last executing test programs: 8m35.414901164s ago: executing program 4 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000a40)='./proc\x00', 0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='100', 0x3) mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil) socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x46) munlock(&(0x7f000004f000/0x2000)=nil, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./configfs\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./configfs/usb_gadget/g1\x00', 0x1ff) 8m34.195147247s ago: executing program 4 (id=18): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, 0x0) 8m30.614033723s ago: executing program 4 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000a40)='./proc\x00', 0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='100', 0x3) mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil) socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x46) munlock(&(0x7f000004f000/0x2000)=nil, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./configfs\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./configfs/usb_gadget/g1\x00', 0x1ff) 8m28.932195068s ago: executing program 4 (id=36): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x80}}, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="000008004500001c12340000403ae5c8ac141401ac141402", 0x18) 8m25.972626518s ago: executing program 4 (id=40): socket$inet6_sctp(0xa, 0x5, 0x84) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x8382, 0x0) socket(0xa, 0x3, 0x3a) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) 8m23.014637268s ago: executing program 4 (id=44): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a400000041000901fefffffffddbdf25017c0000040042800c00ab000800000000000000080009008bc42678703cf6f654bede1ad859aad2fb1d6bee145e01ca5344ff9d905df8b6264c4db912cd8a5f290c0b31c9e8649ccad484e4fa7e8fa9e049e874bbf7ce1e0e24ede36075fbfb0ecdd5a35df59060485449de1b71d3d9597c8f2464ac30d5adaa14376393687f23cfac7f02000000ea19625c579d0bac6d510000"], 0xa4}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000080) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x60240) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x6) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000100)=0x7f, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@migrate={0xd8, 0x21, 0x213, 0x70bd29, 0x25dfdbfd, {{@in=@multicast1, @in6=@empty, 0x4e22, 0x5, 0x4e21, 0x9, 0x8, 0x20, 0x80, 0x84}, 0x6e6bb2, 0x1}, [@user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0xa}}, @migrate={0x50, 0x11, [{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@dev={0xfe, 0x80, '\x00', 0x3d}, @in=@broadcast, 0x33, 0x0, 0x0, 0x34ff, 0xa, 0x2}]}, @policy_type={0xa}]}, 0xd8}, 0x1, 0x0, 0x0, 0x841}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001a0001000000000000000a008008"], 0x38}, 0x1, 0x0, 0x0, 0x4082}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000001cbed947d0000700000a1400002011d7fe000000000000000000000000000a"], 0x28}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r7) sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r8, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) r9 = landlock_create_ruleset(&(0x7f0000000440)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r9, 0xe) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xcc, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x9]}, @CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x34}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000040}, 0x4800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x810) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25df5bfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72970}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r12, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x1f90, @private=0xa000001}, 0x10) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r13, 0x84, 0x6c, &(0x7f0000000b80)={0x0, 0x25, "c8db71e0f571fec3b737814b73b3194f7b810c4b1a383323ef82f712c762e9e3fbaf4ba5aa"}, &(0x7f0000000bc0)=0x2d) 8m7.181567004s ago: executing program 32 (id=44): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a400000041000901fefffffffddbdf25017c0000040042800c00ab000800000000000000080009008bc42678703cf6f654bede1ad859aad2fb1d6bee145e01ca5344ff9d905df8b6264c4db912cd8a5f290c0b31c9e8649ccad484e4fa7e8fa9e049e874bbf7ce1e0e24ede36075fbfb0ecdd5a35df59060485449de1b71d3d9597c8f2464ac30d5adaa14376393687f23cfac7f02000000ea19625c579d0bac6d510000"], 0xa4}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000080) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x60240) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x6) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000100)=0x7f, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@migrate={0xd8, 0x21, 0x213, 0x70bd29, 0x25dfdbfd, {{@in=@multicast1, @in6=@empty, 0x4e22, 0x5, 0x4e21, 0x9, 0x8, 0x20, 0x80, 0x84}, 0x6e6bb2, 0x1}, [@user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0xa}}, @migrate={0x50, 0x11, [{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@dev={0xfe, 0x80, '\x00', 0x3d}, @in=@broadcast, 0x33, 0x0, 0x0, 0x34ff, 0xa, 0x2}]}, @policy_type={0xa}]}, 0xd8}, 0x1, 0x0, 0x0, 0x841}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001a0001000000000000000a008008"], 0x38}, 0x1, 0x0, 0x0, 0x4082}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000001cbed947d0000700000a1400002011d7fe000000000000000000000000000a"], 0x28}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r7) sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r8, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) r9 = landlock_create_ruleset(&(0x7f0000000440)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r9, 0xe) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xcc, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x9]}, @CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x34}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000040}, 0x4800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x810) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25df5bfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72970}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r12, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x1f90, @private=0xa000001}, 0x10) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r13, 0x84, 0x6c, &(0x7f0000000b80)={0x0, 0x25, "c8db71e0f571fec3b737814b73b3194f7b810c4b1a383323ef82f712c762e9e3fbaf4ba5aa"}, &(0x7f0000000bc0)=0x2d) 5.388829786s ago: executing program 1 (id=1840): bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=@base={0xa, 0x4, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) 5.328576317s ago: executing program 3 (id=1841): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x200, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = add_key$user(&(0x7f0000002700), &(0x7f00000026c0)={'syz', 0x0}, &(0x7f0000000140)="5b25ad4d73d6528f703d", 0xa, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f0000002640), &(0x7f0000002680)={'syz', 0x1}, 0x0, 0x0, 0x0) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f4031f897f3b12ffaada8201e50923df2bb7d50bc559759ae785f8c8564bd270f568b646cf58cb2837303a1d7ad57d8c24d461e2a9eaf1158603987f8e315e14c", 0x58}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000706010400000000000000002200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0xc886) r8 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8102) writev(r8, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 5.327055027s ago: executing program 1 (id=1842): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setns(0xc9, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000001400)={0x0, 0x442d, 0x80000, 0x0, 0x60055}, &(0x7f0000001480)=0x0, &(0x7f00000014c0)=0x0, &(0x7f0000001500)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000001540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x490}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000015c0)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000001600)=0x7) r6 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000001640)=0xd) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000001300), 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x1, &(0x7f0000001380)=[{0x6, 0x0, 0xa, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001b40)={0x1, &(0x7f0000001b80)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001bc0)={[0x9]}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000001940)={{{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000001a40)=0xe4) getgroups(0x8, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) sendmmsg$unix(r9, &(0x7f0000001b00)=[{{&(0x7f0000001680)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001700)="140f3699628446b160a2e4578c8f839878cadf29956a2edb0402aeaa327ee62caacfc43fb0b578c2774923e22ebba448ad8e254305e9395b5fc6404a1bee3b4b9ac3030325a96d4a960b6e191974bfeb1da8f44e31fc17c4bb92926520863af8f0e8fa98ec2862c72df3e25261ae34c32670fe3f349257f63a11549d8ac396e6aebe45fc2bf8cec400e8ad9fe9eb8b95937a33eea318f0f5f708d7a6bc6a2efe0d96be8a30765ef29cf3b3386c93dc04aac2f446f60d4ef56d56dabcd0857cd12e559c69de42e8cab08abb78d22a4cab879cca4058f9f83ab1bb860041cabef4bc0127ac0d1a92efe450eda8d7fa1779543019a7016acfe02e6ee5d6", 0xfc}, {&(0x7f0000001800)="89678a7947612fc8712e8ba99107af7cef8c10c23fada01ce686d5f9edfe9cb1338fbacb752f700876eb1273798159790840fbadc991c265879b1b88402e189dab496d3bc9ea4fa702c0388f6e32e0abe3d5a9d2e17476009b8e51a2a1681156cef946def86e6f8938b8d38f6f23a78366f27c968571bbbc0378d366f4a0d5fe6933ed022c38dc0443ee36c46a25c6ed852712577384dbc1c61785267583200833da2ed1cf710a00335d52cbdc154c7ede9744b6eeab75a16cf643cdb68d277f030411a816bd2262b7bc270820d72d921e7151de3b3bee44e433a8c1d23d503b0279677399e6ec73", 0xe8}], 0x2, &(0x7f0000001ac0)=[@cred={{0x18, 0x1, 0x2, {0x0, r10}}}], 0x18, 0x4}}], 0x1, 0x20000810) pread64(r9, &(0x7f00000000c0)=""/4103, 0x1007, 0x4b) ioctl(r0, 0x8915, &(0x7f0000000080)='wpan0') 4.915238018s ago: executing program 2 (id=1848): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c00)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0}, {0x0}], 0x2) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000d40)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d80)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000dc0), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000e00), 0x3fffffffffffce3, 0x700000000000000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000e40)={0x6, 'ip6gretap0\x00', {0x1ff}, 0x7}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000140)={'lo\x00', 0x3}) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) write$sequencer(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000280)={@empty, @dev={0xac, 0x14, 0x14, 0x23}, 0xb, 0x20}}) splice(r4, 0x0, r2, 0x0, 0xffff, 0x2) 4.180517048s ago: executing program 2 (id=1853): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000200, &(0x7f0000000080), 0x7, 0x504, &(0x7f0000000d80)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x200000, &(0x7f0000000240)={[{@test_dummy_encryption_v1}, {@init_itable}, {@resuid}]}, 0x3, 0x46a, &(0x7f0000000340)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) unlink(&(0x7f0000000d40)='./file1\x00') 3.940312954s ago: executing program 5 (id=1855): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) userfaultfd(0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='+192.0.2.1', 0xa) 3.659790753s ago: executing program 5 (id=1857): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./rpc_pipefs\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000740)=[{&(0x7f0000000780)="99", 0x1}], 0x1, 0x4, 0x8000) 3.598484844s ago: executing program 1 (id=1858): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@security={'security\x00', 0xe, 0x4, 0x2c8, 0xffffffff, 0xb0, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x31}, @multicast1, 0x0, 0x0, 'veth0\x00', 'veth1_to_bridge\x00', {}, {}, 0x21, 0x1, 0x2}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xff, 0x4, {0x6}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a67e5c9f284975b83ef2bfa3921eda16b44bd935897aab5f415954a4a7b3"}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0xf, [0x28, 0x1b, 0x10, 0x16, 0xd, 0x2a, 0x12, 0x25, 0x15, 0x35, 0x32, 0x19, 0x1c, 0x1c, 0x26, 0xb], 0x2, 0x10000, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 2.548652672s ago: executing program 5 (id=1860): r0 = syz_open_dev$usbfs(&(0x7f0000001d00), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) 2.407896646s ago: executing program 1 (id=1861): r0 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0xb) 1.458277312s ago: executing program 5 (id=1863): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping', 0x4, 0x0, &(0x7f0000000300)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) openat$sndtimer(0xffffff9c, 0x0, 0x20480) write(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000880)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000001b705000008000000850000002d00000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c", 0xc5) 1.263639327s ago: executing program 1 (id=1864): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0505405, &(0x7f0000000000)={{0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000002080)='./mnt\x00', &(0x7f00000020c0)='tracefs\x00', 0x4002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000003200)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000003240)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x7, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0x0, 0x6, {"4ca56ae0e82187425e000303ff010001"}, 0x4, 0x0, 0x1}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r8}}, 0x10) 1.222924258s ago: executing program 0 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x14) 1.13213561s ago: executing program 2 (id=1866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r1, r0}, 0xc) 1.108969871s ago: executing program 3 (id=1867): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='+192.0.2.1', 0xa) 1.020881213s ago: executing program 1 (id=1868): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x8d00, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000001400)={0x0, 0x442d, 0x80000, 0x0, 0x60055}, &(0x7f0000001480)=0x0, &(0x7f00000014c0)=0x0, &(0x7f0000001500)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000001540)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x490}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000015c0)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000001600)=0x7) r7 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000001640)=0xd) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000001300), 0x4) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x1, &(0x7f0000001380)=[{0x6, 0x0, 0xa, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001b40)={0x1, &(0x7f0000001b80)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001bc0)={[0x9]}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000001940)={{{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000001a40)=0xe4) getgroups(0x8, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) sendmmsg$unix(r10, &(0x7f0000001b00)=[{{&(0x7f0000001680)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001700)="140f3699628446b160a2e4578c8f839878cadf29956a2edb0402aeaa327ee62caacfc43fb0b578c2774923e22ebba448ad8e254305e9395b5fc6404a1bee3b4b9ac3030325a96d4a960b6e191974bfeb1da8f44e31fc17c4bb92926520863af8f0e8fa98ec2862c72df3e25261ae34c32670fe3f349257f63a11549d8ac396e6aebe45fc2bf8cec400e8ad9fe9eb8b95937a33eea318f0f5f708d7a6bc6a2efe0d96be8a30765ef29cf3b3386c93dc04aac2f446f60d4ef56d56dabcd0857cd12e559c69de42e8cab08abb78d22a4cab879cca4058f9f83ab1bb860041cabef4bc0127ac0d1a92efe450eda8d7fa1779543019a7016acfe02e6ee5d6", 0xfc}, {&(0x7f0000001800)="89678a7947612fc8712e8ba99107af7cef8c10c23fada01ce686d5f9edfe9cb1338fbacb752f700876eb1273798159790840fbadc991c265879b1b88402e189dab496d3bc9ea4fa702c0388f6e32e0abe3d5a9d2e17476009b8e51a2a1681156cef946def86e6f8938b8d38f6f23a78366f27c968571bbbc0378d366f4a0d5fe6933ed022c38dc0443ee36c46a25c6ed852712577384dbc1c61785267583200833da2ed1cf710a00335d52cbdc154c7ede9744b6eeab75a16cf643cdb68d277f030411a816bd2262b7bc270820d72d921e7151de3b3bee44e433a8c1d23d503b0279677399e6ec73", 0xe8}], 0x2, &(0x7f0000001ac0)=[@cred={{0x18, 0x1, 0x2, {0x0, r11}}}], 0x18, 0x4}}], 0x1, 0x20000810) pread64(r10, &(0x7f00000000c0)=""/4103, 0x1007, 0x4b) ioctl(r0, 0x8915, &(0x7f0000000080)='wpan0') 951.999815ms ago: executing program 0 (id=1869): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000f00)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000f40)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000004, 0x1, 0xff, 0x0, 0x0, 0xf, 0x5, 0x6, 0x3, 0x9, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 950.451465ms ago: executing program 3 (id=1870): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) 949.142325ms ago: executing program 2 (id=1871): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x402) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000140)={{0x5, 0x24}, {0x0, 0x8}, 0x4, 0x0, 0x1}) 840.855658ms ago: executing program 0 (id=1872): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fcffffff8900000008000300", @ANYRES32=0x0, @ANYBLOB="20001d"], 0x3c}, 0x1, 0x0, 0x0, 0x25e2906596869c9d}, 0x0) 840.448538ms ago: executing program 2 (id=1873): syz_mount_image$ext4(&(0x7f0000006a00)='ext4\x00', &(0x7f0000006a40)='./file0\x00', 0x800000, &(0x7f0000006a80)={[], [{@fsmagic={'fsmagic', 0x3d, 0x8001}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_gt}, {@obj_user}, {@fsname={'fsname', 0x3d, 'ext4\x00O(\xb0\xab\xbb%*me*;\x9e\xf4>\xaa\xbe\xaa\xa9\x8cv7\x02\x19m\x84\x0e\xeb\xbe\xa2\xef\xf2&\xff\xdc\n\xf7\x92\xc9\x039\'xQ=P\xb0\x8f\xda\fn:!w\xf3\xfc\xf3\xc2|\b\x94\xe9\x8e\xf6\xbc\xc4\xd3\x06\xb9q\x86y\t}\xc48x\x1e}\x1a\x92RZn\xed}s\x05\b\xcb\\\\\xf2\xea\xb6Y\xf6\x8e+\xcd\xd2#\xd12\x10\xfe\x8e\x83\xa2<\x05\xa9~\'\xf6(\xed\x86\x88)\xe5\x8d\xfb\xad\xbc\v!\xd7k(D\x13\xedw$\x94%K\xe6\xf00\x8781\x93\xa0\xe9\x90B\x06Hv\xab7\xb9\xd0\\\xf3|\xa9K\x0f\xc4sUd\xf2?'}}, {@uid_eq}]}, 0x1, 0x539, &(0x7f0000006bc0)="$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") close(0x3) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002680)="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", 0x2000, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)={0x90, 0x0, 0x3, {0x0, 0x200000000, 0x1, 0x4, 0xb, 0x1, {0x1, 0x10001, 0x1fffffffffff, 0x2, 0x0, 0x100, 0x10000, 0x10000002, 0xc88, 0x0, 0xd, r2, 0x0, 0xffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004800)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000004880)='./file0/file0\x00', 0x108) writev(0xffffffffffffffff, 0x0, 0x0) close(0x3) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat(0xffffffffffffff9c, &(0x7f0000002640)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r3, 0x400, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = epoll_create(0x800000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000002280)={0x4000200a}) 741.77212ms ago: executing program 0 (id=1874): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002b00)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000002b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002b80)=0x14) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002c40)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000002d00)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x60000, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d80)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000002dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002e00)=0x14) sendmsg$nl_route(r3, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002ec0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0xc864, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 718.782771ms ago: executing program 5 (id=1875): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x240240, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) migrate_pages(r2, 0xfffffeff, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xe, {0x2, 0x4e22, @multicast1}, 'vlan0\x00'}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r7, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r6, &(0x7f0000000100), 0xb) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r8, 0x1, 0xc, 0x0, &(0x7f00000004c0)) 617.078214ms ago: executing program 3 (id=1876): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000140)={0x200a, 0x7ffffffe, 0x80000004}) 497.974147ms ago: executing program 5 (id=1877): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x200, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = add_key$user(&(0x7f0000002700), &(0x7f00000026c0)={'syz', 0x0}, &(0x7f0000000140)="5b25ad4d73d6528f703d", 0xa, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f0000002640), &(0x7f0000002680)={'syz', 0x1}, 0x0, 0x0, 0x0) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f4031f897f3b12ffaada8201e50923df2bb7d50bc559759ae785f8c8564bd270f568b646cf58cb2837303a1d7ad57d8c24d461e2a9eaf1158603987f8e315e14c", 0x58}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000706010400000000000000002200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0xc886) r8 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8102) writev(r8, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 402.03174ms ago: executing program 3 (id=1878): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0505405, &(0x7f0000000000)={{0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000002080)='./mnt\x00', &(0x7f00000020c0)='tracefs\x00', 0x4002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000003200)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000031c0)={0x20000014}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x7, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @loopback}, @ib={0x1b, 0x0, 0x6, {"4ca56ae0e82187425e000303ff010001"}, 0x4, 0x0, 0x1}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r8}}, 0x10) 256.930704ms ago: executing program 2 (id=1879): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) sched_setaffinity(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240880c0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 246.585864ms ago: executing program 0 (id=1880): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x3) 78.124858ms ago: executing program 3 (id=1881): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='+192.0.2.1', 0xa) 0s ago: executing program 0 (id=1882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r1, r0}, 0xc) kernel console output (not intermixed with test programs): mes ready [ 179.228925][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.240477][ T4755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.252287][ T4755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.266848][ T4755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.285984][ T4755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.297557][ T4755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.308939][ T4755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.319553][ T4755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.330674][ T4755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.355247][ T4755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.402626][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.421347][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.467867][ T4755] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.491286][ T4755] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.529893][ T4755] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.555602][ T4755] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.618944][ T5234] fuse: Unknown parameter 'fd0x00000000000000030000000000000000000000000000000000000000' [ 180.476999][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.497663][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.507810][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.575841][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.607598][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.928426][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.445489][ T4271] ffs_data_put(): freeing [ 183.480576][ T5255] capability: warning: `syz.2.185' uses 32-bit capabilities (legacy support in use) [ 184.776037][ T4259] libceph: connect (1)[c::]:6789 error -101 [ 184.783329][ T4259] libceph: mon0 (1)[c::]:6789 connect error [ 184.801100][ T5285] nvmet_tcp: address family 255 not supported [ 184.813747][ T5288] fuse: Unknown parameter 'fd0x00000000000000030000000000000000000000000000000000000000' [ 184.932894][ T5278] ceph: No mds server is up or the cluster is laggy [ 185.063937][ T4259] libceph: connect (1)[c::]:6789 error -101 [ 185.634923][ T4259] libceph: mon0 (1)[c::]:6789 connect error [ 187.397033][ T4364] libceph: connect (1)[c::]:6789 error -101 [ 187.404230][ T4364] libceph: mon0 (1)[c::]:6789 connect error [ 187.680090][ T4755] ffs_data_put(): freeing [ 187.700266][ T5314] tmpfs: Too small a size for current use [ 187.747860][ T26] audit: type=1326 audit(1792645444.483:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5313 comm="syz.3.198" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd52eb9f559 code=0x0 [ 187.828474][ T5317] Bluetooth: MGMT ver 1.22 [ 187.878097][ T5319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 188.138529][ T5338] ======================================================= [ 188.138529][ T5338] WARNING: The mand mount option has been deprecated and [ 188.138529][ T5338] and is ignored by this kernel. Remove the mand [ 188.138529][ T5338] option from the mount to silence this warning. [ 188.138529][ T5338] ======================================================= [ 188.266774][ T5340] nvmet_tcp: address family 255 not supported [ 188.552525][ T5348] netlink: 36 bytes leftover after parsing attributes in process `syz.1.207'. [ 188.996936][ T5359] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 190.713738][ T4277] ffs_data_put(): freeing [ 191.077933][ T5371] smc: net device vlan1 applied user defined pnetid SYZ2 [ 191.772918][ T5400] fuse: Unknown parameter '0x0000000000000005' [ 194.443935][ T5411] Bluetooth: MGMT ver 1.22 [ 195.541471][ T4289] Bluetooth: hci1: adv larger than maximum supported [ 195.541557][ T4289] Bluetooth: hci1: Unknown advertising packet type: 0x22df [ 195.548997][ T4289] Bluetooth: hci1: Malformed LE Event: 0x0d [ 195.674755][ T5421] batman_adv: batadv0: adding TT local entry ba:bb:cc:dd:ee:ff to non-existent VLAN 3893 [ 195.952183][ T5438] tmpfs: Too small a size for current use [ 196.100394][ T5444] device bond0 entered promiscuous mode [ 196.136315][ T5444] device bond_slave_0 entered promiscuous mode [ 196.150482][ T5444] device bond_slave_1 entered promiscuous mode [ 196.230392][ T5449] bond0: (slave bond_slave_0): Releasing backup interface [ 196.249188][ T5449] device bond_slave_0 left promiscuous mode [ 196.327678][ T5444] bond0: (slave bond_slave_1): Releasing backup interface [ 196.369427][ T5444] device bond_slave_1 left promiscuous mode [ 196.428744][ T4283] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 196.437786][ T5444] netlink: 'syz.0.236': attribute type 10 has an invalid length. [ 196.465747][ T5444] device syz_tun entered promiscuous mode [ 196.547965][ T5444] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 196.618899][ T4283] usb 3-1: Using ep0 maxpacket: 8 [ 196.626401][ T4283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.646908][ T5460] rxe_eth0 speed is unknown, defaulting to 1000 [ 196.662687][ T4283] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 196.688843][ T4283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.727401][ T4283] usb 3-1: config 0 descriptor?? [ 196.780702][ T5465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.241'. [ 196.985300][ T4283] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 199.925062][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.934396][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.037134][ T5483] 9pnet_virtio: no channels available for device syz [ 201.080561][ T4372] usb 3-1: USB disconnect, device number 3 [ 201.614147][ T5508] overlayfs: unrecognized mount option "/" or missing value [ 202.671643][ T5540] FAULT_INJECTION: forcing a failure. [ 202.671643][ T5540] name failslab, interval 1, probability 0, space 0, times 0 [ 202.733564][ T5540] CPU: 1 PID: 5540 Comm: syz.2.266 Not tainted syzkaller #0 [ 202.746130][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 202.756251][ T5540] Call Trace: [ 202.759769][ T5540] [ 202.762807][ T5540] dump_stack_lvl+0x188/0x24e [ 202.767751][ T5540] ? show_regs_print_info+0x12/0x12 [ 202.773038][ T5540] ? load_image+0x410/0x410 [ 202.777615][ T5540] ? __might_sleep+0xd0/0xd0 [ 202.782274][ T5540] ? __lock_acquire+0x7ea0/0x7ea0 [ 202.787412][ T5540] should_fail_ex+0x390/0x4c0 [ 202.792173][ T5540] should_failslab+0x5/0x20 [ 202.796817][ T5540] slab_pre_alloc_hook+0x59/0x300 [ 202.802095][ T5540] ? alloc_file+0x84/0x5f0 [ 202.806601][ T5540] kmem_cache_alloc+0x56/0x2f0 [ 202.811795][ T5540] ? __alloc_file+0x25/0x230 [ 202.816643][ T5540] __alloc_file+0x25/0x230 [ 202.821160][ T5540] alloc_empty_file+0x90/0x180 [ 202.826788][ T5540] alloc_file+0x5b/0x5f0 [ 202.831116][ T5540] alloc_file_clone+0x23/0xa0 [ 202.836939][ T5540] create_pipe_files+0x409/0x6b0 [ 202.842498][ T5540] __do_pipe_flags+0x46/0x1f0 [ 202.847512][ T5540] do_pipe2+0xa7/0x190 [ 202.851659][ T5540] ? _compound_head+0x120/0x120 [ 202.856569][ T5540] ? lock_chain_count+0x20/0x20 [ 202.861599][ T5540] ? syscall_enter_from_user_mode+0x21/0x80 [ 202.868223][ T5540] __x64_sys_pipe2+0x56/0x60 [ 202.872905][ T5540] do_syscall_64+0x4c/0xa0 [ 202.877542][ T5540] ? clear_bhb_loop+0x60/0xb0 [ 202.882389][ T5540] ? clear_bhb_loop+0x60/0xb0 [ 202.887142][ T5540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.893166][ T5540] RIP: 0033:0x7fe20719f559 [ 202.897740][ T5540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.917821][ T5540] RSP: 002b:00007fe208106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 202.926376][ T5540] RAX: ffffffffffffffda RBX: 00007fe207425fa0 RCX: 00007fe20719f559 [ 202.934624][ T5540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.942655][ T5540] RBP: 00007fe207236b20 R08: 0000000000000000 R09: 0000000000000000 [ 202.950770][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.958974][ T5540] R13: 00007fe207426038 R14: 00007fe207425fa0 R15: 00007ffdc56ccdd8 [ 202.967228][ T5540] [ 203.228846][ T26] audit: type=1800 audit(1792645459.943:3): pid=5554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.274" name="zone_nr_conv" dev="configfs" ino=39424 res=0 errno=0 [ 206.333176][ T26] audit: type=1800 audit(1792645463.073:4): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.274" name="zoned" dev="configfs" ino=38535 res=0 errno=0 [ 206.632120][ T5570] ffs_data_put(): freeing [ 207.044911][ T4283] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 207.130899][ T4289] block nbd1: Receive control failed (result -107) [ 207.187895][ T5591] nbd1: detected capacity change from 0 to 18 [ 207.280732][ T94] block nbd1: Dead connection, failed to find a fallback [ 207.290257][ T94] block nbd1: shutting down sockets [ 207.296597][ T94] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.307817][ T94] Buffer I/O error on dev nbd1, logical block 0, async page read [ 207.324859][ T94] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.335069][ T94] Buffer I/O error on dev nbd1, logical block 0, async page read [ 207.346470][ T94] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.356393][ T94] Buffer I/O error on dev nbd1, logical block 0, async page read [ 207.369877][ T94] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.389044][ T94] Buffer I/O error on dev nbd1, logical block 0, async page read [ 207.401585][ T94] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.411490][ T94] Buffer I/O error on dev nbd1, logical block 0, async page read [ 207.423808][ T94] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.435104][ T94] Buffer I/O error on dev nbd1, logical block 0, async page read [ 207.459706][ T94] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.469911][ T94] Buffer I/O error on dev nbd1, logical block 0, async page read [ 207.499446][ T94] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.509116][ T94] Buffer I/O error on dev nbd1, logical block 0, async page read [ 207.517523][ T5492] ldm_validate_partition_table(): Disk read failed. [ 208.664642][ T94] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.675748][ T94] Buffer I/O error on dev nbd1, logical block 0, async page read [ 208.700982][ T94] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 208.713205][ T94] Buffer I/O error on dev nbd1, logical block 0, async page read [ 208.759087][ T5492] Dev nbd1: unable to read RDB block 0 [ 208.901154][ T5492] nbd1: unable to read partition table [ 209.044692][ T5492] nbd1: partition table beyond EOD, truncated [ 209.438752][ T4283] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 209.446945][ T4283] usb 4-1: config 0 has no interface number 0 [ 209.468772][ T4283] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.484511][ T4283] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 209.493899][ T4283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.504220][ T4283] usb 4-1: Product: syz [ 209.508464][ T4283] usb 4-1: Manufacturer: syz [ 209.513239][ T4283] usb 4-1: SerialNumber: syz [ 209.522423][ T4283] usb 4-1: config 0 descriptor?? [ 209.531262][ T5492] ldm_validate_partition_table(): Disk read failed. [ 209.540338][ T4283] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 209.585499][ T5492] Dev nbd1: unable to read RDB block 0 [ 209.638432][ T5492] nbd1: unable to read partition table [ 209.684117][ T5492] nbd1: partition table beyond EOD, truncated [ 209.811536][ T4364] usb 4-1: USB disconnect, device number 2 [ 209.845599][ T4364] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 210.014875][ T5612] ffs_data_put(): freeing [ 210.258853][ T5620] FAULT_INJECTION: forcing a failure. [ 210.258853][ T5620] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 210.302588][ T5620] CPU: 1 PID: 5620 Comm: syz.1.291 Not tainted syzkaller #0 [ 210.310130][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 210.320241][ T5620] Call Trace: [ 210.323658][ T5620] [ 210.326628][ T5620] dump_stack_lvl+0x188/0x24e [ 210.331387][ T5620] ? show_regs_print_info+0x12/0x12 [ 210.336679][ T5620] ? load_image+0x410/0x410 [ 210.350311][ T5620] ? __lock_acquire+0x7ea0/0x7ea0 [ 210.355975][ T5620] should_fail_ex+0x390/0x4c0 [ 210.361354][ T5620] _copy_to_user+0x2c/0x130 [ 210.366027][ T5620] copy_siginfo_to_user+0x1f/0x140 [ 210.372205][ T5620] arch_do_signal_or_restart+0xd86/0x1310 [ 210.378744][ T5620] ? get_sigframe_size+0x10/0x10 [ 210.384264][ T5620] ? __ia32_sys_get_robust_list+0x100/0x100 [ 210.390899][ T5620] ? end_current_label_crit_section+0x170/0x170 [ 210.398456][ T5620] ? exit_to_user_mode_loop+0x3b/0x110 [ 210.404837][ T5620] exit_to_user_mode_loop+0x70/0x110 [ 210.410222][ T5620] exit_to_user_mode_prepare+0xee/0x180 [ 210.416203][ T5620] syscall_exit_to_user_mode+0x16/0x40 [ 210.422695][ T5620] do_syscall_64+0x58/0xa0 [ 210.427489][ T5620] ? clear_bhb_loop+0x60/0xb0 [ 210.433906][ T5620] ? clear_bhb_loop+0x60/0xb0 [ 210.439813][ T5620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.447011][ T5620] RIP: 0033:0x7f4d3cd9f557 [ 210.451649][ T5620] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 210.478314][ T5620] RSP: 002b:00007f4d3dbbc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 210.490989][ T5620] RAX: 00000000000000ca RBX: 00007f4d3d026098 RCX: 00007f4d3cd9f559 [ 210.500737][ T5620] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4d3d026098 [ 210.509432][ T5620] RBP: 00007f4d3d026090 R08: 0000000000000000 R09: 0000000000000000 [ 210.517651][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.525850][ T5620] R13: 00007f4d3d026128 R14: 00007fff4619c200 R15: 00007fff4619c2e8 [ 210.534334][ T5620] [ 210.546874][ T4283] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 210.732128][ T4283] usb 3-1: Using ep0 maxpacket: 8 [ 210.752637][ T4283] usb 3-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 210.812097][ T4283] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.838786][ T4283] usb 3-1: config 1 has no interface number 0 [ 210.856781][ T4283] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBC, skipping [ 210.885331][ T4283] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 210.912474][ T4283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.924717][ T4283] usb 3-1: Product: syz [ 210.933518][ T4283] usb 3-1: Manufacturer: syz [ 210.938376][ T4283] usb 3-1: SerialNumber: syz [ 211.311060][ T4283] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 211.411192][ T5492] udevd[5492]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.572321][ T5657] ffs_data_put(): freeing [ 211.811916][ T5669] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 212.165366][ T5678] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 212.239841][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 212.241657][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 212.242629][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 212.243109][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 212.975088][ T5686] fuse: Unknown parameter 'fd00000000000000000000' [ 213.867454][ T4283] usb 3-1: USB disconnect, device number 4 [ 214.270495][ T5710] jffs2: notice: (5710) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 215.156444][ T5719] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 216.673443][ T5731] loop9: detected capacity change from 0 to 255852544 [ 217.099471][ T5746] fuse: Unknown parameter 'fd00000000000000000000' [ 217.603196][ T5761] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 218.662044][ T5772] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 226.283352][ T5801] fuse: Unknown parameter 'fd00000000000000000000' [ 226.522107][ T5812] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 229.430803][ T5839] FAULT_INJECTION: forcing a failure. [ 229.430803][ T5839] name failslab, interval 1, probability 0, space 0, times 0 [ 229.662173][ T5839] CPU: 0 PID: 5839 Comm: syz.0.352 Not tainted syzkaller #0 [ 229.669570][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 229.680687][ T5839] Call Trace: [ 229.684288][ T5839] [ 229.687370][ T5839] dump_stack_lvl+0x188/0x24e [ 229.692505][ T5839] ? show_regs_print_info+0x12/0x12 [ 229.698159][ T5839] ? load_image+0x410/0x410 [ 229.703433][ T5839] ? __might_sleep+0xd0/0xd0 [ 229.708088][ T5839] ? __lock_acquire+0x7ea0/0x7ea0 [ 229.715251][ T5839] should_fail_ex+0x390/0x4c0 [ 229.721437][ T5839] should_failslab+0x5/0x20 [ 229.726071][ T5839] slab_pre_alloc_hook+0x59/0x300 [ 229.732209][ T5839] ? memcg_list_lru_alloc+0x22d/0xb00 [ 229.737675][ T5839] __kmem_cache_alloc_node+0x4f/0x270 [ 229.743485][ T5839] ? memcg_list_lru_alloc+0x22d/0xb00 [ 229.749021][ T5839] __kmalloc+0xa3/0x240 [ 229.753867][ T5839] memcg_list_lru_alloc+0x22d/0xb00 [ 229.759947][ T5839] ? slab_pre_alloc_hook+0xb1/0x300 [ 229.765632][ T5839] ? memcg_reparent_list_lrus+0x850/0x850 [ 229.771535][ T5839] ? get_obj_cgroup_from_current+0xd0/0x280 [ 229.777624][ T5839] ? get_obj_cgroup_from_current+0xd0/0x280 [ 229.783640][ T5839] slab_pre_alloc_hook+0x2ad/0x300 [ 229.789078][ T5839] ? slab_pre_alloc_hook+0xb1/0x300 [ 229.794538][ T5839] kmem_cache_alloc_lru+0x49/0x2e0 [ 229.800015][ T5839] ? __d_alloc+0x2e/0x6e0 [ 229.805014][ T5839] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 229.810755][ T5839] __d_alloc+0x2e/0x6e0 [ 229.815021][ T5839] d_make_root+0x46/0xd0 [ 229.819421][ T5839] shmem_fill_super+0x7b0/0xb60 [ 229.824534][ T5839] ? shmem_reconfigure+0x790/0x790 [ 229.829754][ T5839] get_tree_nodev+0xb0/0x160 [ 229.834465][ T5839] vfs_get_tree+0x88/0x270 [ 229.839317][ T5839] do_new_mount+0x247/0xa40 [ 229.844000][ T5839] __se_sys_mount+0x2e3/0x3d0 [ 229.849019][ T5839] ? __x64_sys_mount+0xc0/0xc0 [ 229.853849][ T5839] ? lockdep_hardirqs_on+0x94/0x140 [ 229.859122][ T5839] ? __x64_sys_mount+0x1c/0xc0 [ 229.863954][ T5839] do_syscall_64+0x4c/0xa0 [ 229.868494][ T5839] ? clear_bhb_loop+0x60/0xb0 [ 229.873228][ T5839] ? clear_bhb_loop+0x60/0xb0 [ 229.877958][ T5839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.883912][ T5839] RIP: 0033:0x7f9f9699f559 [ 229.888407][ T5839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.908155][ T5839] RSP: 002b:00007f9f978ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 229.916804][ T5839] RAX: ffffffffffffffda RBX: 00007f9f96c25fa0 RCX: 00007f9f9699f559 [ 229.924826][ T5839] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 229.932859][ T5839] RBP: 00007f9f96a36b20 R08: 00002000000000c0 R09: 0000000000000000 [ 229.941105][ T5839] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 229.949146][ T5839] R13: 00007f9f96c26038 R14: 00007f9f96c25fa0 R15: 00007ffdd2a4cdc8 [ 229.957194][ T5839] [ 230.172347][ T5843] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 230.172347][ T5843] [ 230.186621][ T5843] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 230.201785][ T5843] CIFS: Attempting to mount \\172.20.20.170\share [ 230.221806][ T5843] CIFS: VFS: Error connecting to socket. Aborting operation. [ 230.232837][ T5843] CIFS: VFS: cifs_mount failed w/return code = -22 [ 230.680194][ T26] audit: type=1326 audit(1792645487.423:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9699f559 code=0x7fc00000 [ 230.838914][ T26] audit: type=1326 audit(1792645487.423:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9699f559 code=0x7fc00000 [ 231.020271][ T26] audit: type=1326 audit(1792645487.423:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9699f559 code=0x7fc00000 [ 231.118883][ T26] audit: type=1326 audit(1792645487.423:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9699f559 code=0x7fc00000 [ 231.673683][ T26] audit: type=1326 audit(1792645487.423:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9699f559 code=0x7fc00000 [ 231.772983][ T26] audit: type=1326 audit(1792645487.423:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9699f559 code=0x7fc00000 [ 231.979257][ T26] audit: type=1326 audit(1792645487.423:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9699f559 code=0x7fc00000 [ 232.219022][ T26] audit: type=1326 audit(1792645487.423:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9699f559 code=0x7fc00000 [ 232.327594][ T26] audit: type=1326 audit(1792645487.423:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9699f559 code=0x7fc00000 [ 232.354394][ T26] audit: type=1326 audit(1792645487.423:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5838 comm="syz.0.352" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9699f559 code=0x7fc00000 [ 232.448181][ T5874] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 236.602102][ T5909] FAULT_INJECTION: forcing a failure. [ 236.602102][ T5909] name failslab, interval 1, probability 0, space 0, times 0 [ 236.675168][ T5909] CPU: 0 PID: 5909 Comm: syz.1.368 Not tainted syzkaller #0 [ 236.682844][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 236.693457][ T5909] Call Trace: [ 236.697024][ T5909] [ 236.700743][ T5909] dump_stack_lvl+0x188/0x24e [ 236.706251][ T5909] ? show_regs_print_info+0x12/0x12 [ 236.711920][ T5909] ? load_image+0x410/0x410 [ 236.716956][ T5909] ? __might_sleep+0xd0/0xd0 [ 236.722494][ T5909] ? __lock_acquire+0x7ea0/0x7ea0 [ 236.727595][ T5909] ? v4l2_ctrl_new+0x1113/0x1490 [ 236.732683][ T5909] should_fail_ex+0x390/0x4c0 [ 236.740047][ T5909] should_failslab+0x5/0x20 [ 236.744592][ T5909] slab_pre_alloc_hook+0x59/0x300 [ 236.749776][ T5909] ? kvmalloc_node+0x6c/0x180 [ 236.754532][ T5909] __kmem_cache_alloc_node+0x4f/0x270 [ 236.761217][ T5909] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 236.767653][ T5909] ? kvmalloc_node+0x6c/0x180 [ 236.772395][ T5909] __kmalloc_node+0xa2/0x240 [ 236.777033][ T5909] kvmalloc_node+0x6c/0x180 [ 236.781592][ T5909] v4l2_ctrl_new+0x796/0x1490 [ 236.788451][ T5909] v4l2_ctrl_new_custom+0x53c/0x7a0 [ 236.804943][ T5909] ? v4l2_ctrl_new_std+0x300/0x300 [ 236.810579][ T5909] ? __kmem_cache_alloc_node+0x19d/0x270 [ 236.816550][ T5909] ? rcu_is_watching+0x11/0xa0 [ 236.822082][ T5909] ? kvmalloc_node+0x6c/0x180 [ 236.827249][ T5909] ? __kmalloc_node+0xe3/0x240 [ 236.832327][ T5909] ? media_request_object_init+0x88/0xe0 [ 236.838905][ T5909] ? v4l2_ctrl_handler_init_class+0x204/0x2d0 [ 236.845275][ T5909] vicodec_open+0x31e/0xc30 [ 236.849945][ T5909] v4l2_open+0x201/0x340 [ 236.854239][ T5909] chrdev_open+0x585/0x5f0 [ 236.858702][ T5909] ? cd_forget+0x160/0x160 [ 236.863423][ T5909] ? fsnotify_perm+0x39b/0x550 [ 236.868325][ T5909] ? cd_forget+0x160/0x160 [ 236.872805][ T5909] do_dentry_open+0x7dd/0x10b0 [ 236.877671][ T5909] path_openat+0x2674/0x2f10 [ 236.882354][ T5909] ? kasan_set_track+0x60/0x70 [ 236.887385][ T5909] ? verify_lock_unused+0x140/0x140 [ 236.892743][ T5909] ? do_sys_openat2+0xdd/0x4f0 [ 236.897567][ T5909] ? do_filp_open+0x420/0x420 [ 236.902413][ T5909] do_filp_open+0x1ee/0x420 [ 236.906971][ T5909] ? vfs_tmpfile+0x470/0x470 [ 236.911674][ T5909] ? _raw_spin_unlock+0x24/0x40 [ 236.916678][ T5909] ? alloc_fd+0x590/0x640 [ 236.921163][ T5909] do_sys_openat2+0x14b/0x4f0 [ 236.926011][ T5909] ? do_sys_open+0xe0/0xe0 [ 236.930493][ T5909] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 236.936622][ T5909] ? lock_chain_count+0x20/0x20 [ 236.942069][ T5909] __x64_sys_openat+0x135/0x160 [ 236.947697][ T5909] do_syscall_64+0x4c/0xa0 [ 236.952318][ T5909] ? clear_bhb_loop+0x60/0xb0 [ 236.957280][ T5909] ? clear_bhb_loop+0x60/0xb0 [ 236.962023][ T5909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.968000][ T5909] RIP: 0033:0x7f4d3cd9f559 [ 236.972471][ T5909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.993078][ T5909] RSP: 002b:00007f4d3dbdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 237.001527][ T5909] RAX: ffffffffffffffda RBX: 00007f4d3d025fa0 RCX: 00007f4d3cd9f559 [ 237.009559][ T5909] RDX: 0000000000000002 RSI: 0000200000000880 RDI: ffffffffffffff9c [ 237.017567][ T5909] RBP: 00007f4d3ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 237.025574][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.033989][ T5909] R13: 00007f4d3d026038 R14: 00007f4d3d025fa0 R15: 00007fff4619c2e8 [ 237.042218][ T5909] [ 237.129052][ T5913] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 237.129052][ T5913] [ 237.198806][ T5913] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 237.369678][ T5913] CIFS: Attempting to mount \\172.20.20.170\share [ 237.509357][ T5913] CIFS: VFS: Error connecting to socket. Aborting operation. [ 237.577956][ T5913] CIFS: VFS: cifs_mount failed w/return code = -22 [ 237.895556][ T5929] fuse: Unknown parameter 'fd0x0000000000000003' [ 240.021487][ T5952] syz.2.381 uses obsolete (PF_INET,SOCK_PACKET) [ 242.730063][ T5986] fuse: Unknown parameter 'fd0x0000000000000003' [ 245.544712][ T6034] fuse: Unknown parameter 'fd0x0000000000000003' [ 245.828339][ T6038] batman_adv: batadv0: Adding interface: syzkaller0 [ 245.861605][ T6038] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.950231][ T6038] batman_adv: batadv0: Interface activated: syzkaller0 [ 247.998274][ T6048] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 248.146478][ T6048] batman_adv: batadv0: Removing interface: syzkaller0 [ 249.469523][ T6082] fuse: Unknown parameter 'fd00000000000000000000' [ 250.272774][ T6097] FAULT_INJECTION: forcing a failure. [ 250.272774][ T6097] name failslab, interval 1, probability 0, space 0, times 0 [ 250.517350][ T6097] CPU: 1 PID: 6097 Comm: syz.3.424 Not tainted syzkaller #0 [ 250.524740][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 250.534931][ T6097] Call Trace: [ 250.538253][ T6097] [ 250.541229][ T6097] dump_stack_lvl+0x188/0x24e [ 250.545984][ T6097] ? show_regs_print_info+0x12/0x12 [ 250.551245][ T6097] ? load_image+0x410/0x410 [ 250.555802][ T6097] ? __might_sleep+0xd0/0xd0 [ 250.560450][ T6097] ? __lock_acquire+0x7ea0/0x7ea0 [ 250.565538][ T6097] should_fail_ex+0x390/0x4c0 [ 250.570289][ T6097] should_failslab+0x5/0x20 [ 250.574930][ T6097] slab_pre_alloc_hook+0x59/0x300 [ 250.580063][ T6097] ? lock_chain_count+0x20/0x20 [ 250.584982][ T6097] kmem_cache_alloc_lru+0x49/0x2e0 [ 250.590236][ T6097] ? __d_alloc+0x2e/0x6e0 [ 250.594680][ T6097] __d_alloc+0x2e/0x6e0 [ 250.598979][ T6097] ? d_alloc_pseudo+0xe/0x70 [ 250.603631][ T6097] d_alloc_pseudo+0x19/0x70 [ 250.608200][ T6097] alloc_file_pseudo+0xe0/0x200 [ 250.613229][ T6097] ? alloc_empty_file_noaccount+0x80/0x80 [ 250.619023][ T6097] ? lockdep_softirqs_off+0x430/0x430 [ 250.624488][ T6097] anon_inode_getfile+0xc1/0x1a0 [ 250.629669][ T6097] init_listener+0x27c/0x3e0 [ 250.634325][ T6097] do_seccomp+0x976/0xe00 [ 250.638726][ T6097] ? prctl_set_seccomp+0x60/0x60 [ 250.643806][ T6097] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 250.649963][ T6097] ? lockdep_hardirqs_on+0x94/0x140 [ 250.655239][ T6097] do_syscall_64+0x4c/0xa0 [ 250.659726][ T6097] ? clear_bhb_loop+0x60/0xb0 [ 250.664476][ T6097] ? clear_bhb_loop+0x60/0xb0 [ 250.669412][ T6097] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.675660][ T6097] RIP: 0033:0x7fd52eb9f559 [ 250.680150][ T6097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.700084][ T6097] RSP: 002b:00007fd52fa6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 250.708737][ T6097] RAX: ffffffffffffffda RBX: 00007fd52ee25fa0 RCX: 00007fd52eb9f559 [ 250.716958][ T6097] RDX: 0000200000000000 RSI: 000000000000000a RDI: 0000000000000001 [ 250.725078][ T6097] RBP: 00007fd52ec36b20 R08: 0000000000000000 R09: 0000000000000000 [ 250.733097][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.741122][ T6097] R13: 00007fd52ee26038 R14: 00007fd52ee25fa0 R15: 00007fff1d09aff8 [ 250.749261][ T6097] [ 254.476102][ T6130] fuse: Unknown parameter 'fd00000000000000000000' [ 261.336563][ T6199] loop1: detected capacity change from 0 to 128 [ 261.363295][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.374668][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.436193][ T6199] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 261.509053][ T6197] netlink: 'syz.0.447': attribute type 10 has an invalid length. [ 261.554786][ T6199] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.581135][ T6216] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 263.448758][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 263.786148][ T6230] netlink: 156 bytes leftover after parsing attributes in process `syz.3.458'. [ 263.886848][ T6232] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 265.028161][ T6253] loop1: detected capacity change from 0 to 128 [ 265.046972][ T6253] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 265.060380][ T6252] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 265.068490][ T6252] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 265.134756][ T6253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.170964][ T6252] ntfs3: Unknown parameter 'ecryptfs_sig' [ 265.344143][ T6261] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 266.337024][ T6270] Device name cannot be null; rc = [-22] [ 266.986995][ T6282] device syzkaller1 entered promiscuous mode [ 268.906789][ T4273] libceph: connect (1)[c::]:6789 error -101 [ 268.919073][ T4273] libceph: mon0 (1)[c::]:6789 connect error [ 268.937871][ T6291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.471'. [ 268.967494][ T6284] ceph: No mds server is up or the cluster is laggy [ 268.986311][ T6294] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 269.059379][ T6303] netlink: 'syz.0.471': attribute type 8 has an invalid length. [ 269.063289][ T6299] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 269.075856][ T6299] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 269.165644][ T6299] vhci_hcd vhci_hcd.0: Device attached [ 269.171825][ T6303] netlink: 636 bytes leftover after parsing attributes in process `syz.0.471'. [ 269.245476][ T6310] loop2: detected capacity change from 0 to 128 [ 269.355692][ T6310] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 269.365991][ T4273] vhci_hcd: vhci_device speed not set [ 269.439313][ T4273] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 269.447453][ T6310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.755707][ T6300] vhci_hcd: connection reset by peer [ 269.804410][ T9] vhci_hcd: stop threads [ 269.865618][ T9] vhci_hcd: release socket [ 269.999650][ T9] vhci_hcd: disconnect device [ 271.011037][ T4289] Bluetooth: Wrong link type (-22) [ 271.107980][ T6330] FAULT_INJECTION: forcing a failure. [ 271.107980][ T6330] name failslab, interval 1, probability 0, space 0, times 0 [ 271.138800][ T6330] CPU: 1 PID: 6330 Comm: syz.2.480 Not tainted syzkaller #0 [ 271.146416][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 271.157313][ T6330] Call Trace: [ 271.161133][ T6330] [ 271.164214][ T6330] dump_stack_lvl+0x188/0x24e [ 271.168972][ T6330] ? show_regs_print_info+0x12/0x12 [ 271.174308][ T6330] ? load_image+0x410/0x410 [ 271.179041][ T6330] ? __might_sleep+0xd0/0xd0 [ 271.184059][ T6330] ? __lock_acquire+0x7ea0/0x7ea0 [ 271.189191][ T6330] should_fail_ex+0x390/0x4c0 [ 271.194306][ T6330] should_failslab+0x5/0x20 [ 271.199467][ T6330] slab_pre_alloc_hook+0x59/0x300 [ 271.204639][ T6330] ? sbitmap_queue_init_node+0x24c/0x650 [ 271.210394][ T6330] __kmem_cache_alloc_node+0x4f/0x270 [ 271.216527][ T6330] ? sbitmap_queue_init_node+0x24c/0x650 [ 271.222517][ T6330] kmalloc_node_trace+0x22/0xe0 [ 271.227594][ T6330] sbitmap_queue_init_node+0x24c/0x650 [ 271.233142][ T6330] blk_mq_init_tags+0x159/0x280 [ 271.238195][ T6330] blk_mq_alloc_map_and_rqs+0xc1/0x920 [ 271.243737][ T6330] blk_mq_alloc_set_map_and_rqs+0x1a0/0x800 [ 271.249932][ T6330] blk_mq_alloc_tag_set+0x75b/0xd90 [ 271.255276][ T6330] loop_add+0x2ef/0x9a0 [ 271.259868][ T6330] loop_control_ioctl+0x124/0x590 [ 271.265478][ T6330] ? loop_set_hw_queue_depth+0x60/0x60 [ 271.271131][ T6330] ? bpf_lsm_file_ioctl+0x5/0x10 [ 271.276110][ T6330] ? security_file_ioctl+0x7c/0xa0 [ 271.281393][ T6330] ? loop_set_hw_queue_depth+0x60/0x60 [ 271.287212][ T6330] __se_sys_ioctl+0xfa/0x170 [ 271.292218][ T6330] do_syscall_64+0x4c/0xa0 [ 271.296759][ T6330] ? clear_bhb_loop+0x60/0xb0 [ 271.301473][ T6330] ? clear_bhb_loop+0x60/0xb0 [ 271.306211][ T6330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.312251][ T6330] RIP: 0033:0x7fe20719f559 [ 271.316789][ T6330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.337142][ T6330] RSP: 002b:00007fe208106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.347091][ T6330] RAX: ffffffffffffffda RBX: 00007fe207425fa0 RCX: 00007fe20719f559 [ 271.356173][ T6330] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 271.364745][ T6330] RBP: 00007fe207236b20 R08: 0000000000000000 R09: 0000000000000000 [ 271.372856][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.380968][ T6330] R13: 00007fe207426038 R14: 00007fe207425fa0 R15: 00007ffdc56ccdd8 [ 271.389395][ T6330] [ 271.428919][ T6330] blk-mq: reduced tag depth (128 -> 64) [ 272.490941][ T6344] jffs2: notice: (6344) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 272.558190][ T6347] tmpfs: Too small a size for current use [ 272.675080][ T4363] libceph: connect (1)[c::]:6789 error -101 [ 272.709030][ T4363] libceph: mon0 (1)[c::]:6789 connect error [ 272.738137][ T6349] ceph: No mds server is up or the cluster is laggy [ 272.874880][ T6357] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 272.932289][ T6357] kvm: pic: level sensitive irq not supported [ 272.932840][ T6357] kvm: pic: non byte read [ 272.963093][ T6357] kvm: pic: level sensitive irq not supported [ 272.963617][ T6357] kvm: pic: non byte read [ 274.209977][ T6379] loop2: detected capacity change from 0 to 128 [ 274.486479][ T6379] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 274.572859][ T6379] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.458932][ T4273] vhci_hcd: vhci_device speed not set [ 282.128069][ T6466] 9pnet_virtio: no channels available for device syz [ 282.226783][ T6473] loop1: detected capacity change from 0 to 128 [ 282.275616][ T6473] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 282.444165][ T6473] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.753791][ T6533] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 286.753791][ T6533] [ 286.767707][ T6533] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 286.780980][ T6533] CIFS: Attempting to mount \\172.20.20.170\share [ 286.796496][ T6533] CIFS: VFS: Error connecting to socket. Aborting operation. [ 286.804537][ T6533] CIFS: VFS: cifs_mount failed w/return code = -22 [ 287.076195][ T6540] binder: 6537:6540 ioctl 8004550f 2000000005c0 returned -22 [ 288.335606][ T6551] loop9: detected capacity change from 0 to 255852544 [ 290.123002][ T6593] loop1: detected capacity change from 0 to 128 [ 290.159564][ T6593] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 290.222852][ T6593] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.182409][ T6659] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 295.182409][ T6659] [ 295.196362][ T6659] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 295.209416][ T6659] CIFS: Attempting to mount \\172.20.20.170\share [ 295.224885][ T6659] CIFS: VFS: Error connecting to socket. Aborting operation. [ 295.263523][ T6659] CIFS: VFS: cifs_mount failed w/return code = -111 [ 296.438816][ T6669] loop3: detected capacity change from 0 to 128 [ 296.518879][ T6669] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 296.604356][ T6669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.551048][ T6680] tmpfs: Too small a size for current use [ 300.931039][ T6716] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 301.962404][ T6725] device syzkaller1 entered promiscuous mode [ 304.452347][ T6728] loop3: detected capacity change from 0 to 128 [ 304.493459][ T6728] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 304.538632][ T6728] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.642240][ T6750] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 307.101936][ T6761] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 307.101936][ T6761] [ 307.115893][ T6761] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 307.128850][ T6761] CIFS: Attempting to mount \\172.20.20.170\share [ 307.140866][ T6761] CIFS: VFS: Error connecting to socket. Aborting operation. [ 307.149302][ T6761] CIFS: VFS: cifs_mount failed w/return code = -111 [ 309.150265][ T6776] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 310.210124][ T6783] netlink: 'syz.5.581': attribute type 4 has an invalid length. [ 310.670445][ T6796] loop3: detected capacity change from 0 to 128 [ 310.719093][ T6796] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 310.807272][ T6796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.085664][ T6817] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 315.587560][ T6836] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 315.587560][ T6836] [ 315.601787][ T6836] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 315.615048][ T6836] CIFS: Attempting to mount \\172.20.20.170\share [ 315.622959][ T6836] CIFS: VFS: Error connecting to socket. Aborting operation. [ 315.630757][ T6836] CIFS: VFS: cifs_mount failed w/return code = -22 [ 316.119594][ T6843] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 316.188346][ T6845] tmpfs: Too few inodes for current use [ 316.274558][ T6847] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 316.389368][ T6852] loop3: detected capacity change from 0 to 128 [ 316.452448][ T6852] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 316.486935][ T6852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.246975][ T6886] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 318.363661][ T6893] tmpfs: Too few inodes for current use [ 319.352983][ T6895] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 322.033488][ T4270] ffs_data_put(): freeing [ 322.139628][ T6910] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 322.252964][ T6915] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 322.801986][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.809967][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.411518][ T6942] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 325.653383][ T6937] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 325.653383][ T6937] [ 325.667353][ T6937] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 325.681561][ T6937] CIFS: Attempting to mount \\172.20.20.170\share [ 325.689526][ T6937] CIFS: VFS: Error connecting to socket. Aborting operation. [ 325.697303][ T6937] CIFS: VFS: cifs_mount failed w/return code = -22 [ 327.035923][ T4270] ffs_data_put(): freeing [ 328.598899][ T4259] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 328.707882][ T7038] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.802168][ T4259] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 328.818701][ T4259] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.848660][ T4259] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 328.868093][ T4259] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.905974][ T4259] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 328.948708][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 328.956632][ T7038] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.028891][ T4259] usb 1-1: Product: syz [ 329.033152][ T4259] usb 1-1: Manufacturer: syz [ 329.085068][ T4259] cdc_wdm 1-1:1.0: skipping garbage [ 329.108916][ T4259] cdc_wdm 1-1:1.0: skipping garbage [ 329.114249][ T7038] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.134500][ T4259] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 329.155671][ T4259] cdc_wdm 1-1:1.0: Unknown control protocol [ 329.301804][ T4259] usb 1-1: USB disconnect, device number 2 [ 329.302232][ T7038] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.566687][ T7038] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.597208][ T7038] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.622478][ T7038] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.637774][ T7038] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.697347][ T7057] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 329.909057][ T4259] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 330.124539][ T4259] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 330.162240][ T4259] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.191115][ T7061] netlink: 'syz.5.638': attribute type 4 has an invalid length. [ 330.254339][ T4259] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 330.353638][ T4259] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.548754][ T4259] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 330.614843][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 330.647075][ T4259] usb 1-1: Product: syz [ 330.664815][ T4259] usb 1-1: Manufacturer: syz [ 330.718439][ T4259] cdc_wdm 1-1:1.0: skipping garbage [ 330.747220][ T4259] cdc_wdm 1-1:1.0: skipping garbage [ 330.763089][ T4259] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 330.776596][ T4259] cdc_wdm 1-1:1.0: Unknown control protocol [ 331.668841][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 331.668856][ T26] audit: type=1326 audit(1792645588.403:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.3.643" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 331.749717][ T26] audit: type=1326 audit(1792645588.443:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.3.643" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 331.813627][ T4270] ffs_data_put(): freeing [ 331.824285][ T26] audit: type=1326 audit(1792645588.443:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.3.643" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 331.887159][ T26] audit: type=1326 audit(1792645588.443:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.3.643" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 331.972029][ T26] audit: type=1326 audit(1792645588.443:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.3.643" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 332.019809][ T26] audit: type=1326 audit(1792645588.443:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.3.643" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 332.063461][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.648'. [ 332.189006][ T26] audit: type=1326 audit(1792645588.453:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.3.643" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 332.749949][ T26] audit: type=1326 audit(1792645588.453:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.3.643" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 335.792219][ T26] audit: type=1326 audit(1792645588.453:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.3.643" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 336.190510][ T4363] usb 1-1: USB disconnect, device number 3 [ 336.258292][ T7094] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 337.121187][ T7101] netlink: 24 bytes leftover after parsing attributes in process `syz.5.653'. [ 337.423590][ T7107] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 338.413772][ T7117] ffs_data_put(): freeing [ 341.068309][ T7155] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 341.068309][ T7155] [ 341.082296][ T7155] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 341.095250][ T7155] CIFS: Attempting to mount \\172.20.20.170\share [ 341.104278][ T7155] CIFS: VFS: Error connecting to socket. Aborting operation. [ 341.112154][ T7155] CIFS: VFS: cifs_mount failed w/return code = -22 [ 341.799790][ T7166] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 343.268986][ T4277] ffs_data_put(): freeing [ 343.355580][ T7190] lo speed is unknown, defaulting to 1000 [ 343.392181][ T7190] lo speed is unknown, defaulting to 1000 [ 343.411962][ T7190] lo speed is unknown, defaulting to 1000 [ 343.453972][ T127] libceph: connect (1)[c::]:6789 error -101 [ 343.466582][ T127] libceph: mon0 (1)[c::]:6789 connect error [ 343.480479][ T127] libceph: connect (1)[c::]:6789 error -101 [ 343.489190][ T127] libceph: mon0 (1)[c::]:6789 connect error [ 343.491365][ T7190] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 343.582526][ T7190] lo speed is unknown, defaulting to 1000 [ 343.603179][ T7190] lo speed is unknown, defaulting to 1000 [ 343.635076][ T7193] ceph: No mds server is up or the cluster is laggy [ 343.643088][ T7190] lo speed is unknown, defaulting to 1000 [ 343.700030][ T7190] lo speed is unknown, defaulting to 1000 [ 343.709507][ T7190] lo speed is unknown, defaulting to 1000 [ 343.979097][ T7212] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 344.227420][ T7222] netlink: 16 bytes leftover after parsing attributes in process `syz.5.688'. [ 345.033418][ T4363] libceph: connect (1)[c::]:6789 error -101 [ 345.048431][ T4363] libceph: mon0 (1)[c::]:6789 connect error [ 345.091698][ T7241] ceph: No mds server is up or the cluster is laggy [ 345.443234][ T7252] loop3: detected capacity change from 0 to 128 [ 345.484272][ T7252] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 345.500389][ T7254] FAULT_INJECTION: forcing a failure. [ 345.500389][ T7254] name failslab, interval 1, probability 0, space 0, times 0 [ 345.540148][ T7254] CPU: 1 PID: 7254 Comm: syz.1.698 Not tainted syzkaller #0 [ 345.547648][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 345.557784][ T7254] Call Trace: [ 345.561124][ T7254] [ 345.564214][ T7254] dump_stack_lvl+0x188/0x24e [ 345.568968][ T7254] ? show_regs_print_info+0x12/0x12 [ 345.574241][ T7254] ? load_image+0x410/0x410 [ 345.578819][ T7254] ? __might_sleep+0xd0/0xd0 [ 345.583471][ T7254] ? __lock_acquire+0x7ea0/0x7ea0 [ 345.588632][ T7254] should_fail_ex+0x390/0x4c0 [ 345.593420][ T7254] should_failslab+0x5/0x20 [ 345.597983][ T7254] slab_pre_alloc_hook+0x59/0x300 [ 345.603078][ T7254] ? vfs_write+0x777/0x9a0 [ 345.607592][ T7254] kmem_cache_alloc+0x56/0x2f0 [ 345.612516][ T7254] ? getname_flags+0xb7/0x500 [ 345.617352][ T7254] getname_flags+0xb7/0x500 [ 345.621938][ T7254] do_sys_openat2+0xdd/0x4f0 [ 345.626637][ T7254] ? do_sys_open+0xe0/0xe0 [ 345.631145][ T7254] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 345.637226][ T7254] ? lock_chain_count+0x20/0x20 [ 345.642172][ T7254] __x64_sys_openat+0x135/0x160 [ 345.647104][ T7254] do_syscall_64+0x4c/0xa0 [ 345.651675][ T7254] ? clear_bhb_loop+0x60/0xb0 [ 345.656408][ T7254] ? clear_bhb_loop+0x60/0xb0 [ 345.661151][ T7254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.667130][ T7254] RIP: 0033:0x7f4d3cd9f559 [ 345.671627][ T7254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.691903][ T7254] RSP: 002b:00007f4d3dbdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 345.700474][ T7254] RAX: ffffffffffffffda RBX: 00007f4d3d025fa0 RCX: 00007f4d3cd9f559 [ 345.708544][ T7254] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 345.717013][ T7254] RBP: 00007f4d3ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 345.725094][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.733141][ T7254] R13: 00007f4d3d026038 R14: 00007f4d3d025fa0 R15: 00007fff4619c2e8 [ 345.741200][ T7254] [ 345.757804][ T7252] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.042054][ T7263] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 347.482084][ T7299] 9pnet_virtio: no channels available for device syz [ 347.492586][ T7288] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 347.492586][ T7288] [ 347.506358][ T7288] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 347.519122][ T7288] CIFS: Attempting to mount \\172.20.20.170\share [ 347.526190][ T7288] CIFS: VFS: Error connecting to socket. Aborting operation. [ 347.534137][ T7288] CIFS: VFS: cifs_mount failed w/return code = -22 [ 347.645207][ T7302] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 347.845805][ T7302] overlayfs: failed to look up (tracing) for ino (-66) [ 347.962103][ T7314] loop0: detected capacity change from 0 to 128 [ 348.011774][ T7314] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 348.047638][ T7314] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.456549][ T7347] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 349.456549][ T7347] [ 349.470636][ T7347] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 349.485091][ T7347] CIFS: Attempting to mount \\172.20.20.170\share [ 349.510476][ T7347] CIFS: VFS: Error connecting to socket. Aborting operation. [ 349.518362][ T7347] CIFS: VFS: cifs_mount failed w/return code = -22 [ 352.839841][ T7373] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 352.839841][ T7373] [ 352.853762][ T7373] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 352.866802][ T7373] CIFS: Attempting to mount \\172.20.20.170\share [ 353.099635][ T7373] CIFS: VFS: cifs_mount failed w/return code = -112 [ 355.387951][ T7387] loop0: detected capacity change from 0 to 128 [ 355.489593][ T7387] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 355.572864][ T7387] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.605924][ T7405] binder_alloc: 7404: binder_alloc_buf, no vma [ 358.503970][ T7436] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 358.503970][ T7436] [ 358.517854][ T7436] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 358.530763][ T7436] CIFS: Attempting to mount \\172.20.20.170\share [ 359.270126][ T7433] 9pnet_virtio: no channels available for device syz [ 359.293116][ T7436] CIFS: VFS: error -4 create cifsd thread [ 359.316214][ T7436] CIFS: VFS: cifs_mount failed w/return code = -4 [ 360.285734][ T7450] FAULT_INJECTION: forcing a failure. [ 360.285734][ T7450] name failslab, interval 1, probability 0, space 0, times 0 [ 360.314457][ T7450] CPU: 0 PID: 7450 Comm: syz.2.746 Not tainted syzkaller #0 [ 360.321852][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 360.331971][ T7450] Call Trace: [ 360.335298][ T7450] [ 360.338283][ T7450] dump_stack_lvl+0x188/0x24e [ 360.343055][ T7450] ? show_regs_print_info+0x12/0x12 [ 360.348411][ T7450] ? load_image+0x410/0x410 [ 360.352984][ T7450] ? __might_sleep+0xd0/0xd0 [ 360.357642][ T7450] ? __lock_acquire+0x7ea0/0x7ea0 [ 360.362766][ T7450] should_fail_ex+0x390/0x4c0 [ 360.367523][ T7450] should_failslab+0x5/0x20 [ 360.372092][ T7450] slab_pre_alloc_hook+0x59/0x300 [ 360.377213][ T7450] ? alloc_pipe_info+0x1f5/0x4a0 [ 360.382232][ T7450] __kmem_cache_alloc_node+0x4f/0x270 [ 360.387685][ T7450] ? alloc_pipe_info+0x1f5/0x4a0 [ 360.392717][ T7450] __kmalloc+0xa3/0x240 [ 360.396929][ T7450] alloc_pipe_info+0x1f5/0x4a0 [ 360.401763][ T7450] create_pipe_files+0x87/0x6b0 [ 360.406685][ T7450] __do_pipe_flags+0x46/0x1f0 [ 360.411428][ T7450] do_pipe2+0xa7/0x190 [ 360.415550][ T7450] ? _compound_head+0x120/0x120 [ 360.420458][ T7450] ? lock_chain_count+0x20/0x20 [ 360.425381][ T7450] ? syscall_enter_from_user_mode+0x21/0x80 [ 360.431341][ T7450] __x64_sys_pipe2+0x56/0x60 [ 360.436002][ T7450] do_syscall_64+0x4c/0xa0 [ 360.440476][ T7450] ? clear_bhb_loop+0x60/0xb0 [ 360.445207][ T7450] ? clear_bhb_loop+0x60/0xb0 [ 360.449944][ T7450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.455896][ T7450] RIP: 0033:0x7fe20719f559 [ 360.460362][ T7450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.480067][ T7450] RSP: 002b:00007fe208106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 360.488554][ T7450] RAX: ffffffffffffffda RBX: 00007fe207425fa0 RCX: 00007fe20719f559 [ 360.496580][ T7450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.504596][ T7450] RBP: 00007fe207236b20 R08: 0000000000000000 R09: 0000000000000000 [ 360.512598][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.520634][ T7450] R13: 00007fe207426038 R14: 00007fe207425fa0 R15: 00007ffdc56ccdd8 [ 360.528676][ T7450] [ 360.595347][ T7460] binder_alloc: 7459: binder_alloc_buf, no vma [ 361.957645][ T7479] device syzkaller1 entered promiscuous mode [ 366.165094][ T7494] tipc: Enabling of bearer rejected, failed to enable media [ 366.251478][ T7499] FAULT_INJECTION: forcing a failure. [ 366.251478][ T7499] name failslab, interval 1, probability 0, space 0, times 0 [ 366.290888][ T7499] CPU: 1 PID: 7499 Comm: syz.0.764 Not tainted syzkaller #0 [ 366.298309][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 366.308423][ T7499] Call Trace: [ 366.311756][ T7499] [ 366.314729][ T7499] dump_stack_lvl+0x188/0x24e [ 366.319471][ T7499] ? show_regs_print_info+0x12/0x12 [ 366.324743][ T7499] ? load_image+0x410/0x410 [ 366.329303][ T7499] ? __might_sleep+0xd0/0xd0 [ 366.333957][ T7499] ? __lock_acquire+0x7ea0/0x7ea0 [ 366.339054][ T7499] should_fail_ex+0x390/0x4c0 [ 366.343801][ T7499] should_failslab+0x5/0x20 [ 366.348378][ T7499] slab_pre_alloc_hook+0x59/0x300 [ 366.353522][ T7499] ? vfs_write+0x777/0x9a0 [ 366.358015][ T7499] kmem_cache_alloc+0x56/0x2f0 [ 366.362841][ T7499] ? getname_flags+0xb7/0x500 [ 366.367585][ T7499] getname_flags+0xb7/0x500 [ 366.372153][ T7499] do_sys_openat2+0xdd/0x4f0 [ 366.376819][ T7499] ? do_sys_open+0xe0/0xe0 [ 366.381492][ T7499] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 366.387548][ T7499] ? lock_chain_count+0x20/0x20 [ 366.392480][ T7499] __x64_sys_openat+0x135/0x160 [ 366.397412][ T7499] do_syscall_64+0x4c/0xa0 [ 366.401892][ T7499] ? clear_bhb_loop+0x60/0xb0 [ 366.406627][ T7499] ? clear_bhb_loop+0x60/0xb0 [ 366.411368][ T7499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.417376][ T7499] RIP: 0033:0x7f9f9699f559 [ 366.421845][ T7499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.441615][ T7499] RSP: 002b:00007f9f978ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 366.450102][ T7499] RAX: ffffffffffffffda RBX: 00007f9f96c25fa0 RCX: 00007f9f9699f559 [ 366.458136][ T7499] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 366.466191][ T7499] RBP: 00007f9f96a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 366.474246][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.482294][ T7499] R13: 00007f9f96c26038 R14: 00007f9f96c25fa0 R15: 00007ffdd2a4cdc8 [ 366.490337][ T7499] [ 371.426206][ T7542] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 371.426206][ T7542] [ 371.440213][ T7542] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 371.453235][ T7542] CIFS: Attempting to mount \\172.20.20.170\share [ 371.461438][ T7542] CIFS: VFS: Error connecting to socket. Aborting operation. [ 371.469163][ T7542] CIFS: VFS: cifs_mount failed w/return code = -22 [ 373.036188][ T7572] netlink: 'syz.5.781': attribute type 1 has an invalid length. [ 373.168433][ T7572] bond1: (slave bridge1): making interface the new active one [ 373.196707][ T7572] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 375.606727][ T7616] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 375.606727][ T7616] [ 375.626108][ T7616] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 375.658813][ T7616] CIFS: Attempting to mount \\172.20.20.170\share [ 377.274060][ T7616] CIFS: VFS: cifs_mount failed w/return code = -112 [ 379.377166][ T7632] ffs_data_put(): freeing [ 379.416716][ T7631] rxe_eth0 speed is unknown, defaulting to 1000 [ 380.594552][ T7650] FAULT_INJECTION: forcing a failure. [ 380.594552][ T7650] name failslab, interval 1, probability 0, space 0, times 0 [ 380.607529][ T7650] CPU: 0 PID: 7650 Comm: syz.2.801 Not tainted syzkaller #0 [ 380.614864][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 380.624963][ T7650] Call Trace: [ 380.628282][ T7650] [ 380.631254][ T7650] dump_stack_lvl+0x188/0x24e [ 380.635990][ T7650] ? show_regs_print_info+0x12/0x12 [ 380.641239][ T7650] ? load_image+0x410/0x410 [ 380.645794][ T7650] ? __might_sleep+0xd0/0xd0 [ 380.650426][ T7650] ? __lock_acquire+0x7ea0/0x7ea0 [ 380.655486][ T7650] should_fail_ex+0x390/0x4c0 [ 380.660203][ T7650] should_failslab+0x5/0x20 [ 380.664735][ T7650] slab_pre_alloc_hook+0x59/0x300 [ 380.669801][ T7650] kmem_cache_alloc+0x56/0x2f0 [ 380.674608][ T7650] ? getname_flags+0xb7/0x500 [ 380.679329][ T7650] getname_flags+0xb7/0x500 [ 380.683876][ T7650] do_sys_openat2+0xdd/0x4f0 [ 380.688551][ T7650] ? do_sys_open+0xe0/0xe0 [ 380.693026][ T7650] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 380.699058][ T7650] ? lock_chain_count+0x20/0x20 [ 380.703961][ T7650] __x64_sys_openat+0x135/0x160 [ 380.708862][ T7650] do_syscall_64+0x4c/0xa0 [ 380.713331][ T7650] ? clear_bhb_loop+0x60/0xb0 [ 380.718060][ T7650] ? clear_bhb_loop+0x60/0xb0 [ 380.722781][ T7650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.728724][ T7650] RIP: 0033:0x7fe20715fd8e [ 380.733180][ T7650] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.752826][ T7650] RSP: 002b:00007fe208105ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 380.761290][ T7650] RAX: ffffffffffffffda RBX: 00007fe2081066c0 RCX: 00007fe20715fd8e [ 380.769290][ T7650] RDX: 0000000000000000 RSI: 00007fe208105f90 RDI: ffffffffffffff9c [ 380.777303][ T7650] RBP: 00007fe207236b20 R08: 0000000000000000 R09: 0000000000000000 [ 380.785338][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.793367][ T7650] R13: 00007fe207426038 R14: 00007fe207425fa0 R15: 00007ffdc56ccdd8 [ 380.801400][ T7650] [ 380.824958][ T7631] lo speed is unknown, defaulting to 1000 [ 382.061630][ T7670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.807'. [ 382.126706][ T7672] ffs_data_put(): freeing [ 382.348943][ T7676] loop3: detected capacity change from 0 to 128 [ 382.387129][ T7676] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 382.440417][ T7678] device syzkaller1 entered promiscuous mode [ 382.502317][ T7676] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.616329][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'. [ 383.633956][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 383.763826][ T7707] ffs_data_put(): freeing [ 383.797368][ T7709] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 384.253513][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.260155][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.518190][ T7742] netlink: 'syz.5.834': attribute type 1 has an invalid length. [ 385.589153][ T7744] ffs_data_put(): freeing [ 385.769458][ T7753] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 385.769458][ T7753] [ 385.783493][ T7753] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 385.796495][ T7753] CIFS: Attempting to mount \\172.20.20.170\share [ 385.804194][ T7753] CIFS: VFS: Error connecting to socket. Aborting operation. [ 385.811919][ T7753] CIFS: VFS: cifs_mount failed w/return code = -22 [ 387.680989][ T7774] loop2: detected capacity change from 0 to 128 [ 387.709788][ T7774] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 387.739985][ T7774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.170361][ T4270] ffs_data_put(): freeing [ 391.263875][ T7809] netlink: 'syz.5.853': attribute type 1 has an invalid length. [ 392.119582][ T7813] loop9: detected capacity change from 0 to 255852544 [ 395.293268][ T7846] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 396.623154][ T7849] device-mapper: table: 248:0: ram4 too small for target: start=8, len=8192, dev_size=8192 [ 396.740267][ T7849] device-mapper: core: Cannot calculate initial queue limits [ 396.811126][ T7849] device-mapper: ioctl: unable to set up device queue for new table. [ 396.876021][ T7856] ffs_data_put(): freeing [ 397.160344][ T7867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.870'. [ 397.174539][ T7868] netlink: 68 bytes leftover after parsing attributes in process `syz.5.871'. [ 397.294799][ T7870] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 397.443801][ T7872] 8021q: adding VLAN 0 to HW filter on device bond3 [ 397.521025][ T7872] bond2: (slave bond3): making interface the new active one [ 397.532870][ T7872] bond2: (slave bond3): Enslaving as an active interface with an up link [ 397.557641][ T26] audit: type=1800 audit(2000000000.310:36): pid=7881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.874" name="file1" dev="sda1" ino=2050 res=0 errno=0 [ 397.600679][ T7870] 8021q: adding VLAN 0 to HW filter on device bond4 [ 397.612169][ T7870] bond2: (slave bond4): Enslaving as a backup interface with an up link [ 397.748833][ T7887] ffs_data_put(): freeing [ 400.221695][ T7914] comedi comedi3: board detection failed [ 401.247092][ T7922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.884'. [ 401.522621][ T7928] ffs_data_put(): freeing [ 402.381412][ T7959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.903'. [ 402.614710][ T7966] ffs_data_put(): freeing [ 402.798018][ T7977] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 403.419520][ T7997] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 404.033737][ T8011] netlink: 'syz.1.923': attribute type 1 has an invalid length. [ 404.544460][ T8030] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 407.613558][ T8064] netlink: 'syz.0.936': attribute type 1 has an invalid length. [ 407.880926][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 408.180335][ T8079] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 410.683663][ T8110] netlink: 'syz.3.953': attribute type 1 has an invalid length. [ 411.354450][ T8124] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 411.951914][ T8131] netlink: 68 bytes leftover after parsing attributes in process `syz.0.958'. [ 412.776645][ T8158] netlink: 'syz.1.966': attribute type 1 has an invalid length. [ 413.009460][ T8163] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 414.112113][ T8179] netlink: 68 bytes leftover after parsing attributes in process `syz.0.974'. [ 414.842623][ T8200] netlink: 'syz.3.981': attribute type 1 has an invalid length. [ 415.169142][ T8209] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 415.327405][ T8217] netlink: 68 bytes leftover after parsing attributes in process `syz.1.987'. [ 418.568367][ T8230] device syzkaller1 entered promiscuous mode [ 418.677366][ T8245] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 418.714294][ T8243] netlink: 'syz.1.996': attribute type 1 has an invalid length. [ 419.684390][ T8250] bond3: (slave bridge2): making interface the new active one [ 419.735805][ T8250] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 423.105093][ T8280] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 423.105093][ T8280] [ 423.119065][ T8280] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 423.132002][ T8280] CIFS: Attempting to mount \\172.20.20.170\share [ 423.139738][ T8280] CIFS: VFS: Error connecting to socket. Aborting operation. [ 423.147415][ T8280] CIFS: VFS: cifs_mount failed w/return code = -22 [ 423.348918][ T4270] ffs_data_put(): freeing [ 423.549400][ T8285] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 423.881471][ T8302] nvmet_tcp: address family 255 not supported [ 424.129425][ T8305] netlink: 'syz.1.1012': attribute type 1 has an invalid length. [ 424.875988][ T8310] bond4: (slave bridge3): making interface the new active one [ 424.895919][ T8310] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 425.012869][ T8311] device syzkaller1 entered promiscuous mode [ 425.398241][ T8325] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 426.976214][ T8338] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 426.976214][ T8338] [ 426.990116][ T8338] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 427.003334][ T8338] CIFS: Attempting to mount \\172.20.20.170\share [ 427.227032][ T8338] CIFS: VFS: cifs_mount failed w/return code = -112 [ 427.655633][ T26] audit: type=1326 audit(2000000013.500:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.1024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 427.916848][ T26] audit: type=1326 audit(2000000013.530:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.1024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 428.791357][ T26] audit: type=1326 audit(2000000013.530:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.1024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 428.887432][ T26] audit: type=1326 audit(2000000013.530:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.1024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 429.750539][ T8370] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 429.750539][ T8370] [ 429.764302][ T8370] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 429.776887][ T8370] CIFS: Attempting to mount \\172.20.20.170\share [ 429.783737][ T8370] CIFS: VFS: Error connecting to socket. Aborting operation. [ 429.791313][ T8370] CIFS: VFS: cifs_mount failed w/return code = -22 [ 429.873613][ T26] audit: type=1326 audit(2000000013.530:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.1024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 430.839033][ T26] audit: type=1326 audit(2000000013.530:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.1024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 430.879837][ T8387] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 430.938842][ T26] audit: type=1326 audit(2000000013.530:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.1024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 430.980144][ T8392] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 431.072553][ T26] audit: type=1326 audit(2000000013.530:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.1024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 431.149495][ T26] audit: type=1326 audit(2000000013.530:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.1024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 431.236491][ T26] audit: type=1326 audit(2000000013.530:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.3.1024" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52eb9f559 code=0x7ffc0000 [ 431.905985][ T8418] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1043'. [ 431.945750][ T8419] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 433.158260][ T8429] ffs_data_put(): freeing [ 433.179603][ T8431] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 434.511074][ T8452] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 434.814693][ T8465] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 435.751132][ T8469] ffs_data_put(): freeing [ 435.788910][ T4283] libceph: connect (1)[c::]:6789 error -101 [ 435.795056][ T4283] libceph: mon0 (1)[c::]:6789 connect error [ 435.881231][ T8471] ceph: No mds server is up or the cluster is laggy [ 438.967815][ T8504] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 439.017086][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 439.790033][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 439.830542][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 439.943767][ T8517] ffs_data_put(): freeing [ 439.999198][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 440.084261][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 440.141219][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 440.175229][ T8522] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1079'. [ 440.187251][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 440.443054][ T8529] binder: BINDER_SET_CONTEXT_MGR already set [ 440.463218][ T8529] binder: 8528:8529 ioctl 4018620d 200000000240 returned -16 [ 441.057041][ T8544] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 441.057041][ T8544] [ 441.071477][ T8544] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 441.084697][ T8544] CIFS: Attempting to mount \\172.20.20.170\share [ 441.094901][ T8544] CIFS: VFS: Error connecting to socket. Aborting operation. [ 441.113849][ T8544] CIFS: VFS: cifs_mount failed w/return code = -22 [ 441.490593][ T8553] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 442.556295][ T8558] ffs_data_put(): freeing [ 443.208961][ T8581] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 443.208961][ T8581] [ 443.222895][ T8581] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 443.235810][ T8581] CIFS: Attempting to mount \\172.20.20.170\share [ 444.040457][ T8581] CIFS: VFS: cifs_mount failed w/return code = -112 [ 444.929268][ T8601] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 445.365723][ T4272] ffs_data_put(): freeing [ 445.689074][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.695639][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.228862][ T8620] Invalid ELF header magic: != ELF [ 446.629013][ T8620] overlayfs: unrecognized mount option "/" or missing value [ 447.078720][ T8621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1103'. [ 448.020516][ T8635] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1114'. [ 448.113393][ T8638] ffs_data_put(): freeing [ 448.619400][ T8649] loop9: detected capacity change from 0 to 255852544 [ 449.516312][ T8661] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 449.516312][ T8661] [ 449.530220][ T8661] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 449.542776][ T8661] CIFS: Attempting to mount \\172.20.20.170\share [ 449.549554][ T8661] CIFS: VFS: Error connecting to socket. Aborting operation. [ 449.557048][ T8661] CIFS: VFS: cifs_mount failed w/return code = -22 [ 450.106964][ T4270] ffs_data_put(): freeing [ 450.146453][ T8691] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1131'. [ 451.259688][ T4289] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 451.269889][ T4289] CPU: 1 PID: 4289 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 451.277520][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 451.287629][ T4289] Workqueue: hci4 hci_rx_work [ 451.292372][ T4289] Call Trace: [ 451.295682][ T4289] [ 451.298668][ T4289] dump_stack_lvl+0x188/0x24e [ 451.303369][ T4289] ? show_regs_print_info+0x12/0x12 [ 451.308598][ T4289] ? load_image+0x410/0x410 [ 451.313145][ T4289] sysfs_create_dir_ns+0x26a/0x290 [ 451.318455][ T4289] ? __lock_acquire+0x7ea0/0x7ea0 [ 451.323540][ T4289] ? sysfs_warn_dup+0xa0/0xa0 [ 451.328268][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 451.333525][ T4289] kobject_add_internal+0x617/0xca0 [ 451.338804][ T4289] kobject_add+0x160/0x230 [ 451.343305][ T4289] ? kobject_init+0x1c0/0x1c0 [ 451.348041][ T4289] ? __raw_spin_lock_init+0x41/0x100 [ 451.353359][ T4289] ? klist_children_get+0x50/0x50 [ 451.358442][ T4289] ? get_device_parent+0x121/0x3e0 [ 451.363634][ T4289] device_add+0x470/0x1050 [ 451.368091][ T4289] hci_conn_add_sysfs+0xd1/0x1e0 [ 451.373150][ T4289] le_conn_complete_evt+0xf93/0x15c0 [ 451.378482][ T4289] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 451.384813][ T4289] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 451.390499][ T4289] ? mutex_unlock+0x10/0x10 [ 451.395052][ T4289] ? skb_pull_data+0xec/0x1f0 [ 451.399803][ T4289] hci_le_enh_conn_complete_evt+0x185/0x460 [ 451.405733][ T4289] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 451.412176][ T4289] ? hci_remote_host_features_evt+0x230/0x230 [ 451.418271][ T4289] hci_event_packet+0x7b3/0x1290 [ 451.423250][ T4289] ? lock_chain_count+0x20/0x20 [ 451.428166][ T4289] ? bis_list+0x280/0x280 [ 451.432528][ T4289] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 451.438449][ T4289] ? kcov_remote_start+0x50f/0x810 [ 451.443694][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 451.448934][ T4289] ? hci_send_to_monitor+0x9c/0x4a0 [ 451.454164][ T4289] hci_rx_work+0x3eb/0xd40 [ 451.458611][ T4289] ? _raw_spin_unlock+0x40/0x40 [ 451.463494][ T4289] ? process_one_work+0x7b4/0x1160 [ 451.468646][ T4289] process_one_work+0x8ab/0x1160 [ 451.473618][ T4289] ? worker_detach_from_pool+0x240/0x240 [ 451.479285][ T4289] ? _raw_spin_lock_irq+0xb7/0xf0 [ 451.484348][ T4289] ? _raw_spin_lock_irqsave+0x100/0x100 [ 451.489910][ T4289] ? wq_worker_running+0x97/0x190 [ 451.494956][ T4289] worker_thread+0xaf5/0x12a0 [ 451.499664][ T4289] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 451.505579][ T4289] kthread+0x29d/0x330 [ 451.509658][ T4289] ? worker_clr_flags+0x1a0/0x1a0 [ 451.514735][ T4289] ? kthread_blkcg+0xd0/0xd0 [ 451.519358][ T4289] ret_from_fork+0x1f/0x30 [ 451.523802][ T4289] [ 451.532636][ T4289] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 451.546088][ T4289] Bluetooth: hci4: failed to register connection device [ 452.017774][ T8727] ffs_data_put(): freeing [ 452.144074][ T8736] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 452.361647][ T8743] ksmbd: Unknown IPC event: 4, ignore. [ 452.523838][ T8746] ffs_data_put(): freeing [ 453.057822][ T8748] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 453.057822][ T8748] [ 453.071634][ T8748] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 453.084184][ T8748] CIFS: Attempting to mount \\172.20.20.170\share [ 453.090946][ T8748] CIFS: VFS: Error connecting to socket. Aborting operation. [ 453.098367][ T8748] CIFS: VFS: cifs_mount failed w/return code = -22 [ 453.813391][ T8772] ffs_data_put(): freeing [ 453.863185][ T8776] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 454.674839][ T8795] device syzkaller1 entered promiscuous mode [ 454.834745][ T8797] ffs_data_put(): freeing [ 455.331853][ T8817] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 455.331853][ T8817] [ 455.346357][ T8817] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 455.360203][ T8817] CIFS: Attempting to mount \\172.20.20.170\share [ 455.530743][ T8808] 9pnet_virtio: no channels available for device syz [ 456.008789][ T8817] CIFS: VFS: Error connecting to socket. Aborting operation. [ 456.016339][ T8817] CIFS: VFS: cifs_mount failed w/return code = -22 [ 456.170772][ T8823] ffs_data_put(): freeing [ 457.495729][ T8844] device syzkaller1 entered promiscuous mode [ 459.281305][ T8871] 9pnet_virtio: no channels available for device syz [ 459.321218][ T8870] ffs_data_put(): freeing [ 461.963705][ T8898] device syzkaller1 entered promiscuous mode [ 462.484014][ T8913] ffs_data_put(): freeing [ 468.866649][ T8954] ffs_data_put(): freeing [ 469.637795][ T8961] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 469.637795][ T8961] [ 469.651731][ T8961] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 469.664346][ T8961] CIFS: Attempting to mount \\172.20.20.170\share [ 469.671227][ T8961] CIFS: VFS: Error connecting to socket. Aborting operation. [ 469.678749][ T8961] CIFS: VFS: cifs_mount failed w/return code = -22 [ 470.857295][ T8987] netlink: 'syz.5.1220': attribute type 1 has an invalid length. [ 474.963099][ T9013] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1227'. [ 476.195646][ T9018] ffs_data_put(): freeing [ 478.496410][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1237'. [ 478.518723][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 479.264420][ T9062] ffs_data_put(): freeing [ 480.394522][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 480.766117][ T9097] ffs_data_put(): freeing [ 483.227062][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1269'. [ 483.271788][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 483.354606][ T9134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1270'. [ 483.430093][ T9136] ffs_data_put(): freeing [ 483.492943][ T9139] ffs_data_put(): freeing [ 485.997204][ T9165] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 485.997204][ T9165] [ 486.011087][ T9165] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 486.023660][ T9165] CIFS: Attempting to mount \\172.20.20.170\share [ 486.189300][ T9179] ffs_data_put(): freeing [ 486.233401][ T9180] ffs_data_put(): freeing [ 486.346457][ T9165] CIFS: VFS: cifs_mount failed w/return code = -112 [ 487.906869][ T9211] ffs_data_put(): freeing [ 488.122467][ T9226] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 488.122467][ T9226] [ 488.136438][ T9226] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 488.149378][ T9226] CIFS: Attempting to mount \\172.20.20.170\share [ 489.873225][ T9226] CIFS: VFS: error -4 create cifsd thread [ 489.879540][ T9226] CIFS: VFS: cifs_mount failed w/return code = -4 [ 489.902449][ T9230] ffs_data_put(): freeing [ 490.904312][ T9258] ffs_data_put(): freeing [ 491.151111][ T9260] ffs_data_put(): freeing [ 491.404100][ T9265] netlink: 'syz.2.1310': attribute type 4 has an invalid length. [ 493.144698][ T9292] ffs_data_put(): freeing [ 493.194106][ T9295] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 493.194106][ T9295] [ 493.219465][ T9295] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 493.232784][ T9295] CIFS: Attempting to mount \\172.20.20.170\share [ 493.343937][ T4272] ffs_data_put(): freeing [ 495.312897][ T9295] CIFS: VFS: cifs_mount failed w/return code = -112 [ 496.293216][ T9325] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1334'. [ 496.383102][ T9333] ffs_data_put(): freeing [ 496.658006][ T9337] ffs_data_put(): freeing [ 497.155960][ T9362] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 497.155960][ T9362] [ 497.175177][ T9362] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 497.201689][ T9362] CIFS: Attempting to mount \\172.20.20.170\share [ 497.223746][ T9362] CIFS: VFS: Error connecting to socket. Aborting operation. [ 497.227797][ T9360] netlink: 'syz.3.1333': attribute type 4 has an invalid length. [ 497.242962][ T9362] CIFS: VFS: cifs_mount failed w/return code = -22 [ 497.596683][ T9369] ffs_data_put(): freeing [ 498.935642][ T4272] ffs_data_put(): freeing [ 499.455312][ T9398] ffs_data_put(): freeing [ 499.946146][ T9407] ffs_data_put(): freeing [ 500.238887][ T9415] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 500.357406][ T9422] netlink: 'syz.3.1361': attribute type 4 has an invalid length. [ 500.615820][ T4270] ffs_data_put(): freeing [ 501.799384][ T4270] ffs_data_put(): freeing [ 501.956436][ T9449] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1382'. [ 502.102359][ T9455] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 502.415698][ T4272] ffs_data_put(): freeing [ 503.507988][ T4272] ffs_data_put(): freeing [ 504.079221][ T9488] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 504.425677][ T9493] netlink: 'syz.3.1395': attribute type 4 has an invalid length. [ 504.591737][ T9499] ffs_data_put(): freeing [ 505.175629][ T9509] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1408'. [ 505.592840][ T9521] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 506.671020][ T9527] ffs_data_put(): freeing [ 507.139139][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.145692][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.864942][ T9535] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 508.864942][ T9535] [ 508.900995][ T9535] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 508.980872][ T9535] CIFS: Attempting to mount \\172.20.20.170\share [ 509.336522][ T9535] CIFS: VFS: Error connecting to socket. Aborting operation. [ 510.751663][ T9535] CIFS: VFS: cifs_mount failed w/return code = -4 [ 515.371094][ T9574] ffs_data_put(): freeing [ 515.392110][ T9576] ffs_data_put(): freeing [ 517.970381][ T9607] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 517.970381][ T9607] [ 518.089125][ T9607] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 518.105820][ T9607] CIFS: Attempting to mount \\172.20.20.170\share [ 518.125501][ T9607] CIFS: VFS: Error connecting to socket. Aborting operation. [ 518.144371][ T9607] CIFS: VFS: cifs_mount failed w/return code = -22 [ 519.615906][ T4270] ffs_data_put(): freeing [ 519.637885][ T9627] ffs_data_put(): freeing [ 521.674357][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.418130][ T9669] ffs_data_put(): freeing [ 522.742341][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.796505][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.119757][ T7037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.839027][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.887448][ T4355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.889754][ T4272] ffs_data_put(): freeing [ 524.156832][ T9691] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 524.999042][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.171249][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.301678][ T9701] ffs_data_put(): freeing [ 525.781165][ T9715] ffs_data_put(): freeing [ 526.079468][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.741220][ T9738] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 528.301670][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.659286][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.531243][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.240731][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.295646][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.374381][ T4272] ffs_data_put(): freeing [ 530.546500][ T9757] ffs_data_put(): freeing [ 530.801083][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.810219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.359073][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.368124][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.423671][ T9763] device syzkaller1 entered promiscuous mode [ 531.849472][ T9781] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 533.534057][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.545429][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.560394][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.879505][ T4404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.560798][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.638735][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.919029][ T4272] ffs_data_put(): freeing [ 535.282011][ T4452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.291440][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.300491][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.360246][ T4527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.957516][ T4270] ffs_data_put(): freeing [ 536.055946][ T9813] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 538.317879][ T9831] ffs_data_put(): freeing [ 538.719182][ T4259] net_ratelimit: 11 callbacks suppressed [ 538.719199][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.733468][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.742558][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.765472][ T9846] device syzkaller1 entered promiscuous mode [ 538.771733][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.271661][ T9845] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 539.271661][ T9845] [ 539.285676][ T9845] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 539.298265][ T9845] CIFS: Attempting to mount \\172.20.20.170\share [ 539.305052][ T9845] CIFS: VFS: Error connecting to socket. Aborting operation. [ 539.312558][ T9845] CIFS: VFS: cifs_mount failed w/return code = -22 [ 539.488808][ T9860] ffs_data_put(): freeing [ 539.722411][ T9868] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 539.759447][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.768192][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.839161][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.798947][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.807775][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.879382][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.690749][ T4272] ffs_data_put(): freeing [ 542.027588][ T9886] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 542.506891][ T9865] netlink: 'syz.2.1518': attribute type 4 has an invalid length. [ 542.541776][ T9893] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 542.541776][ T9893] [ 542.555738][ T9893] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 542.568353][ T9893] CIFS: Attempting to mount \\172.20.20.170\share [ 542.575093][ T9893] CIFS: VFS: Error connecting to socket. Aborting operation. [ 542.582576][ T9893] CIFS: VFS: cifs_mount failed w/return code = -22 [ 542.825497][ T9906] ffs_data_put(): freeing [ 542.898710][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 542.898725][ T26] audit: type=1800 audit(2000000037.690:50): pid=9908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1531" name="zone_nr_conv" dev="configfs" ino=52598 res=0 errno=0 [ 543.767701][ T26] audit: type=1800 audit(2000000037.860:51): pid=9910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1531" name="zoned" dev="configfs" ino=53421 res=0 errno=0 [ 543.919241][ T4363] net_ratelimit: 15 callbacks suppressed [ 543.919259][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.933721][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.999155][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.008123][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.072559][ T9916] ffs_data_put(): freeing [ 544.863941][ T9929] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 544.863941][ T9929] [ 544.878113][ T9929] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 544.891117][ T9929] CIFS: Attempting to mount \\172.20.20.170\share [ 544.898346][ T9929] CIFS: VFS: Error connecting to socket. Aborting operation. [ 544.905857][ T9929] CIFS: VFS: cifs_mount failed w/return code = -22 [ 544.961129][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.969906][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.039276][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.072228][ T9947] ffs_data_put(): freeing [ 545.999143][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.007562][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.079120][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.264734][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 546.351099][ T9967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.569466][ T4270] ffs_data_put(): freeing [ 547.867400][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.899516][ T9975] ffs_data_put(): freeing [ 548.649073][ T9954] netlink: 'syz.0.1546': attribute type 4 has an invalid length. [ 548.989222][ T9988] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 548.989222][ T9988] [ 549.003313][ T9988] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 549.016257][ T9988] CIFS: Attempting to mount \\172.20.20.170\share [ 549.024154][ T9988] CIFS: VFS: Error connecting to socket. Aborting operation. [ 549.031922][ T9988] CIFS: VFS: cifs_mount failed w/return code = -22 [ 549.361707][ T7023] net_ratelimit: 15 callbacks suppressed [ 549.361726][ T7023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.678957][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.687561][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.399704][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.719264][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.727986][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.282843][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.291311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.438997][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.922983][ T7037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.119256][ T4270] ffs_data_put(): freeing [ 552.154575][T10018] rxe_eth0 speed is unknown, defaulting to 1000 [ 552.535122][T10018] lo speed is unknown, defaulting to 1000 [ 554.454033][T10035] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 554.490992][ T7025] net_ratelimit: 10 callbacks suppressed [ 554.491010][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.505112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.719229][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.728104][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.365075][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.373849][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.541888][T10044] netlink: 'syz.1.1572': attribute type 4 has an invalid length. [ 555.554529][ T4270] ffs_data_put(): freeing [ 555.788619][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.837953][T10052] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 555.847402][T10052] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 556.399157][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.407524][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.148242][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.209048][T10055] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 557.209048][T10055] [ 557.222783][T10055] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 557.235357][T10055] CIFS: Attempting to mount \\172.20.20.170\share [ 557.242118][T10055] CIFS: VFS: Error connecting to socket. Aborting operation. [ 557.249608][T10055] CIFS: VFS: cifs_mount failed w/return code = -22 [ 557.404768][T10068] ffs_data_put(): freeing [ 558.694285][ T7] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 558.780250][T10083] ffs_data_put(): freeing [ 558.896557][ T7] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 559.758885][ T4841] net_ratelimit: 12 callbacks suppressed [ 559.758901][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.243286][ T7037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.495491][ T7] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 168, setting to 64 [ 560.638210][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 560.735064][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.743561][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.904419][ T7] usb 3-1: string descriptor 0 read error: -71 [ 560.918728][ T7] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 560.978937][ T4272] ffs_data_put(): freeing [ 561.008526][ T7] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 561.047907][ T7] usb 3-1: config 0 descriptor?? [ 561.060917][T10095] netlink: 'syz.0.1585': attribute type 4 has an invalid length. [ 561.256167][ T7] usb 3-1: can't set config #0, error -71 [ 561.522352][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.530834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.758755][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.767230][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.227459][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.235800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.334525][ T7] usb 3-1: USB disconnect, device number 5 [ 563.357483][T10104] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 563.366730][T10104] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 563.466117][T10092] udevd[10092]: setting owner of /dev/bus/usb/003/005 to uid=0, gid=0 failed: No such file or directory [ 564.342818][ T4270] ffs_data_put(): freeing [ 564.796039][ T7025] net_ratelimit: 8 callbacks suppressed [ 564.796059][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.813103][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.420103][T10123] lo speed is unknown, defaulting to 1000 [ 565.461387][T10123] lo speed is unknown, defaulting to 1000 [ 565.467815][T10123] lo speed is unknown, defaulting to 1000 [ 565.551000][T10128] ffs_data_put(): freeing [ 565.598979][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.610450][ T4452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.759077][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.776189][T10123] infiniband sz1: set active [ 565.781359][ T1172] lo speed is unknown, defaulting to 1000 [ 565.794180][T10123] infiniband sz1: added lo [ 565.840085][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.878770][T10123] RDS/IB: sz1: added [ 565.883007][T10123] smc: adding ib device sz1 with port count 1 [ 565.939941][T10123] smc: ib device sz1 port 1 has pnetid [ 565.962733][ T4841] lo speed is unknown, defaulting to 1000 [ 565.970479][T10123] lo speed is unknown, defaulting to 1000 [ 566.005623][ T7037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.429838][T10123] lo speed is unknown, defaulting to 1000 [ 566.508678][T10142] ffs_data_put(): freeing [ 566.639136][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.653530][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.788362][T10146] kAFS: No cell specified [ 566.799173][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.833134][T10123] lo speed is unknown, defaulting to 1000 [ 567.117366][T10123] lo speed is unknown, defaulting to 1000 [ 567.387097][T10123] lo speed is unknown, defaulting to 1000 [ 568.568370][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.574876][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.628935][T10162] jffs2: notice: (10162) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 568.651808][ T4272] ffs_data_put(): freeing [ 568.683891][T10165] overlayfs: failed to clone upperpath [ 569.660476][ T26] audit: type=1800 audit(2000000064.450:52): pid=10181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1613" name="zone_nr_conv" dev="configfs" ino=53739 res=0 errno=0 [ 570.438195][T10177] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 570.438195][T10177] [ 570.452209][T10177] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 570.465184][T10177] CIFS: Attempting to mount \\172.20.20.170\share [ 570.475113][T10177] net_ratelimit: 12 callbacks suppressed [ 570.475132][T10177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.489926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.499544][T10177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.508858][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.621916][T10177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.631188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.715493][T10163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.726267][T10177] CIFS: VFS: cifs_mount failed w/return code = -112 [ 570.912406][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.920960][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.930598][T10182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.009342][ T26] audit: type=1800 audit(2000000065.810:53): pid=10181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1613" name="zoned" dev="configfs" ino=53082 res=0 errno=0 [ 571.157935][T10187] ffs_data_put(): freeing [ 571.399162][T10194] device syzkaller0 entered promiscuous mode [ 571.578337][T10199] process 'syz.5.1620' launched './file1' with NULL argv: empty string added [ 574.288671][ T4363] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 574.530353][ T4270] ffs_data_put(): freeing [ 574.628686][ T4363] usb 4-1: Using ep0 maxpacket: 16 [ 574.638031][ T4363] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 574.672862][ T4363] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 574.689223][ T4363] usb 4-1: Product: syz [ 574.693559][ T4363] usb 4-1: Manufacturer: syz [ 574.698200][ T4363] usb 4-1: SerialNumber: syz [ 574.719412][ T4363] usb 4-1: config 0 descriptor?? [ 574.874626][T10238] loop9: detected capacity change from 0 to 255852544 [ 575.027125][T10221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.083792][T10221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.166291][T10221] overlayfs: failed to resolve './file1/file0': -2 [ 575.245457][ T1172] usb 4-1: USB disconnect, device number 3 [ 576.239330][ T7016] net_ratelimit: 14 callbacks suppressed [ 576.239350][ T7016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.421120][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.432695][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.444036][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.581262][T10260] jffs2: notice: (10260) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 576.879814][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.439006][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.447493][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.526052][ T7016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.766281][ T4270] ffs_data_put(): freeing [ 577.942380][T10277] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 578.015275][T10281] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1645'. [ 578.489707][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.498497][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.188096][ T4270] ffs_data_put(): freeing [ 581.240509][ T4270] ffs_data_put(): freeing [ 581.435098][T10319] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 581.435098][T10319] [ 581.449136][T10319] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 581.462086][T10319] CIFS: Attempting to mount \\172.20.20.170\share [ 581.470214][T10319] CIFS: VFS: Error connecting to socket. Aborting operation. [ 581.478014][T10319] CIFS: VFS: cifs_mount failed w/return code = -22 [ 582.003599][ T7018] net_ratelimit: 10 callbacks suppressed [ 582.003618][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.079164][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.087916][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.578093][T10337] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 582.639463][ T7016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.721660][ T26] audit: type=1326 audit(2000000077.520:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.2.1664" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe20719f559 code=0x0 [ 583.045375][T10356] ffs_data_put(): freeing [ 583.107197][T10359] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1671'. [ 583.119599][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.128378][ T4841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.243731][T10359] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 583.289596][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.371533][T10363] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 583.371533][T10363] [ 583.385438][T10363] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 583.398038][T10363] CIFS: Attempting to mount \\172.20.20.170\share [ 583.404800][T10363] CIFS: VFS: Error connecting to socket. Aborting operation. [ 583.412312][T10363] CIFS: VFS: cifs_mount failed w/return code = -22 [ 583.765852][T10373] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 584.159073][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.167846][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.613616][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.642454][T10394] ffs_data_put(): freeing [ 587.563412][ T7016] net_ratelimit: 6 callbacks suppressed [ 587.563431][ T7016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.567223][ T4452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.597438][T10412] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 587.597438][T10412] [ 587.611600][T10412] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 587.624889][T10412] CIFS: Attempting to mount \\172.20.20.170\share [ 587.633244][T10412] CIFS: VFS: Error connecting to socket. Aborting operation. [ 587.641116][T10412] CIFS: VFS: cifs_mount failed w/return code = -22 [ 587.762550][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.990638][T10418] binder: 10417:10418 ioctl c0306201 0 returned -14 [ 588.002945][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.019021][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.087603][T10423] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 588.399319][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.043813][ T127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.053308][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.074211][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.083232][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.561417][T10442] ffs_data_put(): freeing [ 589.893183][T10451] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 592.407004][T10457] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 592.584733][ T4363] net_ratelimit: 7 callbacks suppressed [ 592.584753][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.889323][ T4452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.521331][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.531581][ T4452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.598964][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.175616][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.410080][ T4272] ffs_data_put(): freeing [ 594.529118][T10494] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 594.547174][T10491] rdma_rxe: already configured on lo [ 594.644426][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.799359][ T4452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.799359][ T4527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.811931][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.307602][T10517] ffs_data_put(): freeing [ 595.513760][T10526] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 597.106957][T10552] ffs_data_put(): freeing [ 598.639431][ T4527] net_ratelimit: 5 callbacks suppressed [ 598.639451][ T4527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.673741][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.032539][T10569] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 599.289124][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.299124][ T4527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.468536][T10575] rdma_rxe: rxe_register_device failed with error -23 [ 599.485266][T10575] rdma_rxe: failed to add lo [ 599.587045][T10578] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 599.587045][T10578] [ 599.600993][T10578] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 599.613613][T10578] CIFS: Attempting to mount \\172.20.20.170\share [ 599.620538][T10578] CIFS: VFS: Error connecting to socket. Aborting operation. [ 599.627998][T10578] CIFS: VFS: cifs_mount failed w/return code = -22 [ 599.679170][T10291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.924565][ T4527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.564587][ T4527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.583225][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.699675][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.709012][ T4452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.074267][T10591] ffs_data_put(): freeing [ 601.226478][T10609] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 601.621750][T10617] rdma_rxe: rxe_register_device failed with error -23 [ 601.653127][T10617] rdma_rxe: failed to add lo [ 601.853830][T10623] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 601.853830][T10623] [ 601.867556][T10623] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 601.880319][T10623] CIFS: Attempting to mount \\172.20.20.170\share [ 601.887005][T10623] CIFS: VFS: Error connecting to socket. Aborting operation. [ 601.894467][T10623] CIFS: VFS: cifs_mount failed w/return code = -22 [ 603.460495][T10645] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 603.507645][T10644] rdma_rxe: rxe_register_device failed with error -23 [ 603.538744][T10644] rdma_rxe: failed to add lo [ 603.845754][ T4363] net_ratelimit: 6 callbacks suppressed [ 603.845775][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.468145][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.917586][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.957501][ T4527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.100017][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.109117][ T4527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.119185][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.170836][T10677] rdma_rxe: rxe_register_device failed with error -23 [ 605.177813][T10677] rdma_rxe: failed to add lo [ 605.930314][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.999312][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.319955][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.341935][T10715] rdma_rxe: rxe_register_device failed with error -23 [ 608.385155][T10715] rdma_rxe: failed to add lo [ 609.047023][T10733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1812'. [ 609.759664][ T4363] net_ratelimit: 7 callbacks suppressed [ 609.759684][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.164265][ T7027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.250376][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.813629][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.822448][ T4527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.833660][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.899213][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.039439][T10749] netlink: 'syz.0.1808': attribute type 4 has an invalid length. [ 611.439428][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.447664][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.455897][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.105934][T10773] ffs_data_put(): freeing [ 615.759322][ T4363] net_ratelimit: 7 callbacks suppressed [ 615.759342][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.927371][ T7037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.379503][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.544164][ T4272] ffs_data_put(): freeing [ 616.569998][ T4452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.571685][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.794044][T10822] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 617.260826][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.271110][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.280339][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.288898][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.300264][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.422023][T10845] ffs_data_put(): freeing [ 617.717351][T10848] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 617.717351][T10848] [ 617.731311][T10848] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 617.743935][T10848] CIFS: Attempting to mount \\172.20.20.170\share [ 617.750692][T10848] CIFS: VFS: Error connecting to socket. Aborting operation. [ 617.758128][T10848] CIFS: VFS: cifs_mount failed w/return code = -22 [ 618.363857][T10857] loop2: detected capacity change from 0 to 512 [ 619.340692][T10857] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1853: bg 0: block 5: invalid block bitmap [ 619.363730][T10857] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 619.426060][T10857] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1853: invalid indirect mapped block 3 (level 2) [ 620.285884][T10857] EXT4-fs (loop2): 1 orphan inode deleted [ 620.292633][T10857] EXT4-fs (loop2): 1 truncate cleaned up [ 620.298941][T10857] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 620.472427][T10877] ffs_data_put(): freeing [ 620.685511][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 621.043280][T10897] netlink: 'syz.0.1872': attribute type 29 has an invalid length. [ 621.168209][T10900] loop2: detected capacity change from 0 to 512 [ 621.221223][T10900] ext4: Unknown parameter 'fsmagic' [ 621.263383][T10904] ffs_data_put(): freeing [ 621.359076][ T4363] net_ratelimit: 5 callbacks suppressed [ 621.359094][ T4363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.415347][T10903] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 621.452587][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.679659][ T4533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.689580][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.791023][T10922] netlink: 'syz.2.1879': attribute type 3 has an invalid length. [ 621.814321][T10922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1879'. [ 621.854456][T10922] ------------[ cut here ]------------ [ 621.860272][T10922] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:869 (size 16) [ 621.902988][T10922] WARNING: CPU: 1 PID: 10922 at net/sched/cls_u32.c:869 u32_change+0x1ef8/0x2900 [ 621.912602][T10922] Modules linked in: [ 621.916554][T10922] CPU: 1 PID: 10922 Comm: syz.2.1879 Not tainted syzkaller #0 [ 621.924259][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 621.934434][T10922] RIP: 0010:u32_change+0x1ef8/0x2900 [ 621.939848][T10922] Code: 00 00 00 e8 9a 59 18 f9 c6 05 c9 7f 82 06 01 b9 10 00 00 00 48 c7 c7 a0 2e 8f 8b 4c 89 f6 48 c7 c2 20 2f 8f 8b e8 b8 cc e3 f8 <0f> 0b e9 eb ed ff ff e8 6c 59 18 f9 be 02 00 00 00 eb 0a e8 60 59 [ 621.959630][T10922] RSP: 0018:ffffc90003c9ee20 EFLAGS: 00010246 [ 621.965763][T10922] RAX: bd2de8376b936a00 RBX: ffff88801e7d28e0 RCX: 0000000000080000 [ 621.973948][T10922] RDX: ffffc9000e4bc000 RSI: 0000000000006c0c RDI: 0000000000006c0d [ 621.982080][T10922] RBP: ffffc90003c9eff8 R08: ffffc90003c9eaa7 R09: 1ffff92000793d54 [ 621.990241][T10922] R10: dffffc0000000000 R11: fffff52000793d55 R12: 1ffff92000793dd8 [ 621.998274][T10922] R13: dffffc0000000000 R14: 0000000000000020 R15: 0000000000000001 [ 622.006558][T10922] FS: 00007fe2080e56c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 622.015664][T10922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 622.022374][T10922] CR2: 00007fe2071ecc40 CR3: 0000000079d8a000 CR4: 00000000003506e0 [ 622.030527][T10922] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 622.038698][T10922] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 622.046728][T10922] Call Trace: [ 622.050114][T10922] [ 622.053150][T10922] ? u32_get+0x370/0x370 [ 622.057477][T10922] ? u32_get+0x370/0x370 [ 622.061860][T10922] tc_new_tfilter+0x1368/0x1970 [ 622.066770][T10922] ? ____kasan_slab_free+0x126/0x1f0 [ 622.072214][T10922] ? slab_free_freelist_hook+0x133/0x1b0 [ 622.077949][T10922] ? tcf_proto_signal_destroying+0x240/0x240 [ 622.084132][T10922] ? rcu_read_unlock+0x8c/0xa0 [ 622.089048][T10922] ? tcf_proto_signal_destroying+0x240/0x240 [ 622.095142][T10922] ? tcf_proto_signal_destroying+0x240/0x240 [ 622.101239][T10922] rtnetlink_rcv_msg+0x8b2/0xfb0 [ 622.106250][T10922] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 622.111497][T10922] ? rtnetlink_bind+0x80/0x80 [ 622.116232][T10922] ? __local_bh_enable_ip+0x136/0x1c0 [ 622.121745][T10922] ? lockdep_hardirqs_on+0x94/0x140 [ 622.127011][T10922] ? __local_bh_enable_ip+0x136/0x1c0 [ 622.132747][T10922] ? _local_bh_enable+0xa0/0xa0 [ 622.137663][T10922] ? __dev_queue_xmit+0x281/0x3810 [ 622.142982][T10922] ? __dev_queue_xmit+0x281/0x3810 [ 622.148177][T10922] ? __dev_queue_xmit+0x1d84/0x3810 [ 622.153559][T10922] ? __dev_queue_xmit+0x281/0x3810 [ 622.158880][T10922] ? ref_tracker_free+0x682/0x830 [ 622.163950][T10922] ? refcount_inc+0x70/0x70 [ 622.168615][T10922] ? memcpy+0x3c/0x60 [ 622.172616][T10922] ? __copy_skb_header+0x3ba/0x4f0 [ 622.177742][T10922] ? __skb_clone+0x446/0x6c0 [ 622.182406][T10922] netlink_rcv_skb+0x1ef/0x440 [ 622.187188][T10922] ? rtnetlink_bind+0x80/0x80 [ 622.192034][T10922] ? netlink_ack+0x1160/0x1160 [ 622.196854][T10922] ? netlink_deliver_tap+0x2e/0x1b0 [ 622.202130][T10922] netlink_unicast+0x7ad/0x920 [ 622.206917][T10922] netlink_sendmsg+0x8ad/0xbd0 [ 622.211762][T10922] ? netlink_getsockopt+0x550/0x550 [ 622.216996][T10922] ? apparmor_socket_sendmsg+0x8a/0x330 [ 622.222666][T10922] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 622.227976][T10922] ? security_socket_sendmsg+0x7c/0xa0 [ 622.233535][T10922] ? netlink_getsockopt+0x550/0x550 [ 622.239032][T10922] ____sys_sendmsg+0x5ed/0x9a0 [ 622.243823][T10922] ? __sys_sendmsg_sock+0x30/0x30 [ 622.248934][T10922] ? __import_iovec+0x306/0x510 [ 622.253818][T10922] ? import_iovec+0x6f/0xa0 [ 622.258361][T10922] ___sys_sendmsg+0x2a2/0x360 [ 622.263149][T10922] ? release_firmware_map_entry+0x187/0x187 [ 622.269125][T10922] ? __sys_sendmsg+0x2a0/0x2a0 [ 622.273940][T10922] __sys_sendmmsg+0x2c3/0x510 [ 622.278696][T10922] ? __ia32_sys_sendmsg+0x80/0x80 [ 622.283748][T10922] ? __ia32_sys_get_robust_list+0x100/0x100 [ 622.289723][T10922] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 622.295744][T10922] ? lock_chain_count+0x20/0x20 [ 622.300669][T10922] __x64_sys_sendmmsg+0x9c/0xb0 [ 622.305542][T10922] do_syscall_64+0x4c/0xa0 [ 622.310048][T10922] ? clear_bhb_loop+0x60/0xb0 [ 622.314759][T10922] ? clear_bhb_loop+0x60/0xb0 [ 622.319566][T10922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.325479][T10922] RIP: 0033:0x7fe20719f559 [ 622.329971][T10922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.349803][T10922] RSP: 002b:00007fe2080e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 622.358242][T10922] RAX: ffffffffffffffda RBX: 00007fe207426090 RCX: 00007fe20719f559 [ 622.366285][T10922] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 622.374326][T10922] RBP: 00007fe207236b20 R08: 0000000000000000 R09: 0000000000000000 [ 622.382385][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.390420][T10922] R13: 00007fe207426128 R14: 00007fe207426090 R15: 00007ffdc56ccdd8 [ 622.398633][T10922] [ 622.401682][T10922] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 622.408963][T10922] CPU: 1 PID: 10922 Comm: syz.2.1879 Not tainted syzkaller #0 [ 622.416438][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 622.426506][T10922] Call Trace: [ 622.429794][T10922] [ 622.432734][T10922] dump_stack_lvl+0x188/0x24e [ 622.437429][T10922] ? memcpy+0x3c/0x60 [ 622.441421][T10922] ? show_regs_print_info+0x12/0x12 [ 622.446630][T10922] ? load_image+0x410/0x410 [ 622.451166][T10922] panic+0x2d3/0x710 [ 622.455098][T10922] ? bpf_jit_dump+0xd0/0xd0 [ 622.459629][T10922] __warn+0x2f8/0x4f0 [ 622.463627][T10922] ? u32_change+0x1ef8/0x2900 [ 622.468314][T10922] ? u32_change+0x1ef8/0x2900 [ 622.473005][T10922] report_bug+0x2ba/0x4f0 [ 622.477344][T10922] ? u32_change+0x1ef8/0x2900 [ 622.482033][T10922] handle_bug+0x3a/0x70 [ 622.486209][T10922] exc_invalid_op+0x16/0x40 [ 622.490741][T10922] asm_exc_invalid_op+0x16/0x20 [ 622.495613][T10922] RIP: 0010:u32_change+0x1ef8/0x2900 [ 622.500911][T10922] Code: 00 00 00 e8 9a 59 18 f9 c6 05 c9 7f 82 06 01 b9 10 00 00 00 48 c7 c7 a0 2e 8f 8b 4c 89 f6 48 c7 c2 20 2f 8f 8b e8 b8 cc e3 f8 <0f> 0b e9 eb ed ff ff e8 6c 59 18 f9 be 02 00 00 00 eb 0a e8 60 59 [ 622.520542][T10922] RSP: 0018:ffffc90003c9ee20 EFLAGS: 00010246 [ 622.526619][T10922] RAX: bd2de8376b936a00 RBX: ffff88801e7d28e0 RCX: 0000000000080000 [ 622.534600][T10922] RDX: ffffc9000e4bc000 RSI: 0000000000006c0c RDI: 0000000000006c0d [ 622.542582][T10922] RBP: ffffc90003c9eff8 R08: ffffc90003c9eaa7 R09: 1ffff92000793d54 [ 622.550570][T10922] R10: dffffc0000000000 R11: fffff52000793d55 R12: 1ffff92000793dd8 [ 622.558559][T10922] R13: dffffc0000000000 R14: 0000000000000020 R15: 0000000000000001 [ 622.566562][T10922] ? u32_get+0x370/0x370 [ 622.570831][T10922] ? u32_get+0x370/0x370 [ 622.575077][T10922] tc_new_tfilter+0x1368/0x1970 [ 622.579936][T10922] ? ____kasan_slab_free+0x126/0x1f0 [ 622.585235][T10922] ? slab_free_freelist_hook+0x133/0x1b0 [ 622.590913][T10922] ? tcf_proto_signal_destroying+0x240/0x240 [ 622.596911][T10922] ? rcu_read_unlock+0x8c/0xa0 [ 622.601688][T10922] ? tcf_proto_signal_destroying+0x240/0x240 [ 622.607707][T10922] ? tcf_proto_signal_destroying+0x240/0x240 [ 622.613718][T10922] rtnetlink_rcv_msg+0x8b2/0xfb0 [ 622.618663][T10922] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 622.623787][T10922] ? rtnetlink_bind+0x80/0x80 [ 622.628473][T10922] ? __local_bh_enable_ip+0x136/0x1c0 [ 622.633863][T10922] ? lockdep_hardirqs_on+0x94/0x140 [ 622.639098][T10922] ? __local_bh_enable_ip+0x136/0x1c0 [ 622.644476][T10922] ? _local_bh_enable+0xa0/0xa0 [ 622.649358][T10922] ? __dev_queue_xmit+0x281/0x3810 [ 622.654500][T10922] ? __dev_queue_xmit+0x281/0x3810 [ 622.659649][T10922] ? __dev_queue_xmit+0x1d84/0x3810 [ 622.664901][T10922] ? __dev_queue_xmit+0x281/0x3810 [ 622.670048][T10922] ? ref_tracker_free+0x682/0x830 [ 622.675106][T10922] ? refcount_inc+0x70/0x70 [ 622.679648][T10922] ? memcpy+0x3c/0x60 [ 622.683657][T10922] ? __copy_skb_header+0x3ba/0x4f0 [ 622.688781][T10922] ? __skb_clone+0x446/0x6c0 [ 622.693405][T10922] netlink_rcv_skb+0x1ef/0x440 [ 622.698186][T10922] ? rtnetlink_bind+0x80/0x80 [ 622.702880][T10922] ? netlink_ack+0x1160/0x1160 [ 622.707661][T10922] ? netlink_deliver_tap+0x2e/0x1b0 [ 622.712874][T10922] netlink_unicast+0x7ad/0x920 [ 622.717661][T10922] netlink_sendmsg+0x8ad/0xbd0 [ 622.722464][T10922] ? netlink_getsockopt+0x550/0x550 [ 622.727682][T10922] ? apparmor_socket_sendmsg+0x8a/0x330 [ 622.733266][T10922] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 622.738579][T10922] ? security_socket_sendmsg+0x7c/0xa0 [ 622.744077][T10922] ? netlink_getsockopt+0x550/0x550 [ 622.749328][T10922] ____sys_sendmsg+0x5ed/0x9a0 [ 622.754114][T10922] ? __sys_sendmsg_sock+0x30/0x30 [ 622.759151][T10922] ? __import_iovec+0x306/0x510 [ 622.764032][T10922] ? import_iovec+0x6f/0xa0 [ 622.768568][T10922] ___sys_sendmsg+0x2a2/0x360 [ 622.773266][T10922] ? release_firmware_map_entry+0x187/0x187 [ 622.779177][T10922] ? __sys_sendmsg+0x2a0/0x2a0 [ 622.784095][T10922] __sys_sendmmsg+0x2c3/0x510 [ 622.788805][T10922] ? __ia32_sys_sendmsg+0x80/0x80 [ 622.793855][T10922] ? __ia32_sys_get_robust_list+0x100/0x100 [ 622.799777][T10922] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 622.805796][T10922] ? lock_chain_count+0x20/0x20 [ 622.810684][T10922] __x64_sys_sendmmsg+0x9c/0xb0 [ 622.815554][T10922] do_syscall_64+0x4c/0xa0 [ 622.819996][T10922] ? clear_bhb_loop+0x60/0xb0 [ 622.824690][T10922] ? clear_bhb_loop+0x60/0xb0 [ 622.829379][T10922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.835281][T10922] RIP: 0033:0x7fe20719f559 [ 622.839726][T10922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.859465][T10922] RSP: 002b:00007fe2080e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 622.867895][T10922] RAX: ffffffffffffffda RBX: 00007fe207426090 RCX: 00007fe20719f559 [ 622.875901][T10922] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 622.883886][T10922] RBP: 00007fe207236b20 R08: 0000000000000000 R09: 0000000000000000 [ 622.891868][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.899851][T10922] R13: 00007fe207426128 R14: 00007fe207426090 R15: 00007ffdc56ccdd8 [ 622.907863][T10922] [ 622.911515][T10922] Kernel Offset: disabled [ 622.915885][T10922] Rebooting in 86400 seconds..