0x230 [ 224.229365][ T7675] madvise_cold_or_pageout_pte_range+0x188e/0x2030 [ 224.235888][ T7675] ? folio_put+0xd0/0xd0 [ 224.240145][ T7675] walk_pgd_range+0xc40/0x1810 [ 224.245072][ T7675] ? walk_kernel_page_table_range+0x260/0x260 [ 224.251158][ T7675] __walk_page_range+0x137/0x5b0 [ 224.256102][ T7675] ? process_vma_walk_lock+0x140/0x450 [ 224.261580][ T7675] walk_page_range+0x35a/0x520 [ 224.266359][ T7675] ? page_mapped_in_vma+0x9a0/0x9a0 [ 224.271574][ T7675] ? mlock_drain_local+0x79/0x490 [ 224.276613][ T7675] do_madvise+0x24e4/0x3790 [ 224.281147][ T7675] ? madvise_set_anon_name+0x440/0x440 [ 224.286616][ T7675] ? schedule+0xc7/0x170 [ 224.290864][ T7675] ? futex_wait_queue+0x27/0x1b0 [ 224.295809][ T7675] ? futex_wait_queue+0x138/0x1b0 [ 224.300835][ T7675] ? futex_unqueue+0xcb/0xf0 [ 224.305430][ T7675] ? futex_wait+0x4a7/0x5c0 [ 224.309939][ T7675] ? futex_wait_setup+0x270/0x270 [ 224.314981][ T7675] ? file_end_write+0x159/0x250 [ 224.319842][ T7675] ? vfs_write+0x5de/0x9a0 [ 224.324277][ T7675] ? do_futex+0x2ff/0x3e0 [ 224.328635][ T7675] ? __ia32_sys_get_robust_list+0x110/0x110 [ 224.334543][ T7675] ? lock_chain_count+0x20/0x20 [ 224.339411][ T7675] __x64_sys_madvise+0xa6/0xc0 [ 224.344184][ T7675] do_syscall_64+0x55/0xb0 [ 224.348615][ T7675] ? clear_bhb_loop+0x40/0x90 [ 224.353298][ T7675] ? clear_bhb_loop+0x40/0x90 [ 224.357979][ T7675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.363880][ T7675] RIP: 0033:0x7f0b6359e159 [ 224.368295][ T7675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.387902][ T7675] RSP: 002b:00007f0b64541028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 224.396319][ T7675] RAX: ffffffffffffffda RBX: 00007f0b63825fa0 RCX: 00007f0b6359e159 [ 224.404293][ T7675] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 224.412263][ T7675] RBP: 00007f0b6363506b R08: 0000000000000000 R09: 0000000000000000 [ 224.420234][ T7675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.428262][ T7675] R13: 00007f0b63826038 R14: 00007f0b63825fa0 R15: 00007ffc0c77dd08 [ 224.436249][ T7675] [ 224.449054][ T59] kworker/u4:4: attempt to access beyond end of device [ 224.449054][ T59] loop1: rw=1, sector=608, nr_sectors = 416 limit=256 [ 224.669497][ T59] kworker/u4:4: attempt to access beyond end of device [ 224.669497][ T59] loop1: rw=1, sector=1056, nr_sectors = 31776 limit=256 [ 225.059884][ T7709] FAULT_INJECTION: forcing a failure. [ 225.059884][ T7709] name failslab, interval 1, probability 0, space 0, times 0 [ 225.115140][ T7709] CPU: 0 PID: 7709 Comm: syz.1.538 Not tainted syzkaller #0 [ 225.122498][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.132573][ T7709] Call Trace: [ 225.135864][ T7709] [ 225.138814][ T7709] dump_stack_lvl+0x18c/0x250 [ 225.143531][ T7709] ? show_regs_print_info+0x20/0x20 [ 225.148772][ T7709] ? load_image+0x420/0x420 [ 225.153308][ T7709] ? __might_sleep+0xe0/0xe0 [ 225.157934][ T7709] ? __lock_acquire+0x7d80/0x7d80 [ 225.163003][ T7709] should_fail_ex+0x394/0x4c0 [ 225.167727][ T7709] should_failslab+0x9/0x20 [ 225.172260][ T7709] slab_pre_alloc_hook+0x59/0x300 [ 225.177315][ T7709] ? kvmalloc_node+0x70/0x180 [ 225.182027][ T7709] ? kvmalloc_node+0x70/0x180 [ 225.186738][ T7709] __kmem_cache_alloc_node+0x53/0x250 [ 225.192147][ T7709] ? kvmalloc_node+0x70/0x180 [ 225.196858][ T7709] __kmalloc_node+0xa6/0x240 [ 225.201482][ T7709] kvmalloc_node+0x70/0x180 [ 225.206009][ T7709] alloc_netdev_mqs+0xa5a/0x1040 [ 225.210971][ T7709] ? ip6gre_tunnel_locate+0x660/0x660 [ 225.216407][ T7709] ip6gre_tunnel_locate+0x1d2/0x660 [ 225.221636][ T7709] ? ip6gre_tnl_change+0x980/0x980 [ 225.226775][ T7709] ? __asan_memcpy+0x40/0x70 [ 225.231383][ T7709] ? ip6gre_tunnel_siocdevprivate+0x51f/0x740 [ 225.237463][ T7709] ip6gre_tunnel_siocdevprivate+0x54c/0x740 [ 225.243394][ T7709] ? ip6gre_tunnel_init+0x150/0x150 [ 225.248627][ T7709] ? __mutex_lock+0x30d/0xc80 [ 225.253349][ T7709] ? dev_ioctl+0x83c/0x1140 [ 225.257899][ T7709] ? dev_ifsioc+0x957/0xc40 [ 225.262417][ T7709] dev_ioctl+0x84c/0x1140 [ 225.266770][ T7709] sock_ioctl+0x74c/0x7e0 [ 225.271111][ T7709] ? sock_poll+0x3e0/0x3e0 [ 225.271557][ T5784] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 225.275635][ T7709] ? bpf_lsm_file_ioctl+0x9/0x10 [ 225.287341][ T7709] ? security_file_ioctl+0x80/0xa0 [ 225.292477][ T7709] ? sock_poll+0x3e0/0x3e0 [ 225.296890][ T7709] __se_sys_ioctl+0xfd/0x170 [ 225.301480][ T7709] do_syscall_64+0x55/0xb0 [ 225.305892][ T7709] ? clear_bhb_loop+0x40/0x90 [ 225.310570][ T7709] ? clear_bhb_loop+0x40/0x90 [ 225.315260][ T7709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.321159][ T7709] RIP: 0033:0x7f74d999e159 [ 225.325566][ T7709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.345198][ T7709] RSP: 002b:00007f74da811028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.353608][ T7709] RAX: ffffffffffffffda RBX: 00007f74d9c25fa0 RCX: 00007f74d999e159 [ 225.361585][ T7709] RDX: 0000200000000340 RSI: 00000000000089f1 RDI: 0000000000000006 [ 225.369553][ T7709] RBP: 00007f74d9a3506b R08: 0000000000000000 R09: 0000000000000000 [ 225.377521][ T7709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.385487][ T7709] R13: 00007f74d9c26038 R14: 00007f74d9c25fa0 R15: 00007ffe9fca9ea8 [ 225.393459][ T7709] [ 225.438691][ T7111] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.563557][ T7714] loop2: detected capacity change from 0 to 2048 [ 225.651169][ T7714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.116436][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.467608][ T7753] loop1: detected capacity change from 0 to 512 [ 228.570928][ T7753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.619731][ T7753] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.898683][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.404710][ T7749] FAULT_INJECTION: forcing a failure. [ 229.404710][ T7749] name failslab, interval 1, probability 0, space 0, times 0 [ 230.029381][ T7777] loop1: detected capacity change from 0 to 128 [ 230.169019][ T7777] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 230.264721][ T7749] CPU: 0 PID: 7749 Comm: syz.0.547 Not tainted syzkaller #0 [ 230.272077][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.282161][ T7749] Call Trace: [ 230.285466][ T7749] [ 230.288414][ T7749] dump_stack_lvl+0x18c/0x250 [ 230.293124][ T7749] ? show_regs_print_info+0x20/0x20 [ 230.298348][ T7749] ? load_image+0x420/0x420 [ 230.302874][ T7749] ? __might_sleep+0xe0/0xe0 [ 230.307488][ T7749] ? percpu_ref_put+0x12/0x100 [ 230.312272][ T7749] should_fail_ex+0x394/0x4c0 [ 230.316986][ T7749] should_failslab+0x9/0x20 [ 230.321515][ T7749] slab_pre_alloc_hook+0x59/0x300 [ 230.326567][ T7749] kmem_cache_alloc_lru+0x4d/0x2b0 [ 230.331700][ T7749] ? xas_split_alloc+0x197/0x480 [ 230.336672][ T7749] xas_split_alloc+0x197/0x480 [ 230.341467][ T7749] split_huge_page_to_list+0x7b4/0x1650 [ 230.347051][ T7749] ? can_split_folio+0x8d0/0x8d0 [ 230.352016][ T7749] ? mark_lock+0x94/0x320 [ 230.356397][ T7749] ? __might_sleep+0xe0/0xe0 [ 230.361016][ T7749] ? folio_evictable+0x1c/0x320 [ 230.365884][ T7749] ? folio_evictable+0x1c/0x320 [ 230.370765][ T7749] shrink_folio_list+0x1ad8/0x7e80 [ 230.375939][ T7749] ? reclaim_clean_pages_from_list+0xc00/0xc00 [ 230.382136][ T7749] ? mark_lock+0x94/0x320 [ 230.386487][ T7749] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 230.392483][ T7749] ? read_lock_is_recursive+0x20/0x20 [ 230.397878][ T7749] ? lock_chain_count+0x20/0x20 [ 230.402746][ T7749] ? finish_task_switch+0x262/0x8f0 [ 230.407956][ T7749] ? lockdep_hardirqs_on+0x98/0x150 [ 230.413174][ T7749] ? finish_task_switch+0x262/0x8f0 [ 230.418390][ T7749] ? __schedule+0x15b6/0x4660 [ 230.423102][ T7749] reclaim_folio_list+0xf6/0x3a0 [ 230.428068][ T7749] ? __mod_memcg_lruvec_state+0x1ac/0x280 [ 230.433821][ T7749] ? reclaim_pages+0x690/0x690 [ 230.438616][ T7749] ? preempt_schedule+0xc0/0xd0 [ 230.443495][ T7749] reclaim_pages+0x574/0x690 [ 230.448126][ T7749] ? folio_isolate_lru+0xef0/0xef0 [ 230.453265][ T7749] ? preempt_schedule_thunk+0x1a/0x30 [ 230.458673][ T7749] madvise_cold_or_pageout_pte_range+0x188e/0x2030 [ 230.465233][ T7749] ? __schedule+0x15b6/0x4660 [ 230.469952][ T7749] ? folio_put+0xd0/0xd0 [ 230.474220][ T7749] ? read_lock_is_recursive+0x20/0x20 [ 230.479622][ T7749] walk_pgd_range+0xc40/0x1810 [ 230.484435][ T7749] ? walk_kernel_page_table_range+0x260/0x260 [ 230.490529][ T7749] __walk_page_range+0x137/0x5b0 [ 230.495489][ T7749] ? __sanitizer_cov_trace_switch+0x8/0xe0 [ 230.501318][ T7749] ? process_vma_walk_lock+0x140/0x450 [ 230.506792][ T7749] walk_page_range+0x35a/0x520 [ 230.511572][ T7749] ? page_mapped_in_vma+0x9a0/0x9a0 [ 230.516790][ T7749] ? mlock_drain_local+0x79/0x490 [ 230.521837][ T7749] do_madvise+0x24e4/0x3790 [ 230.526378][ T7749] ? madvise_set_anon_name+0x440/0x440 [ 230.531859][ T7749] ? schedule+0xc7/0x170 [ 230.536124][ T7749] ? futex_wait_queue+0x27/0x1b0 [ 230.541073][ T7749] ? futex_wait_queue+0x138/0x1b0 [ 230.546116][ T7749] ? futex_unqueue+0xcb/0xf0 [ 230.550722][ T7749] ? futex_wait+0x4a7/0x5c0 [ 230.555253][ T7749] ? futex_wait_setup+0x270/0x270 [ 230.560325][ T7749] ? do_futex+0x2ff/0x3e0 [ 230.564677][ T7749] ? __ia32_sys_get_robust_list+0x110/0x110 [ 230.570608][ T7749] ? lock_chain_count+0x20/0x20 [ 230.575489][ T7749] __x64_sys_madvise+0xa6/0xc0 [ 230.580279][ T7749] do_syscall_64+0x55/0xb0 [ 230.584717][ T7749] ? clear_bhb_loop+0x40/0x90 [ 230.589425][ T7749] ? clear_bhb_loop+0x40/0x90 [ 230.594126][ T7749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.600047][ T7749] RIP: 0033:0x7f6b1579e159 [ 230.604474][ T7749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.624105][ T7749] RSP: 002b:00007f6b16648028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 230.632538][ T7749] RAX: ffffffffffffffda RBX: 00007f6b15a25fa0 RCX: 00007f6b1579e159 [ 230.640526][ T7749] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 230.648694][ T7749] RBP: 00007f6b1583506b R08: 0000000000000000 R09: 0000000000000000 [ 230.656698][ T7749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.664748][ T7749] R13: 00007f6b15a26038 R14: 00007f6b15a25fa0 R15: 00007ffedef05e68 [ 230.672771][ T7749] [ 230.939119][ T7777] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.051323][ T7777] ext2 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.544812][ T7795] loop2: detected capacity change from 0 to 512 [ 231.577063][ T7795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.668468][ T7797] usb usb8: usbfs: process 7797 (syz.4.557) did not claim interface 0 before use [ 231.716082][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.794670][ T2924] tipc: Subscription rejected, illegal request [ 233.476217][ T5778] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.258654][ T7850] tty tty4: ldisc open failed (-12), clearing slot 3 [ 238.557445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 239.934324][ T7920] loop0: detected capacity change from 0 to 512 [ 239.966510][ T7920] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 240.057473][ T7920] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 240.108755][ T7920] EXT4-fs (loop0): orphan file too big: 67108874 [ 240.115501][ T7920] EXT4-fs (loop0): mount failed [ 240.298554][ T7914] FAULT_INJECTION: forcing a failure. [ 240.298554][ T7914] name failslab, interval 1, probability 0, space 0, times 0 [ 240.331754][ T7914] CPU: 1 PID: 7914 Comm: syz.1.567 Not tainted syzkaller #0 [ 240.339113][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.349196][ T7914] Call Trace: [ 240.352502][ T7914] [ 240.355455][ T7914] dump_stack_lvl+0x18c/0x250 [ 240.360170][ T7914] ? show_regs_print_info+0x20/0x20 [ 240.365408][ T7914] ? load_image+0x420/0x420 [ 240.369947][ T7914] ? __might_sleep+0xe0/0xe0 [ 240.374579][ T7914] ? percpu_ref_put+0x12/0x100 [ 240.379377][ T7914] should_fail_ex+0x394/0x4c0 [ 240.384100][ T7914] should_failslab+0x9/0x20 [ 240.388644][ T7914] slab_pre_alloc_hook+0x59/0x300 [ 240.393711][ T7914] kmem_cache_alloc_lru+0x4d/0x2b0 [ 240.398861][ T7914] ? xas_split_alloc+0x197/0x480 [ 240.403838][ T7914] xas_split_alloc+0x197/0x480 [ 240.408645][ T7914] split_huge_page_to_list+0x7b4/0x1650 [ 240.414235][ T7914] ? can_split_folio+0x8d0/0x8d0 [ 240.419214][ T7914] ? __might_sleep+0xe0/0xe0 [ 240.423858][ T7914] ? folio_evictable+0x1c/0x320 [ 240.428740][ T7914] ? folio_evictable+0x1c/0x320 [ 240.433620][ T7914] shrink_folio_list+0x1ad8/0x7e80 [ 240.438808][ T7914] ? reclaim_clean_pages_from_list+0xc00/0xc00 [ 240.444999][ T7914] ? verify_lock_unused+0x140/0x140 [ 240.450236][ T7914] ? mark_lock+0x94/0x320 [ 240.454605][ T7914] ? __lock_acquire+0x1336/0x7d80 [ 240.459698][ T7914] ? verify_lock_unused+0x140/0x140 [ 240.464935][ T7914] ? cgroup_rstat_updated+0xd5/0x360 [ 240.470263][ T7914] ? __lock_acquire+0x1336/0x7d80 [ 240.475331][ T7914] reclaim_folio_list+0xf6/0x3a0 [ 240.480310][ T7914] ? __mod_memcg_lruvec_state+0x1ac/0x280 [ 240.486080][ T7914] ? reclaim_pages+0x690/0x690 [ 240.490897][ T7914] reclaim_pages+0x574/0x690 [ 240.495519][ T7914] ? madvise_cold_or_pageout_pte_range+0x1d92/0x2030 [ 240.502235][ T7914] ? folio_isolate_lru+0xef0/0xef0 [ 240.507392][ T7914] ? do_raw_spin_unlock+0x121/0x230 [ 240.512629][ T7914] madvise_cold_or_pageout_pte_range+0x188e/0x2030 [ 240.519193][ T7914] ? folio_put+0xd0/0xd0 [ 240.523490][ T7914] walk_pgd_range+0xc40/0x1810 [ 240.528323][ T7914] ? walk_kernel_page_table_range+0x260/0x260 [ 240.534432][ T7914] __walk_page_range+0x137/0x5b0 [ 240.539406][ T7914] ? process_vma_walk_lock+0x140/0x450 [ 240.544899][ T7914] walk_page_range+0x35a/0x520 [ 240.549700][ T7914] ? page_mapped_in_vma+0x9a0/0x9a0 [ 240.554934][ T7914] ? mlock_drain_local+0x79/0x490 [ 240.559999][ T7914] do_madvise+0x24e4/0x3790 [ 240.564555][ T7914] ? madvise_set_anon_name+0x440/0x440 [ 240.570051][ T7914] ? schedule+0xc7/0x170 [ 240.574330][ T7914] ? futex_wait_queue+0x27/0x1b0 [ 240.579298][ T7914] ? futex_wait_queue+0x138/0x1b0 [ 240.584357][ T7914] ? futex_unqueue+0xcb/0xf0 [ 240.588979][ T7914] ? futex_wait+0x4a7/0x5c0 [ 240.593520][ T7914] ? futex_setup_timer+0xc0/0xc0 [ 240.598490][ T7914] ? futex_wait_setup+0x270/0x270 [ 240.603569][ T7914] ? file_end_write+0x159/0x250 [ 240.608459][ T7914] ? vfs_write+0x5de/0x9a0 [ 240.612919][ T7914] ? do_futex+0x2ff/0x3e0 [ 240.617294][ T7914] ? __ia32_sys_get_robust_list+0x110/0x110 [ 240.623238][ T7914] ? lock_chain_count+0x20/0x20 [ 240.628136][ T7914] __x64_sys_madvise+0xa6/0xc0 [ 240.632953][ T7914] do_syscall_64+0x55/0xb0 [ 240.637408][ T7914] ? clear_bhb_loop+0x40/0x90 [ 240.642119][ T7914] ? clear_bhb_loop+0x40/0x90 [ 240.646841][ T7914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.652772][ T7914] RIP: 0033:0x7f74d999e159 [ 240.657215][ T7914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.676863][ T7914] RSP: 002b:00007f74da811028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 240.685316][ T7914] RAX: ffffffffffffffda RBX: 00007f74d9c25fa0 RCX: 00007f74d999e159 [ 240.693320][ T7914] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 240.701323][ T7914] RBP: 00007f74d9a3506b R08: 0000000000000000 R09: 0000000000000000 [ 240.709329][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.717335][ T7914] R13: 00007f74d9c26038 R14: 00007f74d9c25fa0 R15: 00007ffe9fca9ea8 [ 240.725354][ T7914] [ 240.849066][ T7947] loop2: detected capacity change from 0 to 128 [ 240.868635][ T7947] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 241.054054][ T7947] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.070491][ T7947] ext2 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.026554][ T7964] loop0: detected capacity change from 0 to 8 [ 243.267744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 244.929534][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.713819][ T7981] loop2: detected capacity change from 0 to 512 [ 245.743053][ T7981] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 245.793239][ T7981] EXT4-fs (loop2): orphan file too big: 67108874 [ 245.839054][ T7981] EXT4-fs (loop2): mount failed [ 246.097543][ T7120] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.934913][ T7997] loop4: detected capacity change from 0 to 512 [ 246.952877][ T7997] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 247.167517][ T5826] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 247.405259][ T5826] usb 1-1: not running at top speed; connect to a high speed hub [ 247.421584][ T5826] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25702, setting to 64 [ 247.449755][ T5826] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 247.484706][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.503168][ T5826] usb 1-1: Product: syz [ 247.514438][ T5826] usb 1-1: Manufacturer: syz [ 247.524619][ T5826] usb 1-1: SerialNumber: syz [ 247.585387][ T7996] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 247.642591][ T5826] oti6858 1-1:1.0: oti6858 converter detected [ 247.675046][ T5826] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 248.120340][ T8005] loop4: detected capacity change from 0 to 128 [ 248.268545][ T8005] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 248.420932][ T8005] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.466644][ T8005] ext2 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.810216][ T8016] loop1: detected capacity change from 0 to 128 [ 248.847352][ T8016] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 248.937021][ T8016] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.021837][ T8016] ext2 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.209030][ T5778] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.581956][ T8027] loop1: detected capacity change from 0 to 2048 [ 250.347666][ T8027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.377099][ T970] usb 1-1: USB disconnect, device number 13 [ 250.565993][ T970] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 250.636343][ T970] oti6858 1-1:1.0: device disconnected [ 250.821568][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.972073][ T7111] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.355498][ T8037] loop1: detected capacity change from 0 to 512 [ 251.780084][ T8037] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 251.851800][ T8037] EXT4-fs (loop1): orphan file too big: 67108874 [ 251.887695][ T8037] EXT4-fs (loop1): mount failed [ 252.158361][ T8049] loop0: detected capacity change from 0 to 512 [ 252.186666][ T8049] EXT4-fs: Ignoring removed i_version option [ 252.217319][ T8049] EXT4-fs: Ignoring removed oldalloc option [ 252.350568][ T8049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.776178][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.045931][ T8058] overlayfs: failed to resolve './file2': -2 [ 255.822912][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.834451][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.936944][ T8070] loop4: detected capacity change from 0 to 2048 [ 256.178781][ T8070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.235042][ T8076] loop1: detected capacity change from 0 to 128 [ 256.255559][ T8076] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 256.278801][ T8076] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.291879][ T8076] ext2 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.767994][ T7111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.710766][ T8090] loop4: detected capacity change from 0 to 512 [ 258.723422][ T8090] ext4: Unknown parameter 'defcontext' [ 259.037056][ T5778] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.498824][ T8103] loop0: detected capacity change from 0 to 256 [ 260.664421][ T8103] exFAT-fs (loop0): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 260.738791][ T8103] exFAT-fs (loop0): failed to load alloc-bitmap [ 260.745164][ T8103] exFAT-fs (loop0): failed to recognize exfat type [ 261.446382][ T8113] loop1: detected capacity change from 0 to 512 [ 261.455211][ T8113] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 262.401811][ T8126] loop4: detected capacity change from 0 to 128 [ 262.472323][ T8126] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 262.559573][ T8126] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.605700][ T8129] loop2: detected capacity change from 0 to 128 [ 262.615839][ T8129] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 262.627745][ T8126] ext2 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.688445][ T8129] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.701131][ T8129] ext2 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.729101][ T8136] loop0: detected capacity change from 0 to 1024 [ 262.856209][ T8136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 263.784670][ T8136] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.840609][ T8136] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 3: comm syz.0.625: lblock 3 mapped to illegal pblock 3 (length 1) [ 263.889973][ T8136] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 263.927078][ T8136] EXT4-fs (loop0): This should not happen!! Data will be lost [ 263.927078][ T8136] [ 263.953098][ T7111] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.988451][ T8136] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: block 3: comm syz.0.625: lblock 3 mapped to illegal pblock 3 (length 1) [ 264.044767][ T8136] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: block 3: comm syz.0.625: lblock 3 mapped to illegal pblock 3 (length 1) [ 264.095220][ T8136] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: block 3: comm syz.0.625: lblock 3 mapped to illegal pblock 3 (length 1) [ 264.115270][ T8136] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: block 3: comm syz.0.625: lblock 3 mapped to illegal pblock 3 (length 1) [ 264.134665][ T8144] FAULT_INJECTION: forcing a failure. [ 264.134665][ T8144] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.158428][ T8136] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #15: block 3: comm syz.0.625: lblock 3 mapped to illegal pblock 3 (length 1) [ 264.164999][ T8144] CPU: 1 PID: 8144 Comm: syz.4.627 Not tainted syzkaller #0 [ 264.179658][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.189732][ T8144] Call Trace: [ 264.193031][ T8144] [ 264.195981][ T8144] dump_stack_lvl+0x18c/0x250 [ 264.200692][ T8144] ? show_regs_print_info+0x20/0x20 [ 264.205918][ T8144] ? load_image+0x420/0x420 [ 264.210448][ T8144] ? __lock_acquire+0x7d80/0x7d80 [ 264.215500][ T8144] should_fail_ex+0x394/0x4c0 [ 264.220217][ T8144] prepare_alloc_pages+0x1e1/0x5b0 [ 264.225363][ T8144] __alloc_pages+0x134/0x460 [ 264.229979][ T8144] ? zone_statistics+0x170/0x170 [ 264.234947][ T8144] ? alloc_pages+0x4e1/0x740 [ 264.239558][ T8144] ? lock_chain_count+0x20/0x20 [ 264.244434][ T8144] __get_free_pages+0xc/0x30 [ 264.249078][ T8144] __se_sys_mincore+0xe0/0x600 [ 264.253867][ T8144] ? syscall_enter_from_user_mode+0x25/0x80 [ 264.259788][ T8144] ? lockdep_hardirqs_on+0x98/0x150 [ 264.265051][ T8144] do_syscall_64+0x55/0xb0 [ 264.269522][ T8144] ? clear_bhb_loop+0x40/0x90 [ 264.274229][ T8144] ? clear_bhb_loop+0x40/0x90 [ 264.278934][ T8144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.284854][ T8144] RIP: 0033:0x7ffa5a99e159 [ 264.289292][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.308929][ T8144] RSP: 002b:00007ffa5b947028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 264.317368][ T8144] RAX: ffffffffffffffda RBX: 00007ffa5ac25fa0 RCX: 00007ffa5a99e159 [ 264.325360][ T8144] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffa000 [ 264.333350][ T8144] RBP: 00007ffa5aa3506b R08: 0000000000000000 R09: 0000000000000000 [ 264.341343][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.349420][ T8144] R13: 00007ffa5ac26038 R14: 00007ffa5ac25fa0 R15: 00007fff69af1628 [ 264.357428][ T8144] [ 264.368341][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 266.713157][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.641460][ T8187] loop4: detected capacity change from 0 to 512 [ 271.658375][ T8187] EXT4-fs: Ignoring removed bh option [ 271.692673][ T8187] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 271.726194][ T8187] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 271.777371][ T8187] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.640: Corrupt directory, running e2fsck is recommended [ 271.804737][ T8187] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 271.828530][ T8187] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.640: corrupted in-inode xattr: e_name out of bounds [ 271.888953][ T8187] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.640: couldn't read orphan inode 15 (err -117) [ 271.923619][ T8187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.971597][ T8187] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 272.014971][ T8187] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 272.043997][ T8187] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.640: Corrupt directory, running e2fsck is recommended [ 272.347958][ T7111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.152227][ T8205] loop4: detected capacity change from 0 to 1024 [ 273.490079][ T49] hfsplus: b-tree write err: -5, ino 3 [ 273.691847][ T8209] overlayfs: failed to resolve './file2': -2 [ 274.068416][ T8212] loop2: detected capacity change from 0 to 128 [ 274.086553][ T8212] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 274.104932][ T8212] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 274.117736][ T8212] ext2 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.238541][ T8216] loop1: detected capacity change from 0 to 1024 [ 274.285144][ T8216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 275.270538][ T8216] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.320288][ T8216] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.647: lblock 3 mapped to illegal pblock 3 (length 1) [ 275.363166][ T8216] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 275.385806][ T8216] EXT4-fs (loop1): This should not happen!! Data will be lost [ 275.385806][ T8216] [ 275.450637][ T8216] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.647: lblock 3 mapped to illegal pblock 3 (length 1) [ 275.488828][ T8216] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.647: lblock 3 mapped to illegal pblock 3 (length 1) [ 275.511396][ T8216] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.647: lblock 3 mapped to illegal pblock 3 (length 1) [ 275.532564][ T8216] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.647: lblock 3 mapped to illegal pblock 3 (length 1) [ 275.552273][ T8216] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.647: lblock 3 mapped to illegal pblock 3 (length 1) [ 275.566954][ T8216] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.647: lblock 3 mapped to illegal pblock 3 (length 1) [ 275.586306][ T8216] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.647: lblock 3 mapped to illegal pblock 3 (length 1) [ 275.610077][ T8216] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.647: lblock 3 mapped to illegal pblock 3 (length 1) [ 275.674663][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 276.868765][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.976599][ T8231] loop1: detected capacity change from 0 to 512 [ 276.997490][ T8231] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 277.125772][ T8234] loop2: detected capacity change from 0 to 128 [ 277.143550][ T8231] EXT4-fs (loop1): 1 truncate cleaned up [ 277.175050][ T8231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.179687][ T8234] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 277.215113][ T8234] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.221527][ T8231] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:69: inode #15: comm syz.1.659: corrupt xattr in inline inode [ 277.232723][ T28] audit: type=1800 audit(1790534093.366:8): pid=8231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.659" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 277.270489][ T8231] EXT4-fs (loop1): Remounting filesystem read-only [ 277.621845][ T8234] ext2 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.135001][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.267024][ T8244] loop1: detected capacity change from 0 to 16 [ 278.296497][ T8244] erofs: (device loop1): mounted with root inode @ nid 36. [ 278.322053][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.436908][ T8250] Illegal XDP return value 4291452928 on prog (id 34) dev N/A, expect packet loss! [ 279.409461][ T8259] file system registered [ 279.420784][ T8259] unloading [ 284.341029][ T8290] loop4: detected capacity change from 0 to 128 [ 284.360886][ T8290] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 287.323945][ T8290] EXT4-fs: error -4 creating inode table initialization thread [ 287.332340][ T8290] EXT4-fs (loop4): mount failed [ 291.907394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 294.846689][ T8349] loop4: detected capacity change from 0 to 128 [ 295.004263][ T8349] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 295.798091][ T8349] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.817521][ T8349] ext2 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.272776][ T7111] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.462427][ T8376] loop4: detected capacity change from 0 to 1024 [ 302.167676][ T8412] loop4: detected capacity change from 0 to 128 [ 302.236229][ T8412] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 302.471272][ T8412] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.487679][ T8412] ext2 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.267415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 307.712739][ T7111] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.133695][ T8435] loop4: detected capacity change from 0 to 512 [ 308.279806][ T8435] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.720: bg 0: block 473: padding at end of block bitmap is not set [ 308.392602][ T8435] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 308.440824][ T8435] EXT4-fs (loop4): 1 orphan inode deleted [ 308.485735][ T2956] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 308.503448][ T8435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.551447][ T2956] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1 [ 308.584958][ T8435] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.717260][ T8435] netlink: 148 bytes leftover after parsing attributes in process `syz.4.720'. [ 308.932213][ T8445] loop2: detected capacity change from 0 to 1024 [ 308.950197][ T8445] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 308.993226][ T8445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.111768][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.545433][ T8460] loop2: detected capacity change from 0 to 1024 [ 310.635593][ T7111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.797454][ T8460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.387398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 312.788626][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.154845][ T8489] loop4: detected capacity change from 0 to 2048 [ 315.858701][ T8489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.961360][ T8489] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 316.058534][ T8489] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 316.109393][ T8489] EXT4-fs (loop4): This should not happen!! Data will be lost [ 316.109393][ T8489] [ 316.128551][ T8489] EXT4-fs (loop4): Total free blocks count 0 [ 316.134576][ T8489] EXT4-fs (loop4): Free/Dirty block details [ 316.140783][ T8489] EXT4-fs (loop4): free_blocks=2415919104 [ 316.148090][ T8489] EXT4-fs (loop4): dirty_blocks=48 [ 316.227357][ T8489] EXT4-fs (loop4): Block reservation details [ 316.244709][ T8489] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 316.261220][ T8488] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.728: Invalid inode table block 4 in block_group 0 [ 316.334367][ T8488] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 316.356864][ T8488] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #15: comm syz.4.728: mark_inode_dirty error [ 316.400811][ T8489] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.728: Invalid inode table block 4 in block_group 0 [ 316.420866][ T28] audit: type=1326 audit(1790534132.536:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.2.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 316.470982][ T8488] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz.4.728: Invalid inode table block 4 in block_group 0 [ 316.486428][ T8489] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 316.523800][ T8489] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #15: comm syz.4.728: mark_inode_dirty error [ 316.536680][ T28] audit: type=1326 audit(1790534132.536:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.2.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 316.582688][ T8488] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 316.611877][ T8489] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 316.656331][ T8488] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #15: comm syz.4.728: mark_inode_dirty error [ 316.678194][ T28] audit: type=1326 audit(1790534132.566:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.2.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 316.826279][ T28] audit: type=1326 audit(1790534132.566:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.2.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 316.976877][ T28] audit: type=1326 audit(1790534132.566:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.2.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 318.287488][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.293816][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.312671][ T28] audit: type=1326 audit(1790534132.596:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.2.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 318.359146][ T28] audit: type=1326 audit(1790534132.596:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.2.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 319.663992][ T28] audit: type=1326 audit(1790534132.596:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.2.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 319.727333][ T28] audit: type=1326 audit(1790534132.596:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.2.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 321.033574][ T28] audit: type=1326 audit(1790534132.596:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.2.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 321.072655][ T8515] loop4: detected capacity change from 0 to 512 [ 321.097138][ T8515] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.743: ea_inode with extended attributes [ 321.118277][ T8515] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.743: error while reading EA inode 11 err=-117 [ 321.133166][ T8515] EXT4-fs (loop4): 1 orphan inode deleted [ 321.140250][ T8515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.650378][ T7111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.509533][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 330.307408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 330.741095][ T8572] loop2: detected capacity change from 0 to 256 [ 332.867379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 336.551698][ T8585] No such timeout policy "syz1" [ 340.547393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 341.856609][ T1209] smpboot: CPU 1 is now offline [ 347.956936][ T8643] loop4: detected capacity change from 0 to 128 [ 348.734231][ T8643] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 355.719637][ T8671] FAULT_INJECTION: forcing a failure. [ 355.719637][ T8671] name failslab, interval 1, probability 0, space 0, times 0 [ 355.781870][ T8671] CPU: 0 PID: 8671 Comm: syz.2.780 Not tainted syzkaller #0 [ 355.789181][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.799223][ T8671] Call Trace: [ 355.802581][ T8671] [ 355.805543][ T8671] dump_stack_lvl+0x18c/0x250 [ 355.810354][ T8671] ? show_regs_print_info+0x20/0x20 [ 355.815614][ T8671] ? load_image+0x420/0x420 [ 355.820121][ T8671] ? __might_sleep+0xe0/0xe0 [ 355.824730][ T8671] ? __lock_acquire+0x7d80/0x7d80 [ 355.829755][ T8671] ? lockdep_hardirqs_on+0x98/0x150 [ 355.834990][ T8671] should_fail_ex+0x394/0x4c0 [ 355.839678][ T8671] should_failslab+0x9/0x20 [ 355.844187][ T8671] slab_pre_alloc_hook+0x59/0x300 [ 355.849219][ T8671] ? __kmem_cache_free+0xba/0x1f0 [ 355.854236][ T8671] kmem_cache_alloc+0x5a/0x2c0 [ 355.859002][ T8671] ? getname_kernel+0x5a/0x2f0 [ 355.863755][ T8671] getname_kernel+0x5a/0x2f0 [ 355.868329][ T8671] kern_path+0x1d/0x50 [ 355.872407][ T8671] tomoyo_mount_permission+0x79c/0x9d0 [ 355.877886][ T8671] ? tomoyo_mount_permission+0x2b3/0x9d0 [ 355.883507][ T8671] ? kasan_set_track+0x4e/0x70 [ 355.888256][ T8671] ? tomoyo_get_name+0x570/0x570 [ 355.893192][ T8671] ? user_path_at_empty+0x4c/0x60 [ 355.898237][ T8671] ? kasan_quarantine_put+0xd8/0x220 [ 355.903510][ T8671] ? lockdep_hardirqs_on+0x98/0x150 [ 355.908736][ T8671] security_sb_mount+0x87/0xc0 [ 355.913507][ T8671] path_mount+0xbc/0xfa0 [ 355.917741][ T8671] ? kmem_cache_free+0xf8/0x290 [ 355.922588][ T8671] __se_sys_mount+0x2e7/0x3d0 [ 355.927252][ T8671] ? __x64_sys_mount+0xc0/0xc0 [ 355.932000][ T8671] ? lockdep_hardirqs_on+0x98/0x150 [ 355.937180][ T8671] ? __x64_sys_mount+0x20/0xc0 [ 355.941944][ T8671] do_syscall_64+0x55/0xb0 [ 355.946370][ T8671] ? clear_bhb_loop+0x40/0x90 [ 355.951160][ T8671] ? clear_bhb_loop+0x40/0x90 [ 355.955851][ T8671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.961750][ T8671] RIP: 0033:0x7f0b6359e159 [ 355.966212][ T8671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.985872][ T8671] RSP: 002b:00007f0b64541028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 355.994365][ T8671] RAX: ffffffffffffffda RBX: 00007f0b63825fa0 RCX: 00007f0b6359e159 [ 356.002333][ T8671] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000200000000180 [ 356.010395][ T8671] RBP: 00007f0b6363506b R08: 0000000000000000 R09: 0000000000000000 [ 356.018353][ T8671] R10: 0000000002002404 R11: 0000000000000246 R12: 0000000000000000 [ 356.026337][ T8671] R13: 00007f0b63826038 R14: 00007f0b63825fa0 R15: 00007ffc0c77dd08 [ 356.034337][ T8671] [ 357.832506][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 358.185934][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'. [ 369.478118][ T8727] loop4: detected capacity change from 0 to 2048 [ 369.566286][ T8727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.920549][ T8727] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 372.123508][ T8731] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 18 with max blocks 496 with error 28 [ 373.489339][ T8731] EXT4-fs (loop4): This should not happen!! Data will be lost [ 373.489339][ T8731] [ 373.542308][ T8731] EXT4-fs (loop4): Total free blocks count 0 [ 374.358907][ T8731] EXT4-fs (loop4): Free/Dirty block details [ 374.439748][ T8731] EXT4-fs (loop4): free_blocks=4096 [ 374.473362][ T8731] EXT4-fs (loop4): dirty_blocks=512 [ 374.499297][ T8731] EXT4-fs (loop4): Block reservation details [ 374.527043][ T8731] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 375.468591][ T7111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.749356][ T8753] overlayfs: missing 'lowerdir' [ 377.520250][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.526572][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.685410][ T8764] loop2: detected capacity change from 0 to 2048 [ 378.718373][ T8764] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 378.750171][ T8764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.976829][ T8766] ip_tables: iptables: counters copy to user failed while replacing table [ 381.071198][ T8783] overlay: Unknown parameter '/file0' [ 382.581195][ T8788] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_fnekyptfs_cipher=aes] [ 382.619621][ T8788] ecryptfs_parse_options: eCryptfs: unrecognized option [ecqMIDryptfs_000200] [ 382.650845][ T8788] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 382.674491][ T8788] Error parsing options; rc = [-22] [ 383.709887][ T5784] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 385.069543][ T8801] loop4: detected capacity change from 0 to 2048 [ 385.095054][ T8801] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 385.109057][ T8801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.323867][ T8803] overlay: Unknown parameter '/file0' [ 387.949659][ T8811] ip_tables: iptables: counters copy to user failed while replacing table [ 389.197446][ T5826] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 389.342277][ T8822] loop2: detected capacity change from 0 to 128 [ 389.505195][ T5826] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.870899][ T5826] usb 1-1: string descriptor 0 read error: -71 [ 393.924844][ T5826] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 393.988517][ T5826] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 394.162358][ T5826] usb 1-1: config 0 descriptor?? [ 394.227018][ T5826] usb 1-1: can't set config #0, error -71 [ 394.269980][ T8831] overlay: Unknown parameter '/file0' [ 394.287375][ T5826] usb 1-1: USB disconnect, device number 14 [ 394.411624][ T5784] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 394.619657][ T789] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 396.417732][ T789] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.497607][ T789] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 396.506687][ T789] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 396.560377][ T789] usb 3-1: Product: syz [ 397.387019][ T789] usb 3-1: Manufacturer: syz [ 397.450510][ T789] usb 3-1: SerialNumber: syz [ 397.473502][ T789] usb 3-1: config 0 descriptor?? [ 397.527376][ T789] usb 3-1: can't set config #0, error -71 [ 397.678763][ T789] usb 3-1: USB disconnect, device number 11 [ 401.592536][ T8855] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 401.642299][ T8855] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 403.021646][ T8865] loop4: detected capacity change from 0 to 1024 [ 403.124503][ T8865] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 403.198524][ T8865] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 403.231799][ T8865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.771003][ T7111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.999124][ T5784] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 412.020359][ T8899] loop4: detected capacity change from 0 to 2048 [ 412.083500][ T8899] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 412.098446][ T8899] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 412.469832][ T8902] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 412.510153][ T8902] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 418.729939][ T8929] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 418.784503][ T8929] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 420.606814][ T8937] loop2: detected capacity change from 0 to 1024 [ 420.697814][ T8937] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 420.762473][ T8937] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 420.808418][ T8937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.127955][ T8954] loop4: detected capacity change from 0 to 512 [ 427.712012][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.087006][ T8970] loop4: detected capacity change from 0 to 1764 [ 428.753248][ T8977] loop2: detected capacity change from 0 to 2048 [ 428.837922][ T8977] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.275194][ T8992] overlayfs: missing 'lowerdir' [ 434.316001][ T8994] loop4: detected capacity change from 0 to 8 [ 434.402589][ T8994] SQUASHFS error: Failed to read block 0x4de: -5 [ 434.454112][ T8994] SQUASHFS error: Failed to read block 0x4de: -5 [ 434.714270][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 434.714348][ T28] audit: type=1800 audit(2000000000.210:32): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.893" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 439.495901][ T5784] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 439.511188][ T9017] overlayfs: missing 'lowerdir' [ 440.357339][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.363622][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.721819][ T9030] loop4: detected capacity change from 0 to 1764 [ 447.416745][ T9041] overlayfs: missing 'lowerdir' [ 447.438820][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.683927][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.903719][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.732479][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.081457][ T9063] loop2: detected capacity change from 0 to 512 [ 449.176385][ T9063] ext4: Unknown parameter 'defcontext' [ 453.485444][ T9075] overlayfs: missing 'workdir' [ 453.505795][ T5089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 453.515217][ T5089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 453.528387][ T5089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 453.538769][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 453.546291][ T5089] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 453.553745][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 455.587757][ T5089] Bluetooth: hci3: command tx timeout [ 456.392206][ T5089] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 457.404220][ T9076] chnl_net:caif_netlink_parms(): no params data found [ 457.669782][ T5089] Bluetooth: hci3: command tx timeout [ 457.761274][ T9121] overlayfs: missing 'workdir' [ 459.567186][ T49] hsr_slave_0: left promiscuous mode [ 459.657387][ T49] hsr_slave_1: left promiscuous mode [ 459.731844][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.748049][ T5089] Bluetooth: hci3: command tx timeout [ 459.777409][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.830316][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.877856][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.910554][ T49] bridge_slave_1: left allmulticast mode [ 459.916211][ T49] bridge_slave_1: left promiscuous mode [ 459.977436][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.070302][ T49] bridge_slave_0: left allmulticast mode [ 460.075967][ T49] bridge_slave_0: left promiscuous mode [ 460.138019][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.277540][ T49] veth1_macvtap: left promiscuous mode [ 460.283074][ T49] veth0_macvtap: left promiscuous mode [ 460.337311][ T49] veth1_vlan: left promiscuous mode [ 460.342694][ T49] veth0_vlan: left promiscuous mode [ 462.117068][ T5089] Bluetooth: hci3: command tx timeout [ 465.867789][ T5089] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 466.239698][ T49] team0 (unregistering): Port device team_slave_1 removed [ 466.316054][ T49] team0 (unregistering): Port device team_slave_0 removed [ 466.385256][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.546631][ T9162] overlayfs: missing 'workdir' [ 466.609507][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.391180][ T9170] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 473.045975][ T5089] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 473.210229][ T49] bond0 (unregistering): Released all slaves [ 474.378885][ T9076] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.415158][ T9076] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.201109][ T9076] bridge_slave_0: entered allmulticast mode [ 475.305971][ T9076] bridge_slave_0: entered promiscuous mode [ 475.368783][ T9076] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.428803][ T9076] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.435997][ T9076] bridge_slave_1: entered allmulticast mode [ 475.517503][ T9076] bridge_slave_1: entered promiscuous mode [ 478.150911][ T9076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.419379][ T9076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.531640][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.956'. [ 479.599551][ T9213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.905246][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.179059][ T9076] team0: Port device team_slave_0 added [ 480.241044][ T9076] team0: Port device team_slave_1 added [ 480.397853][ T9076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.404829][ T9076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.628415][ T9076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.668527][ T28] audit: type=1326 audit(2000000046.180:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.1.958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d999e159 code=0x7ffc0000 [ 480.719567][ T9076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.799109][ T9076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.859494][ T28] audit: type=1326 audit(2000000046.180:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.1.958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d999e159 code=0x7ffc0000 [ 480.956778][ T9076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.986014][ T28] audit: type=1326 audit(2000000046.210:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.1.958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f74d999e159 code=0x7ffc0000 [ 481.982437][ T28] audit: type=1326 audit(2000000046.210:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.1.958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f74d999dec2 code=0x7ffc0000 [ 482.075703][ T9076] hsr_slave_0: entered promiscuous mode [ 482.108825][ T9076] hsr_slave_1: entered promiscuous mode [ 482.868974][ T28] audit: type=1326 audit(2000000046.210:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.1.958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f74d995e98e code=0x7ffc0000 [ 482.992630][ T9076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.033109][ T9076] Cannot create hsr debugfs directory [ 483.107175][ T28] audit: type=1326 audit(2000000046.240:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.1.958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f74d999df87 code=0x7ffc0000 [ 483.311127][ T28] audit: type=1326 audit(2000000046.240:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.1.958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74d995e98e code=0x7ffc0000 [ 483.560519][ T28] audit: type=1326 audit(2000000046.240:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.1.958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f74d995e98e code=0x7ffc0000 [ 483.787487][ T28] audit: type=1326 audit(2000000046.240:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.1.958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d999e159 code=0x7ffc0000 [ 483.998661][ T9076] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 484.007943][ T28] audit: type=1326 audit(2000000046.240:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.1.958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f74d999e159 code=0x7ffc0000 [ 484.140038][ T9076] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 484.255014][ T9076] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 484.347695][ T9076] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 484.721925][ T9076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.861436][ T9076] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.928168][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.935273][ T7884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.081556][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.088696][ T7884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.137255][ T9076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.801520][ T9310] kvm: emulating exchange as write [ 488.403270][ T9076] veth0_vlan: entered promiscuous mode [ 488.474664][ T9076] veth1_vlan: entered promiscuous mode [ 488.693454][ T9076] veth0_macvtap: entered promiscuous mode [ 488.758094][ T9076] veth1_macvtap: entered promiscuous mode [ 489.566839][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.723642][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.801768][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.844778][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.916623][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.979560][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.064810][ T9076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.129646][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.201038][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.287331][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.347177][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.410524][ T9076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.462957][ T9076] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.542243][ T9076] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.577781][ T9076] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.747191][ T9076] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.837771][ T7879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.845609][ T7879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.041060][ T7884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.098688][ T7884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.428544][ T789] kernel write not supported for file /721/clear_refs (pid: 789 comm: kworker/0:2) [ 502.484035][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.494811][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.656124][ T9410] ip_tables: iptables: counters copy to user failed while replacing table [ 506.294554][ T9437] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 509.620658][ T9459] loop5: detected capacity change from 0 to 256 [ 514.739218][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'. [ 517.206839][ T9508] loop5: detected capacity change from 0 to 512 [ 517.287898][ T9508] FAT-fs (loop5): Unrecognized mount option "01777777777777777777777" or missing value [ 547.101854][ T9672] loop2: detected capacity change from 0 to 2048 [ 547.204873][ T9672] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 547.290981][ T9672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 563.020806][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.027217][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 578.189567][ T9859] binder: BINDER_SET_CONTEXT_MGR already set [ 578.260317][ T9859] binder: 9857:9859 ioctl 4018620d 2000000002c0 returned -16 [ 578.298448][ T9860] binder: 9857:9860 ioctl c0306201 200000000500 returned -14 [ 580.601556][ T9861] Bluetooth: hci3: command 0x0406 tx timeout [ 595.247188][ T5826] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 595.491291][ T5826] usb 2-1: config 1 has an invalid interface number: 13 but max is 0 [ 595.519987][ T5826] usb 2-1: config 1 has no interface number 0 [ 595.550340][ T5826] usb 2-1: config 1 interface 13 has no altsetting 0 [ 595.598268][ T5826] usb 2-1: string descriptor 0 read error: -22 [ 595.609889][ T5826] usb 2-1: New USB device found, idVendor=07cf, idProduct=1167, bcdDevice= 1.00 [ 595.648801][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.680061][ T5826] usb-storage 2-1:1.13: USB Mass Storage device detected [ 595.827417][ T9333] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 595.885704][ T5826] usb 2-1: USB disconnect, device number 13 [ 602.756099][ T9333] usb 1-1: unable to get BOS descriptor or descriptor too short [ 602.806141][ T9333] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 602.872893][ T9333] usb 1-1: chopping to 0 config(s) [ 603.023692][ T9333] usb 1-1: can't read configurations, error -32 [ 607.901371][ T9960] syz_tun: entered allmulticast mode [ 607.957834][ T9960] pimreg: entered allmulticast mode [ 608.049611][ T9958] syz_tun: left allmulticast mode [ 619.045841][ T9996] loop5: detected capacity change from 0 to 128 [ 619.114003][ T9996] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 623.405048][ T5826] kernel write not supported for file /snd/seq (pid: 5826 comm: kworker/0:4) [ 624.610592][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.617920][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 638.067191][ T789] kernel write not supported for file /snd/seq (pid: 789 comm: kworker/0:2) [ 650.847203][ T5850] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 651.107120][ T5850] usb 1-1: Using ep0 maxpacket: 16 [ 651.121105][ T5850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.611314][ T5850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.847593][ T5850] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 654.947263][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.018794][ T5850] usb 1-1: config 0 descriptor?? [ 655.059513][ T5850] usb 1-1: can't set config #0, error -71 [ 655.120722][ T5850] usb 1-1: USB disconnect, device number 17 [ 668.226166][T10177] syz_tun: entered allmulticast mode [ 668.290511][T10175] syz_tun: left allmulticast mode [ 674.259803][T10208] FAULT_INJECTION: forcing a failure. [ 674.259803][T10208] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 674.339288][T10208] CPU: 0 PID: 10208 Comm: syz.5.1198 Not tainted syzkaller #0 [ 674.346774][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 674.356828][T10208] Call Trace: [ 674.360094][T10208] [ 674.363011][T10208] dump_stack_lvl+0x18c/0x250 [ 674.367690][T10208] ? show_regs_print_info+0x20/0x20 [ 674.372878][T10208] ? load_image+0x420/0x420 [ 674.377365][T10208] ? __lock_acquire+0x7d80/0x7d80 [ 674.382377][T10208] should_fail_ex+0x394/0x4c0 [ 674.387071][T10208] prepare_alloc_pages+0x1e1/0x5b0 [ 674.392172][T10208] __alloc_pages+0x134/0x460 [ 674.396746][T10208] ? zone_statistics+0x170/0x170 [ 674.401677][T10208] __folio_alloc+0x10/0x20 [ 674.406076][T10208] vma_alloc_folio+0x474/0x8f0 [ 674.410824][T10208] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 674.416626][T10208] shmem_alloc_folio+0x1a9/0x2a0 [ 674.421552][T10208] ? folio_put+0xd0/0xd0 [ 674.425786][T10208] ? __vm_enough_memory+0x11a/0x370 [ 674.430971][T10208] ? shmem_inode_acct_block+0x324/0x460 [ 674.436525][T10208] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 674.442231][T10208] ? put_swap_device+0x230/0x230 [ 674.447150][T10208] ? filemap_get_entry+0xce/0x3f0 [ 674.452164][T10208] ? xas_load+0x11d/0x140 [ 674.456498][T10208] ? filemap_get_entry+0xce/0x3f0 [ 674.461517][T10208] ? filemap_get_entry+0xce/0x3f0 [ 674.466523][T10208] ? filemap_get_entry+0x375/0x3f0 [ 674.471615][T10208] ? page_cache_prev_miss+0x390/0x390 [ 674.476970][T10208] ? lock_chain_count+0x20/0x20 [ 674.481804][T10208] shmem_get_folio_gfp+0xe1d/0x2b40 [ 674.486986][T10208] ? reacquire_held_locks+0x31f/0x5c0 [ 674.492351][T10208] shmem_write_begin+0xf2/0x430 [ 674.497189][T10208] generic_perform_write+0x2fe/0x5c0 [ 674.502465][T10208] ? generic_file_direct_write+0x3e0/0x3e0 [ 674.508256][T10208] ? file_update_time+0x192/0x1a0 [ 674.513263][T10208] shmem_file_write_iter+0xfb/0x120 [ 674.518446][T10208] vfs_write+0x474/0x9a0 [ 674.522677][T10208] ? file_end_write+0x250/0x250 [ 674.527531][T10208] ? __fget_files+0x3fc/0x460 [ 674.532211][T10208] ? __fdget_pos+0x1d8/0x330 [ 674.536794][T10208] ? ksys_write+0x74/0x260 [ 674.541214][T10208] ksys_write+0x151/0x260 [ 674.545543][T10208] ? __ia32_sys_read+0x90/0x90 [ 674.550301][T10208] ? lockdep_hardirqs_on+0x98/0x150 [ 674.555509][T10208] do_syscall_64+0x55/0xb0 [ 674.559918][T10208] ? clear_bhb_loop+0x40/0x90 [ 674.564585][T10208] ? clear_bhb_loop+0x40/0x90 [ 674.569248][T10208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 674.575139][T10208] RIP: 0033:0x7fd7fd95e98e [ 674.579541][T10208] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 674.599133][T10208] RSP: 002b:00007fd7fe7bbda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 674.607526][T10208] RAX: ffffffffffffffda RBX: 00007fd7fe7bc6c0 RCX: 00007fd7fd95e98e [ 674.615478][T10208] RDX: 0000000000100000 RSI: 00007fd7f37f7000 RDI: 0000000000000004 [ 674.623430][T10208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 674.631380][T10208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 674.639335][T10208] R13: 00007fd7fe7bbee0 R14: 00007fd7fe7bbea0 R15: 00007fd7f37f7000 [ 674.648619][T10208] [ 675.677258][T10215] syz_tun: entered allmulticast mode [ 675.720078][T10215] pimreg: entered allmulticast mode [ 675.755273][T10214] syz_tun: left allmulticast mode [ 683.244174][T10240] syz_tun: entered allmulticast mode [ 683.304382][T10239] syz_tun: left allmulticast mode [ 683.526484][T10242] binfmt_misc: register: failed to install interpreter file ./file0 [ 686.604121][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.613710][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.930396][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 687.930406][ T28] audit: type=1326 audit(2000000253.440:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.1.1212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d999e159 code=0x7ffc0000 [ 688.968272][ T28] audit: type=1326 audit(2000000253.440:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.1.1212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d999e159 code=0x7ffc0000 [ 689.169625][ T28] audit: type=1326 audit(2000000253.440:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.1.1212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d999e159 code=0x7ffc0000 [ 689.447203][ T28] audit: type=1326 audit(2000000253.470:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.1.1212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f74d999e159 code=0x7ffc0000 [ 693.633877][ T28] audit: type=1326 audit(2000000253.470:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.1.1212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d999e159 code=0x7ffc0000 [ 693.905497][ T28] audit: type=1326 audit(2000000253.470:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.1.1212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d999e159 code=0x7ffc0000 [ 693.976238][T10271] syz_tun: entered allmulticast mode [ 694.024521][T10270] syz_tun: left allmulticast mode [ 694.078859][ T28] audit: type=1326 audit(2000000253.470:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.1.1212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d999e159 code=0x7ffc0000 [ 694.249400][ T28] audit: type=1326 audit(2000000253.470:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.1.1212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f74d999e159 code=0x7ffc0000 [ 695.210484][ T28] audit: type=1326 audit(2000000253.470:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10246 comm="syz.1.1212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f74d999e159 code=0x7ffc0000 [ 705.837161][ T9333] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 706.067199][ T9333] usb 2-1: Using ep0 maxpacket: 32 [ 706.091737][ T9333] usb 2-1: unable to get BOS descriptor or descriptor too short [ 706.148200][ T9333] usb 2-1: config 151 has an invalid interface number: 33 but max is 0 [ 706.190959][ T9333] usb 2-1: config 151 has no interface number 0 [ 706.233968][ T9333] usb 2-1: config 151 interface 33 has no altsetting 0 [ 706.292036][ T9333] usb 2-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=97.b3 [ 706.348631][ T9333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.422609][ T9333] usb 2-1: Product: syz [ 706.460693][ T9333] usb 2-1: Manufacturer: syz [ 706.492665][ T9333] usb 2-1: SerialNumber: syz [ 707.490979][T10322] syz_tun: entered allmulticast mode [ 707.545201][T10321] syz_tun: left allmulticast mode [ 707.571402][ T9333] io_ti 2-1:151.33: required endpoints missing [ 707.646603][ T9333] uvcvideo 2-1:151.33: Found multiple Units with ID 3 [ 707.687338][ T9333] usb 2-1: Found UVC 0.0a device syz (1608:021b) [ 707.693913][ T9333] usb 2-1: No valid video chain found. [ 707.750943][ T9333] usb 2-1: USB disconnect, device number 14 [ 740.089128][T10421] loop2: detected capacity change from 0 to 256 [ 745.914765][T10445] syz_tun: entered allmulticast mode [ 745.955545][T10444] syz_tun: left allmulticast mode [ 747.608566][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.614849][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 766.055390][T10496] syz_tun: entered allmulticast mode [ 766.124330][T10495] syz_tun: left allmulticast mode [ 776.549569][T10540] syz_tun: entered allmulticast mode [ 776.590258][T10539] syz_tun: left allmulticast mode [ 792.179401][T10588] syz_tun: entered allmulticast mode [ 792.229578][T10587] syz_tun: left allmulticast mode [ 793.419295][ T1209] kworker/dying (1209) used greatest stack depth: 20336 bytes left [ 809.602280][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.617237][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.720183][T10667] syz_tun: entered allmulticast mode [ 813.791825][T10666] syz_tun: left allmulticast mode [ 827.025652][T10696] loop5: detected capacity change from 0 to 256 [ 843.858929][T10744] syz_tun: entered allmulticast mode [ 843.901235][T10744] pimreg: entered allmulticast mode [ 843.987676][T10743] syz_tun: left allmulticast mode [ 857.090757][T10784] syz_tun: entered allmulticast mode [ 857.118789][T10782] syz_tun: left allmulticast mode [ 867.203424][T10819] syz_tun: entered allmulticast mode [ 867.224562][T10818] syz_tun: left allmulticast mode [ 870.602499][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.609711][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.359951][T10852] ip_tables: iptables: counters copy to user failed while replacing table [ 877.497077][ T9] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 878.302496][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 878.368228][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25702, setting to 64 [ 878.421520][ T9] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 878.457007][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.505588][ T9] usb 2-1: Product: syz [ 878.525790][ T9] usb 2-1: Manufacturer: syz [ 878.546018][ T9] usb 2-1: SerialNumber: syz [ 878.568774][T10866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 878.587458][ T9] oti6858 2-1:1.0: oti6858 converter detected [ 878.644420][ T9] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 878.745648][T10874] loop2: detected capacity change from 0 to 256 [ 878.812812][T10874] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 879.067206][T10874] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 879.156869][T10874] exFAT-fs (loop2): Filesystem has been set read-only [ 879.304472][ T789] usb 2-1: USB disconnect, device number 15 [ 879.396414][ T789] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 879.457425][ T789] oti6858 2-1:1.0: device disconnected [ 890.426386][T10908] syz.0.1397 (10908) used greatest stack depth: 18640 bytes left [ 893.537513][T10914] ip_tables: iptables: counters copy to user failed while replacing table [ 896.762267][T10929] syz_tun: entered allmulticast mode [ 896.791062][T10930] input: syz0 as /devices/virtual/input/input25 [ 897.664257][T10926] syz_tun: left allmulticast mode [ 901.761421][T10959] loop5: detected capacity change from 0 to 256 [ 902.386823][T10964] syz_tun: entered allmulticast mode [ 902.437372][T10962] syz_tun: left allmulticast mode [ 911.388268][T10994] syz_tun: entered allmulticast mode [ 911.419396][T10993] syz_tun: left allmulticast mode [ 911.633031][T11005] syz_tun: entered allmulticast mode [ 911.653833][T11006] loop5: detected capacity change from 0 to 256 [ 911.677245][T11003] syz_tun: left allmulticast mode [ 911.733578][T11006] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 917.313365][ T5089] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 920.631043][T11044] syz_tun: entered allmulticast mode [ 920.662261][T11042] syz_tun: left allmulticast mode [ 925.330777][T11072] syz_tun: entered allmulticast mode [ 925.363286][T11071] syz_tun: left allmulticast mode [ 929.243930][T11099] syz_tun: entered allmulticast mode [ 929.278295][T11095] syz_tun: left allmulticast mode [ 931.856700][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.867166][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.729268][T11131] syz_tun: entered allmulticast mode [ 933.795924][T11130] syz_tun: left allmulticast mode [ 936.504043][T11152] Bluetooth: MGMT ver 1.22 [ 955.659160][ T5826] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 955.897900][ T5826] usb 1-1: Using ep0 maxpacket: 8 [ 955.918164][ T5826] usb 1-1: config 7 has an invalid interface number: 172 but max is 0 [ 955.926353][ T5826] usb 1-1: config 7 has no interface number 0 [ 957.556160][ T5826] usb 1-1: config 7 interface 172 has no altsetting 0 [ 957.637082][ T5826] usb 1-1: string descriptor 0 read error: -71 [ 957.673741][ T5826] usb 1-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=f5.e7 [ 957.737146][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.804520][ T5826] usb 1-1: can't set config #7, error -71 [ 957.889042][ T5826] usb 1-1: USB disconnect, device number 18 [ 993.456717][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.464250][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.855493][T11403] syz_tun: entered allmulticast mode [ 1007.273851][T11444] syz_tun: entered allmulticast mode [ 1021.875095][T11495] syz_tun: entered allmulticast mode [ 1054.570393][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.576712][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1108.951392][T11789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.961042][T11789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.485725][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.492219][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.820702][T11836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.829136][T11836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.797412][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1131.079727][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.137440][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1131.217083][ T9] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1131.287018][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.337514][ T9] usb 1-1: config 0 descriptor?? [ 1131.801922][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1750'. [ 1131.888082][T11949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1750'. [ 1133.293808][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1133.418665][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 1133.482241][ T9] usb 1-1: USB disconnect, device number 19 [ 1151.689323][T11038] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 1157.774490][T12136] ip_tables: iptables: counters copy to user failed while replacing table [ 1160.230480][T12158] syz_tun: entered allmulticast mode [ 1160.252772][T12154] syz_tun: left allmulticast mode [ 1164.997476][T12182] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1166.484918][T12196] ip_tables: iptables: counters copy to user failed while replacing table [ 1168.424949][T12207] 9pnet_fd: Insufficient options for proto=fd [ 1171.221998][T12234] fuse: Bad value for 'fd' [ 1171.375897][T12239] netlink: 'syz.2.1848': attribute type 49 has an invalid length. [ 1173.812624][T12257] fuse: Bad value for 'fd' [ 1177.817129][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.823425][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.429938][T11038] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1183.819629][T12330] ip_tables: iptables: counters copy to user failed while replacing table [ 1186.287787][T12353] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1186.718389][T12363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1186.726013][T12363] IPv6: NLM_F_CREATE should be set when creating new route [ 1187.016595][T12369] cgroup: Invalid name [ 1189.562174][T12397] netlink: 'syz.1.1911': attribute type 10 has an invalid length. [ 1189.570888][T12397] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1189.580990][T12397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1199.198293][T12446] futex_wake_op: syz.5.1928 tries to shift op by 144; fix this program [ 1200.149123][T12463] ip_tables: iptables: counters copy to user failed while replacing table [ 1206.738026][ T5826] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1207.019601][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 1207.091224][ T5826] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1207.128982][ T5826] usb 1-1: config 0 has no interface number 0 [ 1207.175629][ T5826] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1207.234294][ T5826] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1207.308594][ T5826] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1207.354244][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.402887][ T5826] usb 1-1: Product: syz [ 1207.432098][ T5826] usb 1-1: Manufacturer: syz [ 1207.459443][ T5826] usb 1-1: SerialNumber: syz [ 1207.493709][ T5826] usb 1-1: config 0 descriptor?? [ 1207.524294][T12509] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1207.546196][T12509] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1207.801049][T12509] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1207.838445][T12509] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1210.183202][ T5826] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1210.269292][ T5826] asix: probe of 1-1:0.34 failed with error -71 [ 1210.337071][ T5826] usb 1-1: USB disconnect, device number 20 [ 1213.037241][T11038] Bluetooth: hci2: Unknown advertising packet type: 0x77 [ 1213.037317][T11038] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1214.448538][T12556] syz_tun: entered allmulticast mode [ 1214.465696][T12555] syz_tun: left allmulticast mode [ 1224.484835][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1224.777286][ T9] usb 1-1: Dual-Role OTG device on HNP port [ 1224.839222][ T9] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 1224.889013][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.940592][ C0] configfs-gadget.g1 gadget.0: Using interface 0 [ 1225.009370][ T9] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 2 vid 0x0000 pid 0x0000 [ 1225.537375][T12650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1992'. [ 1225.586948][T12650] bridge: RTM_NEWNEIGH with invalid ether address [ 1225.625755][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1992'. [ 1225.655252][T12651] bridge: RTM_NEWNEIGH with invalid ether address [ 1231.220281][T12696] netlink: 'syz.2.2005': attribute type 6 has an invalid length. [ 1231.767021][T11038] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1234.839042][T12735] netlink: 'syz.1.2026': attribute type 6 has an invalid length. [ 1239.212570][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.222396][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.507488][T12805] netlink: 'syz.0.2039': attribute type 6 has an invalid length. [ 1244.572386][ T28] audit: type=1800 audit(2000000810.080:75): pid=12805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2039" name="sub_compatible_id" dev="configfs" ino=36837 res=0 errno=0 [ 1247.962993][T12838] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1247.969740][T12838] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1247.978532][T12838] vhci_hcd vhci_hcd.0: Device attached [ 1247.986523][T12841] vhci_hcd: connection closed [ 1248.003106][ T2956] vhci_hcd: stop threads [ 1248.052492][ T2956] vhci_hcd: release socket [ 1248.098379][ T2956] vhci_hcd: disconnect device [ 1249.581025][T12852] fuse: Bad value for 'fd' [ 1249.670714][T12854] netlink: 'syz.0.2064': attribute type 6 has an invalid length. [ 1249.737155][ T28] audit: type=1800 audit(2000000815.250:76): pid=12854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2064" name="sub_compatible_id" dev="configfs" ino=36960 res=0 errno=0 [ 1249.927168][T12862] netlink: 'syz.1.2065': attribute type 6 has an invalid length. [ 1253.737308][T12888] fuse: Bad value for 'fd' [ 1254.099863][T12897] netlink: 'syz.0.2076': attribute type 6 has an invalid length. [ 1255.087415][T12909] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1258.086579][T12939] syz.2.2092 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1264.219535][T12981] syz_tun: entered allmulticast mode [ 1264.298254][T12979] syz_tun: left allmulticast mode [ 1265.516081][T12995] netlink: 'syz.2.2104': attribute type 6 has an invalid length. [ 1265.704594][T13000] tmpfs: Bad value for 'size' [ 1267.022358][T11038] Bluetooth: hci1: unexpected event for opcode 0x0c0d [ 1267.346557][T13023] netlink: 'syz.1.2125': attribute type 6 has an invalid length. [ 1270.497091][T13045] netlink: 'syz.2.2135': attribute type 6 has an invalid length. [ 1274.289906][T13074] netlink: 'syz.5.2144': attribute type 6 has an invalid length. [ 1277.154402][T13094] usb usb8: usbfs: process 13094 (syz.0.2142) did not claim interface 0 before use [ 1282.942932][T13130] veth0: entered promiscuous mode [ 1282.984639][T13130] veth0: entered allmulticast mode [ 1288.297614][T13180] syz_tun: entered allmulticast mode [ 1288.330175][T13179] syz_tun: left allmulticast mode [ 1288.662380][T13188] netlink: 'syz.5.2185': attribute type 6 has an invalid length. [ 1293.986710][T13218] ecryptfs_parse_options: eCryptfs: unrecognized option [(] [ 1293.994597][T13218] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 1294.002097][T13218] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1294.015204][T13218] Error parsing options; rc = [-22] [ 1295.509910][T11038] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1295.664954][T13228] netlink: 'syz.5.2195': attribute type 6 has an invalid length. [ 1298.369721][T13257] netlink: 'syz.2.2210': attribute type 6 has an invalid length. [ 1300.428708][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.435008][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.845360][T13269] netlink: 'syz.1.2215': attribute type 3 has an invalid length. [ 1303.424309][T13285] IPv6: sit1: Disabled Multicast RS [ 1303.430106][T13285] sit1: entered allmulticast mode [ 1306.144215][T13301] netlink: 'syz.5.2220': attribute type 6 has an invalid length. [ 1310.889615][T13334] syz_tun: entered allmulticast mode [ 1310.951009][T13333] syz_tun: left allmulticast mode [ 1312.297741][T13343] netlink: 'syz.1.2238': attribute type 6 has an invalid length. [ 1314.284426][T11038] Bluetooth: hci0: ACL packet for unknown connection handle 2761 [ 1318.109633][T13395] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1318.121186][T13395] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1318.131121][T13395] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1318.140585][T13395] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1318.148301][T13395] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1318.156592][T13395] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1318.170906][ T8874] syz_tun (unregistering): left allmulticast mode [ 1318.243614][T13393] syz_tun: entered allmulticast mode [ 1318.270262][T13388] syz_tun: left allmulticast mode [ 1318.429856][T13395] Bluetooth: hci2: ACL packet for unknown connection handle 2761 [ 1319.345657][T12208] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.530806][T12208] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.724081][T12208] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.983510][T12208] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.848470][T13395] Bluetooth: hci0: command tx timeout [ 1321.710528][T13392] chnl_net:caif_netlink_parms(): no params data found [ 1322.128793][T13429] syz_tun: entered allmulticast mode [ 1322.150572][ T28] audit: type=1326 audit(2000000887.650:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13430 comm="syz.2.2270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 1322.273708][T13428] syz_tun: left allmulticast mode [ 1322.351414][ T28] audit: type=1326 audit(2000000887.660:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13430 comm="syz.2.2270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 1322.559050][ T28] audit: type=1326 audit(2000000887.660:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13430 comm="syz.2.2270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 1322.696587][T13444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.705459][T13444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.850244][ T28] audit: type=1326 audit(2000000887.660:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13430 comm="syz.2.2270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 1322.876814][T11038] Bluetooth: hci0: command tx timeout [ 1323.043863][ T28] audit: type=1326 audit(2000000887.700:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13430 comm="syz.2.2270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 1323.233917][ T28] audit: type=1326 audit(2000000887.700:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13430 comm="syz.2.2270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 1323.514408][ T28] audit: type=1326 audit(2000000887.700:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13430 comm="syz.2.2270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 1324.516809][ T28] audit: type=1326 audit(2000000887.700:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13430 comm="syz.2.2270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 1324.589350][T13392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.659261][T13392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.740316][T13392] bridge_slave_0: entered allmulticast mode [ 1324.788096][ T28] audit: type=1326 audit(2000000887.700:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13430 comm="syz.2.2270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 1324.822730][T13392] bridge_slave_0: entered promiscuous mode [ 1324.895389][T13392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.953782][T11038] Bluetooth: hci0: command tx timeout [ 1324.978719][T13392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.985995][T13392] bridge_slave_1: entered allmulticast mode [ 1325.016189][ T28] audit: type=1326 audit(2000000887.700:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13430 comm="syz.2.2270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0b6359e159 code=0x7ffc0000 [ 1325.095881][T13392] bridge_slave_1: entered promiscuous mode [ 1326.005625][T13392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1326.175308][T13392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1326.310719][T13488] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2283'. [ 1326.800176][T13392] team0: Port device team_slave_0 added [ 1326.862215][T13392] team0: Port device team_slave_1 added [ 1327.016905][T11038] Bluetooth: hci0: command tx timeout [ 1327.426257][T13392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.273123][T13392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.526961][T13392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.604465][T13527] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2291'. [ 1328.752989][T12208] hsr_slave_0: left promiscuous mode [ 1328.812396][T12208] hsr_slave_1: left promiscuous mode [ 1328.842086][T12208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1328.901300][T12208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1328.982090][T12208] bridge_slave_1: left allmulticast mode [ 1329.034409][T12208] bridge_slave_1: left promiscuous mode [ 1329.082175][T12208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.227431][T12208] bridge_slave_0: left allmulticast mode [ 1329.233117][T12208] bridge_slave_0: left promiscuous mode [ 1329.320180][T12208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.476129][T12208] veth1_macvtap: left promiscuous mode [ 1329.516214][T12208] veth0_macvtap: left promiscuous mode [ 1329.575295][T12208] veth1_vlan: left promiscuous mode [ 1329.605692][T12208] veth0_vlan: left promiscuous mode [ 1330.159612][T12208] pimreg (unregistering): left allmulticast mode [ 1332.788963][T12208] team0 (unregistering): Port device team_slave_1 removed [ 1332.850762][T12208] team0 (unregistering): Port device team_slave_0 removed [ 1332.901640][T12208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1332.980415][T12208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.738575][T12208] bond0 (unregistering): Released all slaves [ 1333.891435][T13392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1333.919064][T13392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1333.987283][T13392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1334.219654][T13392] hsr_slave_0: entered promiscuous mode [ 1335.128220][T13392] hsr_slave_1: entered promiscuous mode [ 1335.190733][T13392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1335.327303][T13392] Cannot create hsr debugfs directory [ 1336.770307][T13598] Bluetooth: MGMT ver 1.22 [ 1338.178539][T13392] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1339.045149][T13395] Bluetooth: hci0: command 0x0c24 tx timeout [ 1339.051566][T11038] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1339.911955][T13392] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1339.988412][T13392] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1340.108354][T13392] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1340.590073][T13392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.718198][T13392] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.870505][T12208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.877629][T12208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1341.017819][T12208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.024925][T12208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1341.204567][T13392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1341.350306][T13392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1342.508103][T13392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.793072][T13392] veth0_vlan: entered promiscuous mode [ 1342.865098][T13392] veth1_vlan: entered promiscuous mode [ 1343.029084][T11038] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1343.044702][T13392] veth0_macvtap: entered promiscuous mode [ 1343.053440][T11038] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1343.138324][T13392] veth1_macvtap: entered promiscuous mode [ 1343.214995][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.336543][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.398650][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.474651][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.547466][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1343.634782][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1343.734845][T13392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1343.839716][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1343.935528][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.041589][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.123100][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.223318][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.305852][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.411787][T13392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.499329][T13392] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.577881][T13392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.652341][T13392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.725624][T13392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.121982][T12208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.191698][T12208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.350740][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.418611][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.210491][T13712] netlink: 'syz.1.2255': attribute type 6 has an invalid length. [ 1347.238922][T13714] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1347.303848][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 1347.303860][ T28] audit: type=1800 audit(2000000912.810:130): pid=13712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2255" name="sub_compatible_id" dev="configfs" ino=39564 res=0 errno=0 [ 1351.031718][T13755] netlink: 'syz.5.2341': attribute type 6 has an invalid length. [ 1351.373895][T13764] 9pnet: p9_errstr2errno: server reported unknown error @c18446744073709551615 [ 1351.411213][T13765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.492542][T13765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.587906][T13789] veth3: entered promiscuous mode [ 1352.644507][T13789] veth3: entered allmulticast mode [ 1353.035237][T13799] netlink: 'syz.5.2350': attribute type 6 has an invalid length. [ 1355.038591][T13818] input: syz0 as /devices/virtual/input/input27 [ 1356.543519][ T4162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.609588][T13395] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1356.623669][T13395] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1356.633511][T13395] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1356.645192][T13395] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1356.654482][T13395] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1356.662409][T13395] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1356.782946][ T4162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.849365][T13845] netlink: 'syz.2.2361': attribute type 6 has an invalid length. [ 1357.002630][ T4162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.080773][ T4162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.126819][T13395] Bluetooth: hci2: command tx timeout [ 1360.135819][T13844] chnl_net:caif_netlink_parms(): no params data found [ 1361.180242][T13395] Bluetooth: hci2: command tx timeout [ 1361.961721][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2368'. [ 1361.974131][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.980567][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.144376][ T28] audit: type=1800 audit(2000000927.650:131): pid=13901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2369" name="sub_compatible_id" dev="configfs" ino=40074 res=0 errno=0 [ 1362.436834][T13898] netlink: 'syz.1.2369': attribute type 6 has an invalid length. [ 1362.528961][T13844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.584478][T13844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.647352][T13844] bridge_slave_0: entered allmulticast mode [ 1362.704699][T13844] bridge_slave_0: entered promiscuous mode [ 1362.755164][T13844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.613715][T13395] Bluetooth: hci2: command tx timeout [ 1363.672428][T13844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.718867][T13844] bridge_slave_1: entered allmulticast mode [ 1363.848076][T13844] bridge_slave_1: entered promiscuous mode [ 1364.641496][ T28] audit: type=1326 audit(2000000930.140:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13911 comm="syz.5.2373" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7fd99e159 code=0x0 [ 1364.975187][T13844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.378178][T13844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.672140][T13395] Bluetooth: hci2: command tx timeout [ 1365.910321][T13844] team0: Port device team_slave_0 added [ 1365.972869][T13844] team0: Port device team_slave_1 added [ 1367.488830][T13844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1367.495815][T13844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1367.748735][T13844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.135381][T13844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.205703][T13844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.436775][T13844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.560222][T13950] netlink: 'syz.5.2379': attribute type 6 has an invalid length. [ 1370.092631][ T4162] hsr_slave_0: left promiscuous mode [ 1370.115602][ T4162] hsr_slave_1: left promiscuous mode [ 1370.139145][ T4162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1370.167224][ T4162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1370.192967][ T4162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1370.216018][ T4162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1370.245144][ T4162] bridge_slave_1: left allmulticast mode [ 1370.261968][ T4162] bridge_slave_1: left promiscuous mode [ 1370.282386][ T4162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.314608][ T4162] bridge_slave_0: left allmulticast mode [ 1370.333389][ T4162] bridge_slave_0: left promiscuous mode [ 1370.354639][ T4162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.427538][ T4162] veth1_macvtap: left promiscuous mode [ 1370.445035][ T4162] veth0_macvtap: left promiscuous mode [ 1370.465292][ T4162] veth1_vlan: left promiscuous mode [ 1370.485397][ T4162] veth0_vlan: left promiscuous mode [ 1370.822934][ T4162] pimreg (unregistering): left allmulticast mode [ 1371.795982][ T4162] team0 (unregistering): Port device team_slave_1 removed [ 1371.842471][ T4162] team0 (unregistering): Port device team_slave_0 removed [ 1371.892133][ T4162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1371.935204][ T4162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1372.615028][ T4162] bond0 (unregistering): Released all slaves [ 1372.699382][T13844] hsr_slave_0: entered promiscuous mode [ 1372.711654][T13844] hsr_slave_1: entered promiscuous mode [ 1372.718721][T13844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1372.726274][T13844] Cannot create hsr debugfs directory [ 1378.148397][T13999] input: syz0 as /devices/virtual/input/input28 [ 1378.615790][T13844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1378.665396][T13844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1378.723859][T13844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1378.800940][T13844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1379.254343][T13844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.361303][T13844] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.433145][T12208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.440328][T12208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1379.531103][T12208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.538261][T12208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.713113][T13844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1381.264213][T13844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1382.318793][T13844] veth0_vlan: entered promiscuous mode [ 1382.388362][T13844] veth1_vlan: entered promiscuous mode [ 1382.498443][T13844] veth0_macvtap: entered promiscuous mode [ 1382.539493][T13844] veth1_macvtap: entered promiscuous mode [ 1382.614776][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.660250][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.708714][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.759144][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.809744][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.850712][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.902399][T13844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1382.959345][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.024698][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.083972][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.139601][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.188191][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.230904][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.281327][T13844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1383.335931][T13844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.405740][T13844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.441610][T13844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.536863][T13844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.730813][T12208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.775713][T12208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.876416][ T4162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.917995][ T4162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.990382][T11038] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1387.001369][T11038] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1387.012764][T11038] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1387.021453][T11038] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1387.028991][T11038] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1387.036250][T11038] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1387.101050][T10412] syz_tun (unregistering): left allmulticast mode [ 1387.362479][ T2971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.749464][ T2971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.002278][ T2971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.208334][ T2971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.482301][T14131] chnl_net:caif_netlink_parms(): no params data found [ 1389.777109][T11038] Bluetooth: hci1: command tx timeout [ 1390.100124][T14192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.169997][T14192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.277355][T14131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.321783][T14131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.369527][T14131] bridge_slave_0: entered allmulticast mode [ 1390.413107][T14131] bridge_slave_0: entered promiscuous mode [ 1390.452883][T14131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.516888][T14131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.524087][T14131] bridge_slave_1: entered allmulticast mode [ 1390.579807][T14131] bridge_slave_1: entered promiscuous mode [ 1390.788258][T14131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.978358][T14131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.049453][T14205] syz.0.2429 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1391.110416][T14205] CPU: 0 PID: 14205 Comm: syz.0.2429 Not tainted syzkaller #0 [ 1391.117902][T14205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1391.127943][T14205] Call Trace: [ 1391.131225][T14205] [ 1391.134145][T14205] dump_stack_lvl+0x18c/0x250 [ 1391.138839][T14205] ? show_regs_print_info+0x20/0x20 [ 1391.144025][T14205] ? load_image+0x420/0x420 [ 1391.148514][T14205] ? ___ratelimit+0x478/0x610 [ 1391.153206][T14205] ? radix_tree_cpu_dead+0x160/0x160 [ 1391.158480][T14205] dump_header+0xd8/0x820 [ 1391.162814][T14205] oom_kill_process+0x390/0x580 [ 1391.167655][T14205] out_of_memory+0xe0e/0x1200 [ 1391.172317][T14205] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 1391.177957][T14205] ? mutex_lock_nested+0x20/0x20 [ 1391.182964][T14205] ? unregister_oom_notifier+0x20/0x20 [ 1391.188417][T14205] mem_cgroup_out_of_memory+0x2c2/0x390 [ 1391.193968][T14205] ? try_charge_memcg+0xc91/0x17c0 [ 1391.199069][T14205] ? drain_local_stock+0x630/0x630 [ 1391.204177][T14205] ? do_raw_spin_unlock+0x121/0x230 [ 1391.209367][T14205] try_charge_memcg+0xca1/0x17c0 [ 1391.214310][T14205] ? __lock_acquire+0x7d80/0x7d80 [ 1391.219349][T14205] ? folio_flags+0x120/0x120 [ 1391.223942][T14205] ? percpu_ref_tryget+0x15/0x180 [ 1391.228973][T14205] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1391.234717][T14205] ? __memcg_kmem_charge_page+0xeb/0x380 [ 1391.240360][T14205] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1391.246087][T14205] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1391.251795][T14205] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1391.257612][T14205] __memcg_kmem_charge_page+0x224/0x380 [ 1391.263156][T14205] memcg_charge_kernel_stack+0x94/0x4d0 [ 1391.268694][T14205] dup_task_struct+0x15b/0x800 [ 1391.273451][T14205] copy_process+0x5a6/0x3da0 [ 1391.278027][T14205] ? plist_add+0x3db/0x490 [ 1391.282442][T14205] ? schedule+0xc7/0x170 [ 1391.286672][T14205] ? futex_wait_queue+0x27/0x1b0 [ 1391.291657][T14205] ? futex_wait+0x4a7/0x5c0 [ 1391.296168][T14205] ? __pidfd_prepare+0x140/0x140 [ 1391.301098][T14205] kernel_clone+0x24b/0x8a0 [ 1391.305592][T14205] ? create_io_thread+0x190/0x190 [ 1391.310609][T14205] ? do_futex+0x2ff/0x3e0 [ 1391.314951][T14205] __x64_sys_clone+0x1b7/0x230 [ 1391.319730][T14205] ? __ia32_sys_vfork+0x140/0x140 [ 1391.324768][T14205] ? lock_chain_count+0x20/0x20 [ 1391.329622][T14205] ? lockdep_hardirqs_on+0x98/0x150 [ 1391.334812][T14205] do_syscall_64+0x55/0xb0 [ 1391.339216][T14205] ? clear_bhb_loop+0x40/0x90 [ 1391.343883][T14205] ? clear_bhb_loop+0x40/0x90 [ 1391.348566][T14205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1391.354445][T14205] RIP: 0033:0x7f0d0139e159 [ 1391.358845][T14205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.378437][T14205] RSP: 002b:00007f0d02199fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1391.386853][T14205] RAX: ffffffffffffffda RBX: 00007f0d01625fa0 RCX: 00007f0d0139e159 [ 1391.394817][T14205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1391.402801][T14205] RBP: 00007f0d0143506b R08: 0000000000000000 R09: 0000000000000000 [ 1391.410763][T14205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1391.418763][T14205] R13: 00007f0d01626038 R14: 00007f0d01625fa0 R15: 00007fff7c363998 [ 1391.426734][T14205] [ 1391.916602][T11038] Bluetooth: hci1: command tx timeout [ 1392.280144][T14131] team0: Port device team_slave_0 added [ 1392.310327][T14131] team0: Port device team_slave_1 added [ 1392.357924][T14219] mmap: syz.1.2432 (14219): VmData 39559168 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1392.448481][T14131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.519782][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.668947][T14131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.709203][T14205] memory: usage 8kB, limit 8kB, failcnt 20 [ 1392.744691][T14205] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1393.598889][T14205] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1393.650888][T14131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.694532][T14205] Memory cgroup stats for /syz0/test: [ 1393.694870][T14205] cache 0 [ 1393.714796][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1393.850805][T14205] rss 0 [ 1393.871040][T14205] rss_huge 0 [ 1393.909428][T14205] shmem 0 [ 1393.912413][T14205] mapped_file 0 [ 1393.951168][T14205] dirty 0 [ 1393.979557][T14205] writeback 0 [ 1393.982939][T11038] Bluetooth: hci1: command tx timeout [ 1394.013525][T14205] workingset_refault_anon 0 [ 1394.688953][T14131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1394.700784][T14205] workingset_refault_file 0 [ 1394.724495][T14205] swap 0 [ 1394.758528][T14205] pgpgin 0 [ 1394.761574][T14205] pgpgout 0 [ 1394.764668][T14205] pgfault 1 [ 1394.834592][T14205] pgmajfault 0 [ 1394.860563][T14205] inactive_anon 0 [ 1394.864218][T14205] active_anon 0 [ 1394.926827][T14205] inactive_file 0 [ 1394.930486][T14205] active_file 0 [ 1394.933923][T14205] unevictable 0 [ 1395.008384][T14205] hierarchical_memory_limit 8192 [ 1395.013344][T14205] hierarchical_memsw_limit 9223372036854771712 [ 1395.086792][T14205] total_cache 0 [ 1395.090278][T14205] total_rss 0 [ 1395.093974][T14205] total_rss_huge 0 [ 1395.187826][T14205] total_shmem 0 [ 1395.191325][T14205] total_mapped_file 0 [ 1395.195290][T14205] total_dirty 0 [ 1395.259669][T14205] total_writeback 0 [ 1395.263506][T14205] total_workingset_refault_anon 0 [ 1395.334430][T14205] total_workingset_refault_file 0 [ 1395.379750][T14131] hsr_slave_0: entered promiscuous mode [ 1395.392656][T14205] total_swap 0 [ 1395.396086][T14205] total_pgpgin 0 [ 1395.449361][T14205] total_pgpgout 0 [ 1395.453023][T14205] total_pgfault 1 [ 1395.456651][T14205] total_pgmajfault 0 [ 1395.477347][T14131] hsr_slave_1: entered promiscuous mode [ 1395.517420][T14131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1395.525035][T14131] Cannot create hsr debugfs directory [ 1395.536079][T14205] total_inactive_anon 0 [ 1395.576823][T14205] total_active_anon 0 [ 1395.580833][T14205] total_inactive_file 0 [ 1395.584964][T14205] total_active_file 0 [ 1395.631023][T14205] total_unevictable 0 [ 1395.635050][T14205] anon_cost 0 [ 1395.706582][T14205] file_cost 0 [ 1395.717580][T14205] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.2429,pid=14204,uid=0 [ 1395.837158][T14205] Memory cgroup out of memory: Killed process 14205 (syz.0.2429) total-vm:102172kB, anon-rss:1368kB, file-rss:23040kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1396.067478][T11038] Bluetooth: hci1: command tx timeout [ 1397.266188][ T28] audit: type=1800 audit(2000000962.770:133): pid=14264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2440" name="sub_compatible_id" dev="configfs" ino=41538 res=0 errno=0 [ 1397.512386][ T2971] hsr_slave_0: left promiscuous mode [ 1397.624609][ T2971] hsr_slave_1: left promiscuous mode [ 1397.732975][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1397.776795][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1397.842836][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1397.882828][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1397.950468][ T2971] bridge_slave_1: left allmulticast mode [ 1398.000161][ T2971] bridge_slave_1: left promiscuous mode [ 1398.005877][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.960966][ T2971] bridge_slave_0: left allmulticast mode [ 1398.966640][ T2971] bridge_slave_0: left promiscuous mode [ 1399.023013][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.292004][ T2971] veth1_macvtap: left promiscuous mode [ 1399.331986][ T2971] veth0_macvtap: left promiscuous mode [ 1399.368366][ T2971] veth1_vlan: left promiscuous mode [ 1399.421464][ T2971] veth0_vlan: left promiscuous mode [ 1400.198951][T14297] fuse: Bad value for 'fd' [ 1403.270782][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 1403.322089][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 1403.374434][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.538690][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1404.174513][ T2971] bond0 (unregistering): Released all slaves [ 1404.281630][T14298] syz_tun: entered allmulticast mode [ 1404.312198][T14299] pimreg: entered allmulticast mode [ 1404.354257][T14298] syz_tun: left allmulticast mode [ 1407.340960][T14131] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1407.388401][T14131] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1407.500749][T14131] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1407.580026][T14131] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1407.904569][T14131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.000375][T14131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.057991][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.065106][ T7879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.154858][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.161991][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1409.171750][T14377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.227698][T14377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.659938][T14131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1409.789494][T14131] veth0_vlan: entered promiscuous mode [ 1409.809805][T11038] [ 1409.812149][T11038] ====================================================== [ 1409.819157][T11038] WARNING: possible circular locking dependency detected [ 1409.826167][T11038] syzkaller #0 Not tainted [ 1409.830560][T11038] ------------------------------------------------------ [ 1409.837554][T11038] kworker/u5:2/11038 is trying to acquire lock: [ 1409.843770][T11038] ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x41/0x550 [ 1409.853053][T11038] [ 1409.853053][T11038] but task is already holding lock: [ 1409.860394][T11038] ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 1409.869713][T11038] [ 1409.869713][T11038] which lock already depends on the new lock. [ 1409.869713][T11038] [ 1409.880091][T11038] [ 1409.880091][T11038] the existing dependency chain (in reverse order) is: [ 1409.889093][T11038] [ 1409.889093][T11038] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 1409.896802][T11038] __mutex_lock+0x135/0xc80 [ 1409.901809][T11038] hci_remote_features_evt+0x535/0x900 [ 1409.907792][T11038] hci_event_packet+0x807/0x1280 [ 1409.913227][T11038] hci_rx_work+0x43a/0xd60 [ 1409.918214][T11038] process_scheduled_works+0xa60/0x1600 [ 1409.924283][T11038] worker_thread+0xa5e/0xfe0 [ 1409.929372][T11038] kthread+0x2fa/0x390 [ 1409.933939][T11038] ret_from_fork+0x48/0x80 [ 1409.938871][T11038] ret_from_fork_asm+0x11/0x20 [ 1409.944152][T11038] [ 1409.944152][T11038] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 1409.951423][T11038] __mutex_lock+0x135/0xc80 [ 1409.956440][T11038] l2cap_chan_connect+0xfc/0xe30 [ 1409.961951][T11038] l2cap_sock_connect+0x586/0x760 [ 1409.967475][T11038] kernel_connect+0x142/0x1c0 [ 1409.972713][T11038] rfcomm_dlc_open+0xa1f/0xec0 [ 1409.978008][T11038] rfcomm_sock_connect+0x2ed/0x600 [ 1409.983722][T11038] __sys_connect+0x3da/0x470 [ 1409.988842][T11038] __x64_sys_connect+0x7a/0x90 [ 1409.994112][T11038] do_syscall_64+0x55/0xb0 [ 1409.999037][T11038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1410.005471][T11038] [ 1410.005471][T11038] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 1410.012848][T11038] __lock_acquire+0x37ef/0x7d80 [ 1410.018235][T11038] lock_acquire+0x19e/0x420 [ 1410.023249][T11038] __mutex_lock+0x135/0xc80 [ 1410.028259][T11038] rfcomm_security_cfm+0x41/0x550 [ 1410.033792][T11038] hci_encrypt_cfm+0x363/0x4d0 [ 1410.039057][T11038] hci_cc_read_enc_key_size+0x219/0x380 [ 1410.045113][T11038] hci_cmd_complete_evt+0x4e7/0xa40 [ 1410.050810][T11038] hci_event_packet+0x7b4/0x1280 [ 1410.056246][T11038] hci_rx_work+0x43a/0xd60 [ 1410.061191][T11038] process_scheduled_works+0xa60/0x1600 [ 1410.067257][T11038] worker_thread+0xa5e/0xfe0 [ 1410.072384][T11038] kthread+0x2fa/0x390 [ 1410.076960][T11038] ret_from_fork+0x48/0x80 [ 1410.081904][T11038] ret_from_fork_asm+0x11/0x20 [ 1410.087179][T11038] [ 1410.087179][T11038] other info that might help us debug this: [ 1410.087179][T11038] [ 1410.097421][T11038] Chain exists of: [ 1410.097421][T11038] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 1410.097421][T11038] [ 1410.110018][T11038] Possible unsafe locking scenario: [ 1410.110018][T11038] [ 1410.117464][T11038] CPU0 CPU1 [ 1410.122848][T11038] ---- ---- [ 1410.128214][T11038] lock(hci_cb_list_lock); [ 1410.132722][T11038] lock(&hdev->lock); [ 1410.139291][T11038] lock(hci_cb_list_lock); [ 1410.146293][T11038] lock(rfcomm_mutex); [ 1410.150434][T11038] [ 1410.150434][T11038] *** DEADLOCK *** [ 1410.150434][T11038] [ 1410.158557][T11038] 4 locks held by kworker/u5:2/11038: [ 1410.163905][T11038] #0: ffff88805cd98138 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1410.174871][T11038] #1: ffffc90004357d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1410.186867][T11038] #2: ffff88802d3d00b8 (&hdev->lock){+.+.}-{3:3}, at: hci_cc_read_enc_key_size+0x9c/0x380 [ 1410.196855][T11038] #3: ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 1410.206582][T11038] [ 1410.206582][T11038] stack backtrace: [ 1410.212448][T11038] CPU: 0 PID: 11038 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1410.220054][T11038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1410.230102][T11038] Workqueue: hci0 hci_rx_work [ 1410.234777][T11038] Call Trace: [ 1410.238044][T11038] [ 1410.240963][T11038] dump_stack_lvl+0x18c/0x250 [ 1410.245656][T11038] ? load_image+0x420/0x420 [ 1410.250149][T11038] ? show_regs_print_info+0x20/0x20 [ 1410.255361][T11038] ? print_circular_bug+0x12b/0x1a0 [ 1410.260554][T11038] check_noncircular+0x2fc/0x400 [ 1410.265483][T11038] ? print_deadlock_bug+0x5d0/0x5d0 [ 1410.270666][T11038] ? lockdep_lock+0xf5/0x230 [ 1410.275257][T11038] ? _find_first_zero_bit+0xd6/0x100 [ 1410.280530][T11038] __lock_acquire+0x37ef/0x7d80 [ 1410.285379][T11038] ? verify_lock_unused+0x140/0x140 [ 1410.290584][T11038] ? mark_lock+0x94/0x320 [ 1410.294900][T11038] ? verify_lock_unused+0x140/0x140 [ 1410.300081][T11038] ? __lock_acquire+0x1262/0x7d80 [ 1410.305092][T11038] ? verify_lock_unused+0x140/0x140 [ 1410.310299][T11038] lock_acquire+0x19e/0x420 [ 1410.314810][T11038] ? rfcomm_security_cfm+0x41/0x550 [ 1410.319995][T11038] ? __might_sleep+0xe0/0xe0 [ 1410.324592][T11038] ? read_lock_is_recursive+0x20/0x20 [ 1410.329949][T11038] ? __mutex_trylock_common+0x160/0x270 [ 1410.335565][T11038] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1410.341701][T11038] ? __mutex_trylock_common+0x160/0x270 [ 1410.347238][T11038] __mutex_lock+0x135/0xc80 [ 1410.351731][T11038] ? rfcomm_security_cfm+0x41/0x550 [ 1410.356912][T11038] ? __mutex_lock+0x30d/0xc80 [ 1410.361568][T11038] ? rfcomm_security_cfm+0x41/0x550 [ 1410.366745][T11038] ? l2cap_disconn_cfm+0xc0/0xc0 [ 1410.371663][T11038] ? mutex_lock_nested+0x20/0x20 [ 1410.376578][T11038] ? hci_encrypt_cfm+0x2fe/0x4d0 [ 1410.381494][T11038] ? mutex_lock_nested+0x20/0x20 [ 1410.386413][T11038] ? hci_conn_hash_lookup_handle+0x20/0x240 [ 1410.392292][T11038] ? __lock_acquire+0x7d80/0x7d80 [ 1410.397301][T11038] rfcomm_security_cfm+0x41/0x550 [ 1410.402306][T11038] ? trace_contention_end+0x39/0xe0 [ 1410.407511][T11038] ? hci_conn_hash_lookup_handle+0x20/0x240 [ 1410.413401][T11038] ? rfcomm_send_msc+0x360/0x360 [ 1410.418336][T11038] hci_encrypt_cfm+0x363/0x4d0 [ 1410.423121][T11038] ? hci_cc_read_enc_key_size+0x141/0x380 [ 1410.428832][T11038] hci_cc_read_enc_key_size+0x219/0x380 [ 1410.434363][T11038] hci_cmd_complete_evt+0x4e7/0xa40 [ 1410.439545][T11038] ? hci_remote_features_evt+0x900/0x900 [ 1410.445172][T11038] hci_event_packet+0x7b4/0x1280 [ 1410.450092][T11038] ? __lock_acquire+0x7d80/0x7d80 [ 1410.455120][T11038] ? lock_chain_count+0x20/0x20 [ 1410.459950][T11038] ? bis_list+0x290/0x290 [ 1410.464262][T11038] ? kcov_remote_start+0x513/0x810 [ 1410.469356][T11038] ? lockdep_hardirqs_on+0x98/0x150 [ 1410.474534][T11038] ? hci_send_to_monitor+0xd7/0x4f0 [ 1410.479717][T11038] hci_rx_work+0x43a/0xd60 [ 1410.484135][T11038] ? process_scheduled_works+0x975/0x1600 [ 1410.489867][T11038] process_scheduled_works+0xa60/0x1600 [ 1410.495410][T11038] ? worker_attach_to_pool+0x370/0x370 [ 1410.500856][T11038] ? assign_work+0x3cc/0x5d0 [ 1410.505433][T11038] worker_thread+0xa5e/0xfe0 [ 1410.510014][T11038] ? _raw_spin_unlock+0x40/0x40 [ 1410.514851][T11038] ? __kthread_parkme+0x71/0x1c0 [ 1410.519772][T11038] kthread+0x2fa/0x390 [ 1410.523828][T11038] ? pr_cont_work+0x550/0x550 [ 1410.528486][T11038] ? kthread_blkcg+0xd0/0xd0 [ 1410.533057][T11038] ret_from_fork+0x48/0x80 [ 1410.537473][T11038] ? kthread_blkcg+0xd0/0xd0 [ 1410.542046][T11038] ret_from_fork_asm+0x11/0x20 [ 1410.546816][T11038] [ 1410.582756][T11038] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 1410.602049][T14131] veth1_vlan: entered promiscuous mode [ 1410.672281][T14131] veth0_macvtap: entered promiscuous mode [ 1410.706420][T14131] veth1_macvtap: entered promiscuous mode [ 1410.742405][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.774828][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.796191][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.817848][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.834455][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.845177][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.861036][T14131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1410.893257][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.916273][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.938042][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1410.956204][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.977139][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1411.001945][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.037592][T14131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1411.062445][T14131] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.079468][T14131] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.094504][T14131] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.114905][T14131] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.175095][T14131] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 1411.216390][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.225894][T14131] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 1411.246597][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.282039][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.303573][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50