last executing test programs: 11m13.453354105s ago: executing program 32 (id=143): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2010410, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x4, 0x2ae, &(0x7f0000000d00)="$eJzs3TFrU1sAB/DTtKWPPlo6PZ4uHnRyCbWzQ4u0WAwo2ggqCLf0VkOuScnNkBSHOrsIDg5+A3F0E8Qv0MXP4FaE0qmTlXpb2xScmjZDf78l/+SfczjnXjh3vFs337yor+bl1aQdSrNDoTQbQml3KEyFUji0Ea6/ffX+9YNHj+/MVSrz92NcmFu6MRNjnLzy5cnLj1e/tv99+Gny81jYnHq6tT3zffO/zUtbP5ee1/JYy2Oj2Y5JXG4228lylsaVWl4vx3gvS5M8jbVGnrZ6+tWsubbWjUljZWJ8rZXmeUwa3VhPu7HdjO1WNybPklojlsvlODEeOI3qh929vbC9Vxj0ajh/7v/FduxQ/yeEnY1OtVMtPot+YbEyPx1/Gz0atdPpVIdD+DZUfC362NuPhvGD8TMn+8NHy7Wi3+9u3a2cGD8WVs526wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxg5fjH1NGvO51Odbjoy3/ri7SwWJmfPvhDbz8SLo+c2zYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FTy7no9ybK01Zdwuw/zlPq4nt7wLoRwJjPvX8gzWrMgDCYM+mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA89f7EnsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuqry7Xk+yLG31K/z4v5j4WDXoPQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAaf0KAAD//0eSZmc=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r0, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 7m34.973582604s ago: executing program 33 (id=1388): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) prctl$PR_CAPBSET_DROP(0x18, 0x4) 6m13.036404215s ago: executing program 34 (id=1842): syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xcc19, 0x10000, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfff) close(0x3) accept(r0, 0x0, 0x0) 3m40.728611536s ago: executing program 6 (id=2691): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file2\x00', 0x80, &(0x7f0000001940)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="0279d2e93a6aa58e817c47279715c654addaab1bd47e5db7fa14eabcda24b34b86381d6a6d30132f150c9107afb67c5bfedc5dc2f689b30441658dcfcb364ae14ca83aef00ca31430dd2b831e0955e07bc2736c337ce6a5c08a62a04813eb9c01e38715eb26d27b846447bb3d167b3f7f23907d07f695403f946f83eb570c547de936140e61ce959e804be5346bd98c2ac9a0b8af576739d17d19b0b6a7e4260505818fa68cb47038cf95da7d472b772c621d057d6706b0719d79289e3c79af226ed8cdb7091a2dc1f64ecd757ab4c77e790e8369d90febf767ec9c15d4cff7d08fe3f5b2325a7792916f672", @ANYRESDEC], 0xfe, 0x122a, &(0x7f00000005c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) statfs(&(0x7f0000000ac0)='.\x00', 0x0) 3m40.289652531s ago: executing program 6 (id=2695): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1000000000000082) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) 3m39.468796192s ago: executing program 6 (id=2701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}}, 0x44) 3m39.152752896s ago: executing program 35 (id=2701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}}, 0x44) 3m37.337017227s ago: executing program 3 (id=2713): bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@tracing={0x0, 0x10000003ff}}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="feffffff"]}]}, 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) 3m37.031984819s ago: executing program 3 (id=2714): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad", 0x1) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000800)="3fc340b3a728111e9f8373a9", 0xc}], 0x1, 0x0, 0x0, 0x810}], 0x1, 0x6040000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f00000001c0)=""/22, 0x16}], 0x2}, 0x40) 3m36.603267624s ago: executing program 3 (id=2717): unshare(0x64000600) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) 3m34.840219526s ago: executing program 3 (id=2724): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xffffffd3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0x0, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x7fffffff, 0x401, 0xfff, 0x4, 0x10000, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x419, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x1, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x0, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m34.323872704s ago: executing program 3 (id=2726): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3m33.752737652s ago: executing program 3 (id=2729): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) recvmmsg$unix(r2, &(0x7f0000005280), 0x400018e, 0x10040, 0x0) recvmmsg(r1, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}, 0x7a7}], 0x1, 0x21, 0x0) 3m25.783049679s ago: executing program 7 (id=2758): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x1aa) write$binfmt_misc(r0, &(0x7f0000000040), 0x1fff0) 3m25.569924576s ago: executing program 7 (id=2760): connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r0, &(0x7f0000000300)='l', 0x1) 3m25.301150142s ago: executing program 7 (id=2761): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x103040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r2, 0x401) 3m25.120766313s ago: executing program 7 (id=2764): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r4, 0x4, r4}, 0x5) 3m24.804622706s ago: executing program 7 (id=2765): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x686f, &(0x7f0000000200)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000140)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 3m24.601653842s ago: executing program 7 (id=2767): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f00002dd000/0x3000)=nil, 0x3000, 0x1000000d}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8001, 0x116227, 0x15fa81}) 3m18.394872516s ago: executing program 36 (id=2729): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) recvmmsg$unix(r2, &(0x7f0000005280), 0x400018e, 0x10040, 0x0) recvmmsg(r1, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}, 0x7a7}], 0x1, 0x21, 0x0) 3m9.413360956s ago: executing program 37 (id=2767): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f00002dd000/0x3000)=nil, 0x3000, 0x1000000d}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8001, 0x116227, 0x15fa81}) 2m40.042367633s ago: executing program 9 (id=2923): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778625d52}, 0x4) 2m39.950728789s ago: executing program 9 (id=2925): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00001a9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000160000/0x2000)=nil, &(0x7f00000f2000/0x4000)=nil, &(0x7f0000afd000/0x1000)=nil, &(0x7f00006b6000/0x1000)=nil, &(0x7f00001dd000/0x4000)=nil, &(0x7f000004e000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00000c4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x2) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0x970, 0x4000, 0x0, 0x39d}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 2m39.705272061s ago: executing program 9 (id=2926): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000040)='c', 0x1) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000740)=0x1e5, 0x4) 2m39.614324517s ago: executing program 9 (id=2927): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x1b9047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 2m39.526607372s ago: executing program 9 (id=2929): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) unshare(0x20400) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f00000000c0), 0x0}, 0x20) 2m37.415592614s ago: executing program 9 (id=2934): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x6, 0x0, 0x1, 0x4}, 0x50) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000140)='R\x10rust\xe3c\x1f\'Zs\xed\xb4\xfe\xda\xb5\b\xae\xb1\x01\xad\b\x00\xe2\xba\xc5\xf8\xca\xf4\v\xb2%d\xc4\xb0}> \xcc*\xc4y\xd8\xd8\x87\xbcL\xe5\x96 qg,)\xa2T\xdf\xff\xa3\x13i\xac\xba\n\xec>!\xcbK\x00\x00\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2m36.700459216s ago: executing program 38 (id=2934): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x6, 0x0, 0x1, 0x4}, 0x50) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000140)='R\x10rust\xe3c\x1f\'Zs\xed\xb4\xfe\xda\xb5\b\xae\xb1\x01\xad\b\x00\xe2\xba\xc5\xf8\xca\xf4\v\xb2%d\xc4\xb0}> \xcc*\xc4y\xd8\xd8\x87\xbcL\xe5\x96 qg,)\xa2T\xdf\xff\xa3\x13i\xac\xba\n\xec>!\xcbK\x00\x00\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2m22.45228244s ago: executing program 8 (id=2986): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = dup2(r1, r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) 2m22.21687053s ago: executing program 8 (id=2987): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 2m22.021775354s ago: executing program 8 (id=2988): mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='1\x00', 0x1) 2m20.825639419s ago: executing program 8 (id=2994): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) 2m20.551713126s ago: executing program 8 (id=2996): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f00000005c0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d77696e6e742c636f6465706167653d313235312c666d61736b3d303030300000000030303030303030303030303004000000646531215a670233c0116275672c756e080000006174653d302c6e6f7e756d7461696c3d302d757466383d312c73686f72746e616d653d6c6f7765722c7511695f786c6174653d302c756e695f786c6174653d312c757466383d312c00"], 0x7f, 0x2bd, &(0x7f0000000240)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082000cb59d654cbb41bbcef549ba197fce47ddfdd753abd950100f20000000200000000000000000000000000000000000000000200", "b7326736181c208220fffff2ff00", [0x6]}) creat(&(0x7f0000004440)='./file0\x00', 0x12) 2m19.88480737s ago: executing program 8 (id=2998): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000300)="dd481ea0a28dd3ad058e78c4d1f7569674787dd5402817780ac263bca36438fb7d9b33eec04d9ab3cf2cacd243c3c3be17e032145717622a30e0f26ba1882d07a2ecd8ed737e5cc833a15fabcf7022f6cafacb52b3ef8aa8ab933b635eeaeca917429a96cb616bc8", 0x4000f}], 0x1}}], 0x51, 0x40010) 2m4.263152849s ago: executing program 39 (id=2998): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000300)="dd481ea0a28dd3ad058e78c4d1f7569674787dd5402817780ac263bca36438fb7d9b33eec04d9ab3cf2cacd243c3c3be17e032145717622a30e0f26ba1882d07a2ecd8ed737e5cc833a15fabcf7022f6cafacb52b3ef8aa8ab933b635eeaeca917429a96cb616bc8", 0x4000f}], 0x1}}], 0x51, 0x40010) 1m30.90799529s ago: executing program 4 (id=3175): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='acpi_pm', 0x7) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x1}, 0x7) 1m30.168521236s ago: executing program 4 (id=3176): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x550e, &(0x7f0000005980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x7) 1m28.361075837s ago: executing program 4 (id=3183): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}}], 0x1, 0x2040000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000180)=0x42) 1m27.340086461s ago: executing program 4 (id=3186): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f0000000c40)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5f97722752a98440a5725268a242c0263564f968d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de293ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df73df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0], 0x1, 0x35b, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) 1m26.615137256s ago: executing program 4 (id=3188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27880000000, 0x0, 0x1, r2, 0x5}) 1m26.104740373s ago: executing program 4 (id=3190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 1m25.296466622s ago: executing program 40 (id=3190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 29.703274006s ago: executing program 1 (id=3400): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40010163, 0x0) 29.192026284s ago: executing program 1 (id=3402): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000140)={0x40, 0x13, 0x12, "09b72a52dc54d0521b3dc2c83e5a461605e5"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 25.443910337s ago: executing program 1 (id=3414): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x14, 0x3, 0x3, 0x3, 0x0, 0x0, {0x4, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x40000) 24.854176288s ago: executing program 1 (id=3417): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 24.240045503s ago: executing program 1 (id=3420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) 23.26468817s ago: executing program 1 (id=3427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r2}, 0xc) 22.709981155s ago: executing program 41 (id=3427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r2}, 0xc) 21.414022058s ago: executing program 2 (id=3439): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) 21.007759708s ago: executing program 0 (id=3440): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {0x7, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x32}}, 0x20008810) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r1, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.647081279s ago: executing program 2 (id=3441): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffde}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4000000}], 0x32, 0x400c0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 20.358734539s ago: executing program 0 (id=3442): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x525, &(0x7f0000000e40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x48a7e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x14c98, 0x0) 19.897451307s ago: executing program 2 (id=3443): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x3, 0x4) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "0000fb00"}, 0x10}}, 0x4000040) 19.804883373s ago: executing program 0 (id=3444): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x301c8ca, &(0x7f00000017c0)=ANY=[@ANYBLOB='nonumtail=0,nonumtail=0,nfs,uni_xlate=0,utf8=0,quiet,shortname=lower,uni_xlate=1,rodir,iocharset=utf8,utf8=0,utf8=0,check=strict,codepage=775,iocharset=cp864,nonumtail=0,dmask=000000000000000000004,uni_xlate=0,\x00\x00\x00', @ANYRES64, @ANYRES16=0x0], 0x2, 0x2ba, &(0x7f0000000900)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 19.408527791s ago: executing program 0 (id=3445): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000034) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x2832449, 0x0, 0xfd, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./bus/file0/file0\x00') 19.407591251s ago: executing program 2 (id=3446): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 19.12602076s ago: executing program 0 (id=3447): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x49db, 0x0, 0x7, 0x33e, 0x16, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff6b) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x9, 0x0, 0x2, 0x12, "1b28000440800037dd15b21f54c23003103000"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 18.962426968s ago: executing program 2 (id=3448): socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) setns(0xc9, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 18.788886878s ago: executing program 0 (id=3449): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000540)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 18.548588659s ago: executing program 2 (id=3450): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x3232c00, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES16], 0x0, 0xa8f, &(0x7f0000000c80)="$eJzs3U2MG1cBAOBn73qTTVLilIQuSWkTftry091ms4SfCJqquRA1FbdKFZcoTUtEGhCpBK0qscmJG62qcIUiTuVQAUJqLyjqiUslGolLT4UDB6IgVeIAhcRove95xy92xt4/2+vvk94+v3ljvzezM+PxzLz3AjC2qs2/CwszlRCuvP3aiX888PfppSmPtuaoN/9OFlK1EEIlpiezz/tgYjm++eHLZzrFlTDf/JvS4ckbrffuDCEshoPhaqiH/Veuvfru/BOnLp28fOi9N45d35ilBwCA8fLtq8cW9v31zwf2fPTmfcfDttb0dH5ej+ld8bz/eDzxT+f/1dCerhRC0VRof8NkDNVsvons8yazcmrZfJNdyp/KPrfWyj/QNt+2kvInCtM6LTeMsrQd10OlOtuWrlZnZ5d/k4fm7/qpyuyFc+efvTigigLr7l/3hxAOCv2GRqPxk+YKHIK6CMJqQ2P3oI9AAMvy+4W3WcyvLKxN69Mmeyv/xmPVzu+HdbDZ27/yR6v8X19yxGH9bNWtKS1X2o92xXR+HyF/fqnf/T99Xn4/otZjPbvdRxiV+wvd6jmxyfVYrW71z7eLreobMU7r4ZtZfnH/yf+no/I/Bjr792Zd/399euDXOpfCwSGow6iHxXCH/Nrg6yf0HhqDPgABQ2vlublljSjlT5XkbyvJ316SP12Sv6Mkf2dJPoyz37/ws/BKZeV3fv6bvt/rYek6210x/lif9cmvR/Zbfv7cb7/WWn7+PDEMs7dOP3X2q888fW35+f9Ka/u/Fbf3gzFdj/vW1ThDul6YX1dvPftfby+n2mW+u7P63HXb/I3lEve2z1fZu/I5oXCcua0eM+3v291tvnvb56tn803HsD2rb35+siN7Xzr/SMfVtL4ms+WtZcsxldUjHVf2xDivB6xG2h67Pf+fts+ZUKs8e+782UdiOm2nf5qobVuafrj4ob/ZnLoDa9Nr+5+Z0N7+Z1dreq1aPC7sXpleKR4X6tn0+eVk6zZ5mn4kptP33HcnppvTZ898//wz673wMOYuvvjS906fP3/2h16kF9NWixdelB05tuqTgzA+5l54/gdzF1986eFzz59+7uxzZy8cOXr0yPz80a8dWZhrntfPFc/uga1k5Ut/0DUBAAAAAAAAAAAAevWjkyeu/eWdr7y/3P5/pf1fav+fnvxN7f9/mrX/z9vJp1YBqR3gng75zXH33mqvx1Q2Xy2Gj2f13ZuVsy973ydi3BrHL7b/T+3t835dU33uyabn/fem+bLuBG7rL2Uq64OkNV5gbLD/6Zi+HONfBRigynTnyTEu6986beupfwr9Uoym9H9LW0PqxyS1/y7267RY6P8hHf/3bFI9WV+b0Zxw0MsIdPbPoR//s3AmPvC63DE0GoOvw9rD8K/n8Q0bsB80GkbxAIbDHfrb3ZADVT7+Z7rumeILf/zW9qWQZrvxWHs18v5LYS2GffxJ5W+t8T9b49/1dPzr0Lt6Wz/PvY+u8J9fXH+/UGzY3+vxN1/+1A/03vIyiz6K5aflfzD0Vn7j9az8/IZQj/6blb+jx/JvW/57V1f+/2L5abU99Jley1+ucaXaXo/8unG6/5ePB5DczJY/9e3Z9/KvcqDGW7F8GGfdx5ntdQTb4TQq4/92kz+H8eWYTgfC9JxD/o3cb/3T8xXpe2Bf9vmVku+3URmnuJtxH//36zEu2x/S+L9pe6x3SFcL6VqHdTvq2wpsNR8M/f2/EQuLQ1AHYUjDcIyBXQyNRmOgHXnrRXywBr3+B333edDlD3r9l8nH/83P4fPxf6vZD4h8/N/8/fn4v3l+Pr5enp+P/5uvz3z83zz/nuxz8yvYMyX5nyzJ31+Sf2Alf7pTfih5/6dK8g+V5N9Xkn9/Sf7dJfkTJfmfLcn/XEn+AyX5D5Xkf74kf6trtkcp7FTjtvwwzvL2eT3u/6N9cwBoSvd/uu3/e0vygdH18zcPP/70775TX27/P9X6vZbu4x2P6Vr87fzjmM7ve4dCeinvnZj+W5Y/7Nc7YJzk/Wfk3+8PluQDoys957Wa/XvbxlUL2AyVzj325PfbuvVb1e08n9HyhRh/McZfivHDMZ6N8VyMD8d4fpPqx8Z4/Ld/OPZKZeX3/u4sv9fnyfP2QKm9T+on6kiP9cmvD/T7PHvej1+/1lr+KpuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEy1+XdhYaYSwpW3Xzvx1Klzc0tTHm3NUW/+rRVStdb7QngkxhMx/mV8cfPDl88U41sxroT5UAmV1vTw5I1WSTtDCIvhYLga6mH/lWuvvjv/xKlLJy8feu+NY9c3bg0AAADA1vf/AAAA//9B4Bsc") r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)='O', 0x1) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x100, 0x0, {}, {0x0, 0x0, 0x1, 0x2, 0x3, 0x4}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) 6.943905599s ago: executing program 5 (id=3459): r0 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f00000004c0)="$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") recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x3b, 0x0) 5.824324212s ago: executing program 5 (id=3460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}, 0x1, 0x0, 0x0, 0x44004}, 0x8094) dup3(r0, r1, 0x0) 3.314179522s ago: executing program 42 (id=3449): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000540)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 3.310287002s ago: executing program 6 (id=3429): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file2\x00', 0x0, 0x8) 3.2085544s ago: executing program 43 (id=3450): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x3232c00, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES16], 0x0, 0xa8f, &(0x7f0000000c80)="$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") r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)='O', 0x1) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x100, 0x0, {}, {0x0, 0x0, 0x1, 0x2, 0x3, 0x4}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) 3.173468386s ago: executing program 5 (id=3463): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x1, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 2.85667297s ago: executing program 6 (id=3464): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f0000000000)='./file0\x00', 0xca) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r1, 0x0) 2.264985062s ago: executing program 5 (id=3465): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x3, 0x30, 0x1ff, 0x8}, &(0x7f0000000140)=0x18) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc318"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.407675218s ago: executing program 5 (id=3466): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1f3) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 434.071765ms ago: executing program 6 (id=3467): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x400}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) lstat(0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x400000000000000f]}, 0x0, 0x0, 0x8) 0s ago: executing program 5 (id=3468): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="8c0000000002010300000000000000000200001030000a80040002800800014000000001200002800c00028005"], 0x8c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}, @in=@local, 0xee24, 0x0, 0x10, 0x3, 0x2}, {0x81000, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x2, 0x0, 0x0, 0x7}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x34fe, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x10000}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) kernel console output (not intermixed with test programs): ded to keep mac addresses unique to avoid problems! [ 586.458308][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.497124][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.543304][T14505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.638564][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.684990][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.714686][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.742406][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.763323][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.787484][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.824218][T14505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.875636][T14505] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.935569][T14505] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.963339][T14505] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.995074][T14505] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.274428][T14607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.323786][T14607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.456163][ T6000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.486621][ T6000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.789467][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2842'. [ 587.810186][T14710] xfrm1: entered promiscuous mode [ 587.816464][T14710] xfrm1: entered allmulticast mode [ 587.824072][T14709] netlink: 'syz.9.2802': attribute type 20 has an invalid length. [ 587.850112][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2802'. [ 587.885324][T14709] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.894188][T14709] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.903184][T14709] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.912813][T14709] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.998849][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2842'. [ 588.029772][T14709] netlink: 'syz.9.2802': attribute type 20 has an invalid length. [ 588.077392][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2802'. [ 588.647600][ T5109] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 588.841508][ T5109] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.841578][ T5109] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 588.841622][ T5109] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 64 [ 588.841647][ T5109] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 588.843829][ T5109] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 588.843858][ T5109] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.843879][ T5109] usb 10-1: Product: syz [ 588.843895][ T5109] usb 10-1: Manufacturer: syz [ 588.843910][ T5109] usb 10-1: SerialNumber: syz [ 589.066937][T14723] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 589.073633][T14736] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 589.074013][T14736] overlayfs: failed to set xattr on upper [ 589.074046][T14736] overlayfs: ...falling back to index=off. [ 589.074078][T14736] overlayfs: ...falling back to uuid=null. [ 589.878005][T14723] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 590.121540][ T5109] cdc_ncm 10-1:1.0: bind() failure [ 590.158298][ T5109] cdc_ncm: probe of 10-1:1.1 failed with error -71 [ 590.181395][ T5109] cdc_mbim: probe of 10-1:1.1 failed with error -71 [ 590.198344][ T5109] usbtest: probe of 10-1:1.1 failed with error -71 [ 590.262438][ T5109] usb 10-1: USB disconnect, device number 2 [ 590.774097][T14769] FAULT_INJECTION: forcing a failure. [ 590.774097][T14769] name failslab, interval 1, probability 0, space 0, times 0 [ 590.810535][T14769] CPU: 1 PID: 14769 Comm: syz.8.2858 Not tainted syzkaller #0 [ 590.818053][T14769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 590.828134][T14769] Call Trace: [ 590.828620][T14770] nla_validate_range_unsigned: 25 callbacks suppressed [ 590.828654][T14770] netlink: 'syz.1.2857': attribute type 11 has an invalid length. [ 590.831412][T14769] [ 590.831422][T14769] dump_stack_lvl+0x18c/0x250 [ 590.831458][T14769] ? show_regs_print_info+0x20/0x20 [ 590.831486][T14769] ? load_image+0x420/0x420 [ 590.831512][T14769] ? __might_sleep+0xe0/0xe0 [ 590.831537][T14769] ? __lock_acquire+0x7d80/0x7d80 [ 590.831566][T14769] should_fail_ex+0x394/0x4c0 [ 590.831598][T14769] should_failslab+0x9/0x20 [ 590.831625][T14769] slab_pre_alloc_hook+0x59/0x300 [ 590.831656][T14769] ? ramfs_init_fs_context+0x4f/0xe0 [ 590.831684][T14769] __kmem_cache_alloc_node+0x53/0x250 [ 590.831716][T14769] ? ramfs_init_fs_context+0x4f/0xe0 [ 590.831742][T14769] kmalloc_trace+0x2a/0xe0 [ 590.831771][T14769] ramfs_init_fs_context+0x4f/0xe0 [ 590.831797][T14769] alloc_fs_context+0x618/0x7a0 [ 590.831831][T14769] __se_sys_fsopen+0xa0/0x2c0 [ 590.831867][T14769] do_syscall_64+0x55/0xb0 [ 590.831892][T14769] ? clear_bhb_loop+0x40/0x90 [ 590.831918][T14769] ? clear_bhb_loop+0x40/0x90 [ 590.831947][T14769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 590.831972][T14769] RIP: 0033:0x7fdd63d9e159 [ 590.831991][T14769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.832009][T14769] RSP: 002b:00007fdd64d4e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 590.832031][T14769] RAX: ffffffffffffffda RBX: 00007fdd64025fa0 RCX: 00007fdd63d9e159 [ 590.832046][T14769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 590.832060][T14769] RBP: 00007fdd63e3506b R08: 0000000000000000 R09: 0000000000000000 [ 590.832074][T14769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.832086][T14769] R13: 00007fdd64026038 R14: 00007fdd64025fa0 R15: 00007ffca9f28b28 [ 590.832117][T14769] [ 591.010169][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.466589][T14780] loop2: detected capacity change from 0 to 8192 [ 591.599022][T14780] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 591.707254][T14780] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 591.757909][T14780] REISERFS (device loop2): using ordered data mode [ 591.766896][T14780] reiserfs: using flush barriers [ 591.847621][T14780] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 591.861026][T14792] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 591.870797][T14792] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 591.959476][T14793] vhci_hcd: xmit failed -107 [ 591.979278][T14780] REISERFS (device loop2): checking transaction log (loop2) [ 591.980406][T14792] vhci_hcd vhci_hcd.0: Device attached [ 592.045111][T14780] REISERFS (device loop2): Using r5 hash to sort names [ 592.072114][ T6000] vhci_hcd: stop threads [ 592.082372][ T6000] vhci_hcd: release socket [ 592.099749][T14780] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 592.147358][ T6000] vhci_hcd: disconnect device [ 592.178662][ T5109] vhci_hcd: vhci_device speed not set [ 593.000246][ T27] audit: type=1326 audit(1790915053.124:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14820 comm="syz.2.2869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1f19e159 code=0x7ffc0000 [ 593.138024][ T27] audit: type=1326 audit(1790915053.124:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14820 comm="syz.2.2869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1f19e159 code=0x7ffc0000 [ 593.167472][T14826] FAULT_INJECTION: forcing a failure. [ 593.167472][T14826] name failslab, interval 1, probability 0, space 0, times 0 [ 593.183462][ T27] audit: type=1326 audit(1790915053.144:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14820 comm="syz.2.2869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1f19e159 code=0x7ffc0000 [ 593.183507][ T27] audit: type=1326 audit(1790915053.144:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14820 comm="syz.2.2869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1f19e159 code=0x7ffc0000 [ 593.183546][ T27] audit: type=1326 audit(1790915053.144:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14820 comm="syz.2.2869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb1f19e159 code=0x7ffc0000 [ 593.183612][ T27] audit: type=1326 audit(1790915053.144:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14820 comm="syz.2.2869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1f19e159 code=0x7ffc0000 [ 593.183657][ T27] audit: type=1326 audit(1790915053.144:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14820 comm="syz.2.2869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1f19e159 code=0x7ffc0000 [ 593.183695][ T27] audit: type=1326 audit(1790915053.144:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14820 comm="syz.2.2869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1f19e159 code=0x7ffc0000 [ 593.183735][ T27] audit: type=1326 audit(1790915053.144:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14820 comm="syz.2.2869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1f19e159 code=0x7ffc0000 [ 593.183773][ T27] audit: type=1326 audit(1790915053.144:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14820 comm="syz.2.2869" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7feb1f19e159 code=0x7ffc0000 [ 593.367035][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.399976][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.432790][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.467661][T14826] CPU: 1 PID: 14826 Comm: syz.8.2873 Not tainted syzkaller #0 [ 593.475161][T14826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 593.485231][T14826] Call Trace: [ 593.488526][T14826] [ 593.491472][T14826] dump_stack_lvl+0x18c/0x250 [ 593.496188][T14826] ? show_regs_print_info+0x20/0x20 [ 593.501416][T14826] ? load_image+0x420/0x420 [ 593.505953][T14826] ? __might_sleep+0xe0/0xe0 [ 593.510573][T14826] ? __lock_acquire+0x7d80/0x7d80 [ 593.515643][T14826] should_fail_ex+0x394/0x4c0 [ 593.520355][T14826] should_failslab+0x9/0x20 [ 593.524889][T14826] slab_pre_alloc_hook+0x59/0x300 [ 593.529948][T14826] ? refill_pi_state_cache+0x8d/0x170 [ 593.535348][T14826] __kmem_cache_alloc_node+0x53/0x250 [ 593.540759][T14826] ? refill_pi_state_cache+0x8d/0x170 [ 593.546149][T14826] kmalloc_trace+0x2a/0xe0 [ 593.550597][T14826] refill_pi_state_cache+0x8d/0x170 [ 593.555826][T14826] futex_requeue+0x1cb/0x13c0 [ 593.560535][T14826] ? put_task_struct+0xc0/0xc0 [ 593.565326][T14826] ? net_tx_action+0x5ec/0x950 [ 593.570129][T14826] ? sched_clock_cpu+0x75/0x430 [ 593.575005][T14826] ? net_tx_action+0x5ec/0x950 [ 593.579800][T14826] ? lockdep_softirqs_on+0x32e/0x5b0 [ 593.585112][T14826] ? process_backlog+0x710/0x710 [ 593.590081][T14826] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 593.596092][T14826] do_futex+0x32b/0x3e0 [ 593.600270][T14826] ? irqtime_account_irq+0x16f/0x1c0 [ 593.605588][T14826] ? __ia32_sys_get_robust_list+0x110/0x110 [ 593.611524][T14826] __se_sys_futex+0x3a9/0x440 [ 593.616233][T14826] ? __x64_sys_futex+0xf0/0xf0 [ 593.621020][T14826] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 593.627036][T14826] ? __x64_sys_futex+0x21/0xf0 [ 593.631827][T14826] do_syscall_64+0x55/0xb0 [ 593.636271][T14826] ? clear_bhb_loop+0x40/0x90 [ 593.640983][T14826] ? clear_bhb_loop+0x40/0x90 [ 593.645693][T14826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.651625][T14826] RIP: 0033:0x7fdd63d9e159 [ 593.656067][T14826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.675698][T14826] RSP: 002b:00007fdd64d4e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 593.684137][T14826] RAX: ffffffffffffffda RBX: 00007fdd64025fa0 RCX: 00007fdd63d9e159 [ 593.692129][T14826] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000000000000000 [ 593.700125][T14826] RBP: 00007fdd63e3506b R08: 0000200000048000 R09: 0000000000000000 [ 593.708121][T14826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.716117][T14826] R13: 00007fdd64026038 R14: 00007fdd64025fa0 R15: 00007ffca9f28b28 [ 593.724128][T14826] [ 593.796612][T14839] ceph: No mds server is up or the cluster is laggy [ 593.806279][T14522] libceph: connect (1)[c::]:6789 error -101 [ 593.819228][T14522] libceph: mon0 (1)[c::]:6789 connect error [ 593.837841][T14845] binder: 14833:14845 ioctl c0306201 200000000480 returned -14 [ 594.035805][T14848] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2877'. [ 594.782860][T14872] "syz.1.2883" (14872) uses obsolete ecb(arc4) skcipher [ 594.800713][T14522] IPVS: starting estimator thread 0... [ 594.927315][T14873] IPVS: using max 21 ests per chain, 50400 per kthread [ 595.331122][T14889] ip_tables: iptables: counters copy to user failed while replacing table [ 595.807512][T14520] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 596.073044][T14520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.117307][T14520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.151064][T14520] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 596.232307][T14520] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 596.275797][T14520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.298913][ T5109] kernel write not supported for file /gssd/clntXX/gssd (pid: 5109 comm: kworker/1:3) [ 596.321747][T14520] usb 3-1: config 0 descriptor?? [ 596.816802][T14520] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 596.851912][T14520] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 596.877434][T14520] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 596.924704][T14520] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 596.951670][T14520] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 596.986201][T14520] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 596.998455][T14520] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 597.064597][T14520] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 597.138401][T14520] usb 3-1: USB disconnect, device number 17 [ 597.277945][T14935] loop9: detected capacity change from 0 to 128 [ 597.292654][T14933] fido_id[14933]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 597.348430][T14935] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 597.378989][T14935] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 597.531155][T14935] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 597.706368][T14944] loop9: detected capacity change from 0 to 256 [ 597.762053][T14944] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 599.142369][T14978] device-mapper: table: 248:2: mirror: Device lookup failure (-EBUSY) [ 599.185692][T14978] device-mapper: ioctl: error adding target to table [ 599.445489][T14986] FAULT_INJECTION: forcing a failure. [ 599.445489][T14986] name failslab, interval 1, probability 0, space 0, times 0 [ 599.482844][T14986] CPU: 1 PID: 14986 Comm: syz.9.2915 Not tainted syzkaller #0 [ 599.490371][T14986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 599.500453][T14986] Call Trace: [ 599.503755][T14986] [ 599.506708][T14986] dump_stack_lvl+0x18c/0x250 [ 599.511426][T14986] ? show_regs_print_info+0x20/0x20 [ 599.516670][T14986] ? load_image+0x420/0x420 [ 599.521212][T14986] ? __might_sleep+0xe0/0xe0 [ 599.525835][T14986] ? __lock_acquire+0x7d80/0x7d80 [ 599.530897][T14986] should_fail_ex+0x394/0x4c0 [ 599.535614][T14986] should_failslab+0x9/0x20 [ 599.540159][T14986] slab_pre_alloc_hook+0x59/0x300 [ 599.545221][T14986] ? mas_next_slot+0x910/0x980 [ 599.550021][T14986] kmem_cache_alloc+0x5a/0x2c0 [ 599.554821][T14986] ? vm_area_dup+0x27/0x270 [ 599.559357][T14986] vm_area_dup+0x27/0x270 [ 599.563715][T14986] __split_vma+0x1a8/0xc20 [ 599.568171][T14986] ? mmap_write_unlock+0x160/0x160 [ 599.573326][T14986] ? split_vma+0x8f/0x110 [ 599.577700][T14986] mprotect_fixup+0xade/0xcd0 [ 599.582430][T14986] ? change_protection+0x31e0/0x31e0 [ 599.587753][T14986] ? apparmor_file_mprotect+0xfe/0x120 [ 599.593332][T14986] ? bpf_lsm_file_mprotect+0x9/0x10 [ 599.598568][T14986] do_mprotect_pkey+0x7c3/0xcc0 [ 599.603467][T14986] ? prot_none_test+0x10/0x10 [ 599.608184][T14986] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 599.614213][T14986] __x64_sys_mprotect+0x80/0x90 [ 599.619180][T14986] do_syscall_64+0x55/0xb0 [ 599.623631][T14986] ? clear_bhb_loop+0x40/0x90 [ 599.628349][T14986] ? clear_bhb_loop+0x40/0x90 [ 599.633060][T14986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.638993][T14986] RIP: 0033:0x7f3e5bf9e159 [ 599.643438][T14986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.663081][T14986] RSP: 002b:00007f3e5cf43028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 599.671538][T14986] RAX: ffffffffffffffda RBX: 00007f3e5c225fa0 RCX: 00007f3e5bf9e159 [ 599.679542][T14986] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000004000 [ 599.687542][T14986] RBP: 00007f3e5c03506b R08: 0000000000000000 R09: 0000000000000000 [ 599.695565][T14986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.703565][T14986] R13: 00007f3e5c226038 R14: 00007f3e5c225fa0 R15: 00007fff74192228 [ 599.711581][T14986] [ 600.529299][T15007] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 600.592761][T15007] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 600.721697][T14981] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.731502][T14981] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.816053][T14975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.900843][T14981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.016007][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 602.016022][ T27] audit: type=1800 audit(1790915062.134:556): pid=15029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2931" name="c_sync" dev="configfs" ino=43549 res=0 errno=0 [ 602.031250][T14981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.397732][ T42] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 602.588025][ T42] usb 9-1: Using ep0 maxpacket: 16 [ 602.599543][ T42] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.614136][ T42] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 602.627792][ T42] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 602.636902][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.653468][ T42] usb 9-1: Product: syz [ 602.660775][ T42] usb 9-1: Manufacturer: syz [ 602.665498][ T42] usb 9-1: SerialNumber: syz [ 602.894698][T14981] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.903302][ T42] usb 9-1: 0:2 : does not exist [ 602.906772][T14981] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.920425][ T42] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 602.931487][T14981] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.943637][T14981] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.946039][ T42] usb 9-1: USB disconnect, device number 2 [ 603.015908][T14392] udevd[14392]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.524757][T15040] loop2: detected capacity change from 0 to 256 [ 603.534626][T15040] exfat: Deprecated parameter 'namecase' [ 603.543150][T15040] exfat: Deprecated parameter 'utf8' [ 603.551209][T15040] exfat: Deprecated parameter 'namecase' [ 603.576212][ T6000] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.601224][T15040] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 603.620770][ T6000] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.695096][T15040] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 603.727499][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2933'. [ 604.029658][ T6000] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.072672][ T6000] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.291993][ T6000] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.351448][ T6000] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.670139][ T6000] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.726262][ T6000] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.077394][T14497] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 605.305895][T14497] usb 3-1: Using ep0 maxpacket: 32 [ 605.350707][T14497] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 605.372332][T14497] usb 3-1: config 0 has no interface number 0 [ 605.394163][T14497] usb 3-1: config 0 interface 12 has no altsetting 0 [ 605.436353][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 605.454808][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 605.487167][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 605.489624][T14497] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 605.528030][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 605.542405][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 605.551716][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 605.604141][T14497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.685657][T14497] usb 3-1: Product: syz [ 605.727554][T14497] usb 3-1: Manufacturer: syz [ 605.744403][T15083] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 605.745932][T14497] usb 3-1: SerialNumber: syz [ 605.750944][T15083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 605.764805][T15083] vhci_hcd vhci_hcd.0: Device attached [ 605.833215][T14497] usb 3-1: config 0 descriptor?? [ 606.027638][ T5842] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 606.097432][ T5813] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 606.309609][ T5813] usb 9-1: config 0 has no interfaces? [ 606.316210][ T5813] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 606.347898][ T5813] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.387868][ T5813] usb 9-1: config 0 descriptor?? [ 606.689151][ T5109] usb 9-1: USB disconnect, device number 3 [ 606.695467][T15084] usb 49-1: recv xbuf, 0 [ 606.726541][ T5993] vhci_hcd: stop threads [ 606.758407][ T5993] vhci_hcd: release socket [ 606.783716][ T5993] vhci_hcd: disconnect device [ 607.043294][T15069] chnl_net:caif_netlink_parms(): no params data found [ 607.166451][T14497] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 607.179584][T14497] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 607.190724][T14497] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 607.201090][T14497] f81534: probe of 3-1:0.12 failed with error -71 [ 607.219396][T14497] usb 3-1: USB disconnect, device number 18 [ 607.447564][T14522] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 607.629869][ T5783] Bluetooth: hci0: command tx timeout [ 607.676910][T15069] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.677284][T14522] usb 2-1: Using ep0 maxpacket: 8 [ 607.689777][T15069] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.693473][ T8] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 607.705338][T15069] bridge_slave_0: entered allmulticast mode [ 607.739339][T15069] bridge_slave_0: entered promiscuous mode [ 607.741823][T14522] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 607.758165][T14522] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 607.771060][T14522] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 607.772492][T15069] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.784532][T14522] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 607.803187][T14522] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.837394][T15069] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.862883][T15069] bridge_slave_1: entered allmulticast mode [ 607.867668][T14522] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 607.879548][T15069] bridge_slave_1: entered promiscuous mode [ 607.918419][T14522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.940663][ T6000] hsr_slave_0: left promiscuous mode [ 607.955400][ T6000] hsr_slave_1: left promiscuous mode [ 607.961611][ T8] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 607.975659][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.988133][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.994203][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.037722][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.058455][ T8] usb 9-1: config 0 descriptor?? [ 608.064794][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.082193][ T6000] bridge_slave_1: left allmulticast mode [ 608.098148][ T6000] bridge_slave_1: left promiscuous mode [ 608.115001][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.144778][ T6000] bridge_slave_0: left allmulticast mode [ 608.160312][ T6000] bridge_slave_0: left promiscuous mode [ 608.178718][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.279795][T14522] usb 2-1: usb_control_msg returned -32 [ 608.297735][T14522] usbtmc 2-1:16.0: can't read capabilities [ 608.309820][ T6000] veth1_macvtap: left promiscuous mode [ 608.323742][ T6000] veth0_macvtap: left promiscuous mode [ 608.350725][ T6000] veth1_vlan: left promiscuous mode [ 608.356091][ T6000] veth0_vlan: left promiscuous mode [ 608.502414][T15128] FAULT_INJECTION: forcing a failure. [ 608.502414][T15128] name fail_futex, interval 1, probability 0, space 0, times 0 [ 608.519953][T15128] CPU: 0 PID: 15128 Comm: syz.2.2952 Not tainted syzkaller #0 [ 608.527455][T15128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.537531][T15128] Call Trace: [ 608.540813][T15128] [ 608.543745][T15128] dump_stack_lvl+0x18c/0x250 [ 608.548433][T15128] ? show_regs_print_info+0x20/0x20 [ 608.553638][T15128] ? load_image+0x420/0x420 [ 608.558146][T15128] ? get_user_pages_fast_only+0xa0/0xa0 [ 608.563701][T15128] should_fail_ex+0x394/0x4c0 [ 608.568391][T15128] get_futex_key+0x16f/0x1030 [ 608.573078][T15128] ? futex_setup_timer+0xc0/0xc0 [ 608.578022][T15128] futex_wake_op+0x1e8/0xd40 [ 608.582621][T15128] ? wake_up_q+0xca/0x100 [ 608.586965][T15128] ? futex_wake+0x4f0/0x4f0 [ 608.591469][T15128] ? futex_wake+0x42a/0x4f0 [ 608.595982][T15128] ? futex_wake_mark+0x150/0x150 [ 608.600925][T15128] ? lockdep_softirqs_on+0x32e/0x5b0 [ 608.606212][T15128] ? process_backlog+0x710/0x710 [ 608.611163][T15128] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 608.617176][T15128] do_futex+0x385/0x3e0 [ 608.621335][T15128] ? irqtime_account_irq+0x16f/0x1c0 [ 608.626626][T15128] ? __ia32_sys_get_robust_list+0x110/0x110 [ 608.632525][T15128] __se_sys_futex+0x3a9/0x440 [ 608.637209][T15128] ? __x64_sys_futex+0xf0/0xf0 [ 608.641981][T15128] ? __x64_sys_futex+0x21/0xf0 [ 608.646744][T15128] do_syscall_64+0x55/0xb0 [ 608.651165][T15128] ? clear_bhb_loop+0x40/0x90 [ 608.655847][T15128] ? clear_bhb_loop+0x40/0x90 [ 608.660532][T15128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 608.666425][T15128] RIP: 0033:0x7feb1f19e159 [ 608.670842][T15128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.690471][T15128] RSP: 002b:00007feb1ff81028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 608.698905][T15128] RAX: ffffffffffffffda RBX: 00007feb1f425fa0 RCX: 00007feb1f19e159 [ 608.706890][T15128] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 000020000000cffc [ 608.714868][T15128] RBP: 00007feb1f23506b R08: 0000000000000000 R09: 0000000034fffffd [ 608.722847][T15128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.730828][T15128] R13: 00007feb1f426038 R14: 00007feb1f425fa0 R15: 00007ffc2b7e67c8 [ 608.738827][T15128] [ 608.929278][T15130] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 609.133244][T14522] usb 2-1: USB disconnect, device number 28 [ 609.698177][ T5783] Bluetooth: hci0: command tx timeout [ 609.746941][ T8] usb 9-1: Cannot set autoneg [ 609.753809][ T8] MOSCHIP usb-ethernet driver: probe of 9-1:0.0 failed with error -71 [ 609.798677][ T8] usb 9-1: USB disconnect, device number 4 [ 610.086295][ T6000] team0 (unregistering): Port device team_slave_1 removed [ 610.186662][ T6000] team0 (unregistering): Port device team_slave_0 removed [ 610.259641][ T6000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.348458][ T6000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.618270][ T8] IPVS: starting estimator thread 0... [ 610.739382][T15142] IPVS: using max 18 ests per chain, 43200 per kthread [ 611.158688][ T6000] bond0 (unregistering): Released all slaves [ 611.350748][T15134] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 611.456149][T15069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.500261][T15069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.714669][T15069] team0: Port device team_slave_0 added [ 611.769739][T15069] team0: Port device team_slave_1 added [ 611.777398][ T5783] Bluetooth: hci0: command tx timeout [ 612.038236][T15069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.045234][T15069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.198120][T15069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.270513][T15069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.285961][T15069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.352034][T15069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.544099][T15069] hsr_slave_0: entered promiscuous mode [ 612.556567][T15069] hsr_slave_1: entered promiscuous mode [ 612.573228][T15069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.584210][T15069] Cannot create hsr debugfs directory [ 613.586084][T15184] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 613.676024][T15188] loop8: detected capacity change from 0 to 4096 [ 613.694074][T15188] EXT4-fs: inline encryption not supported [ 613.755173][T15188] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 613.796523][T15188] EXT4-fs (loop8): Test dummy encryption mode enabled [ 613.857470][ T5783] Bluetooth: hci0: command tx timeout [ 613.862242][T15188] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 613.885552][T15188] System zones: 0-5 [ 613.902694][T15188] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.090767][T14391] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.126579][T15170] loop2: detected capacity change from 0 to 32768 [ 614.230607][T15170] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 614.449440][T15170] XFS (loop2): Ending clean mount [ 614.694496][T15208] loop8: detected capacity change from 0 to 256 [ 614.777328][T15208] exFAT-fs (loop8): bogus number of FAT structure [ 614.783802][T15208] exFAT-fs (loop8): failed to read boot sector [ 614.868414][T15208] exFAT-fs (loop8): failed to recognize exfat type [ 615.035120][ T5773] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 615.106573][T15069] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 615.123316][T15069] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 615.156168][T15069] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 615.195407][T15069] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 615.285163][T15214] loop8: detected capacity change from 0 to 512 [ 615.337824][T15215] netlink: 'syz.1.2973': attribute type 4 has an invalid length. [ 615.340731][T15214] EXT4-fs: Ignoring removed nobh option [ 615.392203][T15212] netlink: 'syz.1.2973': attribute type 4 has an invalid length. [ 615.397207][T15214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 615.517939][T15214] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.582716][T15214] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 615.843101][T15069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.933132][T15069] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.950888][T14391] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.040043][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.047244][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.109728][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.116897][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.445396][T15069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.634513][T15069] veth0_vlan: entered promiscuous mode [ 616.678538][T15069] veth1_vlan: entered promiscuous mode [ 616.825711][T15069] veth0_macvtap: entered promiscuous mode [ 616.949710][T15069] veth1_macvtap: entered promiscuous mode [ 617.041870][T15069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.053934][T15069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.093102][T15069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.128417][T15069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.155057][T15069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.170451][T15069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.186246][T15069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.202708][T15069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.235039][T15069] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.264231][T15069] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.286876][T15069] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.318489][T15069] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.561017][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.594176][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.709826][T14607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.752473][T14607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.922415][T15290] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 618.993794][T15290] pci 0000:00:07.0: [1af4:1005] type 00 class 0x00ff00 [ 619.026373][T15290] pci 0000:00:07.0: BAR 0 [io 0xc0a0-0xc0bf] [ 619.054150][T15290] pci 0000:00:07.0: BAR 1 [mem 0xfe802000-0xfe80203f] [ 619.256732][T15290] pci 0000:00:07.0: BAR 1 [mem 0xc0000000-0xc000003f]: assigned [ 619.300534][T15290] pci 0000:00:07.0: BAR 0 [io 0x1000-0x101f]: assigned [ 619.481698][T15290] virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver [ 620.011970][T15303] loop0: detected capacity change from 0 to 1024 [ 620.083573][T15303] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 620.190360][T15303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.294044][T15310] loop8: detected capacity change from 0 to 256 [ 620.528213][T15310] loop8: detected capacity change from 256 to 0 [ 620.551199][ C1] I/O error, dev loop8, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.560620][T15317] FAT-fs (loop8): Directory bread(block 3) failed [ 620.594437][T15317] syz.8.2996: attempt to access beyond end of device [ 620.594437][T15317] loop8: rw=0, sector=12, nr_sectors = 4 limit=0 [ 620.640799][T15317] FAT-fs (loop8): Directory bread(block 3) failed [ 620.661857][T15317] syz.8.2996: attempt to access beyond end of device [ 620.661857][T15317] loop8: rw=0, sector=12, nr_sectors = 4 limit=0 [ 620.698177][T15317] FAT-fs (loop8): Directory bread(block 3) failed [ 620.808471][T14391] syz-executor: attempt to access beyond end of device [ 620.808471][T14391] loop8: rw=0, sector=12, nr_sectors = 4 limit=0 [ 620.872293][T14391] FAT-fs (loop8): Directory bread(block 3) failed [ 620.947041][T14391] syz-executor: attempt to access beyond end of device [ 620.947041][T14391] loop8: rw=0, sector=0, nr_sectors = 4 limit=0 [ 620.968888][T15069] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.980754][T14391] FAT-fs (loop8): unable to read boot sector to mark fs as dirty [ 622.336894][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'. [ 622.389847][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3001'. [ 622.486423][T15354] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.498623][T15354] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.510690][T15354] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.522639][T15354] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.669922][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'. [ 622.713308][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3001'. [ 622.946599][T15375] syz_tun: entered allmulticast mode [ 623.000911][T15375] pim6reg: entered allmulticast mode [ 623.080018][T15375] pim6reg: left allmulticast mode [ 623.098430][T15375] syz_tun: left allmulticast mode [ 624.207520][ T970] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 624.431525][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.438049][ T970] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 624.438167][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.464240][ T970] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 513, setting to 64 [ 624.552911][ T970] usb 3-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 624.630092][ T970] usb 3-1: config 1 interface 0 has no altsetting 0 [ 624.666041][ T970] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 624.679443][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 624.708589][ T970] usb 3-1: SerialNumber: syz [ 624.755841][T15401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 624.767441][T15401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 625.093494][T15401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 625.152052][T15401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 625.720526][ T970] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 626.676933][T14497] usb 3-1: USB disconnect, device number 19 [ 626.712460][T14497] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 631.082699][T15597] FAULT_INJECTION: forcing a failure. [ 631.082699][T15597] name failslab, interval 1, probability 0, space 0, times 0 [ 631.187462][T15597] CPU: 0 PID: 15597 Comm: syz.1.3027 Not tainted syzkaller #0 [ 631.195001][T15597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 631.205079][T15597] Call Trace: [ 631.208381][T15597] [ 631.211331][T15597] dump_stack_lvl+0x18c/0x250 [ 631.216050][T15597] ? show_regs_print_info+0x20/0x20 [ 631.221371][T15597] ? load_image+0x420/0x420 [ 631.225904][T15597] ? __might_sleep+0xe0/0xe0 [ 631.230526][T15597] ? __lock_acquire+0x7d80/0x7d80 [ 631.235595][T15597] should_fail_ex+0x394/0x4c0 [ 631.240314][T15597] should_failslab+0x9/0x20 [ 631.244843][T15597] slab_pre_alloc_hook+0x59/0x300 [ 631.249874][T15597] ? free_vm_area+0x50/0x50 [ 631.254378][T15597] ? bpf_prog_alloc_no_stats+0xd7/0x430 [ 631.259927][T15597] __kmem_cache_alloc_node+0x53/0x250 [ 631.265307][T15597] ? bpf_prog_alloc_no_stats+0xd7/0x430 [ 631.270849][T15597] kmalloc_trace+0x2a/0xe0 [ 631.275266][T15597] bpf_prog_alloc_no_stats+0xd7/0x430 [ 631.280637][T15597] bpf_prog_alloc+0x3d/0x1a0 [ 631.285222][T15597] ? bpf_prepare_filter+0x12b1/0x1320 [ 631.290601][T15597] bpf_prog_create_from_user+0xa6/0x420 [ 631.296325][T15597] ? seccomp_notify_detach+0x220/0x220 [ 631.301788][T15597] do_seccomp+0x794/0xdc0 [ 631.306115][T15597] ? __irq_exit_rcu+0xd3/0x190 [ 631.310879][T15597] ? prctl_set_seccomp+0x60/0x60 [ 631.315814][T15597] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 631.321799][T15597] ? lockdep_hardirqs_on+0x98/0x150 [ 631.326997][T15597] do_syscall_64+0x55/0xb0 [ 631.331416][T15597] ? clear_bhb_loop+0x40/0x90 [ 631.336092][T15597] ? clear_bhb_loop+0x40/0x90 [ 631.340779][T15597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.346676][T15597] RIP: 0033:0x7f298679e159 [ 631.351088][T15597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.370721][T15597] RSP: 002b:00007f2987599028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 631.379134][T15597] RAX: ffffffffffffffda RBX: 00007f2986a25fa0 RCX: 00007f298679e159 [ 631.387110][T15597] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 631.395087][T15597] RBP: 00007f298683506b R08: 0000000000000000 R09: 0000000000000000 [ 631.403071][T15597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.411047][T15597] R13: 00007f2986a26038 R14: 00007f2986a25fa0 R15: 00007ffe288125b8 [ 631.419036][T15597] [ 632.402957][T15635] netlink: 'syz.2.3033': attribute type 15 has an invalid length. [ 632.460164][T15635] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 632.472297][T15635] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 632.484422][T15635] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 632.496362][T15635] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 632.595130][T15635] netlink: 'syz.2.3033': attribute type 15 has an invalid length. [ 633.305203][T15653] loop2: detected capacity change from 0 to 1024 [ 633.371035][T15653] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 633.405195][T15658] FAULT_INJECTION: forcing a failure. [ 633.405195][T15658] name failslab, interval 1, probability 0, space 0, times 0 [ 633.456870][T15658] CPU: 0 PID: 15658 Comm: syz.0.3036 Not tainted syzkaller #0 [ 633.464386][T15658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 633.474466][T15658] Call Trace: [ 633.477766][T15658] [ 633.480719][T15658] dump_stack_lvl+0x18c/0x250 [ 633.485434][T15658] ? show_regs_print_info+0x20/0x20 [ 633.490666][T15658] ? load_image+0x420/0x420 [ 633.495211][T15658] ? __might_sleep+0xe0/0xe0 [ 633.499838][T15658] ? __lock_acquire+0x7d80/0x7d80 [ 633.504896][T15658] should_fail_ex+0x394/0x4c0 [ 633.509608][T15658] should_failslab+0x9/0x20 [ 633.514130][T15658] slab_pre_alloc_hook+0x59/0x300 [ 633.519183][T15658] ? __lock_acquire+0x7d80/0x7d80 [ 633.524236][T15658] ? allocate_file_region_entries+0x218/0x600 [ 633.530328][T15658] __kmem_cache_alloc_node+0x53/0x250 [ 633.535743][T15658] ? allocate_file_region_entries+0x218/0x600 [ 633.541839][T15658] kmalloc_trace+0x2a/0xe0 [ 633.546292][T15658] allocate_file_region_entries+0x218/0x600 [ 633.552218][T15658] ? folio_lock+0x190/0x190 [ 633.556729][T15658] region_chg+0x30a/0x3d0 [ 633.561071][T15658] __vma_reservation_common+0x331/0x6e0 [ 633.566624][T15658] alloc_hugetlb_folio+0x17d/0x1660 [ 633.571827][T15658] ? filemap_get_entry+0x375/0x3f0 [ 633.576947][T15658] ? page_cache_prev_miss+0x390/0x390 [ 633.582332][T15658] ? folio_isolate_hugetlb+0x2f0/0x2f0 [ 633.587799][T15658] ? mark_lock+0x94/0x320 [ 633.592129][T15658] ? read_lock_is_recursive+0x20/0x20 [ 633.597499][T15658] ? mutex_lock_nested+0x20/0x20 [ 633.602433][T15658] ? __lock_acquire+0x1336/0x7d80 [ 633.607470][T15658] hugetlb_fault+0xaf9/0x2b60 [ 633.612165][T15658] ? hugetlb_fault_mutex_hash+0xc0/0xc0 [ 633.617717][T15658] ? mark_lock+0x94/0x320 [ 633.622054][T15658] handle_mm_fault+0x31c1/0x4a50 [ 633.626990][T15658] ? handle_mm_fault+0xe6/0x4a50 [ 633.631923][T15658] ? __up_read+0x2b8/0x6b0 [ 633.636332][T15658] ? __lock_acquire+0x7d80/0x7d80 [ 633.641368][T15658] ? numa_migrate_prep+0x350/0x350 [ 633.646472][T15658] ? do_raw_spin_unlock+0x121/0x230 [ 633.651676][T15658] ? hugetlb_follow_page_mask+0x7e5/0x1640 [ 633.657496][T15658] __get_user_pages+0x604/0x1580 [ 633.662452][T15658] ? populate_vma_page_range+0x380/0x380 [ 633.668090][T15658] populate_vma_page_range+0x2c1/0x380 [ 633.673552][T15658] ? fixup_user_fault+0x750/0x750 [ 633.678578][T15658] ? down_read+0x1ac/0x2e0 [ 633.682997][T15658] __mm_populate+0x260/0x390 [ 633.687598][T15658] ? faultin_page_range+0x8a0/0x8a0 [ 633.692801][T15658] ? up_write+0x1be/0x410 [ 633.697134][T15658] do_mlock+0x5d2/0x740 [ 633.701319][T15658] ? lru_gen_add_folio+0xe00/0xe00 [ 633.706442][T15658] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 633.712429][T15658] ? lock_chain_count+0x20/0x20 [ 633.717286][T15658] ? syscall_enter_from_user_mode+0x25/0x80 [ 633.723181][T15658] __x64_sys_mlock+0x60/0x70 [ 633.727775][T15658] do_syscall_64+0x55/0xb0 [ 633.732199][T15658] ? clear_bhb_loop+0x40/0x90 [ 633.736879][T15658] ? clear_bhb_loop+0x40/0x90 [ 633.741565][T15658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 633.747460][T15658] RIP: 0033:0x7fe45ed9e159 [ 633.751894][T15658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.771505][T15658] RSP: 002b:00007fe45fcb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 633.779919][T15658] RAX: ffffffffffffffda RBX: 00007fe45f025fa0 RCX: 00007fe45ed9e159 [ 633.787890][T15658] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 633.795944][T15658] RBP: 00007fe45ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 633.803912][T15658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.811876][T15658] R13: 00007fe45f026038 R14: 00007fe45f025fa0 R15: 00007ffffced9178 [ 633.819856][T15658] [ 633.967935][T15653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.077974][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.972213][T15737] netlink: 'syz.2.3046': attribute type 10 has an invalid length. [ 637.048241][T15737] syz_tun: entered promiscuous mode [ 637.255665][T15737] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 637.333271][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 637.349174][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 637.358570][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 637.370930][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 637.379412][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 637.388980][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 637.948062][T15745] chnl_net:caif_netlink_parms(): no params data found [ 638.173450][T15745] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.203611][T15745] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.235133][T15745] bridge_slave_0: entered allmulticast mode [ 638.242919][T15745] bridge_slave_0: entered promiscuous mode [ 638.277941][T15745] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.285077][T15745] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.322332][T15745] bridge_slave_1: entered allmulticast mode [ 638.344747][T15745] bridge_slave_1: entered promiscuous mode [ 638.512532][T15745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.555652][T15745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.674618][T15745] team0: Port device team_slave_0 added [ 638.709048][T15745] team0: Port device team_slave_1 added [ 638.805671][T15745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.825057][T15745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.887130][T15745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.983005][T15745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.006473][T15745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.072629][T15745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.233446][T15745] hsr_slave_0: entered promiscuous mode [ 639.263984][T15745] hsr_slave_1: entered promiscuous mode [ 639.284640][T15745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 639.297976][T15745] Cannot create hsr debugfs directory [ 639.459795][ T5784] Bluetooth: hci3: command tx timeout [ 640.215303][ T970] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 640.468704][ T970] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 640.545853][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.900092][ T970] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 641.401840][T14520] usb 3-1: USB disconnect, device number 20 [ 641.410214][T15793] cdc_acm 3-1:1.0: acm_port_activate - usb_submit_urb(ctrl irq) failed [ 641.547977][ T5784] Bluetooth: hci3: command tx timeout [ 641.886985][T15745] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 641.929011][T15745] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 641.951545][T15745] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 642.003025][T15745] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 642.302311][T15745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.384996][T15745] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.432898][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.440091][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.504569][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.511757][ T6002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.685790][T15745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 642.718020][T15745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 642.885519][T15745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.033723][T15745] veth0_vlan: entered promiscuous mode [ 643.095251][T15745] veth1_vlan: entered promiscuous mode [ 643.186574][T15745] veth0_macvtap: entered promiscuous mode [ 643.227925][T15745] veth1_macvtap: entered promiscuous mode [ 643.291799][T15745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.327156][T15745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.337008][T15745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.386020][T15745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.425856][T15745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.464535][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3062'. [ 643.472826][T15745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.507358][T15745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.545355][T15745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.577443][T15745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.600219][T15745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.627938][ T5784] Bluetooth: hci3: command tx timeout [ 643.644601][T15745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.687591][T15745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.721854][T15745] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.747158][T15745] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.755884][T15745] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.797225][T15745] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.076484][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.120055][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.232799][ T6002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.261352][ T6002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.697594][ T5784] Bluetooth: hci3: command tx timeout [ 645.857548][T15921] gadgetfs: bound to dummy_udc driver [ 646.295521][T15936] FAULT_INJECTION: forcing a failure. [ 646.295521][T15936] name failslab, interval 1, probability 0, space 0, times 0 [ 646.330226][T15936] CPU: 1 PID: 15936 Comm: syz.4.3077 Not tainted syzkaller #0 [ 646.337734][T15936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.347980][T15936] Call Trace: [ 646.351275][T15936] [ 646.354219][T15936] dump_stack_lvl+0x18c/0x250 [ 646.358929][T15936] ? show_regs_print_info+0x20/0x20 [ 646.364150][T15936] ? load_image+0x420/0x420 [ 646.368683][T15936] ? __might_sleep+0xe0/0xe0 [ 646.373298][T15936] ? __lock_acquire+0x7d80/0x7d80 [ 646.378350][T15936] should_fail_ex+0x394/0x4c0 [ 646.383065][T15936] should_failslab+0x9/0x20 [ 646.387598][T15936] slab_pre_alloc_hook+0x59/0x300 [ 646.392650][T15936] ? security_sk_alloc+0x4b/0x130 [ 646.397696][T15936] ? security_sk_alloc+0x4b/0x130 [ 646.402735][T15936] __kmem_cache_alloc_node+0x53/0x250 [ 646.408138][T15936] ? security_sk_alloc+0x4b/0x130 [ 646.413188][T15936] __kmalloc+0xa7/0x240 [ 646.417367][T15936] ? sk_prot_alloc+0xe7/0x210 [ 646.422064][T15936] security_sk_alloc+0x4b/0x130 [ 646.426943][T15936] sk_prot_alloc+0x101/0x210 [ 646.431560][T15936] ? sk_alloc+0x24/0x350 [ 646.435837][T15936] sk_alloc+0x3a/0x350 [ 646.439935][T15936] ? can_get_proto+0x234/0x280 [ 646.444723][T15936] can_create+0x1d2/0x4e0 [ 646.449074][T15936] __sock_create+0x49e/0x940 [ 646.453697][T15936] __sys_socket+0xd7/0x1b0 [ 646.458140][T15936] __x64_sys_socket+0x7a/0x90 [ 646.462842][T15936] do_syscall_64+0x55/0xb0 [ 646.467288][T15936] ? clear_bhb_loop+0x40/0x90 [ 646.471996][T15936] ? clear_bhb_loop+0x40/0x90 [ 646.476701][T15936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.482625][T15936] RIP: 0033:0x7f5020b9e159 [ 646.487059][T15936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.506682][T15936] RSP: 002b:00007f50219ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 646.515116][T15936] RAX: ffffffffffffffda RBX: 00007f5020e25fa0 RCX: 00007f5020b9e159 [ 646.523109][T15936] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 646.531106][T15936] RBP: 00007f5020c3506b R08: 0000000000000000 R09: 0000000000000000 [ 646.539100][T15936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.547086][T15936] R13: 00007f5020e26038 R14: 00007f5020e25fa0 R15: 00007ffd9c35c608 [ 646.555096][T15936] [ 646.870560][T15944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3079'. [ 646.937610][T15944] hsr_slave_0: left promiscuous mode [ 646.973621][T15944] hsr_slave_1: left promiscuous mode [ 647.091904][T15949] loop2: detected capacity change from 0 to 512 [ 647.274077][T15949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.387618][T15949] ext4 filesystem being mounted at /649/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.805791][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.149397][T16003] FAULT_INJECTION: forcing a failure. [ 649.149397][T16003] name failslab, interval 1, probability 0, space 0, times 0 [ 649.212015][T16003] CPU: 0 PID: 16003 Comm: syz.1.3091 Not tainted syzkaller #0 [ 649.219549][T16003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 649.229624][T16003] Call Trace: [ 649.232923][T16003] [ 649.235876][T16003] dump_stack_lvl+0x18c/0x250 [ 649.240593][T16003] ? show_regs_print_info+0x20/0x20 [ 649.245825][T16003] ? load_image+0x420/0x420 [ 649.250361][T16003] ? __lock_acquire+0x7d80/0x7d80 [ 649.255415][T16003] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 649.261611][T16003] should_fail_ex+0x394/0x4c0 [ 649.266320][T16003] should_failslab+0x9/0x20 [ 649.270854][T16003] slab_pre_alloc_hook+0x59/0x300 [ 649.275921][T16003] kmem_cache_alloc_lru+0x4d/0x2b0 [ 649.281063][T16003] ? __d_alloc+0x31/0x710 [ 649.285413][T16003] ? read_lock_is_recursive+0x20/0x20 [ 649.290816][T16003] __d_alloc+0x31/0x710 [ 649.294992][T16003] ? hashlen_string+0xb8/0x110 [ 649.299788][T16003] d_alloc_name+0xbb/0x320 [ 649.304233][T16003] ? down_write+0x16e/0x200 [ 649.308763][T16003] ? d_alloc_pseudo+0x70/0x70 [ 649.313466][T16003] ? proc_setup_self+0x206/0x2c0 [ 649.318440][T16003] proc_setup_thread_self+0xaf/0x2c0 [ 649.323751][T16003] ? proc_fill_super+0x518/0x730 [ 649.328693][T16003] ? proc_reconfigure+0x370/0x370 [ 649.333717][T16003] get_tree_nodev+0xb5/0x140 [ 649.338305][T16003] vfs_get_tree+0x8c/0x280 [ 649.342719][T16003] do_new_mount+0x24a/0xa40 [ 649.347228][T16003] __se_sys_mount+0x2e7/0x3d0 [ 649.351912][T16003] ? __x64_sys_mount+0xc0/0xc0 [ 649.356679][T16003] ? lockdep_hardirqs_on+0x98/0x150 [ 649.361876][T16003] ? __x64_sys_mount+0x20/0xc0 [ 649.366644][T16003] do_syscall_64+0x55/0xb0 [ 649.371103][T16003] ? clear_bhb_loop+0x40/0x90 [ 649.375783][T16003] ? clear_bhb_loop+0x40/0x90 [ 649.380464][T16003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.386363][T16003] RIP: 0033:0x7f298679e159 [ 649.390778][T16003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.410387][T16003] RSP: 002b:00007f2987599028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 649.418810][T16003] RAX: ffffffffffffffda RBX: 00007f2986a25fa0 RCX: 00007f298679e159 [ 649.426782][T16003] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 649.434749][T16003] RBP: 00007f298683506b R08: 0000000000000000 R09: 0000000000000000 [ 649.442714][T16003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.450684][T16003] R13: 00007f2986a26038 R14: 00007f2986a25fa0 R15: 00007ffe288125b8 [ 649.458853][T16003] [ 649.566895][T15951] loop0: detected capacity change from 0 to 32768 [ 649.675288][T15951] JBD2: Ignoring recovery information on journal [ 649.772650][T15951] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 649.867841][T16003] proc_fill_super: can't allocate /proc/thread-self [ 650.759107][T15069] ocfs2: Unmounting device (7,0) on (node local) [ 650.836809][T16045] loop4: detected capacity change from 0 to 128 [ 650.916802][T16045] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 650.940384][T16045] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 651.348549][T15745] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 651.514679][T16055] loop4: detected capacity change from 0 to 512 [ 651.556702][T16055] EXT4-fs (loop4): orphan cleanup on readonly fs [ 651.574414][T16055] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #4: comm syz.4.3101: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 651.737416][T16055] EXT4-fs error (device loop4): ext4_quota_enable:7147: comm syz.4.3101: Bad quota inode: 4, type: 1 [ 651.768900][T16055] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 651.812837][T16055] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 651.838952][T16055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 652.012854][T15745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.536336][ T27] audit: type=1804 audit(1790915112.654:557): pid=16080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3105" name="/newroot/652/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1110 res=1 errno=0 [ 653.027534][T16081] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 653.618787][ T27] audit: type=1326 audit(1790915113.724:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16105 comm="syz.0.3108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45ed9e159 code=0x7ffc0000 [ 653.739730][ T27] audit: type=1326 audit(1790915113.724:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16105 comm="syz.0.3108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45ed9e159 code=0x7ffc0000 [ 653.746828][T16108] loop0: detected capacity change from 0 to 1024 [ 653.827433][ T27] audit: type=1326 audit(1790915113.764:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16105 comm="syz.0.3108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45ed9e159 code=0x7ffc0000 [ 653.902210][T16108] hfsplus: invalid secondary volume header [ 653.989527][ T27] audit: type=1326 audit(1790915113.764:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16105 comm="syz.0.3108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45ed9e159 code=0x7ffc0000 [ 653.997501][T16108] hfsplus: unable to find HFS+ superblock [ 654.098293][ T27] audit: type=1326 audit(1790915113.774:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16105 comm="syz.0.3108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe45ed9e159 code=0x7ffc0000 [ 654.208204][ T27] audit: type=1326 audit(1790915113.774:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16105 comm="syz.0.3108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe45ed9dec2 code=0x7ffc0000 [ 654.337477][ T27] audit: type=1326 audit(1790915113.814:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16105 comm="syz.0.3108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe45ed5e98e code=0x7ffc0000 [ 654.468828][T16118] loop2: detected capacity change from 0 to 512 [ 654.473488][ T27] audit: type=1326 audit(1790915113.834:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16105 comm="syz.0.3108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe45ed9df87 code=0x7ffc0000 [ 654.587251][ T27] audit: type=1326 audit(1790915113.864:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16105 comm="syz.0.3108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe45ed5e98e code=0x7ffc0000 [ 654.775564][T16118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.891060][T16118] ext4 filesystem being mounted at /655/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 655.850008][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.441070][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3114'. [ 656.985703][T16152] team0: Port device team_slave_1 removed [ 657.068822][T16169] device-mapper: dirty region log: unrecognised sync argument to dirty region log: n [ 657.210916][T16169] device-mapper: table: 248:3: mirror: Error creating mirror dirty log (-EINVAL) [ 657.302685][T16169] device-mapper: ioctl: error adding target to table [ 657.849580][T16183] loop0: detected capacity change from 0 to 164 [ 657.967441][T15771] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 658.080402][T16188] loop4: detected capacity change from 0 to 256 [ 658.227374][T16188] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 659.197410][ T970] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 659.313348][T16183] loop0: detected capacity change from 0 to 256 [ 659.353625][T16183] exFAT-fs (loop0): bogus fat length [ 659.371437][T16183] exFAT-fs (loop0): failed to read boot sector [ 659.390369][T16183] exFAT-fs (loop0): failed to recognize exfat type [ 659.437398][ T970] usb 3-1: Using ep0 maxpacket: 32 [ 659.494273][ T970] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 659.570783][ T970] usb 3-1: config 0 has no interface number 0 [ 659.610184][ T970] usb 3-1: config 0 interface 12 has no altsetting 0 [ 659.663367][ T970] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 659.706626][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.758367][T16223] netlink: 'syz.4.3131': attribute type 30 has an invalid length. [ 659.777684][ T970] usb 3-1: Product: syz [ 659.783502][ T970] usb 3-1: Manufacturer: syz [ 659.792916][T16223] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.802785][T16223] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.811999][T16223] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.820568][ T970] usb 3-1: SerialNumber: syz [ 659.820761][T16223] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.890795][ T970] usb 3-1: config 0 descriptor?? [ 659.915011][T16223] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.924321][T16223] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.934218][T16223] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.943346][T16223] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.948127][T16244] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 661.283219][ T970] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 661.312757][ T970] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 661.368323][ T970] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 661.457694][ T970] f81534: probe of 3-1:0.12 failed with error -71 [ 661.608130][ T970] usb 3-1: USB disconnect, device number 21 [ 662.395626][T16253] loop4: detected capacity change from 0 to 131072 [ 662.408093][T16253] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 662.416219][T16253] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 662.426982][T16253] F2FS-fs (loop4): invalid crc value [ 662.471112][T16253] F2FS-fs (loop4): Found nat_bits in checkpoint [ 662.542933][T16253] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 662.550148][T16253] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 663.265228][T16273] netlink: 'syz.1.3142': attribute type 10 has an invalid length. [ 663.400424][T16273] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 663.763588][T16281] loop2: detected capacity change from 0 to 512 [ 663.892236][T16281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.967389][T16287] Set syz1 is full, maxelem 2 reached [ 664.555846][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.972022][T16307] gadgetfs: bound to dummy_udc driver [ 666.203203][T16324] loop4: detected capacity change from 0 to 32768 [ 666.316433][T16324] JBD2: Ignoring recovery information on journal [ 666.335743][T16324] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 666.345552][T16324] JBD2: bad block at offset 32 [ 666.424817][T16324] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 666.539607][T16324] ocfs2: Unmounting device (7,4) on (node local) [ 669.752602][T16428] all: renamed from lo (while UP) [ 669.995516][T16429] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.087494][T16429] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.413113][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3173'. [ 670.426295][T16434] clocksource: Switched to clocksource acpi_pm [ 670.444191][T16434] clocksource: Switched to clocksource tsc [ 671.686581][T16440] loop4: detected capacity change from 0 to 40427 [ 671.717811][T16440] F2FS-fs (loop4): invalid crc value [ 671.741648][T16440] F2FS-fs (loop4): Found nat_bits in checkpoint [ 672.004311][T16440] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 672.099257][T16408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 672.143219][T16440] syz.4.3176: attempt to access beyond end of device [ 672.143219][T16440] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 672.297072][T16440] syz.4.3176: attempt to access beyond end of device [ 672.297072][T16440] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 672.413963][T15745] syz-executor: attempt to access beyond end of device [ 672.413963][T15745] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 672.487037][T15745] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 673.529649][T16494] loop4: detected capacity change from 0 to 512 [ 673.577613][T16494] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 673.647592][T16494] EXT4-fs (loop4): 1 truncate cleaned up [ 673.654549][T16494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.097614][ T970] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 674.327438][ T970] usb 2-1: Using ep0 maxpacket: 16 [ 674.360621][ T970] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.405762][ T970] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 674.492540][ T970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 674.511910][T15745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.517418][ T970] usb 2-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.00 [ 674.564819][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.611521][ T970] usb 2-1: config 0 descriptor?? [ 674.747601][T14520] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 674.775715][ T6002] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.003277][T14520] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.027466][T14520] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 675.070060][ T6002] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.076905][T14520] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 675.148209][ T970] input: HID 045e:00dc as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:00DC.0023/input/input51 [ 675.169407][T14520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 675.192303][T14520] usb 3-1: SerialNumber: syz [ 675.386447][ T970] microsoft 0003:045E:00DC.0023: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 045e:00dc] on usb-dummy_hcd.1-1/input0 [ 675.420894][ T6002] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.617336][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 675.627661][ C0] EXT4-fs (loop1): initial error at time 1790914828: ext4_iget_extra_inode:4752: inode 15 [ 675.641631][ C0] EXT4-fs (loop1): last error at time 1790914828: ext4_orphan_get:1413 [ 675.700982][T14520] usb 3-1: 0:2 : does not exist [ 675.833155][ T6002] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.008962][T14520] usb 3-1: USB disconnect, device number 22 [ 676.028823][T16522] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 676.473391][T14522] usb 2-1: USB disconnect, device number 29 [ 676.687014][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 676.701273][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 676.744495][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 676.760102][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 676.768007][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 676.776864][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 677.896465][T16527] chnl_net:caif_netlink_parms(): no params data found [ 678.375754][T16527] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.390376][T16527] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.407551][T16527] bridge_slave_0: entered allmulticast mode [ 678.415534][T16527] bridge_slave_0: entered promiscuous mode [ 678.440432][T16527] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.456320][T16527] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.464007][T16527] bridge_slave_1: entered allmulticast mode [ 678.478103][T16527] bridge_slave_1: entered promiscuous mode [ 678.589892][T16527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.781141][T16527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.819342][ T5784] Bluetooth: hci3: command tx timeout [ 679.005939][T16527] team0: Port device team_slave_0 added [ 679.030669][T16527] team0: Port device team_slave_1 added [ 679.228831][T16580] FAULT_INJECTION: forcing a failure. [ 679.228831][T16580] name failslab, interval 1, probability 0, space 0, times 0 [ 679.296021][T16527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.297671][T16580] CPU: 0 PID: 16580 Comm: syz.1.3198 Not tainted syzkaller #0 [ 679.310484][T16580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 679.320561][T16580] Call Trace: [ 679.320956][T16527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.323836][T16580] [ 679.352653][T16580] dump_stack_lvl+0x18c/0x250 [ 679.357370][T16580] ? show_regs_print_info+0x20/0x20 [ 679.362602][T16580] ? load_image+0x420/0x420 [ 679.367134][T16580] ? __lock_acquire+0x7d80/0x7d80 [ 679.372201][T16580] should_fail_ex+0x394/0x4c0 [ 679.376901][T16580] should_failslab+0x9/0x20 [ 679.381425][T16580] slab_pre_alloc_hook+0x59/0x300 [ 679.386454][T16580] ? alloc_ucounts+0x159/0x4c0 [ 679.391214][T16580] __kmem_cache_alloc_node+0x53/0x250 [ 679.396587][T16580] ? alloc_ucounts+0x159/0x4c0 [ 679.401345][T16580] kmalloc_trace+0x2a/0xe0 [ 679.405761][T16580] alloc_ucounts+0x159/0x4c0 [ 679.410343][T16580] ? safesetid_task_fix_setuid+0xc6/0x9e0 [ 679.416067][T16580] set_cred_ucounts+0x10d/0x1b0 [ 679.420922][T16580] __sys_setuid+0x2bc/0x580 [ 679.425432][T16580] do_syscall_64+0x55/0xb0 [ 679.429852][T16580] ? clear_bhb_loop+0x40/0x90 [ 679.434528][T16580] ? clear_bhb_loop+0x40/0x90 [ 679.439209][T16580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.445106][T16580] RIP: 0033:0x7f298679e159 [ 679.449522][T16580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.469130][T16580] RSP: 002b:00007f2987599028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 679.477554][T16580] RAX: ffffffffffffffda RBX: 00007f2986a25fa0 RCX: 00007f298679e159 [ 679.485521][T16580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 679.493488][T16580] RBP: 00007f298683506b R08: 0000000000000000 R09: 0000000000000000 [ 679.501452][T16580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.509416][T16580] R13: 00007f2986a26038 R14: 00007f2986a25fa0 R15: 00007ffe288125b8 [ 679.517408][T16580] [ 679.547258][T16527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.569548][T16527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.576526][T16527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.602569][T16527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.652893][T16527] hsr_slave_0: entered promiscuous mode [ 679.692528][T16527] hsr_slave_1: entered promiscuous mode [ 679.698962][T16527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 679.706538][T16527] Cannot create hsr debugfs directory [ 679.710040][T16590] loop2: detected capacity change from 0 to 256 [ 679.778543][ T6002] hsr_slave_0: left promiscuous mode [ 679.818432][ T6002] hsr_slave_1: left promiscuous mode [ 679.844652][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.876787][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.929537][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.936980][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.998101][ T6002] bridge_slave_1: left allmulticast mode [ 680.003809][ T6002] bridge_slave_1: left promiscuous mode [ 680.027908][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.063227][ T6002] bridge_slave_0: left allmulticast mode [ 680.070717][ T6002] bridge_slave_0: left promiscuous mode [ 680.085587][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.284971][ T6002] veth1_macvtap: left promiscuous mode [ 680.297566][ T6002] veth0_macvtap: left promiscuous mode [ 680.303228][ T6002] veth1_vlan: left promiscuous mode [ 680.319313][ T6002] veth0_vlan: left promiscuous mode [ 680.903693][ T5784] Bluetooth: hci3: command tx timeout [ 681.152130][T16612] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 681.814988][ T6002] team0 (unregistering): Port device team_slave_1 removed [ 681.896825][ T6002] team0 (unregistering): Port device team_slave_0 removed [ 681.972475][ T6002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.069613][ T6002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.711361][ T6002] bond0 (unregistering): Released all slaves [ 682.977615][ T5784] Bluetooth: hci3: command tx timeout [ 683.721885][T16628] veth1_to_bond: entered allmulticast mode [ 683.749660][T16630] netlink: 'syz.1.3212': attribute type 5 has an invalid length. [ 683.782439][T16630] netlink: 'syz.1.3212': attribute type 8 has an invalid length. [ 683.832789][T16632] veth1_to_bond: entered promiscuous mode [ 683.899522][T16633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3211'. [ 684.431136][T16633] bond0: (slave bond_slave_1): Releasing backup interface [ 684.524911][ T970] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 684.733075][ T970] usb 2-1: Using ep0 maxpacket: 8 [ 684.772945][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 684.853882][ T970] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 684.927517][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.978871][ T970] usb 2-1: config 0 descriptor?? [ 684.986128][T16661] netlink: 'syz.0.3219': attribute type 8 has an invalid length. [ 684.998918][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3219'. [ 685.058530][ T5784] Bluetooth: hci3: command tx timeout [ 685.133507][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3219'. [ 685.298852][ T970] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 685.842290][T16527] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 685.871258][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.877837][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.915044][T16527] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 685.958377][T16527] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 685.994097][T16527] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 686.305138][T16527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.371225][T16527] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.409930][T14607] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.417109][T14607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.442117][T14607] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.449305][T14607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.673908][T16527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.839623][T16527] veth0_vlan: entered promiscuous mode [ 686.871063][T16527] veth1_vlan: entered promiscuous mode [ 686.963939][T16527] veth0_macvtap: entered promiscuous mode [ 687.001981][T16527] veth1_macvtap: entered promiscuous mode [ 687.062302][T16527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.083635][T16527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.095245][T16527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.111301][T16527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.130844][T16527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.168719][T16527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.189177][T16527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.203805][T16527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.215951][T16527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.235080][T16527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.246199][T16527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.263741][T16527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.334366][T16527] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.354793][T16527] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.364431][T16527] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.379604][T16527] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.459136][ T970] usb 2-1: USB disconnect, device number 30 [ 687.669850][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.692586][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.772099][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.803132][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.991558][ T5109] IPVS: starting estimator thread 0... [ 689.097478][T16727] IPVS: using max 18 ests per chain, 43200 per kthread [ 689.479975][T16744] netlink: 'syz.1.3235': attribute type 4 has an invalid length. [ 689.975627][T16754] gadgetfs: bound to dummy_udc driver [ 691.368717][T16768] loop5: detected capacity change from 0 to 32768 [ 691.436626][T16768] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 691.590456][T16768] XFS (loop5): Ending clean mount [ 695.383125][T16527] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 695.587631][T14497] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 697.976811][T14484] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 698.159992][T14484] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.186819][T14484] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 698.216806][T14484] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 698.250592][T14484] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 698.281620][T14484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.751146][T14484] cxacru_cm: 32 callbacks suppressed [ 698.751167][T14484] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 698.783123][T14484] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 698.812029][T14484] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 698.845735][T14484] cxacru: probe of 6-1:1.0 failed with error -71 [ 698.894552][T14484] usb 6-1: USB disconnect, device number 13 [ 699.903976][T16970] FAULT_INJECTION: forcing a failure. [ 699.903976][T16970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.096348][T16970] CPU: 0 PID: 16970 Comm: syz.2.3261 Not tainted syzkaller #0 [ 700.103876][T16970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.113958][T16970] Call Trace: [ 700.117261][T16970] [ 700.120211][T16970] dump_stack_lvl+0x18c/0x250 [ 700.124931][T16970] ? show_regs_print_info+0x20/0x20 [ 700.130167][T16970] ? load_image+0x420/0x420 [ 700.134699][T16970] ? __might_fault+0xaa/0x120 [ 700.139408][T16970] ? __lock_acquire+0x7d80/0x7d80 [ 700.144478][T16970] ? __virt_addr_valid+0x10c/0x380 [ 700.149623][T16970] should_fail_ex+0x394/0x4c0 [ 700.154337][T16970] _copy_to_user+0x2f/0xa0 [ 700.158779][T16970] bpf_verifier_vlog+0x4e6/0x840 [ 700.163758][T16970] __btf_verifier_log+0xe3/0x140 [ 700.168733][T16970] ? btf_check_sec_info+0x350/0x350 [ 700.173976][T16970] btf_datasec_check_meta+0x70b/0xb50 [ 700.179409][T16970] btf_check_all_metas+0x371/0xaf0 [ 700.184580][T16970] btf_parse_type_sec+0xfc/0x1960 [ 700.189629][T16970] ? btf_check_sec_info+0x350/0x350 [ 700.194854][T16970] ? btf_parse_hdr+0x20/0x700 [ 700.199539][T16970] ? btf_verifier_log+0x1a0/0x1a0 [ 700.204564][T16970] ? btf_parse_hdr+0x545/0x700 [ 700.209323][T16970] ? btf_parse_str_sec+0x20d/0x2a0 [ 700.214437][T16970] btf_new_fd+0x440/0x9e0 [ 700.218780][T16970] ? bpf_btf_show_fdinfo+0x80/0x80 [ 700.223895][T16970] ? capable+0x88/0xe0 [ 700.227970][T16970] __sys_bpf+0x670/0x890 [ 700.232215][T16970] ? bpf_link_show_fdinfo+0x560/0x560 [ 700.237598][T16970] ? lock_chain_count+0x20/0x20 [ 700.242460][T16970] __x64_sys_bpf+0x7c/0x90 [ 700.246883][T16970] do_syscall_64+0x55/0xb0 [ 700.251301][T16970] ? clear_bhb_loop+0x40/0x90 [ 700.256013][T16970] ? clear_bhb_loop+0x40/0x90 [ 700.260694][T16970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.266589][T16970] RIP: 0033:0x7feb1f19e159 [ 700.270998][T16970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.290636][T16970] RSP: 002b:00007feb1ff81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 700.299049][T16970] RAX: ffffffffffffffda RBX: 00007feb1f425fa0 RCX: 00007feb1f19e159 [ 700.307019][T16970] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 700.314987][T16970] RBP: 00007feb1f23506b R08: 0000000000000000 R09: 0000000000000000 [ 700.322959][T16970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.330922][T16970] R13: 00007feb1f426038 R14: 00007feb1f425fa0 R15: 00007ffc2b7e67c8 [ 700.338904][T16970] [ 700.967545][T14484] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 701.159278][T14484] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 701.181259][T14484] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 701.200760][T14484] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 701.228982][T14484] usb 6-1: config 0 interface 0 has no altsetting 0 [ 701.251278][T14484] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 701.265599][T14484] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 701.307037][T14484] usb 6-1: config 0 interface 0 has no altsetting 0 [ 701.333816][T14484] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 701.342968][T14484] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 701.382456][T14484] usb 6-1: config 0 interface 0 has no altsetting 0 [ 701.410085][T14484] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 701.435983][T14484] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 701.459256][T14484] usb 6-1: config 0 interface 0 has no altsetting 0 [ 701.474068][T14484] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 701.491862][T14484] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 701.531013][T14484] usb 6-1: config 0 interface 0 has no altsetting 0 [ 701.556050][T14484] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 701.573273][T14484] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 701.595006][T14484] usb 6-1: config 0 interface 0 has no altsetting 0 [ 701.625662][T14484] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 701.646908][T14484] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 701.667705][T14484] usb 6-1: config 0 interface 0 has no altsetting 0 [ 701.704394][T14484] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 701.740698][T14484] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 701.776043][T14484] usb 6-1: config 0 interface 0 has no altsetting 0 [ 701.804176][T14484] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 701.824799][T14484] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 701.866641][T14484] usb 6-1: Product: syz [ 701.881515][T14484] usb 6-1: Manufacturer: syz [ 701.886157][T14484] usb 6-1: SerialNumber: syz [ 701.927298][T14484] usb 6-1: config 0 descriptor?? [ 701.964220][T14484] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 702.340253][T17021] FAULT_INJECTION: forcing a failure. [ 702.340253][T17021] name failslab, interval 1, probability 0, space 0, times 0 [ 702.428973][ C1] usb 6-1: yurex_control_callback - control failed: -71 [ 702.439815][T14484] usb 6-1: USB disconnect, device number 14 [ 702.453992][T17021] CPU: 0 PID: 17021 Comm: syz.1.3272 Not tainted syzkaller #0 [ 702.461497][T17021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 702.467208][T14484] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 702.471592][T17021] Call Trace: [ 702.477848][T17023] yurex 6-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 702.481008][T17021] [ 702.491781][T17021] dump_stack_lvl+0x18c/0x250 [ 702.496498][T17021] ? show_regs_print_info+0x20/0x20 [ 702.501729][T17021] ? load_image+0x420/0x420 [ 702.506266][T17021] ? __might_sleep+0xe0/0xe0 [ 702.510881][T17021] ? __lock_acquire+0x7d80/0x7d80 [ 702.515913][T17021] should_fail_ex+0x394/0x4c0 [ 702.520595][T17021] should_failslab+0x9/0x20 [ 702.525108][T17021] slab_pre_alloc_hook+0x59/0x300 [ 702.530134][T17021] ? __d_instantiate+0x9c/0x700 [ 702.534982][T17021] ? binderfs_fill_super+0x643/0xfa0 [ 702.540267][T17021] __kmem_cache_alloc_node+0x53/0x250 [ 702.545643][T17021] ? binderfs_fill_super+0x643/0xfa0 [ 702.550933][T17021] kmalloc_trace+0x2a/0xe0 [ 702.555359][T17021] binderfs_fill_super+0x643/0xfa0 [ 702.560495][T17021] ? binderfs_fs_context_reconfigure+0x210/0x210 [ 702.566850][T17021] ? up_write+0x1be/0x410 [ 702.571180][T17021] ? sget_fc+0x7f5/0x8d0 [ 702.575420][T17021] ? kill_litter_super+0xb0/0xb0 [ 702.580362][T17021] ? binderfs_fs_context_reconfigure+0x210/0x210 [ 702.586694][T17021] get_tree_nodev+0xb5/0x140 [ 702.591295][T17021] vfs_get_tree+0x8c/0x280 [ 702.595719][T17021] do_new_mount+0x24a/0xa40 [ 702.600248][T17021] __se_sys_mount+0x2e7/0x3d0 [ 702.604936][T17021] ? __x64_sys_mount+0xc0/0xc0 [ 702.609701][T17021] ? lockdep_hardirqs_on+0x98/0x150 [ 702.614895][T17021] ? __x64_sys_mount+0x20/0xc0 [ 702.619659][T17021] do_syscall_64+0x55/0xb0 [ 702.624076][T17021] ? clear_bhb_loop+0x40/0x90 [ 702.628753][T17021] ? clear_bhb_loop+0x40/0x90 [ 702.633437][T17021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 702.639330][T17021] RIP: 0033:0x7f298679e159 [ 702.643750][T17021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.663453][T17021] RSP: 002b:00007f2987599028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 702.671869][T17021] RAX: ffffffffffffffda RBX: 00007f2986a25fa0 RCX: 00007f298679e159 [ 702.679838][T17021] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000200000000300 [ 702.687845][T17021] RBP: 00007f298683506b R08: 0000000000000000 R09: 0000000000000000 [ 702.695822][T17021] R10: 0000000002200892 R11: 0000000000000246 R12: 0000000000000000 [ 702.703802][T17021] R13: 00007f2986a26038 R14: 00007f2986a25fa0 R15: 00007ffe288125b8 [ 702.711796][T17021] [ 704.596940][T17051] loop5: detected capacity change from 0 to 40427 [ 704.632436][T17051] F2FS-fs (loop5): invalid crc value [ 704.672305][T17051] F2FS-fs (loop5): Found nat_bits in checkpoint [ 704.897885][T17051] F2FS-fs (loop5): Start checkpoint disabled! [ 704.963648][T17051] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 705.626456][ T59] kworker/u4:4: attempt to access beyond end of device [ 705.626456][ T59] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 705.664966][ T59] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 708.218174][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3295'. [ 708.246638][T17142] netlink: 1148 bytes leftover after parsing attributes in process `syz.5.3295'. [ 708.610875][T17099] loop2: detected capacity change from 0 to 32768 [ 708.788909][T17099] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 709.347223][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 710.569945][T17195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3308'. [ 711.639543][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf79000: rx timeout, send abort [ 711.648320][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cf79000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 712.262581][ T5109] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 712.466047][ T5109] usb 6-1: Using ep0 maxpacket: 8 [ 712.477729][ T5109] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.503686][ T5109] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 712.528602][ T5109] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 712.560478][ T5109] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 712.575787][ T5109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.594003][ T5109] usb 6-1: Product: syz [ 712.617563][ T5109] usb 6-1: Manufacturer: syz [ 712.622205][ T5109] usb 6-1: SerialNumber: syz [ 713.294966][ T5109] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 713.314245][ T5109] usb 6-1: clock source 0 is not valid, cannot use [ 713.339949][ T5109] usb 6-1: 1:1: cannot get freq (v2/v3): err -32 [ 713.703641][ T5109] usb 6-1: USB disconnect, device number 15 [ 714.672910][ T970] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 714.772341][T14522] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 714.812417][T14522] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 715.040844][T14522] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 715.101664][T14522] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 715.403081][T17315] loop5: detected capacity change from 0 to 128 [ 715.485957][T17292] ceph: No mds server is up or the cluster is laggy [ 715.503215][T17317] netlink: 'syz.1.3328': attribute type 1 has an invalid length. [ 715.525892][T17281] ceph: No mds server is up or the cluster is laggy [ 715.539646][T17319] syz.5.3329: attempt to access beyond end of device [ 715.539646][T17319] loop5: rw=2049, sector=145, nr_sectors = 416 limit=128 [ 715.614155][T14522] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 715.662543][T14522] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 715.786683][T17317] bond2: entered promiscuous mode [ 715.817664][T17317] bond2: entered allmulticast mode [ 715.866625][T17317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 715.877266][ T6000] kworker/u4:22: attempt to access beyond end of device [ 715.877266][ T6000] loop5: rw=1, sector=561, nr_sectors = 480 limit=128 [ 716.033385][T17321] erspan1: entered allmulticast mode [ 716.289606][T17321] bond2: (slave erspan1): making interface the new active one [ 716.388412][T17321] erspan1: entered promiscuous mode [ 716.497523][T17321] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 716.865059][T17350] ip_tables: iptables: counters copy to user failed while replacing table [ 718.254881][T17388] loop3: detected capacity change from 0 to 7 [ 718.291493][T17388] Dev loop3: unable to read RDB block 7 [ 718.301514][T17388] loop3: unable to read partition table [ 718.324590][T17388] loop3: partition table beyond EOD, truncated [ 718.345971][T17388] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 718.751173][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3350'. [ 719.515597][T14497] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 719.783015][T14497] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 719.815990][T14497] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.885997][T14497] usb 2-1: Product: syz [ 719.892038][T14497] usb 2-1: Manufacturer: syz [ 719.932431][T14497] usb 2-1: SerialNumber: syz [ 719.978409][T14497] usb 2-1: config 0 descriptor?? [ 720.374165][T14522] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 720.395891][T14497] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 720.459545][T14522] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 721.371535][T14497] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 721.423025][T14497] usb 2-1: USB disconnect, device number 32 [ 722.300668][ T27] audit: type=1326 audit(1700000033.222:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.0.3362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45ed9e159 code=0x7ffc0000 [ 722.395608][ T27] audit: type=1326 audit(1700000033.222:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.0.3362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45ed9e159 code=0x7ffc0000 [ 722.411108][T17478] loop5: detected capacity change from 0 to 128 [ 722.519466][ T27] audit: type=1326 audit(1700000033.252:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.0.3362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45ed9e159 code=0x7ffc0000 [ 722.619540][ T27] audit: type=1326 audit(1700000033.252:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.0.3362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45ed9e159 code=0x7ffc0000 [ 722.645407][ T27] audit: type=1326 audit(1700000033.252:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.0.3362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe45ed9e159 code=0x7ffc0000 [ 722.673992][ T27] audit: type=1326 audit(1700000033.272:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.0.3362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe45ed9e159 code=0x7ffc0000 [ 722.699371][T17478] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 722.699734][ T27] audit: type=1326 audit(1700000033.372:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.0.3362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe45ed5e98e code=0x7ffc0000 [ 722.747487][T17478] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 722.811450][ T27] audit: type=1326 audit(1700000033.372:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.0.3362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe45ed5e98e code=0x7ffc0000 [ 722.904605][ T27] audit: type=1326 audit(1700000033.382:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.0.3362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe45ed5e98e code=0x7ffc0000 [ 722.954376][ T27] audit: type=1326 audit(1700000033.382:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17471 comm="syz.0.3362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe45ed5e98e code=0x7ffc0000 [ 723.145788][ T42] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 723.337558][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.363300][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.399659][ T42] usb 6-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice= 1.00 [ 723.413675][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.445422][ T42] usb 6-1: Product: syz [ 723.454182][ T42] usb 6-1: Manufacturer: syz [ 723.474350][ T42] usb 6-1: SerialNumber: syz [ 723.504917][ T42] hub 6-1:1.0: USB hub found [ 723.587543][T17498] FAULT_INJECTION: forcing a failure. [ 723.587543][T17498] name failslab, interval 1, probability 0, space 0, times 0 [ 723.672326][T17498] CPU: 0 PID: 17498 Comm: syz.1.3366 Not tainted syzkaller #0 [ 723.679851][T17498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 723.689928][T17498] Call Trace: [ 723.693226][T17498] [ 723.696175][T17498] dump_stack_lvl+0x18c/0x250 [ 723.700978][T17498] ? show_regs_print_info+0x20/0x20 [ 723.706211][T17498] ? load_image+0x420/0x420 [ 723.706773][ T42] hub 6-1:1.0: 4 ports detected [ 723.710725][T17498] ? __lock_acquire+0x7d80/0x7d80 [ 723.720634][T17498] should_fail_ex+0x394/0x4c0 [ 723.725338][T17498] should_failslab+0x9/0x20 [ 723.729845][T17498] slab_pre_alloc_hook+0x59/0x300 [ 723.734873][T17498] ? sk_prot_alloc+0xe7/0x210 [ 723.739546][T17498] ? sk_prot_alloc+0xe7/0x210 [ 723.744218][T17498] __kmem_cache_alloc_node+0x53/0x250 [ 723.749604][T17498] ? sk_prot_alloc+0xe7/0x210 [ 723.754274][T17498] __kmalloc+0xa7/0x240 [ 723.758435][T17498] sk_prot_alloc+0xe7/0x210 [ 723.762933][T17498] ? sk_alloc+0x24/0x350 [ 723.767178][T17498] sk_alloc+0x3a/0x350 [ 723.771250][T17498] alg_create+0xa4/0x140 [ 723.775491][T17498] __sock_create+0x49e/0x940 [ 723.780090][T17498] __sys_socket+0xd7/0x1b0 [ 723.784508][T17498] __x64_sys_socket+0x7a/0x90 [ 723.789181][T17498] do_syscall_64+0x55/0xb0 [ 723.793598][T17498] ? clear_bhb_loop+0x40/0x90 [ 723.798277][T17498] ? clear_bhb_loop+0x40/0x90 [ 723.802954][T17498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.808847][T17498] RIP: 0033:0x7f298679e159 [ 723.813256][T17498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.832860][T17498] RSP: 002b:00007f2987599028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 723.841269][T17498] RAX: ffffffffffffffda RBX: 00007f2986a25fa0 RCX: 00007f298679e159 [ 723.849234][T17498] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 723.857196][T17498] RBP: 00007f298683506b R08: 0000000000000000 R09: 0000000000000000 [ 723.865163][T17498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.873139][T17498] R13: 00007f2986a26038 R14: 00007f2986a25fa0 R15: 00007ffe288125b8 [ 723.881122][T17498] [ 724.287670][T17512] syz_tun: entered allmulticast mode [ 724.326827][T17512] lo: entered allmulticast mode [ 724.367341][T17512] lo: left allmulticast mode [ 724.397389][T17511] syz_tun: left allmulticast mode [ 724.512166][T17516] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 724.898092][ T42] hub 6-1:1.0: hub_hub_status failed (err = -32) [ 724.905749][ T42] hub 6-1:1.0: config failed, can't get hub status (err -32) [ 725.574189][T16527] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 725.630442][ T42] usb 6-1: USB disconnect, device number 16 [ 725.795265][T14522] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 725.849333][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3376'. [ 725.910353][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3376'. [ 726.030477][T14522] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 726.053320][T14522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.148542][T14522] usb 3-1: config 0 descriptor?? [ 726.172873][T17552] loop5: detected capacity change from 0 to 2048 [ 726.206758][T14522] cp210x 3-1:0.0: cp210x converter detected [ 726.645725][T14522] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 726.747628][T14522] usb 3-1: cp210x converter now attached to ttyUSB0 [ 727.835244][ T42] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 728.015814][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 728.030310][ T42] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 728.060623][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 728.085026][ T42] usb 6-1: Product: syz [ 728.093283][ T42] usb 6-1: Manufacturer: syz [ 728.110995][ T42] usb 6-1: SerialNumber: syz [ 728.132362][ T42] usb 6-1: config 0 descriptor?? [ 728.162538][ T42] gspca_main: sq905-2.14.0 probing 2770:9120 [ 728.549683][T14520] usb 3-1: USB disconnect, device number 23 [ 728.600766][T14520] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 728.656947][T14520] cp210x 3-1:0.0: device disconnected [ 728.895679][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 729.181436][ T42] gspca_sq905: bulk read fail (-22) len 0/4 [ 729.191187][ T42] sq905: probe of 6-1:0.0 failed with error -5 [ 729.434280][T14484] usb 6-1: USB disconnect, device number 17 [ 730.133980][T17645] ALSA: seq fatal error: cannot create timer (-16) [ 730.350945][T17651] ip_tables: iptables: counters copy to user failed while replacing table [ 730.377327][T17651] xt_hashlimit: size too large, truncated to 1048576 [ 732.184886][T14520] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 732.430346][T14520] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.474775][T14520] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 732.551207][T14520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.687952][T14520] as10x_usb: device has been detected [ 732.745429][T14520] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 732.986281][T14520] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 733.247579][T17704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3405'. [ 733.276373][T14520] as10x_usb: error during firmware upload part1 [ 733.326622][T14520] Registered device Abilis Systems DVB-Titan [ 734.316897][T17729] xt_CT: You must specify a L4 protocol and not use inversions on it [ 734.398393][T17731] loop2: detected capacity change from 0 to 256 [ 734.581875][T17731] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 734.610294][T14497] usb 2-1: USB disconnect, device number 33 [ 734.812732][T14497] Unregistered device Abilis Systems DVB-Titan [ 734.856318][T14497] as10x_usb: device has been disconnected [ 736.370325][T17757] loop5: detected capacity change from 0 to 32768 [ 736.462454][T17757] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 736.758858][T16527] ocfs2: Unmounting device (7,5) on (node local) [ 737.146557][T13983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.219310][T17811] x86/PAT: syz.5.3431:17811 freeing invalid memtype [mem 0xfe004000-0xfe008fff] [ 738.265488][T17811] x86/PAT: syz.5.3431:17811 freeing invalid memtype [mem 0xfe009000-0xfe00efff] [ 738.303553][T17811] x86/PAT: syz.5.3431:17811 freeing invalid memtype [mem 0xfe000000-0xfe003fff] [ 739.263913][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 739.292560][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 739.314519][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 739.326193][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 739.339474][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 739.354563][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 739.970251][T17834] chnl_net:caif_netlink_parms(): no params data found [ 740.220313][T17834] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.227665][T17834] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.234957][T17834] bridge_slave_0: entered allmulticast mode [ 740.242636][T17834] bridge_slave_0: entered promiscuous mode [ 740.251625][T17834] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.267375][T17834] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.282951][T17834] bridge_slave_1: entered allmulticast mode [ 740.292930][T17834] bridge_slave_1: entered promiscuous mode [ 740.353827][T17826] loop5: detected capacity change from 0 to 32768 [ 740.363784][T17834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.389128][T17826] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.3435 (17826) [ 740.415799][T17834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.558000][T17826] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 740.619501][T17834] team0: Port device team_slave_0 added [ 740.644128][T17826] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 740.652824][T17826] BTRFS info (device loop5): enabling auto defrag [ 740.705556][T17834] team0: Port device team_slave_1 added [ 740.735318][T17826] BTRFS info (device loop5): use no compression [ 740.741611][T17826] BTRFS info (device loop5): force clearing of disk cache [ 740.815537][T17826] BTRFS info (device loop5): max_inline at 4096 [ 740.821858][T17826] BTRFS info (device loop5): disabling free space tree [ 740.832972][T17834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.870378][T17834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.010999][T17834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.092116][T17834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.112958][T17834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.154061][T17826] BTRFS info (device loop5): enabling ssd optimizations [ 741.182011][T17834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.204039][T17826] BTRFS info (device loop5): auto enabling async discard [ 741.262234][T17826] BTRFS info (device loop5): rebuilding free space tree [ 741.345347][T17826] BTRFS info (device loop5): disabling free space tree [ 741.352830][T17826] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 741.424320][T17826] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 741.454386][ T5784] Bluetooth: hci2: command tx timeout [ 741.469564][T17834] hsr_slave_0: entered promiscuous mode [ 741.555389][T17834] hsr_slave_1: entered promiscuous mode [ 741.601694][T17834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 741.654034][T17834] Cannot create hsr debugfs directory [ 742.430384][T16527] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 743.536634][ T5784] Bluetooth: hci2: command tx timeout [ 743.894066][ T5109] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 744.074055][ T5109] usb 6-1: Using ep0 maxpacket: 32 [ 744.081292][ T5109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.112627][ T5109] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.153932][ T5109] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 744.163036][ T5109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.213653][ T5109] usb 6-1: config 0 descriptor?? [ 744.244414][ T5109] hub 6-1:0.0: USB hub found [ 744.463858][ T5109] hub 6-1:0.0: 1 port detected [ 745.064790][ T5109] hub 6-1:0.0: activate --> -90 [ 745.474450][T14484] usb 6-1: USB disconnect, device number 18 [ 745.613929][ T5784] Bluetooth: hci2: command tx timeout [ 747.307295][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.313968][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.694034][ T5784] Bluetooth: hci2: command tx timeout [ 748.198060][T17972] loop5: detected capacity change from 0 to 4096 [ 748.261731][T17972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.746907][T16527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.922893][T17834] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 749.004976][T17834] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 749.453765][T17834] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 749.661751][T17834] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 750.343061][T17834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.447372][T17834] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.522157][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.529349][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.629688][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.636885][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.510567][T17834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.688710][T17834] veth0_vlan: entered promiscuous mode [ 751.739039][T17834] veth1_vlan: entered promiscuous mode [ 751.856583][T17834] veth0_macvtap: entered promiscuous mode [ 751.892311][T17834] veth1_macvtap: entered promiscuous mode [ 751.965934][T17834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.069604][T17834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.096265][T17834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.153435][T17834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.199892][T17834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.239788][T17834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.283109][T17834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.312751][T17834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.353314][T17834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.385823][T17834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.430081][T17834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.450340][T17834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.482687][T17834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.512644][T17834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.539922][T17834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.572637][T17834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.676554][T17834] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.723366][T17834] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.732107][T17834] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.802174][T17834] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.990475][T18047] loop5: detected capacity change from 0 to 512 [ 754.054363][T18047] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 754.192206][T18047] EXT4-fs (loop5): 1 truncate cleaned up [ 754.224587][T18047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.979897][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.021921][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.152099][T14607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.170288][T16527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.208289][T14607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.769451][T18079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3460'. [ 759.172122][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 759.194452][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 759.203273][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 759.211491][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 759.222085][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 759.230655][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 759.374319][ T5784] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 759.386862][ T5784] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 759.421241][ T5784] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 759.445693][ T5784] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 759.463136][ T5784] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 759.470486][ T5784] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 759.757071][T18112] gadgetfs: bound to dummy_udc driver [ 760.083109][T14483] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 760.117949][ C1] gadgetfs: connected [ 760.159649][T14483] gadgetfs: disconnected [ 760.358749][ C1] gadgetfs: connected [ 760.374367][T14483] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 760.403920][T14483] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 760.437378][T18104] chnl_net:caif_netlink_parms(): no params data found [ 760.445652][T14483] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.495158][ C1] gadgetfs: configuration #1 [ 760.516022][T18112] gadgetfs: suspended from state 3 [ 760.541876][T14483] usb 1-1: USB disconnect, device number 3 [ 760.548340][T18112] gadgetfs: disconnected [ 760.619760][T18106] chnl_net:caif_netlink_parms(): no params data found [ 761.080728][T18104] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.164540][T18104] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.211349][T18104] bridge_slave_0: entered allmulticast mode [ 761.232745][T14391] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3 [ 761.241628][T14391] ref_tracker: syz_tun@ffff88807f6405b8 has 1/2 users at [ 761.241628][T14391] netdev_get_by_index+0x79/0xa0 [ 761.241628][T14391] fib6_nh_init+0x1ff/0x1fe0 [ 761.241628][T14391] ip6_route_info_create+0x96c/0x1260 [ 761.241628][T14391] addrconf_f6i_alloc+0x1fa/0x440 [ 761.241628][T14391] addrconf_permanent_addr+0x294/0xa50 [ 761.241628][T14391] addrconf_notify+0x996/0x1010 [ 761.241628][T14391] notifier_call_chain+0x18f/0x380 [ 761.241628][T14391] __dev_notify_flags+0x1ab/0x310 [ 761.241628][T14391] dev_change_flags+0xde/0x1a0 [ 761.241628][T14391] do_setlink+0xb69/0x3f40 [ 761.241628][T14391] rtnl_newlink+0x1848/0x2170 [ 761.241628][T14391] rtnetlink_rcv_msg+0x843/0xf90 [ 761.241628][T14391] netlink_rcv_skb+0x235/0x4c0 [ 761.241628][T14391] netlink_unicast+0x7b1/0x930 [ 761.241628][T14391] netlink_sendmsg+0x8d0/0xbf0 [ 761.241628][T14391] __sys_sendto+0x4a9/0x6b0 [ 761.241628][T14391] [ 761.333151][T14391] ref_tracker: syz_tun@ffff88807f6405b8 has 1/2 users at [ 761.333151][T14391] ipv6_add_dev+0x407/0x11f0 [ 761.333151][T14391] addrconf_notify+0x67b/0x1010 [ 761.333151][T14391] notifier_call_chain+0x18f/0x380 [ 761.333151][T14391] register_netdevice+0x1670/0x1ba0 [ 761.333151][T14391] tun_set_iff+0x82b/0xea0 [ 761.333151][T14391] __tun_chr_ioctl+0x7e0/0x2070 [ 761.333151][T14391] __se_sys_ioctl+0xfd/0x170 [ 761.333151][T14391] do_syscall_64+0x55/0xb0 [ 761.333151][T14391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 761.333151][T14391] [ 761.417523][T18104] bridge_slave_0: entered promiscuous mode [ 761.455473][T18106] bridge0: port 1(bridge_slave_0) entered blocking state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 761.462806][T18106] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.470508][ T5784] Bluetooth: hci4: command tx timeout [ 761.482904][T18106] bridge_slave_0: entered allmulticast mode [ 761.533088][ T5784] Bluetooth: hci5: command tx timeout [ 761.539609][T18106] bridge_slave_0: entered promiscuous mode [ 761.561273][T18104] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.688824][T18104] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.761916][T18104] bridge_slave_1: entered allmulticast mode [ 761.824447][T18104] bridge_slave_1: entered promiscuous mode [ 761.932408][T18106] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.983056][T18106] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.033348][T18106] bridge_slave_1: entered allmulticast mode [ 762.070093][T18106] bridge_slave_1: entered promiscuous mode [ 763.532645][ T5784] Bluetooth: hci4: command tx timeout [ 763.614310][ T5784] Bluetooth: hci5: command tx timeout [ 763.689477][ T3487] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.404143][T12826] bond0: (slave syz_tun): Releasing backup interface [ 764.516558][ T3487] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.675400][ T3487] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.833821][ T3487] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.723020][ T3487] hsr_slave_0: left promiscuous mode [ 766.734491][ T3487] hsr_slave_1: left promiscuous mode [ 766.748212][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.758894][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.767681][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.777020][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.785336][ T3487] bridge_slave_1: left allmulticast mode [ 766.790994][ T3487] bridge_slave_1: left promiscuous mode [ 766.798252][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.830744][ T3487] bridge_slave_0: left allmulticast mode [ 766.836806][ T3487] bridge_slave_0: left promiscuous mode [ 766.843052][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.881735][ T3487] veth1_macvtap: left promiscuous mode [ 766.888198][ T3487] veth0_macvtap: left promiscuous mode [ 766.895604][ T3487] veth1_vlan: left promiscuous mode [ 766.901791][ T3487] veth0_vlan: left promiscuous mode [ 767.974643][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 768.057224][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 768.139268][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.217540][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.851656][ T3487] bond0 (unregistering): Released all slaves [ 769.476961][ T3487] IPVS: stop unused estimator thread 0... [ 769.656185][ T3487] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.758018][ T3487] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.906833][ T3487] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.087267][ T3487] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.451178][ T3487] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 770.470868][ T3487] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.629989][ T3487] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 770.644387][ T3487] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.808630][ T3487] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 770.822239][ T3487] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.947896][ T3487] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 770.971541][ T3487] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0