last executing test programs: 3m53.420112517s ago: executing program 3 (id=562): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x11fa, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./my_debugfs\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r3, &(0x7f0000001c40)=""/100, 0x7ffc) openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file1\x00', 0x48042, 0x8c) statfs(&(0x7f0000001b00)='./file1\x00', &(0x7f0000001b40)=""/186) 3m47.561583593s ago: executing program 3 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r0, &(0x7f0000000780), 0x0) 3m45.759860197s ago: executing program 3 (id=585): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600), 0x80200, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a00), 0x200000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141102) writev(r0, &(0x7f0000000680)=[{&(0x7f00000006c0)="94", 0x1}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000940)={0x1, &(0x7f0000000980)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) clock_settime(0x0, &(0x7f00000009c0)={0x77359400}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f00000007c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r2, 0x0, 0x0) write(r2, &(0x7f0000000900)='1', 0x1) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x1, 0x4000854, 0x0, 0x0) 3m44.8668111s ago: executing program 3 (id=586): r0 = io_uring_setup(0x36c2, &(0x7f0000000080)={0x0, 0x4b2d1, 0x10, 0x1, 0x145}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000700)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$fuse(0x0, 0x0, 0x18, 0x0, 0x1, 0x0, &(0x7f00000018c0)="083a1b3cfe47f21775fa367de2c1") io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/19, 0x13}, {0x0}], &(0x7f0000002cc0)=[0xba], 0x11a}, 0x20) 3m44.611217096s ago: executing program 3 (id=588): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='100', 0x3) chdir(0x0) syz_clone3(&(0x7f0000000280)={0x23800000, &(0x7f0000000300), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m43.943342773s ago: executing program 3 (id=589): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004a04003c00680000ff069078e00000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000003080)=ANY=[@ANYBLOB="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"], &(0x7f0000004240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000004280)={0x3, 0x8, &(0x7f0000004340)=ANY=[@ANYBLOB], &(0x7f0000005500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write(0xffffffffffffffff, &(0x7f00000004c0)="0f0000000401666f6f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006261720000000000000000", 0x10a) r3 = syz_open_procfs(0x0, &(0x7f00000015c0)='maps\x00') pread64(r3, &(0x7f0000002040)=""/4103, 0x1007, 0x4b) 3m28.156552116s ago: executing program 32 (id=589): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004a04003c00680000ff069078e00000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000003080)=ANY=[@ANYBLOB="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"], &(0x7f0000004240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000004280)={0x3, 0x8, &(0x7f0000004340)=ANY=[@ANYBLOB], &(0x7f0000005500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write(0xffffffffffffffff, &(0x7f00000004c0)="0f0000000401666f6f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006261720000000000000000", 0x10a) r3 = syz_open_procfs(0x0, &(0x7f00000015c0)='maps\x00') pread64(r3, &(0x7f0000002040)=""/4103, 0x1007, 0x4b) 3m26.81395094s ago: executing program 4 (id=627): r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000002cc0)=[{{&(0x7f0000002dc0)={0x2, 0x0, @loopback}, 0x10, 0x0}}, {{&(0x7f0000002ec0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002f00)=ANY=[@ANYBLOB="5400000000000000000000000700000000018317e5ac1414aaac1e0001e0000001ffffffff7f00000101890b29f55a3c7e75cc518c94040000830fa6ac1e0101ac1e0001e0000001940b1f6cef57477fdf1d0300000000001c00000000000000000000000700000044"], 0x108}}], 0x2, 0x0) 3m26.676160703s ago: executing program 4 (id=629): r0 = syz_open_dev$vcsn(0x0, 0x7ff, 0x40080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x201, 0x0, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x66, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x16}, {[@timestamp_addr={0x44, 0x2c, 0x2c, 0x1, 0x0, [{@remote, 0x6226d48e}, {@private=0xa010101, 0x8}, {@empty, 0xffff252a}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}]}}}}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x40) r6 = syz_open_dev$dvb_demux(&(0x7f0000000300), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000340)={0xfff, 0x0, 0x3, 0x14, 0x4}) r7 = syz_open_dev$dvb_demux(&(0x7f0000000380), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000003c0)={0x1, 0x1, 0x3, 0x4, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000400)=0x7) ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000200)={0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x4, 0x0, 0xffffffff}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000240)={{0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, {@rand_addr=0x64010100, 0x5000, 0x2000, 0x1}}, 0x44) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, {{0x1234, 0x5000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 3m25.533919691s ago: executing program 4 (id=631): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500200a14000000110001000000a885d348b8a8bcf89ecf16be0183d2aec112c4a9db273d390d7e4df0bc72928fa6f681acd535305818cef00000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x9840) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) pipe(&(0x7f0000000040)={0xffffffffffffffff}) fsopen(&(0x7f0000000180)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000340)) open(&(0x7f00000003c0)='./file0\x00', 0x305001, 0x8) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000440)={0x4, 0x7, 0x40, {0x762, 0x8}, 0x8000, 0xffff}) 3m24.346304821s ago: executing program 4 (id=634): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000700), 0x0) 3m24.226766564s ago: executing program 4 (id=635): mkdir(&(0x7f0000000100)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='my_sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 3m23.947901241s ago: executing program 4 (id=636): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x4}, 0x6) write(0xffffffffffffffff, &(0x7f0000000080)="1b00000008001122334455661400", 0xe) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000740)='ext4\x00', 0x8410, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000d00)='./binderfs/binder0\x00', 0x802, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000dc0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e00)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000e40), 0x2, 0x143102) writev(r0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f0000000f00)='./file0\x00', 0x0, 0x80, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000fc0)={0x2, 0x0, {&(0x7f0000001040)=""/205, 0xcd, 0x0, 0x3, 0x2}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000001140)='./file1\x00', 0x100) mkdir(&(0x7f0000001180)='./file0\x00', 0x0) mkdir(&(0x7f00000011c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000001200)='./bus\x00', &(0x7f0000001240), 0x0, &(0x7f0000001280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000012c0)='./bus\x00') r2 = open(&(0x7f0000001300)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000001340)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000001400), 0x7f03) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./mnt\x00', 0x1ff) 3m8.129380595s ago: executing program 33 (id=636): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x4}, 0x6) write(0xffffffffffffffff, &(0x7f0000000080)="1b00000008001122334455661400", 0xe) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000740)='ext4\x00', 0x8410, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000d00)='./binderfs/binder0\x00', 0x802, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000dc0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e00)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000e40), 0x2, 0x143102) writev(r0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f0000000f00)='./file0\x00', 0x0, 0x80, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000fc0)={0x2, 0x0, {&(0x7f0000001040)=""/205, 0xcd, 0x0, 0x3, 0x2}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000001140)='./file1\x00', 0x100) mkdir(&(0x7f0000001180)='./file0\x00', 0x0) mkdir(&(0x7f00000011c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000001200)='./bus\x00', &(0x7f0000001240), 0x0, &(0x7f0000001280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000012c0)='./bus\x00') r2 = open(&(0x7f0000001300)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000001340)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000001400), 0x7f03) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./mnt\x00', 0x1ff) 17.562739443s ago: executing program 6 (id=1128): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001a40)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001b00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001b80), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001c00)=0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001480)=r0, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@data_journal}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") 13.463904305s ago: executing program 6 (id=1141): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./config/nvmet/ports/1/addr_adrfam\x00', &(0x7f00000001c0)='anon_inodefs\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x204) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x2}) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r6 = socket$inet(0x2, 0x1, 0x6) connect(r6, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 12.439632711s ago: executing program 6 (id=1144): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f00000003c0)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000400)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, 0x0, 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000440)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 11.221339171s ago: executing program 6 (id=1150): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00e789da34e04a1ffb124b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d882eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235030000004ed0351cb5b416ba1c57217be5a338392f831617ee8c35bb61f0a9eeed3b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076a893752105f030c49caf2fdfe6bc9743a68593b576e2f2f6ab69e1b974ac90855ac250f8f73e16bc593730b88d7a3346b945e276875915040ce4901262cd8ce8191ee84e3ce5526a0a43b707cc711a3311f840cad641a013c6dd783aa895227b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a5c3106aba648f119eeab4747b9b53000475e0a34514ccf397ea6f170e018122a98f135beac48d2ed195e20fdd226c7f5a20000ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6507355cb1112fae6e3456bf8da53e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65ec742443c84e21a440998c8d69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b9bac96b838c98ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b3edd6c44d633b71bde97a3c10a468432ff3d4e63ce3ecfa640d44b70b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d563f8e4ec9a98016b6b58157deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a2993ff038d8099c229bda0801f8b81719d73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14f67beee619b9d9882f7eabfb5000000000000000000003ff8795b5ec2de11479e781396117c84449647684239c9b9475b389a6a76d36c31f39539d928d2c58f188b4bf713d0915df4cc7de48a930935dbb01c9422d604467d209fd1421c7fc503cabde4bb193ff3654377c6e4fb72dcfc835f760bae7447068c2e43433e3d77c6805b559a04f3ebb741a9bbf57274b1da7800000000000000000000000000000000000000001c4f225672f3465b2638e921d80d58dca4ee4592d8cc0c06b2e390b7b1c713a46bc8ece9be25f055a59032576bc00a844c32b46040a607eaeb886ec0cb8e90c5a4075caa8a358ab81e78ad794a20f772b73466a43cd696401521793e54b1c4aa58d506b661f393e7233337473f36c2dbb15ae673afe82ebe45cc6f776162e43b74d9b9ca6f68d6bc8261600b27431e0f6f4f1e0947f69d2d812ebc9d2a8869b14a84dbdcdc5055b97a241e2f707740bb966b6c58408aceb9f6a943f61405a5093c60c0dfb511b02f191ef6fa6e5a1a86687a44ec6098439a2ef55a4ba07e2b0f62ae86e1458f63f6b8b2d2b9990495f17b6d1052b19472a97d41204a8be48e380be2e6885c7de0807f2c154ad4f25b16027bc4aeb85dc798e7eef25631bfd79c8e0aff725dcd4b91c61bf8d72f74e4dbae59bddcea722c5135791af1f0ab1d70de8b01"], 0x1, 0x11fa, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000300)='./my_debugfs\x00', &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file1\x00', 0x48042, 0x8c) statfs(&(0x7f0000001b00)='./file1\x00', &(0x7f0000001b40)=""/186) 11.188775872s ago: executing program 0 (id=1151): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001a40)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001b00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001b80), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001c00)=0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001480)=r0, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@data_journal}]}, 0x3, 0x43b, &(0x7f0000000200)="$eJzs3MtvG8UfAPDv2kn6Sx+/mKo8mhYIFETEI2nSUnrgAgKJA0hIcCjHkKRVqNugJki0iiAgVI6oEnfEEYm/gBNcEHBC4gp3VKlCubT0ZLT2buI4dh5uEgf8+UibzOzOaubr3bFnduIE0LWG0h9JxMGI+D0iBmrZ1QWGar/uLC1M/r20MJlEpfLWX0m13O2lhcm8aH7egTxTiih8lsSxJvXOXb12caJcnr6S5UfnL70/Onf12nMzlyYuTF+Yvjx+9uzpU2MvnBl/flviTOO6PfjR7PGjr71z443Jczfe/fnbJI+/IY4tKbQ8MrTeaU9WKm1Vt1cdqksnPSvJDU6rtH752A3FiEgvV2+1/w9EMVYu3kC8+mlHGwfsqL71Dy9WgP+wdDQPdKP8gz6d/+bbLgw79oxbL9UmQGncd7KtdqRneWrf2zC/3U5DEXFu8e5X6Rb38hwCAGCTvk/HP882G/8V4oG6cv/P1lBKEXFfRByOiDMRcSQi7o+oln0wIh7aYv2NiyRrxz+Fm20Ftknp+O/FbG1r9fhveWWiVMxyh6rx9ybnZ8rTJ7PXZDh696X5sXXq+OGV375odax+/Jduaf35WDBrx82efavPmZqYn7iXmOvd+iRisKdZ/MnySkASEUcjYrDNOmae/uZ4q2Mbx7+zKl9HPFW7/ovREH8uWX99cvR/UZ4+OZrfFWv98uv1N1vV3+n40+u/v+n9vxx/Kalfr53beh3X//i85Zym3fu/L3l71b4PJ+bnr4xF9CWv1xpdv3+8odz4Svk0/uETzfv/4Vh5JY5FRHoTPxwRj0TEo1nbH4uIxyPixDrx//TyE++1H//OSuOfioi72fOAja//SqIvGvc0TxQv/vjdqkpLW4k/vf6nq6nhbM9m3v8206727mYAAAD49ylExMFICiPL6UJhZKT2N/xHYn+hPDs3/8z52Q8uT9W+I1CK3kL+pGug7nnoWDatz/PjDflT2XPjL4v91fzI5Gx5qtPBQ5c70KL/p/4sdrp1wI7r6XQDgI7R/6F76f/QvfR/6F5N+n9/J9oB7L5q/2/4V00fd6gtwO5q+Py37AddxPwfupf+D91L/4euNNcfG39JXkJiTSIKe6IZEjuU6PQ7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPb4JwAA///5++Y6") 9.836377285s ago: executing program 6 (id=1159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 9.417928906s ago: executing program 1 (id=1162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 8.843121911s ago: executing program 1 (id=1163): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = syz_open_pts(0xffffffffffffffff, 0x400000) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500200a14000000110001000000a885d348b8a8bcf89ecf16be0183d2aec112c4a9db273d390d7e4df0bc72928fa6f681acd535305818cef00000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x9840) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) pipe(&(0x7f0000000040)={0xffffffffffffffff}) fsopen(&(0x7f0000000180)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000340)) open(&(0x7f00000003c0)='./file0\x00', 0x305001, 0x8) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000440)={0x4, 0x7, 0x40, {0x762, 0x8}, 0x8000, 0xffff}) 8.543953348s ago: executing program 5 (id=1164): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r2 = dup(r1) write$make_it_fail(r2, &(0x7f00000003c0)='N\x00', 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 8.45844093s ago: executing program 1 (id=1165): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.393780471s ago: executing program 6 (id=1166): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001a40)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001b00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001b80), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001c00)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f00000007c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000900), 0x366, 0x10, &(0x7f0000000940), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000009c0)={r3, r4, 0x26, 0x0, @void}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x0, 0x5002004a, 0xb, 0x0, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {0x1d000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16, 0x0, 0x0, 0xffffffff}, {0x4, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {0x0, 0xa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4dd) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@data_journal}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") 8.378736062s ago: executing program 5 (id=1167): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xffffffff}]}}]}, 0x3c}}, 0x20000000) 8.263385895s ago: executing program 0 (id=1168): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create(0x80) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x20, &(0x7f0000000580), 0x4) connect$inet6(r1, &(0x7f0000000100)={0x2, 0x4e23, 0x80, @private2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x4bf, @empty, 0x34bbe269}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newsa={0x140, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x8a}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) close(0x4) 8.213784686s ago: executing program 5 (id=1169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_getscheduler(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_setup(0x5f8b, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x40000101, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6, 0x401d032, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) 8.200508327s ago: executing program 1 (id=1170): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x11fa, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./my_debugfs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file1\x00', 0x48042, 0x8c) statfs(&(0x7f0000001b00)='./file1\x00', &(0x7f0000001b40)=""/186) 6.759967932s ago: executing program 5 (id=1171): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x40, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000001680)='./bus\x00', 0x40942, 0x0) 6.407858921s ago: executing program 0 (id=1172): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @loopback}, 0x486, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x2, 0x20e7}) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x840) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x1, 0x0, 0x2, 0x6, 0x3fbc}, 0x20) 6.272663754s ago: executing program 0 (id=1173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x34}}, 0x0) 3.771970617s ago: executing program 1 (id=1174): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f00000003c0)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000400)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = openat$dsp1(0xffffff9c, 0x0, 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000440)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r4], 0x0, 0x38}, 0x28) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 3.117271043s ago: executing program 0 (id=1177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) pselect6(0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 2.527989088s ago: executing program 1 (id=1178): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001b00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001b80), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000001c00)=0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001480)=r0, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@data_journal}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") 2.519383568s ago: executing program 2 (id=1179): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r2 = dup(r1) write$make_it_fail(r2, &(0x7f00000003c0)='N\x00', 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 2.359264172s ago: executing program 2 (id=1180): r0 = epoll_create(0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x0, 0x2000000}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) pread64(r0, &(0x7f00000004c0)=""/222, 0xde, 0x8001) socket$inet6(0xa, 0x3, 0xff) 2.093804039s ago: executing program 5 (id=1181): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000280), 0x400000000000041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000c80)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = getpid() openat$fuse(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0) lremovexattr(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)=@known='system.posix_acl_access\x00') syz_pidfd_open(r3, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 1.734110557s ago: executing program 5 (id=1182): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create(0x80) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x20, &(0x7f0000000580), 0x4) connect$inet6(r1, &(0x7f0000000100)={0x2, 0x4e23, 0x80, @private2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x4bf, @empty, 0x34bbe269}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newsa={0x140, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x8a}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) close(0x4) 1.468497594s ago: executing program 2 (id=1183): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @loopback}, 0x486, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x2, 0x20e7}) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)}], 0x1}, 0x840) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x1, 0x0, 0x2, 0x6, 0x3fbc}, 0x20) 1.303179698s ago: executing program 2 (id=1184): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x11fa, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./my_debugfs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000340)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./file1\x00', 0x48042, 0x8c) statfs(&(0x7f0000001b00)='./file1\x00', &(0x7f0000001b40)=""/186) 1.109131713s ago: executing program 0 (id=1185): syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f00000006c0)=[@increfs, @increfs={0x40046304, 0x3}]}) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) keyctl$read(0x2, r8, 0x0, 0x0) 172.064076ms ago: executing program 2 (id=1186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 0s ago: executing program 2 (id=1187): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x802, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x2, 0xc9}}}, 0x6) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x200c00) openat(r0, &(0x7f00000001c0)='./dir0/file0\x00', 0xe80, 0x1) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x1) kernel console output (not intermixed with test programs): c0 [ 231.714766][ T5818] ext4_readdir+0x4ba/0x3ac0 [ 231.719403][ T5818] ? __lock_acquire+0x7d40/0x7d40 [ 231.724515][ T5818] ? ext4_dir_llseek+0x4b0/0x4b0 [ 231.729510][ T5818] ? aa_path_link+0x8a0/0x8a0 [ 231.734406][ T5818] ? read_lock_is_recursive+0x10/0x10 [ 231.739801][ T5818] ? mutex_lock_io_nested+0x60/0x60 [ 231.745019][ T5818] ? end_current_label_crit_section+0x14b/0x170 [ 231.751401][ T5818] ? iterate_dir+0x10d/0x550 [ 231.756027][ T5818] ? down_read_killable+0x1ce/0x340 [ 231.761235][ T5818] ? fsnotify_perm+0x254/0x560 [ 231.766015][ T5818] iterate_dir+0x213/0x550 [ 231.770447][ T5818] ? ext4_dir_llseek+0x4b0/0x4b0 [ 231.775494][ T5818] __se_sys_getdents+0xf2/0x260 [ 231.780363][ T5818] ? __x64_sys_getdents+0x80/0x80 [ 231.785395][ T5818] ? fillonedir+0x4c0/0x4c0 [ 231.789935][ T5818] ? lockdep_hardirqs_on+0x94/0x140 [ 231.795147][ T5818] do_syscall_64+0x4c/0xa0 [ 231.799661][ T5818] ? clear_bhb_loop+0x30/0x80 [ 231.804434][ T5818] ? clear_bhb_loop+0x30/0x80 [ 231.809127][ T5818] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.815052][ T5818] RIP: 0033:0x7fda7f82d559 [ 231.819478][ T5818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.839098][ T5818] RSP: 002b:00007fda7da85028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 231.847532][ T5818] RAX: ffffffffffffffda RBX: 00007fda7fab4fa0 RCX: 00007fda7f82d559 [ 231.855565][ T5818] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000006 [ 231.863642][ T5818] RBP: 00007fda7f8c48b0 R08: 0000000000000000 R09: 0000000000000000 [ 231.871826][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.879818][ T5818] R13: 00007fda7fab5038 R14: 00007fda7fab4fa0 R15: 00007ffcd5ec93a8 [ 231.887843][ T5818] [ 232.188193][ T5828] loop3: detected capacity change from 0 to 8192 [ 232.767280][ T5835] loop2: detected capacity change from 0 to 256 [ 233.007346][ T5842] nvmet_tcp: malformed ip/port passed: :4420 [ 233.720296][ T5852] loop2: detected capacity change from 0 to 512 [ 233.751720][ T5845] loop4: detected capacity change from 0 to 8192 [ 233.778774][ T5852] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 234.031632][ T5852] EXT4-fs (loop2): 1 truncate cleaned up [ 234.037607][ T5852] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 234.062191][ T5859] loop0: detected capacity change from 0 to 256 [ 235.154975][ T5871] loop2: detected capacity change from 0 to 256 [ 236.105082][ T5883] loop2: detected capacity change from 0 to 8192 [ 237.592018][ T5896] loop1: detected capacity change from 0 to 512 [ 237.632974][ T5896] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 237.949511][ T5896] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.403: bad orphan inode 13 [ 237.960230][ T5896] ext4_test_bit(bit=12, block=18) = 1 [ 237.965716][ T5896] is_bad_inode(inode)=0 [ 237.969904][ T5896] NEXT_ORPHAN(inode)=0 [ 237.974105][ T5896] max_ino=32 [ 237.977310][ T5896] i_nlink=1 [ 237.980470][ T5896] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.392907][ T26] audit: type=1800 audit(2000000004.690:35): pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.409" name="idProduct" dev="configfs" ino=37349 res=0 errno=0 [ 240.555370][ T5922] loop0: detected capacity change from 0 to 256 [ 241.023372][ T26] audit: type=1800 audit(2000000005.310:36): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.408" name="idVendor" dev="configfs" ino=37360 res=0 errno=0 [ 241.457563][ T26] audit: type=1800 audit(2000000005.310:37): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.408" name="idProduct" dev="configfs" ino=37361 res=0 errno=0 [ 241.521687][ T5935] nvmet_tcp: malformed ip/port passed: :4420 [ 241.559648][ T26] audit: type=1800 audit(2000000005.310:38): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.408" name="serialnumber" dev="configfs" ino=37362 res=0 errno=0 [ 241.773588][ T26] audit: type=1800 audit(2000000005.310:39): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.408" name="report_length" dev="configfs" ino=37363 res=0 errno=0 [ 241.799780][ T26] audit: type=1800 audit(2000000005.310:40): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.408" name="report_desc" dev="configfs" ino=37364 res=0 errno=0 [ 242.063066][ T26] audit: type=1800 audit(2000000005.310:41): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.408" name="UDC" dev="configfs" ino=37365 res=0 errno=0 [ 242.193186][ T4272] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 242.594492][ T4272] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 242.726434][ T4272] usb 3-1: config 0 interface 0 has no altsetting 0 [ 242.905123][ T4272] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 242.915726][ T4272] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 242.935480][ T4272] usb 3-1: Product: syz [ 242.943157][ T4272] usb 3-1: Manufacturer: syz [ 242.953604][ T4272] usb 3-1: SerialNumber: syz [ 242.989832][ T4272] usb 3-1: config 0 descriptor?? [ 243.074056][ T4272] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 243.128927][ T4310] udevd[4310]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.468314][ T5945] loop4: detected capacity change from 0 to 512 [ 243.506853][ T5945] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 243.602286][ T5945] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.416: bad orphan inode 13 [ 243.613654][ T5945] ext4_test_bit(bit=12, block=18) = 1 [ 243.619068][ T5945] is_bad_inode(inode)=0 [ 243.623771][ T5945] NEXT_ORPHAN(inode)=0 [ 243.627861][ T5945] max_ino=32 [ 243.631089][ T5945] i_nlink=1 [ 243.634310][ T5945] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 244.713461][ T4320] usb 3-1: USB disconnect, device number 3 [ 244.764196][ T5955] loop1: detected capacity change from 0 to 256 [ 245.933004][ T5966] futex_wake_op: syz.4.422 tries to shift op by 144; fix this program [ 247.055952][ T5974] nvmet_tcp: malformed ip/port passed: :4420 [ 248.099992][ T5981] loop3: detected capacity change from 0 to 512 [ 248.248476][ T5981] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.435061][ T5981] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.428: bad orphan inode 13 [ 248.453245][ T5981] ext4_test_bit(bit=12, block=18) = 1 [ 248.458791][ T5981] is_bad_inode(inode)=0 [ 248.463023][ T5981] NEXT_ORPHAN(inode)=0 [ 248.467134][ T5981] max_ino=32 [ 248.470367][ T5981] i_nlink=1 [ 248.473593][ T5981] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.711750][ T5987] loop0: detected capacity change from 0 to 8192 [ 249.402989][ T4272] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 249.803789][ T4272] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 249.881225][ T4272] usb 3-1: config 0 interface 0 has no altsetting 0 [ 250.077674][ T5997] loop3: detected capacity change from 0 to 8192 [ 250.113655][ T4272] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.132934][ T4272] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 250.174317][ T4272] usb 3-1: Product: syz [ 250.203255][ T4272] usb 3-1: Manufacturer: syz [ 250.207930][ T4272] usb 3-1: SerialNumber: syz [ 250.235182][ T4272] usb 3-1: config 0 descriptor?? [ 250.326945][ T4272] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 250.440683][ T4310] udevd[4310]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.713892][ T6007] netlink: 100 bytes leftover after parsing attributes in process `syz.3.431'. [ 251.457689][ T26] audit: type=1800 audit(2000000015.780:42): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.432" name="idVendor" dev="configfs" ino=37471 res=0 errno=0 [ 251.673823][ T6013] loop1: detected capacity change from 0 to 256 [ 252.791359][ T4203] usb 3-1: USB disconnect, device number 4 [ 252.819588][ T6023] loop3: detected capacity change from 0 to 256 [ 254.443664][ T6042] loop0: detected capacity change from 0 to 512 [ 254.527068][ T6042] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 255.222351][ T6040] loop2: detected capacity change from 0 to 8192 [ 255.279857][ T6042] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.439: bad orphan inode 13 [ 255.290401][ T6042] ext4_test_bit(bit=12, block=18) = 1 [ 255.297028][ T6042] is_bad_inode(inode)=0 [ 255.301254][ T6042] NEXT_ORPHAN(inode)=0 [ 255.305378][ T6042] max_ino=32 [ 255.308584][ T6042] i_nlink=1 [ 255.311754][ T6042] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 255.596257][ T6054] netlink: 100 bytes leftover after parsing attributes in process `syz.3.443'. [ 255.694488][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.859834][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.497348][ T6060] loop3: detected capacity change from 0 to 256 [ 257.466546][ T6072] udc-core: couldn't find an available UDC or it's busy [ 257.473667][ T6072] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 258.281911][ T6074] loop1: detected capacity change from 0 to 256 [ 260.802458][ T6089] ptp ptp0: guarantee physical clock free running [ 260.982002][ T6093] loop1: detected capacity change from 0 to 256 [ 261.049963][ T6095] loop3: detected capacity change from 0 to 512 [ 261.880667][ T6095] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 261.907779][ T6101] loop0: detected capacity change from 0 to 512 [ 261.978784][ T6101] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.004185][ T6101] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.455: bad orphan inode 13 [ 262.014880][ T6095] EXT4-fs (loop3): 1 truncate cleaned up [ 262.020635][ T6095] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 262.058017][ T6101] ext4_test_bit(bit=12, block=18) = 1 [ 262.063829][ T6101] is_bad_inode(inode)=0 [ 262.068068][ T6101] NEXT_ORPHAN(inode)=0 [ 262.072180][ T6101] max_ino=32 [ 262.075467][ T6101] i_nlink=1 [ 262.078701][ T6101] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.337306][ T6111] netlink: 100 bytes leftover after parsing attributes in process `syz.1.456'. [ 262.948557][ T6115] loop1: detected capacity change from 0 to 256 [ 267.100716][ T6146] loop3: detected capacity change from 0 to 256 [ 267.473150][ T2300] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 267.510114][ T6150] ptp ptp0: guarantee physical clock free running [ 267.608303][ T26] audit: type=1800 audit(2000000000.100:43): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.467" name="idVendor" dev="configfs" ino=37646 res=0 errno=0 [ 267.878425][ T6154] loop4: detected capacity change from 0 to 512 [ 267.891040][ T6157] loop2: detected capacity change from 0 to 512 [ 267.903053][ T2300] usb 2-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 267.933157][ T2300] usb 2-1: config 0 interface 0 has no altsetting 0 [ 267.957446][ T6154] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 267.985417][ T6157] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 268.015381][ T6154] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.468: bad orphan inode 13 [ 268.026480][ T6154] ext4_test_bit(bit=12, block=18) = 1 [ 268.031979][ T6154] is_bad_inode(inode)=0 [ 268.036351][ T6154] NEXT_ORPHAN(inode)=0 [ 268.040527][ T6154] max_ino=32 [ 268.043841][ T6154] i_nlink=1 [ 268.047054][ T6154] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 268.912998][ T2300] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 268.981910][ T2300] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 269.551590][ T2300] usb 2-1: Product: syz [ 269.556006][ T2300] usb 2-1: Manufacturer: syz [ 269.568812][ T2300] usb 2-1: config 0 descriptor?? [ 269.575821][ T6157] EXT4-fs (loop2): 1 truncate cleaned up [ 269.597120][ T2300] usb 2-1: can't set config #0, error -71 [ 269.605870][ T6157] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 269.626214][ T2300] usb 2-1: USB disconnect, device number 4 [ 269.642028][ T6170] loop0: detected capacity change from 0 to 256 [ 269.709215][ T6175] loop1: detected capacity change from 0 to 256 [ 272.420732][ T26] audit: type=1800 audit(2000000004.900:44): pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.480" name="idVendor" dev="configfs" ino=38002 res=0 errno=0 [ 272.846913][ T6205] futex_wake_op: syz.4.481 tries to shift op by 144; fix this program [ 274.218241][ T26] audit: type=1800 audit(2000000006.690:45): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.484" name="idVendor" dev="configfs" ino=37729 res=0 errno=0 [ 274.289800][ T26] audit: type=1800 audit(2000000006.690:46): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.484" name="idProduct" dev="configfs" ino=37730 res=0 errno=0 [ 274.672967][ T2300] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 275.094025][ T26] audit: type=1800 audit(2000000006.690:47): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.484" name="report_length" dev="configfs" ino=37731 res=0 errno=0 [ 275.136979][ T6222] loop2: detected capacity change from 0 to 512 [ 275.182909][ T26] audit: type=1800 audit(2000000006.690:48): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.484" name="report_desc" dev="configfs" ino=37732 res=0 errno=0 [ 275.186776][ T6222] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 275.218719][ T26] audit: type=1800 audit(2000000006.700:49): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.484" name="UDC" dev="configfs" ino=37733 res=0 errno=0 [ 275.270574][ T6222] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.485: bad orphan inode 13 [ 275.281662][ T6222] ext4_test_bit(bit=12, block=18) = 1 [ 275.287209][ T6222] is_bad_inode(inode)=0 [ 275.291546][ T6222] NEXT_ORPHAN(inode)=0 [ 275.295771][ T6222] max_ino=32 [ 275.299012][ T6222] i_nlink=1 [ 275.302213][ T6222] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 275.352923][ T2300] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 275.372823][ T2300] usb 4-1: config 0 interface 0 has no altsetting 0 [ 275.533374][ T2300] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 275.565796][ T2300] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 275.654484][ T2300] usb 4-1: Product: syz [ 275.751592][ T2300] usb 4-1: Manufacturer: syz [ 275.823053][ T2300] usb 4-1: SerialNumber: syz [ 275.907006][ T2300] usb 4-1: config 0 descriptor?? [ 276.101935][ T2300] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 276.177849][ T4310] udevd[4310]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.208827][ T6231] loop2: detected capacity change from 0 to 512 [ 276.293945][ T6231] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 276.336768][ T6231] EXT4-fs (loop2): 1 truncate cleaned up [ 276.352917][ T6231] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 276.876489][ T6237] loop1: detected capacity change from 0 to 256 [ 277.865604][ T4303] usb 4-1: USB disconnect, device number 7 [ 278.271829][ T6252] futex_wake_op: syz.2.493 tries to shift op by 144; fix this program [ 278.294023][ T26] audit: type=1800 audit(2000000010.790:50): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.495" name="idVendor" dev="configfs" ino=37784 res=0 errno=0 [ 278.361565][ T26] audit: type=1800 audit(2000000010.790:51): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.495" name="idProduct" dev="configfs" ino=37785 res=0 errno=0 [ 278.382678][ T26] audit: type=1800 audit(2000000010.810:52): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.495" name="report_length" dev="configfs" ino=37786 res=0 errno=0 [ 278.413603][ T26] audit: type=1800 audit(2000000010.810:53): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.495" name="report_desc" dev="configfs" ino=37787 res=0 errno=0 [ 278.938532][ T26] audit: type=1800 audit(2000000010.810:54): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.495" name="UDC" dev="configfs" ino=37788 res=0 errno=0 [ 279.131355][ T6264] loop3: detected capacity change from 0 to 128 [ 279.243275][ T6264] EXT4-fs (loop3): Test dummy encryption mode enabled [ 279.669061][ T6264] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 279.686379][ T6264] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 279.732603][ T6272] loop2: detected capacity change from 0 to 256 [ 279.750693][ T6264] FAULT_INJECTION: forcing a failure. [ 279.750693][ T6264] name failslab, interval 1, probability 0, space 0, times 0 [ 279.816679][ T6275] loop0: detected capacity change from 0 to 512 [ 279.823396][ T6264] CPU: 0 PID: 6264 Comm: syz.3.497 Not tainted syzkaller #0 [ 279.830733][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 279.840833][ T6264] Call Trace: [ 279.844441][ T6264] [ 279.847385][ T6264] dump_stack_lvl+0x188/0x250 [ 279.852082][ T6264] ? show_regs_print_info+0x20/0x20 [ 279.857296][ T6264] ? load_image+0x410/0x410 [ 279.861809][ T6264] ? __might_sleep+0xf0/0xf0 [ 279.866410][ T6264] ? __lock_acquire+0x7d40/0x7d40 [ 279.871449][ T6264] should_fail+0x383/0x4b0 [ 279.875892][ T6264] should_failslab+0x5/0x20 [ 279.880433][ T6264] slab_pre_alloc_hook+0x51/0xc0 [ 279.885386][ T6264] kmem_cache_alloc_trace+0x47/0x290 [ 279.890771][ T6264] ? ext4_readdir+0x4ba/0x3ac0 [ 279.895550][ T6264] ext4_readdir+0x4ba/0x3ac0 [ 279.900164][ T6264] ? __lock_acquire+0x7d40/0x7d40 [ 279.905216][ T6264] ? ext4_dir_llseek+0x4b0/0x4b0 [ 279.910165][ T6264] ? aa_path_link+0x8a0/0x8a0 [ 279.914843][ T6264] ? read_lock_is_recursive+0x10/0x10 [ 279.920222][ T6264] ? mutex_lock_io_nested+0x60/0x60 [ 279.925445][ T6264] ? end_current_label_crit_section+0x14b/0x170 [ 279.931699][ T6264] ? iterate_dir+0x10d/0x550 [ 279.936299][ T6264] ? down_read_killable+0x1ce/0x340 [ 279.941625][ T6264] ? fsnotify_perm+0x254/0x560 [ 279.946403][ T6264] iterate_dir+0x213/0x550 [ 279.950847][ T6264] ? ext4_dir_llseek+0x4b0/0x4b0 [ 279.955795][ T6264] __se_sys_getdents+0xf2/0x260 [ 279.960656][ T6264] ? __x64_sys_getdents+0x80/0x80 [ 279.965711][ T6264] ? fillonedir+0x4c0/0x4c0 [ 279.970228][ T6264] ? lockdep_hardirqs_on+0x94/0x140 [ 279.975444][ T6264] do_syscall_64+0x4c/0xa0 [ 279.979896][ T6264] ? clear_bhb_loop+0x30/0x80 [ 279.984593][ T6264] ? clear_bhb_loop+0x30/0x80 [ 279.989305][ T6264] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.995327][ T6264] RIP: 0033:0x7f64a01ee559 [ 279.999763][ T6264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.019376][ T6264] RSP: 002b:00007f649e446028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 280.027796][ T6264] RAX: ffffffffffffffda RBX: 00007f64a0475fa0 RCX: 00007f64a01ee559 [ 280.035774][ T6264] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000006 [ 280.043751][ T6264] RBP: 00007f64a02858b0 R08: 0000000000000000 R09: 0000000000000000 [ 280.051738][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.059737][ T6264] R13: 00007f64a0476038 R14: 00007f64a0475fa0 R15: 00007ffeecffe9a8 [ 280.067731][ T6264] [ 280.365704][ T6275] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 280.515528][ T6275] EXT4-fs (loop0): 1 truncate cleaned up [ 280.552955][ T6275] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 281.262065][ T6289] loop2: detected capacity change from 0 to 8192 [ 281.492596][ T6296] loop0: detected capacity change from 0 to 256 [ 282.097906][ T6309] loop4: detected capacity change from 0 to 512 [ 282.228333][ T6309] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 282.825892][ T6309] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.509: bad orphan inode 13 [ 282.837623][ T6309] ext4_test_bit(bit=12, block=18) = 1 [ 282.843832][ T6309] is_bad_inode(inode)=0 [ 282.848095][ T6309] NEXT_ORPHAN(inode)=0 [ 282.852203][ T6309] max_ino=32 [ 282.855549][ T6309] i_nlink=1 [ 282.858780][ T6309] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 283.332932][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 284.019294][ T6319] futex_wake_op: syz.0.511 tries to shift op by 144; fix this program [ 284.031582][ T6321] loop1: detected capacity change from 0 to 128 [ 284.048687][ T6321] EXT4-fs (loop1): Test dummy encryption mode enabled [ 284.155493][ T6321] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 284.407274][ T6321] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 284.841658][ T6321] FAULT_INJECTION: forcing a failure. [ 284.841658][ T6321] name failslab, interval 1, probability 0, space 0, times 0 [ 284.854724][ T6321] CPU: 0 PID: 6321 Comm: syz.1.513 Not tainted syzkaller #0 [ 284.862077][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 284.872168][ T6321] Call Trace: [ 284.875487][ T6321] [ 284.878444][ T6321] dump_stack_lvl+0x188/0x250 [ 284.883165][ T6321] ? show_regs_print_info+0x20/0x20 [ 284.888426][ T6321] ? load_image+0x410/0x410 [ 284.892975][ T6321] ? __might_sleep+0xf0/0xf0 [ 284.897610][ T6321] ? __lock_acquire+0x7d40/0x7d40 [ 284.902669][ T6321] ? ext4fs_dirhash+0x2e0/0x2e0 [ 284.907567][ T6321] should_fail+0x383/0x4b0 [ 284.912052][ T6321] should_failslab+0x5/0x20 [ 284.916596][ T6321] slab_pre_alloc_hook+0x51/0xc0 [ 284.921575][ T6321] __kmalloc+0x6b/0x340 [ 284.925755][ T6321] ? ext4_htree_store_dirent+0x80/0x550 [ 284.931342][ T6321] ext4_htree_store_dirent+0x80/0x550 [ 284.936783][ T6321] htree_dirblock_to_tree+0x9df/0xee0 [ 284.942197][ T6321] ? unwind_get_return_address+0x49/0x80 [ 284.947875][ T6321] ? stack_trace_save+0xf0/0xf0 [ 284.952775][ T6321] ? ext4_htree_fill_tree+0x1100/0x1100 [ 284.958362][ T6321] ? __lock_acquire+0x13b3/0x7d40 [ 284.963449][ T6321] ext4_htree_fill_tree+0x60f/0x1100 [ 284.968800][ T6321] ? ext4_handle_dirty_dirblock+0x650/0x650 [ 284.974768][ T6321] ext4_readdir+0x2c78/0x3ac0 [ 284.979526][ T6321] ? ext4_dir_llseek+0x4b0/0x4b0 [ 284.984586][ T6321] ? aa_path_link+0x8a0/0x8a0 [ 284.989290][ T6321] ? read_lock_is_recursive+0x10/0x10 [ 284.994676][ T6321] ? mutex_lock_io_nested+0x60/0x60 [ 284.999883][ T6321] ? end_current_label_crit_section+0x14b/0x170 [ 285.006132][ T6321] ? iterate_dir+0x10d/0x550 [ 285.010761][ T6321] ? down_read_killable+0x1ce/0x340 [ 285.015980][ T6321] ? fsnotify_perm+0x254/0x560 [ 285.020794][ T6321] iterate_dir+0x213/0x550 [ 285.025242][ T6321] ? ext4_dir_llseek+0x4b0/0x4b0 [ 285.030281][ T6321] __se_sys_getdents+0xf2/0x260 [ 285.035139][ T6321] ? __x64_sys_getdents+0x80/0x80 [ 285.040172][ T6321] ? fillonedir+0x4c0/0x4c0 [ 285.044715][ T6321] ? lockdep_hardirqs_on+0x94/0x140 [ 285.049928][ T6321] do_syscall_64+0x4c/0xa0 [ 285.054350][ T6321] ? clear_bhb_loop+0x30/0x80 [ 285.059039][ T6321] ? clear_bhb_loop+0x30/0x80 [ 285.063726][ T6321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.069918][ T6321] RIP: 0033:0x7fa0d12f3559 [ 285.074343][ T6321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.094003][ T6321] RSP: 002b:00007fa0cf54b028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 285.102442][ T6321] RAX: ffffffffffffffda RBX: 00007fa0d157afa0 RCX: 00007fa0d12f3559 [ 285.110430][ T6321] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000006 [ 285.118416][ T6321] RBP: 00007fa0d138a8b0 R08: 0000000000000000 R09: 0000000000000000 [ 285.126403][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.134404][ T6321] R13: 00007fa0d157b038 R14: 00007fa0d157afa0 R15: 00007fff80a70bf8 [ 285.142403][ T6321] [ 285.542870][ T6329] loop0: detected capacity change from 0 to 256 [ 286.059188][ T6335] loop1: detected capacity change from 0 to 8192 [ 288.383116][ T6355] ptp ptp0: guarantee physical clock free running [ 288.422157][ T6360] loop2: detected capacity change from 0 to 256 [ 288.686540][ T6366] futex_wake_op: syz.0.524 tries to shift op by 144; fix this program [ 289.982396][ T6377] loop4: detected capacity change from 0 to 128 [ 290.420507][ T6377] EXT4-fs (loop4): Test dummy encryption mode enabled [ 290.799037][ T6377] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 291.053097][ T6377] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 291.214464][ T6377] FAULT_INJECTION: forcing a failure. [ 291.214464][ T6377] name failslab, interval 1, probability 0, space 0, times 0 [ 291.240441][ T6377] CPU: 0 PID: 6377 Comm: syz.4.526 Not tainted syzkaller #0 [ 291.247811][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 291.257909][ T6377] Call Trace: [ 291.261230][ T6377] [ 291.264197][ T6377] dump_stack_lvl+0x188/0x250 [ 291.268922][ T6377] ? show_regs_print_info+0x20/0x20 [ 291.274171][ T6377] ? load_image+0x410/0x410 [ 291.278721][ T6377] ? __might_sleep+0xf0/0xf0 [ 291.283354][ T6377] ? __lock_acquire+0x7d40/0x7d40 [ 291.288422][ T6377] ? ext4fs_dirhash+0x2e0/0x2e0 [ 291.293319][ T6377] should_fail+0x383/0x4b0 [ 291.297792][ T6377] should_failslab+0x5/0x20 [ 291.302344][ T6377] slab_pre_alloc_hook+0x51/0xc0 [ 291.302368][ T6394] loop0: detected capacity change from 0 to 256 [ 291.307325][ T6377] __kmalloc+0x6b/0x340 [ 291.307378][ T6377] ? ext4_htree_store_dirent+0x80/0x550 [ 291.323376][ T6377] ext4_htree_store_dirent+0x80/0x550 [ 291.328809][ T6377] htree_dirblock_to_tree+0x9df/0xee0 [ 291.334220][ T6377] ? unwind_get_return_address+0x49/0x80 [ 291.339900][ T6377] ? stack_trace_save+0xf0/0xf0 [ 291.344785][ T6377] ? ext4_htree_fill_tree+0x1100/0x1100 [ 291.350357][ T6377] ? __lock_acquire+0x13b3/0x7d40 [ 291.355399][ T6377] ext4_htree_fill_tree+0x60f/0x1100 [ 291.360720][ T6377] ? ext4_handle_dirty_dirblock+0x650/0x650 [ 291.366663][ T6377] ext4_readdir+0x2c78/0x3ac0 [ 291.371375][ T6377] ? ext4_dir_llseek+0x4b0/0x4b0 [ 291.376487][ T6377] ? aa_path_link+0x8a0/0x8a0 [ 291.381177][ T6377] ? read_lock_is_recursive+0x10/0x10 [ 291.386566][ T6377] ? mutex_lock_io_nested+0x60/0x60 [ 291.391777][ T6377] ? end_current_label_crit_section+0x14b/0x170 [ 291.398033][ T6377] ? iterate_dir+0x10d/0x550 [ 291.402724][ T6377] ? down_read_killable+0x1ce/0x340 [ 291.407964][ T6377] ? fsnotify_perm+0x254/0x560 [ 291.412804][ T6377] iterate_dir+0x213/0x550 [ 291.417266][ T6377] ? ext4_dir_llseek+0x4b0/0x4b0 [ 291.422371][ T6377] __se_sys_getdents+0xf2/0x260 [ 291.427257][ T6377] ? __x64_sys_getdents+0x80/0x80 [ 291.432317][ T6377] ? fillonedir+0x4c0/0x4c0 [ 291.436837][ T6377] ? lockdep_hardirqs_on+0x94/0x140 [ 291.442054][ T6377] do_syscall_64+0x4c/0xa0 [ 291.446487][ T6377] ? clear_bhb_loop+0x30/0x80 [ 291.451183][ T6377] ? clear_bhb_loop+0x30/0x80 [ 291.455874][ T6377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.461781][ T6377] RIP: 0033:0x7ffa60344559 [ 291.466209][ T6377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.485910][ T6377] RSP: 002b:00007ffa5e59c028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 291.494337][ T6377] RAX: ffffffffffffffda RBX: 00007ffa605cbfa0 RCX: 00007ffa60344559 [ 291.502322][ T6377] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000006 [ 291.510305][ T6377] RBP: 00007ffa603db8b0 R08: 0000000000000000 R09: 0000000000000000 [ 291.518325][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.526329][ T6377] R13: 00007ffa605cc038 R14: 00007ffa605cbfa0 R15: 00007fff5e25bda8 [ 291.534345][ T6377] [ 294.443102][ T23] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 295.566222][ T6426] loop4: detected capacity change from 0 to 256 [ 295.724035][ T23] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 295.740595][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 295.923841][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 296.147150][ T23] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 296.383563][ T23] usb 3-1: Product: syz [ 296.387985][ T23] usb 3-1: Manufacturer: syz [ 296.392615][ T23] usb 3-1: SerialNumber: syz [ 296.400485][ T23] usb 3-1: config 0 descriptor?? [ 297.912339][ T23] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 297.921085][ T23] usb 3-1: USB disconnect, device number 5 [ 298.306806][ T4313] udevd[4313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.444694][ T6446] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 298.891287][ T6458] loop3: detected capacity change from 0 to 256 [ 298.945984][ T6456] loop4: detected capacity change from 0 to 4096 [ 299.060986][ T6456] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsdgroups,acl,errors=remount-ro,norecovery,. Quota mode: writeback. [ 299.100773][ T6456] EXT4-fs error (device loop4): ext4_empty_dir:3156: inode #12: block 80: comm syz.4.548: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 299.193430][ T6456] EXT4-fs (loop4): Remounting filesystem read-only [ 299.202950][ T6456] EXT4-fs warning (device loop4): ext4_empty_dir:3158: inode #12: comm syz.4.548: directory missing '..' [ 301.083055][ T5757] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 301.607474][ T6484] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 301.623041][ T6484] udc-core: couldn't find an available UDC or it's busy [ 301.630102][ T6484] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 302.303189][ T5757] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 302.351321][ T5757] usb 3-1: config 0 interface 0 has no altsetting 0 [ 302.571252][ T5757] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 302.601265][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 302.646673][ T5757] usb 3-1: Product: syz [ 302.666872][ T5757] usb 3-1: Manufacturer: syz [ 302.690151][ T5757] usb 3-1: SerialNumber: syz [ 302.728985][ T5757] usb 3-1: config 0 descriptor?? [ 302.868415][ T5757] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 303.036255][ T4310] udevd[4310]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.221454][ T6498] loop3: detected capacity change from 0 to 256 [ 303.456051][ T6503] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 304.125046][ T23] usb 3-1: USB disconnect, device number 6 [ 305.019613][ T6524] loop3: detected capacity change from 0 to 8192 [ 305.556781][ T6536] futex_wake_op: syz.2.568 tries to shift op by 144; fix this program [ 306.243831][ T6545] loop0: detected capacity change from 0 to 256 [ 306.283340][ T6548] overlayfs: failed to clone upperpath [ 306.305745][ T6549] loop2: detected capacity change from 0 to 128 [ 306.344303][ T6549] FAT-fs (loop2): Unrecognized mount option "flush=®D·0_Aœ”òÓÒ‚Fh‡WðÐO--¶#¥ÁH-û|E¬¢‘‰" or missing value [ 308.453738][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 308.833113][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 308.982953][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.140856][ T13] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 310.150830][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.170026][ T6572] futex_wake_op: syz.4.580 tries to shift op by 144; fix this program [ 310.173277][ T13] usb 3-1: config 0 descriptor?? [ 310.202984][ T13] usb 3-1: can't set config #0, error -71 [ 310.214450][ T13] usb 3-1: USB disconnect, device number 7 [ 311.715864][ T26] audit: type=1800 audit(2000000023.330:55): pid=6588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.578" name="idProduct" dev="configfs" ino=39198 res=0 errno=0 [ 311.752154][ T6589] loop0: detected capacity change from 0 to 256 [ 312.016460][ T6591] ptp ptp0: guarantee physical clock free running [ 313.020648][ T6603] FAULT_INJECTION: forcing a failure. [ 313.020648][ T6603] name failslab, interval 1, probability 0, space 0, times 0 [ 313.040381][ T6603] CPU: 1 PID: 6603 Comm: syz.3.588 Not tainted syzkaller #0 [ 313.047751][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 313.057844][ T6603] Call Trace: [ 313.061160][ T6603] [ 313.064258][ T6603] dump_stack_lvl+0x188/0x250 [ 313.068971][ T6603] ? copy_process+0x17a7/0x3e70 [ 313.073964][ T6603] ? __se_sys_clone3+0x312/0x3d0 [ 313.078941][ T6603] ? show_regs_print_info+0x20/0x20 [ 313.084186][ T6603] ? load_image+0x410/0x410 [ 313.088746][ T6603] should_fail+0x383/0x4b0 [ 313.093214][ T6603] should_failslab+0x5/0x20 [ 313.097753][ T6603] slab_pre_alloc_hook+0x51/0xc0 [ 313.102720][ T6603] ? anon_vma_clone+0xbc/0x4d0 [ 313.107511][ T6603] kmem_cache_alloc+0x3d/0x280 [ 313.112335][ T6603] anon_vma_clone+0xbc/0x4d0 [ 313.116969][ T6603] anon_vma_fork+0x85/0x520 [ 313.121506][ T6603] ? copy_mm+0x8b6/0x13d0 [ 313.125863][ T6603] ? dup_userfaultfd+0xa7/0x5e0 [ 313.130776][ T6603] copy_mm+0x9df/0x13d0 [ 313.134979][ T6603] ? copy_signal+0x610/0x610 [ 313.139711][ T6603] ? __init_rwsem+0x11e/0x160 [ 313.144431][ T6603] ? copy_signal+0x501/0x610 [ 313.149069][ T6603] copy_process+0x17a7/0x3e70 [ 313.153838][ T6603] ? __lock_acquire+0x7d40/0x7d40 [ 313.158909][ T6603] ? __pidfd_prepare+0x140/0x140 [ 313.163905][ T6603] kernel_clone+0x23f/0x990 [ 313.168454][ T6603] ? create_io_thread+0x180/0x180 [ 313.173520][ T6603] ? kasan_quarantine_put+0xd4/0x210 [ 313.178847][ T6603] ? lockdep_hardirqs_on+0x94/0x140 [ 313.184098][ T6603] __se_sys_clone3+0x312/0x3d0 [ 313.188897][ T6603] ? __x64_sys_clone3+0x60/0x60 [ 313.193795][ T6603] ? __lock_acquire+0x7d40/0x7d40 [ 313.198881][ T6603] ? lockdep_hardirqs_on+0x94/0x140 [ 313.204122][ T6603] do_syscall_64+0x4c/0xa0 [ 313.208575][ T6603] ? clear_bhb_loop+0x30/0x80 [ 313.213291][ T6603] ? clear_bhb_loop+0x30/0x80 [ 313.218003][ T6603] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 313.223934][ T6603] RIP: 0033:0x7f64a01ee559 [ 313.228388][ T6603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.248060][ T6603] RSP: 002b:00007f649e445ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 313.256524][ T6603] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f64a01ee559 [ 313.264541][ T6603] RDX: 00007f649e445f10 RSI: 0000000000000058 RDI: 00007f649e445f10 [ 313.272552][ T6603] RBP: 00007f64a02858b0 R08: 0000000000000000 R09: 0000000000000058 [ 313.280589][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.288601][ T6603] R13: 00007f64a0476038 R14: 00007f64a0475fa0 R15: 00007ffeecffe9a8 [ 313.296632][ T6603] [ 314.173956][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.183684][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.317974][ T6577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.383898][ T6577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.095545][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.101995][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.290812][ T6577] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.300065][ T6577] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.309310][ T6577] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.318479][ T6577] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.586985][ T6577] syz.2.582 (6577) used greatest stack depth: 19792 bytes left [ 317.730785][ T6624] loop0: detected capacity change from 0 to 128 [ 317.790301][ T6620] loop4: detected capacity change from 0 to 8192 [ 317.804761][ T6624] EXT4-fs (loop0): Test dummy encryption mode enabled [ 317.823541][ T6622] loop2: detected capacity change from 0 to 128 [ 317.933595][ T6624] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 317.959388][ T6622] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 318.053144][ T6622] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 318.093063][ T6624] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 318.976382][ T6640] loop0: detected capacity change from 0 to 256 [ 321.094939][ T6659] futex_wake_op: syz.0.602 tries to shift op by 144; fix this program [ 322.683107][ T4272] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 323.113856][ T4272] usb 5-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 323.152977][ T4272] usb 5-1: config 0 interface 0 has no altsetting 0 [ 324.163930][ T4272] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 324.214064][ T6664] loop2: detected capacity change from 0 to 32768 [ 324.303173][ T4272] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 324.341111][ T4272] usb 5-1: Product: syz [ 324.362892][ T4272] usb 5-1: Manufacturer: syz [ 324.540240][ T4272] usb 5-1: SerialNumber: syz [ 324.547394][ T4272] usb 5-1: config 0 descriptor?? [ 325.007340][ T6688] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 325.024810][ T6688] udc-core: couldn't find an available UDC or it's busy [ 325.032660][ T6688] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 325.094712][ T6664] read_mapping_page failed! [ 325.119871][ T4272] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 325.155601][ T6625] udevd[6625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.174182][ T6664] ERROR: (device loop2): txCommit: [ 325.174182][ T6664] [ 325.201226][ T6664] ERROR: (device loop2): remounting filesystem as read-only [ 326.176660][ T13] usb 5-1: USB disconnect, device number 4 [ 327.836861][ T6709] futex_wake_op: syz.1.616 tries to shift op by 144; fix this program [ 328.049418][ T26] audit: type=1800 audit(2000000016.020:56): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.618" name="idProduct" dev="configfs" ino=38576 res=0 errno=0 [ 328.186201][ T6712] loop0: detected capacity change from 0 to 8192 [ 328.297298][ T6723] loop2: detected capacity change from 0 to 128 [ 328.612700][ T6723] EXT4-fs (loop2): Test dummy encryption mode enabled [ 329.499145][ T6723] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 329.644262][ T6723] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 330.903809][ T6739] rxe_eth0 speed is unknown, defaulting to 1000 [ 332.025858][ T5904] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.059510][ T4264] Bluetooth: hci4: command 0x0409 tx timeout [ 332.118159][ T6755] futex_wake_op: syz.4.631 tries to shift op by 144; fix this program [ 332.278771][ T5904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.381152][ T6758] udc-core: couldn't find an available UDC or it's busy [ 332.388370][ T6758] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 333.126111][ T26] audit: type=1800 audit(2000000021.100:57): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.632" name="idProduct" dev="configfs" ino=39478 res=0 errno=0 [ 333.183107][ T5904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.276501][ T5904] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.315489][ T26] audit: type=1800 audit(2000000021.290:58): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.634" name="idVendor" dev="configfs" ino=38634 res=0 errno=0 [ 333.513057][ T13] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 333.717566][ T6739] chnl_net:caif_netlink_parms(): no params data found [ 333.883076][ T13] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 333.907463][ T13] usb 3-1: config 0 has no interface number 0 [ 333.960395][ T13] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.019211][ T13] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 334.055543][ T6739] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.077806][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.099877][ T6739] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.138041][ T5757] Bluetooth: hci4: command 0x041b tx timeout [ 334.153727][ T6739] device bridge_slave_0 entered promiscuous mode [ 334.163213][ T13] usb 3-1: config 0 descriptor?? [ 334.197324][ T6739] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.216795][ T13] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 334.237177][ T6739] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.371596][ T6739] device bridge_slave_1 entered promiscuous mode [ 334.470742][ T1107] usb 3-1: USB disconnect, device number 8 [ 335.408623][ T6739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.420396][ T6788] loop0: detected capacity change from 0 to 128 [ 335.496966][ T6739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.576215][ T6788] EXT4-fs (loop0): Test dummy encryption mode enabled [ 335.588569][ T6795] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 335.641943][ T6788] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 335.683023][ T6788] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 336.282785][ T6739] team0: Port device team_slave_0 added [ 336.327626][ T6739] team0: Port device team_slave_1 added [ 336.390967][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.435327][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.476145][ T5757] Bluetooth: hci4: command 0x040f tx timeout [ 336.511784][ T6739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.535652][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.542660][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.632870][ T6739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.682064][ T6810] futex_wake_op: syz.1.644 tries to shift op by 144; fix this program [ 336.889108][ T26] audit: type=1800 audit(2000000024.860:59): pid=6815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.645" name="idVendor" dev="configfs" ino=38877 res=0 errno=0 [ 336.929493][ T6739] device hsr_slave_0 entered promiscuous mode [ 336.970439][ T6739] device hsr_slave_1 entered promiscuous mode [ 337.012331][ T6739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.031352][ T6739] Cannot create hsr debugfs directory [ 337.429940][ T6825] loop2: detected capacity change from 0 to 8192 [ 338.196059][ T6739] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 338.322277][ T6739] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 338.451371][ T5904] bond1: (slave gre1): Releasing backup interface [ 338.471122][ T5904] device gre1 left promiscuous mode [ 339.347691][ T5904] bond1: Destroying bond [ 339.352888][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 339.430500][ T5904] bond1 (unregistering): Released all slaves [ 339.570593][ T6739] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 339.792601][ T6739] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 340.202971][ T6862] futex_wake_op: syz.2.656 tries to shift op by 144; fix this program [ 340.468062][ T26] audit: type=1800 audit(2000000028.440:60): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.657" name="idVendor" dev="configfs" ino=40075 res=0 errno=0 [ 340.504838][ T6739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.618083][ T6739] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.644289][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.668932][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.707514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.762700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.777512][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.784719][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.833599][ T6873] loop2: detected capacity change from 0 to 4096 [ 340.843455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 340.928630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.948603][ T6873] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 340.972047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.033647][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.040815][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.105575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.203935][ T5904] device hsr_slave_0 left promiscuous mode [ 341.224758][ T5904] device hsr_slave_1 left promiscuous mode [ 341.259177][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.312645][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.355433][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.382926][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.393979][ T5904] device bridge_slave_1 left promiscuous mode [ 341.402391][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.480054][ T5904] device bridge_slave_0 left promiscuous mode [ 341.512946][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.627899][ T6887] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 341.668884][ T6887] loop2: detected capacity change from 0 to 512 [ 341.754712][ T6887] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 341.871207][ T6887] EXT4-fs error (device loop2): ext4_init_orphan_info:623: comm syz.2.661: orphan file block 0: bad magic [ 341.900726][ T6887] EXT4-fs (loop2): mount failed [ 342.336854][ T5904] device veth1_macvtap left promiscuous mode [ 342.351654][ T5904] device veth0_macvtap left promiscuous mode [ 342.361361][ T5904] device veth1_vlan left promiscuous mode [ 342.369273][ T5904] device veth0_vlan left promiscuous mode [ 342.503283][ T6897] loop0: detected capacity change from 0 to 128 [ 342.592046][ T6897] EXT4-fs (loop0): Test dummy encryption mode enabled [ 342.647052][ T6897] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 342.712962][ T6897] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 343.544334][ T6910] netlink: 72 bytes leftover after parsing attributes in process `syz.0.666'. [ 343.601729][ T6910] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 343.693210][ T6912] futex_wake_op: syz.2.667 tries to shift op by 144; fix this program [ 343.802398][ T6914] ptp ptp0: guarantee physical clock free running [ 344.048133][ T5904] team0 (unregistering): Port device team_slave_1 removed [ 344.100068][ T5904] team0 (unregistering): Port device team_slave_0 removed [ 344.133719][ T5904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.171605][ T5904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.306366][ T6917] loop0: detected capacity change from 0 to 32768 [ 344.392534][ T5904] bond0 (unregistering): Released all slaves [ 344.450074][ T6917] read_mapping_page failed! [ 344.464021][ T6917] ERROR: (device loop0): txCommit: [ 344.464021][ T6917] [ 344.465790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.494203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.505724][ T6917] ERROR: (device loop0): remounting filesystem as read-only [ 344.543686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.577185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.623797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.647536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.674531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.683308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.703572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.723362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.751395][ T6739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 345.481651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.500948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.804912][ T6739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.826164][ T6965] loop2: detected capacity change from 0 to 4096 [ 346.924971][ T6969] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 347.037249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.067100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.162098][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 347.290407][ T26] audit: type=1800 audit(2000000000.300:61): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.679" name="idVendor" dev="configfs" ino=40223 res=0 errno=0 [ 348.127597][ T26] audit: type=1800 audit(2000000000.330:62): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.679" name="idProduct" dev="configfs" ino=40224 res=0 errno=0 [ 348.183683][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.223754][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.246848][ T26] audit: type=1800 audit(2000000000.330:63): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.679" name="serialnumber" dev="configfs" ino=40225 res=0 errno=0 [ 348.356884][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.434719][ T6739] device veth0_vlan entered promiscuous mode [ 348.503603][ T6739] device veth1_vlan entered promiscuous mode [ 348.552552][ T26] audit: type=1800 audit(2000000000.330:64): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.679" name="report_length" dev="configfs" ino=40226 res=0 errno=0 [ 348.715361][ T6739] device veth0_macvtap entered promiscuous mode [ 348.736320][ T26] audit: type=1800 audit(2000000000.330:65): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.679" name="report_desc" dev="configfs" ino=40227 res=0 errno=0 [ 348.812590][ T6739] device veth1_macvtap entered promiscuous mode [ 348.910793][ T26] audit: type=1800 audit(2000000000.330:66): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.679" name="UDC" dev="configfs" ino=40228 res=0 errno=0 [ 348.970494][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.078494][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.150554][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.317215][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.531154][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.692546][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.746118][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.807338][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.855279][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.904438][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.943322][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.973355][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.025151][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.077803][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.118992][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.162861][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.215471][ T6739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.252881][ T6739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.274238][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.281738][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 350.366032][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 350.403648][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.574579][ T6739] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.593029][ T6739] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.602031][ T6739] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.623289][ T6739] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.647843][ T6997] rxe_eth0 speed is unknown, defaulting to 1000 [ 350.831051][ T4622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.850361][ T4622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.905288][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.957696][ T5061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.966267][ T5061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.000115][ T7005] loop0: detected capacity change from 0 to 256 [ 351.031563][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 352.798548][ T4272] Bluetooth: hci5: command 0x0409 tx timeout [ 352.879044][ T7030] loop0: detected capacity change from 0 to 4096 [ 352.939589][ T7037] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.865341][ T7047] futex_wake_op: syz.1.691 tries to shift op by 144; fix this program [ 353.934031][ T6997] chnl_net:caif_netlink_parms(): no params data found [ 354.831962][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.695'. [ 354.855433][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 354.928913][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.034116][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.094235][ T6997] device bridge_slave_0 entered promiscuous mode [ 355.165503][ T6997] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.782049][ T7078] loop5: detected capacity change from 0 to 4096 [ 356.058104][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.105009][ T6997] device bridge_slave_1 entered promiscuous mode [ 356.227987][ T6997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.261302][ T6997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.280277][ T7081] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.407625][ T7085] loop0: detected capacity change from 0 to 4096 [ 356.674091][ T7088] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.933026][ T4316] Bluetooth: hci5: command 0x040f tx timeout [ 357.513423][ T6997] team0: Port device team_slave_0 added [ 357.522699][ T6997] team0: Port device team_slave_1 added [ 357.542631][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.550520][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.576767][ T6997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.589838][ T6997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.597202][ T6997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.623932][ T6997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.743099][ T6997] device hsr_slave_0 entered promiscuous mode [ 357.763420][ T6997] device hsr_slave_1 entered promiscuous mode [ 359.572874][ T4316] Bluetooth: hci5: command 0x0419 tx timeout [ 359.739934][ T7106] usb usb9: usbfs: process 7106 (syz.0.706) did not claim interface 0 before use [ 360.021769][ T6997] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 360.086412][ T7130] overlayfs: failed to clone upperpath [ 360.521440][ T6997] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 360.588130][ T6997] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 360.677478][ T6997] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 360.932837][ T1107] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 361.192915][ T1107] usb 6-1: Using ep0 maxpacket: 32 [ 361.358221][ T5904] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.372948][ T1107] usb 6-1: unable to get BOS descriptor or descriptor too short [ 361.429123][ T6997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.463059][ T1107] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 361.471333][ T1107] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 361.510298][ T1107] usb 6-1: config 14 has no interface number 0 [ 361.562894][ T1107] usb 6-1: config 14 has no interface number 1 [ 361.585946][ T1107] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 361.634880][ T1107] usb 6-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 361.680432][ T1107] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 361.692869][ T1107] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.707500][ T1107] usb 6-1: config 14 interface 57 has no altsetting 0 [ 361.714821][ T1107] usb 6-1: config 14 interface 228 has no altsetting 0 [ 361.735797][ T5904] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.839949][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 361.850396][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 361.892025][ T6997] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.913154][ T1107] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 361.922860][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.951746][ T1107] usb 6-1: Product: syz [ 361.968474][ T1107] usb 6-1: Manufacturer: syz [ 361.979734][ T1107] usb 6-1: SerialNumber: syz [ 362.138448][ T5904] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.627516][ T6997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 362.638893][ T6997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.686672][ T1107] legousbtower 6-1:14.57: interrupt endpoints not found [ 362.746929][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.747134][ T7164] loop0: detected capacity change from 0 to 512 [ 362.764165][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.803510][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.810679][ T4564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.840310][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.853117][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.869802][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.877149][ T4564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.904515][ T1107] legousbtower 6-1:14.228: interrupt endpoints not found [ 362.934268][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.943852][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.957080][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 362.968649][ T7164] EXT4-fs (loop0): Unrecognized mount option "context=system_u" or missing value [ 363.029791][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 363.196784][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 363.238597][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 363.315135][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 363.823603][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.852974][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 363.877563][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 364.399297][ T7173] usb usb9: usbfs: process 7173 (syz.0.720) did not claim interface 0 before use [ 365.366716][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 365.376906][ T4193] usb 6-1: USB disconnect, device number 2 [ 365.399719][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 365.454163][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 367.103205][ T5904] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.434476][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 368.441994][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.520520][ T6997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.564488][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 370.586420][ T7202] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 370.624033][ T7223] loop5: detected capacity change from 0 to 512 [ 370.790080][ T7223] EXT4-fs (loop5): 1 orphan inode deleted [ 370.800001][ T7223] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 370.865648][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.880019][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 371.000651][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 371.182510][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.206647][ T6997] device veth0_vlan entered promiscuous mode [ 371.224661][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.245131][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.367246][ T6997] device veth1_vlan entered promiscuous mode [ 371.550744][ T6997] device veth0_macvtap entered promiscuous mode [ 371.561069][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 371.609875][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 371.675823][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.793163][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.817169][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 371.924572][ T6997] device veth1_macvtap entered promiscuous mode [ 371.939589][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 371.977474][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.016868][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.049812][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.088565][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.135396][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.184068][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.222430][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.252494][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.274818][ T6997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.391684][ T5904] device hsr_slave_0 left promiscuous mode [ 373.411787][ T5904] device hsr_slave_1 left promiscuous mode [ 373.434141][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.451346][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.462949][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.471824][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.487420][ T5904] device bridge_slave_1 left promiscuous mode [ 373.496726][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.511118][ T5904] device bridge_slave_0 left promiscuous mode [ 373.520169][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.655601][ T5904] device veth1_macvtap left promiscuous mode [ 373.995868][ T5904] device veth0_macvtap left promiscuous mode [ 374.001970][ T5904] device veth1_vlan left promiscuous mode [ 374.059029][ T5904] device veth0_vlan left promiscuous mode [ 374.711854][ T5904] team0 (unregistering): Port device team_slave_1 removed [ 374.737867][ T5904] team0 (unregistering): Port device team_slave_0 removed [ 374.762668][ T5904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.799885][ T5904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.964870][ T7295] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 375.181690][ T5904] bond0 (unregistering): Released all slaves [ 375.620380][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 375.648255][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 375.715227][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.736809][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.757351][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.774403][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.790440][ T6997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.802579][ T6997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.820242][ T6997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.836718][ T6997] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.852608][ T6997] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.880907][ T6997] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.914163][ T6997] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.171307][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 376.200122][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 376.518101][ T4564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.531513][ T4564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.586466][ T4564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.704174][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 376.945089][ T4564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.143617][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 378.535796][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.542247][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.578323][ T7329] loop0: detected capacity change from 0 to 256 [ 385.553174][ T7392] FAULT_INJECTION: forcing a failure. [ 385.553174][ T7392] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 385.566761][ T7392] CPU: 1 PID: 7392 Comm: syz.6.770 Not tainted syzkaller #0 [ 385.574098][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 385.584195][ T7392] Call Trace: [ 385.587536][ T7392] [ 385.590499][ T7392] dump_stack_lvl+0x188/0x250 [ 385.595250][ T7392] ? show_regs_print_info+0x20/0x20 [ 385.600500][ T7392] ? load_image+0x410/0x410 [ 385.605053][ T7392] ? __lock_acquire+0x7d40/0x7d40 [ 385.610117][ T7392] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 385.616396][ T7392] ? ktime_get_real_ts64+0x440/0x440 [ 385.621756][ T7392] ? set_fd_set+0x4a/0x90 [ 385.626131][ T7392] should_fail+0x383/0x4b0 [ 385.630600][ T7392] _copy_to_user+0x2e/0x130 [ 385.635172][ T7392] put_timespec64+0xc5/0x120 [ 385.639823][ T7392] ? get_timespec64+0x1b0/0x1b0 [ 385.644729][ T7392] poll_select_finish+0x459/0x5d0 [ 385.649822][ T7392] ? poll_schedule_timeout+0x150/0x150 [ 385.655327][ T7392] ? sigprocmask+0x190/0x190 [ 385.659960][ T7392] ? __context_tracking_exit+0x4c/0x80 [ 385.665641][ T7392] __se_sys_pselect6+0x30b/0x3c0 [ 385.670626][ T7392] ? __x64_sys_pselect6+0xf0/0xf0 [ 385.675700][ T7392] ? __x64_sys_pselect6+0x1d/0xf0 [ 385.680768][ T7392] do_syscall_64+0x4c/0xa0 [ 385.685228][ T7392] ? clear_bhb_loop+0x30/0x80 [ 385.689947][ T7392] ? clear_bhb_loop+0x30/0x80 [ 385.694676][ T7392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 385.700615][ T7392] RIP: 0033:0x7f928d672559 [ 385.705076][ T7392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.724719][ T7392] RSP: 002b:00007f928b8a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 385.733180][ T7392] RAX: ffffffffffffffda RBX: 00007f928d8fa090 RCX: 00007f928d672559 [ 385.741190][ T7392] RDX: 0000200000000b40 RSI: 0000000000000000 RDI: 0000000000000000 [ 385.749206][ T7392] RBP: 00007f928d7098b0 R08: 0000200000000b80 R09: 0000000000000000 [ 385.757221][ T7392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.765254][ T7392] R13: 00007f928d8fa128 R14: 00007f928d8fa090 R15: 00007fff6159db08 [ 385.773286][ T7392] [ 385.830160][ T7393] binder: BINDER_SET_CONTEXT_MGR already set [ 385.837343][ T7393] binder: 7386:7393 ioctl 4018620d 200000000780 returned -16 [ 393.672907][ T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 393.962829][ T13] usb 6-1: Using ep0 maxpacket: 8 [ 394.103146][ T13] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.173123][ T13] usb 6-1: config 0 interface 0 has no altsetting 0 [ 394.261227][ T7482] udc-core: couldn't find an available UDC or it's busy [ 394.343425][ T7482] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 394.453120][ T13] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 394.483232][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.542296][ T13] usb 6-1: Product: syz [ 394.602289][ T13] usb 6-1: Manufacturer: syz [ 394.628619][ T13] usb 6-1: SerialNumber: syz [ 394.823322][ T13] usb 6-1: config 0 descriptor?? [ 395.250226][ T13] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 395.504073][ T13] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 395.523407][ T13] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 396.310806][ T7500] nvme_fc: nvme_fc_create_ctrl: nn-0x1000000044001122:pn-0x2000000044001122 - nn-0x1000000044001123:pn-0x2000000044001123 combination not found [ 396.359451][ T13] snd_usb_toneport: probe of 6-1:0.0 failed with error -22 [ 396.429427][ T13] usb 6-1: USB disconnect, device number 3 [ 396.677915][ T7514] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 398.315394][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 398.362479][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 398.535458][ T7534] loop6: detected capacity change from 0 to 4096 [ 398.622801][ T21] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 398.662956][ T7539] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 398.935879][ T26] audit: type=1326 audit(2000000005.500:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.6.800" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f928d672559 code=0x0 [ 399.584410][ T7546] device geneve2 entered promiscuous mode [ 399.633030][ T21] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.662820][ T21] usb 6-1: config 0 has no interface number 0 [ 399.669005][ T21] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 399.766850][ T21] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 399.847545][ T21] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 399.863408][ T7552] device syzkaller1 entered promiscuous mode [ 399.892960][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.934916][ T21] usb 6-1: config 0 descriptor?? [ 400.563372][ T7531] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 400.588807][ T21] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 400.823813][ T21] usb 6-1: USB disconnect, device number 4 [ 400.933468][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 401.672858][ T21] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 401.684404][ T7578] loop0: detected capacity change from 0 to 4096 [ 401.783336][ T7583] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.839238][ T7585] autofs4:pid:7585:autofs_fill_super: called with bogus options [ 401.912884][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 402.000949][ T7589] binder: 7586:7589 ioctl c0306201 200000000a00 returned -14 [ 402.073151][ T21] usb 6-1: unable to get BOS descriptor or descriptor too short [ 402.233463][ T21] usb 6-1: config 14 has an invalid interface number: 57 but max is 0 [ 402.259347][ T21] usb 6-1: config 14 has no interface number 0 [ 402.318980][ T21] usb 6-1: config 14 interface 57 has no altsetting 0 [ 402.534174][ T21] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 402.599484][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.945723][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.036806][ T7585] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 404.046716][ T21] usb 6-1: Product: syz [ 404.050932][ T21] usb 6-1: Manufacturer: syz [ 404.056132][ T21] usb 6-1: SerialNumber: syz [ 404.092854][ T7585] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 404.119544][ T7585] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 404.153171][ T7585] Error parsing options; rc = [-22] [ 404.984102][ T21] legousbtower 6-1:14.57: interrupt endpoints not found [ 405.021695][ T21] usb 6-1: USB disconnect, device number 5 [ 405.083871][ T7624] bonding: unable to delete non-existent b [ 407.232154][ T4459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 407.283343][ T7640] loop6: detected capacity change from 0 to 4096 [ 407.347066][ T7643] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 407.610938][ T26] audit: type=1326 audit(2000000000.250:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7638 comm="syz.6.828" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f928d672559 code=0x0 [ 408.499617][ T7654] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 409.329102][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.760659][ T7666] loop0: detected capacity change from 0 to 4096 [ 411.012659][ T7688] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 411.914032][ T7689] autofs4:pid:7689:autofs_fill_super: called with bogus options [ 411.981905][ T7690] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 412.226285][ T23] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 412.455098][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 412.855209][ T7689] Error parsing options; rc = [-22] [ 413.096072][ T4459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 413.096118][ T7698] ceph: No mds server is up or the cluster is laggy [ 414.669230][ T23] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 415.653541][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 416.977266][ T7747] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 418.063486][ T7753] netlink: 16 bytes leftover after parsing attributes in process `syz.5.856'. [ 418.072451][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.5.856'. [ 418.281522][ T7757] fuse: Bad value for 'fd' [ 418.855158][ T4413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.634835][ T7789] netlink: 28 bytes leftover after parsing attributes in process `syz.6.845'. [ 420.785100][ T5061] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.900719][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.845'. [ 421.693112][ T7792] netlink: 'syz.2.864': attribute type 4 has an invalid length. [ 421.700813][ T7792] netlink: 17 bytes leftover after parsing attributes in process `syz.2.864'. [ 422.422582][ T7809] netlink: 'syz.6.871': attribute type 30 has an invalid length. [ 422.813483][ T4272] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 423.803286][ T4272] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.842356][ T4272] usb 7-1: config 0 has no interface number 0 [ 423.899211][ T4272] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 423.982852][ T4272] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 423.997264][ T4272] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 424.009339][ T4272] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.037134][ T4272] usb 7-1: config 0 descriptor?? [ 424.064808][ T7816] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 424.117163][ T4272] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 424.384400][ T4203] usb 7-1: USB disconnect, device number 2 [ 424.613170][ T4564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.667270][ T7841] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 424.706543][ T7841] loop0: detected capacity change from 0 to 512 [ 425.984451][ T7841] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 425.991139][ T4622] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 426.054082][ T7841] EXT4-fs error (device loop0): ext4_init_orphan_info:623: comm syz.0.878: orphan file block 0: bad magic [ 426.075063][ T7841] EXT4-fs (loop0): mount failed [ 426.530860][ T7853] fuse: Bad value for 'fd' [ 427.011813][ T7861] loop6: detected capacity change from 0 to 4096 [ 427.136553][ T7869] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 428.566064][ T7883] FAULT_INJECTION: forcing a failure. [ 428.566064][ T7883] name failslab, interval 1, probability 0, space 0, times 0 [ 428.672918][ T7883] CPU: 0 PID: 7883 Comm: syz.6.890 Not tainted syzkaller #0 [ 428.680274][ T7883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 428.690374][ T7883] Call Trace: [ 428.693691][ T7883] [ 428.696665][ T7883] dump_stack_lvl+0x188/0x250 [ 428.701386][ T7883] ? show_regs_print_info+0x20/0x20 [ 428.706618][ T7883] ? load_image+0x410/0x410 [ 428.711158][ T7883] ? __lock_acquire+0x7d40/0x7d40 [ 428.716231][ T7883] should_fail+0x383/0x4b0 [ 428.720704][ T7883] should_failslab+0x5/0x20 [ 428.725252][ T7883] slab_pre_alloc_hook+0x51/0xc0 [ 428.730243][ T7883] __kmalloc_node+0x6d/0x3a0 [ 428.734878][ T7883] ? mempool_init_node+0x12b/0x480 [ 428.740044][ T7883] ? __init_waitqueue_head+0xa4/0x140 [ 428.745472][ T7883] mempool_init_node+0x12b/0x480 [ 428.750455][ T7883] ? msgpool_alloc+0x1b0/0x1b0 [ 428.755267][ T7883] ? msgpool_alloc+0x1b0/0x1b0 [ 428.760046][ T7883] ? ceph_msgpool_init+0x180/0x180 [ 428.765174][ T7883] mempool_create+0x7d/0xc0 [ 428.769697][ T7883] ceph_msgpool_init+0xa3/0x180 [ 428.774567][ T7883] ceph_osdc_init+0x52c/0x8a0 [ 428.779276][ T7883] ceph_create_client+0x242/0x300 [ 428.784357][ T7883] ceph_get_tree+0xf6/0x1290 [ 428.788980][ T7883] ? bpf_lsm_capable+0x5/0x10 [ 428.793690][ T7883] ? security_capable+0x85/0xb0 [ 428.798551][ T7883] vfs_get_tree+0x88/0x270 [ 428.802980][ T7883] vfs_fsconfig_locked+0x22f/0x400 [ 428.808109][ T7883] __se_sys_fsconfig+0x69e/0x7e0 [ 428.813062][ T7883] ? __x64_sys_fsconfig+0xc0/0xc0 [ 428.818119][ T7883] ? lockdep_hardirqs_on+0x94/0x140 [ 428.823326][ T7883] ? __x64_sys_fsconfig+0x1c/0xc0 [ 428.828446][ T7883] do_syscall_64+0x4c/0xa0 [ 428.832882][ T7883] ? clear_bhb_loop+0x30/0x80 [ 428.837591][ T7883] ? clear_bhb_loop+0x30/0x80 [ 428.842278][ T7883] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 428.848181][ T7883] RIP: 0033:0x7f928d672559 [ 428.852607][ T7883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.872338][ T7883] RSP: 002b:00007f928b8ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 428.880778][ T7883] RAX: ffffffffffffffda RBX: 00007f928d8f9fa0 RCX: 00007f928d672559 [ 428.888945][ T7883] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 428.896956][ T7883] RBP: 00007f928d7098b0 R08: 0800000000000000 R09: 0000000000000000 [ 428.904964][ T7883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.912958][ T7883] R13: 00007f928d8fa038 R14: 00007f928d8f9fa0 R15: 00007fff6159db08 [ 428.920975][ T7883] [ 428.953544][ T7894] udc-core: couldn't find an available UDC or it's busy [ 429.106790][ T7894] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 430.688517][ T7910] futex_wake_op: syz.6.897 tries to shift op by 144; fix this program [ 431.653629][ T4564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 431.666417][ T5904] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.352032][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.314804][ T7923] FAULT_INJECTION: forcing a failure. [ 433.314804][ T7923] name fail_futex, interval 1, probability 0, space 0, times 1 [ 433.390753][ T7923] CPU: 0 PID: 7923 Comm: syz.0.902 Not tainted syzkaller #0 [ 433.398118][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 433.408232][ T7923] Call Trace: [ 433.411554][ T7923] [ 433.414535][ T7923] dump_stack_lvl+0x188/0x250 [ 433.419262][ T7923] ? show_regs_print_info+0x20/0x20 [ 433.424645][ T7923] ? load_image+0x410/0x410 [ 433.429213][ T7923] should_fail+0x383/0x4b0 [ 433.433693][ T7923] get_futex_key+0x1a1/0x12d0 [ 433.438427][ T7923] ? __lock_acquire+0x13b3/0x7d40 [ 433.443510][ T7923] ? futex_wait_restart+0x250/0x250 [ 433.448784][ T7923] futex_wake+0x101/0x540 [ 433.453192][ T7923] ? futex_wait+0x680/0x680 [ 433.457744][ T7923] ? verify_lock_unused+0x140/0x140 [ 433.463004][ T7923] ? verify_lock_unused+0x140/0x140 [ 433.468277][ T7923] do_futex+0xd83/0x12b0 [ 433.472598][ T7923] ? futex_exit_release+0x1c0/0x1c0 [ 433.477854][ T7923] ? __context_tracking_exit+0x4c/0x80 [ 433.483366][ T7923] __se_sys_futex+0x389/0x420 [ 433.488100][ T7923] ? __x64_sys_futex+0xf0/0xf0 [ 433.492922][ T7923] ? __x64_sys_futex+0x1d/0xf0 [ 433.497738][ T7923] do_syscall_64+0x4c/0xa0 [ 433.502211][ T7923] ? clear_bhb_loop+0x30/0x80 [ 433.506939][ T7923] ? clear_bhb_loop+0x30/0x80 [ 433.511673][ T7923] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 433.517625][ T7923] RIP: 0033:0x7f056edd2559 [ 433.522086][ T7923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.541739][ T7923] RSP: 002b:00007f056d02a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 433.550206][ T7923] RAX: ffffffffffffffda RBX: 00007f056f059fa8 RCX: 00007f056edd2559 [ 433.558236][ T7923] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f056f059fac [ 433.566289][ T7923] RBP: 00007f056f059fa0 R08: 000fc0dd8e8fc3d8 R09: 0000000000000000 [ 433.574302][ T7923] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 433.582320][ T7923] R13: 00007f056f05a038 R14: 00007ffde70674e0 R15: 00007ffde70675c8 [ 433.590360][ T7923] [ 434.112861][ T7954] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 434.129517][ T7954] loop0: detected capacity change from 0 to 512 [ 434.168833][ T7954] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 435.943916][ T7954] EXT4-fs error (device loop0): ext4_init_orphan_info:623: comm syz.0.908: orphan file block 0: bad magic [ 435.967852][ T7954] EXT4-fs (loop0): mount failed [ 436.243761][ T7970] overlayfs: missing 'workdir' [ 437.764774][ T7986] FAULT_INJECTION: forcing a failure. [ 437.764774][ T7986] name fail_futex, interval 1, probability 0, space 0, times 0 [ 437.852932][ T7986] CPU: 1 PID: 7986 Comm: syz.0.918 Not tainted syzkaller #0 [ 437.860302][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 437.870504][ T7986] Call Trace: [ 437.873827][ T7986] [ 437.876796][ T7986] dump_stack_lvl+0x188/0x250 [ 437.881520][ T7986] ? show_regs_print_info+0x20/0x20 [ 437.886780][ T7986] ? load_image+0x410/0x410 [ 437.891345][ T7986] should_fail+0x383/0x4b0 [ 437.895815][ T7986] get_futex_key+0x1a1/0x12d0 [ 437.900545][ T7986] ? __lock_acquire+0x13b3/0x7d40 [ 437.905615][ T7986] ? futex_wait_restart+0x250/0x250 [ 437.910870][ T7986] futex_wake+0x101/0x540 [ 437.915265][ T7986] ? futex_wait+0x680/0x680 [ 437.919817][ T7986] ? verify_lock_unused+0x140/0x140 [ 437.925073][ T7986] ? verify_lock_unused+0x140/0x140 [ 437.930420][ T7986] do_futex+0xd83/0x12b0 [ 437.934726][ T7986] ? futex_exit_release+0x1c0/0x1c0 [ 437.940022][ T7986] ? __context_tracking_exit+0x4c/0x80 [ 437.945544][ T7986] __se_sys_futex+0x389/0x420 [ 437.950268][ T7986] ? __x64_sys_futex+0xf0/0xf0 [ 437.955082][ T7986] ? __x64_sys_futex+0x1d/0xf0 [ 437.959901][ T7986] do_syscall_64+0x4c/0xa0 [ 437.964358][ T7986] ? clear_bhb_loop+0x30/0x80 [ 437.969046][ T7986] ? clear_bhb_loop+0x30/0x80 [ 437.973735][ T7986] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 437.979646][ T7986] RIP: 0033:0x7f056edd2559 [ 437.984096][ T7986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.003712][ T7986] RSP: 002b:00007f056d02a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 438.012180][ T7986] RAX: ffffffffffffffda RBX: 00007f056f059fa8 RCX: 00007f056edd2559 [ 438.020188][ T7986] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f056f059fac [ 438.028208][ T7986] RBP: 00007f056f059fa0 R08: 002a935260f03306 R09: 0000000000000000 [ 438.036201][ T7986] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 438.044228][ T7986] R13: 00007f056f05a038 R14: 00007ffde70674e0 R15: 00007ffde70675c8 [ 438.052251][ T7986] [ 438.066223][ T4413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.074919][ T4622] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.509361][ T8017] binder: BINDER_SET_CONTEXT_MGR already set [ 439.515978][ T8017] binder: 8012:8017 ioctl 4018620d 200000001000 returned -16 [ 440.873838][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.880476][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.440162][ T4622] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.479284][ T1107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.614594][ T8056] loop5: detected capacity change from 0 to 512 [ 443.647389][ T8056] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 443.732169][ T8056] EXT4-fs error (device loop5): ext4_init_orphan_info:623: comm syz.5.931: orphan file block 0: bad magic [ 443.813167][ T4622] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.835470][ T8056] EXT4-fs (loop5): mount failed [ 443.878127][ T8063] FAULT_INJECTION: forcing a failure. [ 443.878127][ T8063] name failslab, interval 1, probability 0, space 0, times 0 [ 444.693720][ T26] audit: type=1326 audit(2000000037.040:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.2.935" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda7f82d559 code=0x0 [ 444.755934][ T8055] loop6: detected capacity change from 0 to 8192 [ 444.843161][ T8063] CPU: 0 PID: 8063 Comm: syz.0.934 Not tainted syzkaller #0 [ 444.850531][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 444.860631][ T8063] Call Trace: [ 444.863941][ T8063] [ 444.866895][ T8063] dump_stack_lvl+0x188/0x250 [ 444.871610][ T8063] ? show_regs_print_info+0x20/0x20 [ 444.877268][ T8063] ? load_image+0x410/0x410 [ 444.881844][ T8063] ? __might_sleep+0xf0/0xf0 [ 444.886486][ T8063] ? __lock_acquire+0x7d40/0x7d40 [ 444.891545][ T8063] should_fail+0x383/0x4b0 [ 444.895992][ T8063] should_failslab+0x5/0x20 [ 444.900515][ T8063] slab_pre_alloc_hook+0x51/0xc0 [ 444.905480][ T8063] ? sockfs_init_fs_context+0xa0/0xa0 [ 444.910878][ T8063] ? sock_alloc_inode+0x17/0xb0 [ 444.915758][ T8063] kmem_cache_alloc+0x3d/0x280 [ 444.920548][ T8063] ? sockfs_init_fs_context+0xa0/0xa0 [ 444.925960][ T8063] sock_alloc_inode+0x17/0xb0 [ 444.930661][ T8063] ? sockfs_init_fs_context+0xa0/0xa0 [ 444.936089][ T8063] new_inode_pseudo+0x5f/0x210 [ 444.940910][ T8063] __sock_create+0x128/0x910 [ 444.945528][ T8063] __sys_socket+0xe2/0x170 [ 444.949996][ T8063] __x64_sys_socket+0x76/0x80 [ 444.954783][ T8063] do_syscall_64+0x4c/0xa0 [ 444.959249][ T8063] ? clear_bhb_loop+0x30/0x80 [ 444.963976][ T8063] ? clear_bhb_loop+0x30/0x80 [ 444.968682][ T8063] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 444.974607][ T8063] RIP: 0033:0x7f056edd2559 [ 444.979054][ T8063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.998682][ T8063] RSP: 002b:00007f056d02a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 445.007125][ T8063] RAX: ffffffffffffffda RBX: 00007f056f059fa0 RCX: 00007f056edd2559 [ 445.015118][ T8063] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000023 [ 445.023134][ T8063] RBP: 00007f056ee698b0 R08: 0000000000000000 R09: 0000000000000000 [ 445.031142][ T8063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.039145][ T8063] R13: 00007f056f05a038 R14: 00007f056f059fa0 R15: 00007ffde70675c8 [ 445.047162][ T8063] [ 445.322858][ T8063] socket: no more sockets [ 446.112902][ T13] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 448.245292][ T13] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 448.538130][ T13] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.565128][ T13] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 448.588330][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.623327][ T13] usb 6-1: can't set config #4, error -71 [ 448.641316][ T13] usb 6-1: USB disconnect, device number 6 [ 450.139499][ T4622] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 450.151933][ T4458] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 450.449739][ T8123] mip6: mip6_rthdr_init_state: spi is not 0: 3523477504 [ 451.333170][ T8131] FAULT_INJECTION: forcing a failure. [ 451.333170][ T8131] name failslab, interval 1, probability 0, space 0, times 0 [ 451.349513][ T8126] trusted_key: encrypted_key: insufficient parameters specified [ 451.398036][ T8126] trusted_key: encrypted_key: insufficient parameters specified [ 451.403269][ T8131] CPU: 0 PID: 8131 Comm: syz.0.951 Not tainted syzkaller #0 [ 451.413154][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 451.423254][ T8131] Call Trace: [ 451.426570][ T8131] [ 451.429535][ T8131] dump_stack_lvl+0x188/0x250 [ 451.434263][ T8131] ? show_regs_print_info+0x20/0x20 [ 451.439511][ T8131] ? load_image+0x410/0x410 [ 451.444098][ T8131] ? __might_sleep+0xf0/0xf0 [ 451.448741][ T8131] ? __lock_acquire+0x7d40/0x7d40 [ 451.453832][ T8131] should_fail+0x383/0x4b0 [ 451.458304][ T8131] should_failslab+0x5/0x20 [ 451.462849][ T8131] slab_pre_alloc_hook+0x51/0xc0 [ 451.467882][ T8131] ? sockfs_init_fs_context+0xa0/0xa0 [ 451.473395][ T8131] ? sock_alloc_inode+0x17/0xb0 [ 451.478298][ T8131] kmem_cache_alloc+0x3d/0x280 [ 451.483111][ T8131] ? sockfs_init_fs_context+0xa0/0xa0 [ 451.488540][ T8131] sock_alloc_inode+0x17/0xb0 [ 451.493271][ T8131] ? sockfs_init_fs_context+0xa0/0xa0 [ 451.498697][ T8131] new_inode_pseudo+0x5f/0x210 [ 451.503519][ T8131] __sock_create+0x128/0x910 [ 451.508167][ T8131] __sys_socket+0xe2/0x170 [ 451.512639][ T8131] __x64_sys_socket+0x76/0x80 [ 451.517423][ T8131] do_syscall_64+0x4c/0xa0 [ 451.521883][ T8131] ? clear_bhb_loop+0x30/0x80 [ 451.526617][ T8131] ? clear_bhb_loop+0x30/0x80 [ 451.531346][ T8131] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 451.537306][ T8131] RIP: 0033:0x7f056edd2559 [ 451.541773][ T8131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.561419][ T8131] RSP: 002b:00007f056d02a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 451.569885][ T8131] RAX: ffffffffffffffda RBX: 00007f056f059fa0 RCX: 00007f056edd2559 [ 451.577906][ T8131] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 451.585929][ T8131] RBP: 00007f056ee698b0 R08: 0000000000000000 R09: 0000000000000000 [ 451.593951][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.601973][ T8131] R13: 00007f056f05a038 R14: 00007f056f059fa0 R15: 00007ffde70675c8 [ 451.610026][ T8131] [ 451.788304][ T8131] socket: no more sockets [ 452.292955][ T4203] Bluetooth: hci4: command 0x0406 tx timeout [ 453.384675][ T4203] libceph: connect (1)[c::]:6789 error -101 [ 453.390929][ T4203] libceph: mon0 (1)[c::]:6789 connect error [ 453.416653][ T8146] ceph: No mds server is up or the cluster is laggy [ 455.061708][ T4203] libceph: connect (1)[c::]:6789 error -101 [ 455.067850][ T4203] libceph: mon0 (1)[c::]:6789 connect error [ 455.392960][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 455.399028][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 455.691471][ T8176] udc-core: couldn't find an available UDC or it's busy [ 455.699266][ T8176] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 455.984173][ T4458] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.996338][ T4622] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 456.035591][ T8175] jffs2: notice: (8175) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 456.401653][ T26] audit: type=1326 audit(2000000049.040:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8178 comm="syz.2.964" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda7f82d559 code=0x0 [ 458.188380][ T8195] loop5: detected capacity change from 0 to 8192 [ 460.328493][ T8219] netlink: 64 bytes leftover after parsing attributes in process `syz.2.975'. [ 460.376975][ T8214] loop0: detected capacity change from 0 to 8192 [ 460.632885][ T4203] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 461.187140][ T4459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 461.733598][ T4459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 462.084188][ T8260] tipc: Started in network mode [ 462.094887][ T8260] tipc: Node identity ac1414aa, cluster identity 4711 [ 462.110729][ T8260] tipc: New replicast peer: 172.20.20.187 [ 462.120011][ T8260] tipc: Enabled bearer , priority 10 [ 462.132914][ T4203] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 462.141153][ T4203] usb 6-1: config 0 has no interface number 0 [ 462.155376][ T4203] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 462.193954][ T4203] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 462.220631][ T4203] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 462.261768][ T4203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.286820][ T4203] usb 6-1: config 0 descriptor?? [ 462.313036][ T8225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 462.336547][ T4203] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 462.868225][ T4193] usb 6-1: USB disconnect, device number 7 [ 463.236413][ T4316] tipc: Node number set to 2886997162 [ 463.538122][ T8279] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 463.573238][ T8279] loop6: detected capacity change from 0 to 512 [ 463.673522][ T8279] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 463.908075][ T8279] EXT4-fs error (device loop6): ext4_init_orphan_info:623: comm syz.6.984: orphan file block 0: bad magic [ 463.935824][ T8279] EXT4-fs (loop6): mount failed [ 464.612863][ T8286] futex_wake_op: syz.5.985 tries to shift op by 144; fix this program [ 465.496632][ T8302] loop6: detected capacity change from 0 to 256 [ 466.873144][ T5904] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.150819][ T8319] loop5: detected capacity change from 0 to 4096 [ 467.493920][ T5904] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.511570][ T8323] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.013226][ T26] audit: type=1326 audit(2000000060.650:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.5.992" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52153bb559 code=0x0 [ 468.397556][ T8340] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 468.410037][ T7] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 469.334465][ T7] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 469.342825][ T7] usb 7-1: config 0 has no interface number 0 [ 469.349381][ T7] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 469.361069][ T7] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 469.372375][ T7] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 469.382025][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.401416][ T7] usb 7-1: config 0 descriptor?? [ 469.423077][ T8327] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 469.447564][ T7] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 470.270859][ T4272] usb 7-1: USB disconnect, device number 3 [ 471.355895][ T8374] loop6: detected capacity change from 0 to 256 [ 471.478948][ T8370] loop0: detected capacity change from 0 to 8192 [ 472.613139][ T4622] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 473.263127][ T4413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.466589][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.531640][ T8457] usb usb9: usbfs: process 8457 (syz.5.1021) did not claim interface 0 before use [ 479.543745][ T4458] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 480.024138][ T8464] loop6: detected capacity change from 0 to 4096 [ 480.667417][ T8464] NILFS (loop6): error -4 creating segctord thread [ 481.022915][ T7] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 481.393161][ T7] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 481.408756][ T7] usb 7-1: config 0 has no interface number 0 [ 481.438817][ T7] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 481.470631][ T7] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 481.529348][ T7] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 481.569326][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.622092][ T7] usb 7-1: config 0 descriptor?? [ 481.643272][ T8479] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 481.681069][ T7] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 481.869159][ T8510] loop5: detected capacity change from 0 to 512 [ 481.940640][ T8510] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 481.944155][ T7] usb 7-1: USB disconnect, device number 4 [ 482.009345][ T8510] EXT4-fs (loop5): 1 truncate cleaned up [ 482.019393][ T8510] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 482.338509][ T8519] loop0: detected capacity change from 0 to 256 [ 482.959289][ T8524] loop6: detected capacity change from 0 to 8192 [ 485.113598][ T8542] usb usb9: usbfs: process 8542 (syz.6.1040) did not claim interface 0 before use [ 485.449348][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.494545][ T4413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.656601][ T8548] loop0: detected capacity change from 0 to 4096 [ 485.773839][ T8549] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 485.935405][ T26] audit: type=1326 audit(2000000078.580:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8544 comm="syz.0.1039" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f056edd2559 code=0x0 [ 486.261075][ T8559] loop5: detected capacity change from 0 to 2048 [ 486.376602][ T8559] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 486.449829][ T8559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 487.667414][ T8581] loop0: detected capacity change from 0 to 256 [ 487.959057][ T8590] /dev/loop0: Can't open blockdev [ 488.578424][ T8597] sctp: failed to load transform for md5: -2 [ 489.479584][ T8632] loop0: detected capacity change from 0 to 512 [ 489.677091][ T8632] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 489.774770][ T8635] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1057'. [ 489.789843][ T26] audit: type=1800 audit(2000000082.430:73): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1058" name="idVendor" dev="configfs" ino=43889 res=0 errno=0 [ 489.872434][ T8632] EXT4-fs (loop0): 1 truncate cleaned up [ 489.878403][ T8632] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 489.952927][ T26] audit: type=1800 audit(2000000082.440:74): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1058" name="idProduct" dev="configfs" ino=43890 res=0 errno=0 [ 490.058395][ T26] audit: type=1800 audit(2000000082.440:75): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1058" name="serialnumber" dev="configfs" ino=43891 res=0 errno=0 [ 490.178802][ T26] audit: type=1800 audit(2000000082.450:76): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1058" name="report_length" dev="configfs" ino=43892 res=0 errno=0 [ 490.577151][ T26] audit: type=1800 audit(2000000082.460:77): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1058" name="report_desc" dev="configfs" ino=43893 res=0 errno=0 [ 490.886424][ T26] audit: type=1800 audit(2000000082.460:78): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1058" name="UDC" dev="configfs" ino=43894 res=0 errno=0 [ 491.014190][ T5061] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.174417][ T4193] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.188246][ T5061] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.511200][ T8662] loop6: detected capacity change from 0 to 256 [ 494.929882][ T8685] loop0: detected capacity change from 0 to 8192 [ 495.816022][ T8687] loop6: detected capacity change from 0 to 8192 [ 496.294862][ T5061] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.953236][ T4458] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.447277][ T8712] loop0: detected capacity change from 0 to 256 [ 500.522366][ T8733] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 501.642765][ T26] audit: type=1800 audit(2000000093.510:79): pid=8739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1081" name="c_chmask" dev="configfs" ino=44827 res=0 errno=0 [ 501.672001][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.678422][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.087225][ T5061] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 502.164338][ T8745] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 502.179313][ T8745] loop0: detected capacity change from 0 to 512 [ 502.359580][ T8745] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 502.440519][ T8745] EXT4-fs error (device loop0): ext4_init_orphan_info:623: comm syz.0.1083: orphan file block 0: bad magic [ 502.460405][ T8745] EXT4-fs (loop0): mount failed [ 502.792760][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.062975][ T21] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 504.532967][ T26] audit: type=1326 audit(2000000097.160:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8772 comm="syz.2.1090" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda7f82d559 code=0x0 [ 504.973012][ T21] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 504.997261][ T21] usb 6-1: config 0 has no interface number 0 [ 505.008624][ T8779] loop0: detected capacity change from 0 to 4096 [ 505.022765][ T21] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 505.083444][ T21] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 505.123799][ T8779] ntfs3: Unknown parameter 'hide_dot_files' [ 505.146501][ T21] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 505.221709][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.360380][ T8787] loop6: detected capacity change from 0 to 512 [ 506.031712][ T21] usb 6-1: config 0 descriptor?? [ 506.073198][ T8765] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 506.155758][ T21] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 506.489739][ T4316] usb 6-1: USB disconnect, device number 8 [ 506.551219][ T8790] loop0: detected capacity change from 0 to 8192 [ 507.242449][ T4458] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.651543][ T8807] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 507.669745][ T8807] loop5: detected capacity change from 0 to 512 [ 507.747286][ T8807] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 507.923614][ T8807] EXT4-fs error (device loop5): ext4_init_orphan_info:623: comm syz.5.1098: orphan file block 0: bad magic [ 507.936625][ T8807] EXT4-fs (loop5): mount failed [ 507.980396][ T8813] loop6: detected capacity change from 0 to 4096 [ 508.074972][ T8819] loop5: detected capacity change from 0 to 512 [ 508.110348][ T8820] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 508.203075][ T8819] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 508.313224][ T8819] EXT4-fs (loop5): 1 truncate cleaned up [ 508.318948][ T8819] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 508.457176][ T4458] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 509.361919][ T26] audit: type=1326 audit(2000000102.000:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.2.1102" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda7f82d559 code=0x0 [ 509.963635][ T8848] loop6: detected capacity change from 0 to 128 [ 510.017133][ T8848] EXT4-fs (loop6): Test dummy encryption mode enabled [ 510.075942][ T8848] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 510.114981][ T8848] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 510.223302][ T8848] FAULT_INJECTION: forcing a failure. [ 510.223302][ T8848] name failslab, interval 1, probability 0, space 0, times 0 [ 510.268889][ T8848] CPU: 0 PID: 8848 Comm: syz.6.1104 Not tainted syzkaller #0 [ 510.277306][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 510.287403][ T8848] Call Trace: [ 510.290743][ T8848] [ 510.293724][ T8848] dump_stack_lvl+0x188/0x250 [ 510.298468][ T8848] ? show_regs_print_info+0x20/0x20 [ 510.303732][ T8848] ? load_image+0x410/0x410 [ 510.308303][ T8848] ? __might_sleep+0xf0/0xf0 [ 510.312948][ T8848] ? __lock_acquire+0x7d40/0x7d40 [ 510.318029][ T8848] ? ext4fs_dirhash+0x2e0/0x2e0 [ 510.322974][ T8848] should_fail+0x383/0x4b0 [ 510.327469][ T8848] should_failslab+0x5/0x20 [ 510.332028][ T8848] slab_pre_alloc_hook+0x51/0xc0 [ 510.337061][ T8848] __kmalloc+0x6b/0x340 [ 510.341253][ T8848] ? ext4_htree_store_dirent+0x80/0x550 [ 510.346859][ T8848] ext4_htree_store_dirent+0x80/0x550 [ 510.352293][ T8848] htree_dirblock_to_tree+0x8cc/0xee0 [ 510.357719][ T8848] ? unwind_get_return_address+0x49/0x80 [ 510.363431][ T8848] ? stack_trace_save+0xf0/0xf0 [ 510.368373][ T8848] ? ext4_htree_fill_tree+0x1100/0x1100 [ 510.373983][ T8848] ? __lock_acquire+0x13b3/0x7d40 [ 510.379086][ T8848] ext4_htree_fill_tree+0x60f/0x1100 [ 510.384469][ T8848] ? ext4_handle_dirty_dirblock+0x650/0x650 [ 510.390463][ T8848] ext4_readdir+0x2c78/0x3ac0 [ 510.395238][ T8848] ? ext4_dir_llseek+0x4b0/0x4b0 [ 510.400264][ T8848] ? aa_path_link+0x8a0/0x8a0 [ 510.404997][ T8848] ? read_lock_is_recursive+0x10/0x10 [ 510.410440][ T8848] ? mutex_lock_io_nested+0x60/0x60 [ 510.415707][ T8848] ? end_current_label_crit_section+0x14b/0x170 [ 510.422018][ T8848] ? iterate_dir+0x10d/0x550 [ 510.426706][ T8848] ? down_read_killable+0x1ce/0x340 [ 510.431973][ T8848] ? fsnotify_perm+0x254/0x560 [ 510.436797][ T8848] iterate_dir+0x213/0x550 [ 510.441297][ T8848] ? ext4_dir_llseek+0x4b0/0x4b0 [ 510.446303][ T8848] __se_sys_getdents+0xf2/0x260 [ 510.451214][ T8848] ? __x64_sys_getdents+0x80/0x80 [ 510.456288][ T8848] ? fillonedir+0x4c0/0x4c0 [ 510.460862][ T8848] ? lockdep_hardirqs_on+0x94/0x140 [ 510.466132][ T8848] do_syscall_64+0x4c/0xa0 [ 510.470603][ T8848] ? clear_bhb_loop+0x30/0x80 [ 510.475335][ T8848] ? clear_bhb_loop+0x30/0x80 [ 510.480084][ T8848] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 510.486044][ T8848] RIP: 0033:0x7f928d672559 [ 510.490519][ T8848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.510184][ T8848] RSP: 002b:00007f928b8ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 510.518658][ T8848] RAX: ffffffffffffffda RBX: 00007f928d8f9fa0 RCX: 00007f928d672559 [ 510.526685][ T8848] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000006 [ 510.534711][ T8848] RBP: 00007f928d7098b0 R08: 0000000000000000 R09: 0000000000000000 [ 510.542745][ T8848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.550774][ T8848] R13: 00007f928d8fa038 R14: 00007f928d8f9fa0 R15: 00007fff6159db08 [ 510.558826][ T8848] [ 511.664814][ T8871] loop5: detected capacity change from 0 to 512 [ 512.258691][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 512.321904][ T8871] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 512.493740][ T8871] EXT4-fs error (device loop5): ext4_init_orphan_info:623: comm syz.5.1107: orphan file block 0: bad magic [ 512.674647][ T8871] EXT4-fs (loop5): mount failed [ 512.759490][ T8882] loop0: detected capacity change from 0 to 8192 [ 512.822803][ T23] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 513.015271][ T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 513.194516][ T23] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 513.280696][ T23] usb 7-1: config 0 has no interface number 0 [ 513.311905][ T23] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 513.399233][ T23] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 513.476460][ T23] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 513.526721][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.609589][ T23] usb 7-1: config 0 descriptor?? [ 513.643087][ T8884] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 513.667475][ T23] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 514.058177][ T23] usb 7-1: USB disconnect, device number 5 [ 514.213330][ T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 515.007327][ T8920] loop6: detected capacity change from 0 to 512 [ 515.313798][ T8920] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 515.381761][ T8920] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 516.668467][ T8943] loop0: detected capacity change from 0 to 8192 [ 518.063700][ T8956] nfs: Bad value for 'mountport' [ 519.063824][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 519.344293][ T8964] udc-core: couldn't find an available UDC or it's busy [ 519.362448][ T8964] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 519.998908][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.484945][ T9025] udc-core: couldn't find an available UDC or it's busy [ 523.503219][ T9025] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 523.858485][ T9030] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 524.801424][ T9042] process 'syz.2.1140' launched './file2' with NULL argv: empty string added [ 525.246066][ T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.352031][ T9047] loop0: detected capacity change from 0 to 4096 [ 525.400388][ T9046] loop6: detected capacity change from 0 to 256 [ 525.542866][ T9054] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 525.733263][ T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 526.819175][ T9073] loop6: detected capacity change from 0 to 8192 [ 527.414908][ T9090] loop5: detected capacity change from 0 to 128 [ 527.489105][ T9090] ufs: ufstype=nextstep-cd is supported read-only [ 528.004317][ T9098] loop5: detected capacity change from 0 to 256 [ 529.311719][ T9121] udc-core: couldn't find an available UDC or it's busy [ 529.352884][ T9121] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 530.840032][ T9129] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 530.853644][ T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 530.867140][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 530.933330][ T9129] loop6: detected capacity change from 0 to 512 [ 531.013139][ T9129] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 531.110631][ T9129] EXT4-fs error (device loop6): ext4_init_orphan_info:623: comm syz.6.1166: orphan file block 0: bad magic [ 531.274194][ T9129] EXT4-fs (loop6): mount failed [ 534.424793][ T9147] futex_wake_op: syz.2.1176 tries to shift op by 144; fix this program [ 535.336160][ T9162] loop5: detected capacity change from 0 to 4096 [ 535.398554][ T9169] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 536.172808][ T4203] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 536.553039][ T4203] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 536.561200][ T4203] usb 6-1: config 0 has no interface number 0 [ 536.589803][ T4203] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 536.613158][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.625055][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.676194][ T4203] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 536.750738][ T4203] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 536.780867][ T4203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.955867][ T4203] usb 6-1: config 0 descriptor?? [ 537.084164][ T9175] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 537.168845][ T4203] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 537.413811][ T4203] usb 6-1: USB disconnect, device number 9 [ 537.585991][ T4199] [ 537.588378][ T4199] ====================================================== [ 537.595411][ T4199] WARNING: possible circular locking dependency detected [ 537.602520][ T4199] syzkaller #0 Not tainted [ 537.606960][ T4199] ------------------------------------------------------ [ 537.613999][ T4199] kworker/u5:4/4199 is trying to acquire lock: [ 537.620178][ T4199] ffffffff8e3b4048 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x95/0x780 [ 537.629556][ T4199] [ 537.629556][ T4199] but task is already holding lock: [ 537.636962][ T4199] ffffffff8e3946c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x308/0xbb0 [ 537.646845][ T4199] [ 537.646845][ T4199] which lock already depends on the new lock. [ 537.646845][ T4199] [ 537.657274][ T4199] [ 537.657274][ T4199] the existing dependency chain (in reverse order) is: [ 537.666317][ T4199] [ 537.666317][ T4199] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 537.674101][ T4199] __mutex_lock_common+0x1e5/0x2400 [ 537.679864][ T4199] mutex_lock_nested+0x17/0x20 [ 537.685277][ T4199] hci_remote_features_evt+0x5d9/0xa10 [ 537.691496][ T4199] hci_event_packet+0x600/0x1310 [ 537.696999][ T4199] hci_rx_work+0x255/0xa10 [ 537.701974][ T4199] process_one_work+0x867/0xff0 [ 537.707385][ T4199] worker_thread+0xad7/0x12a0 [ 537.712625][ T4199] kthread+0x42e/0x520 [ 537.717253][ T4199] ret_from_fork+0x1f/0x30 [ 537.722234][ T4199] [ 537.722234][ T4199] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 537.729719][ T4199] __mutex_lock_common+0x1e5/0x2400 [ 537.735490][ T4199] mutex_lock_nested+0x17/0x20 [ 537.740815][ T4199] l2cap_chan_connect+0xfb/0xe20 [ 537.746314][ T4199] l2cap_sock_connect+0x5a3/0x770 [ 537.751985][ T4199] kernel_connect+0x11c/0x180 [ 537.757224][ T4199] rfcomm_dlc_open+0x600/0x10c0 [ 537.762639][ T4199] rfcomm_sock_connect+0x2e9/0x600 [ 537.768343][ T4199] __sys_connect+0x3cb/0x450 [ 537.773490][ T4199] __x64_sys_connect+0x76/0x80 [ 537.778808][ T4199] do_syscall_64+0x4c/0xa0 [ 537.783779][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 537.790229][ T4199] [ 537.790229][ T4199] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 537.797651][ T4199] __lock_acquire+0x38f7/0x7d40 [ 537.803067][ T4199] lock_acquire+0x19f/0x400 [ 537.808220][ T4199] __mutex_lock_common+0x1e5/0x2400 [ 537.813978][ T4199] mutex_lock_nested+0x17/0x20 [ 537.819300][ T4199] rfcomm_security_cfm+0x95/0x780 [ 537.825498][ T4199] hci_auth_complete_evt+0x388/0xbb0 [ 537.831382][ T4199] hci_event_packet+0x701/0x1310 [ 537.836881][ T4199] hci_rx_work+0x255/0xa10 [ 537.841860][ T4199] process_one_work+0x867/0xff0 [ 537.847276][ T4199] worker_thread+0xad7/0x12a0 [ 537.852518][ T4199] kthread+0x42e/0x520 [ 537.857323][ T4199] ret_from_fork+0x1f/0x30 [ 537.862298][ T4199] [ 537.862298][ T4199] other info that might help us debug this: [ 537.862298][ T4199] [ 537.872585][ T4199] Chain exists of: [ 537.872585][ T4199] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 537.872585][ T4199] [ 537.885144][ T4199] Possible unsafe locking scenario: [ 537.885144][ T4199] [ 537.892629][ T4199] CPU0 CPU1 [ 537.898025][ T4199] ---- ---- [ 537.903416][ T4199] lock(hci_cb_list_lock); [ 537.907951][ T4199] lock(&hdev->lock); [ 537.914583][ T4199] lock(hci_cb_list_lock); [ 537.921644][ T4199] lock(rfcomm_mutex); [ 537.925839][ T4199] [ 537.925839][ T4199] *** DEADLOCK *** [ 537.925839][ T4199] [ 537.934010][ T4199] 4 locks held by kworker/u5:4/4199: [ 537.939330][ T4199] #0: ffff88807d8af138 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 537.949657][ T4199] #1: ffffc900033cfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 537.961070][ T4199] #2: ffff888072638478 (&hdev->lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0xbc/0xbb0 [ 537.970876][ T4199] #3: ffffffff8e3946c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x308/0xbb0 [ 537.981232][ T4199] [ 537.981232][ T4199] stack backtrace: [ 537.987166][ T4199] CPU: 1 PID: 4199 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 537.994808][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 538.004922][ T4199] Workqueue: hci2 hci_rx_work [ 538.009658][ T4199] Call Trace: [ 538.012981][ T4199] [ 538.015943][ T4199] dump_stack_lvl+0x188/0x250 [ 538.020656][ T4199] ? load_image+0x410/0x410 [ 538.025202][ T4199] ? show_regs_print_info+0x20/0x20 [ 538.030447][ T4199] ? print_circular_bug+0x12b/0x1a0 [ 538.035689][ T4199] check_noncircular+0x2f8/0x400 [ 538.040768][ T4199] ? print_deadlock_bug+0x5d0/0x5d0 [ 538.046008][ T4199] ? lockdep_lock+0xf1/0x1f0 [ 538.050643][ T4199] ? mark_lock+0x94/0x320 [ 538.055006][ T4199] ? _find_first_zero_bit+0xd1/0xf0 [ 538.060242][ T4199] __lock_acquire+0x38f7/0x7d40 [ 538.065147][ T4199] ? verify_lock_unused+0x140/0x140 [ 538.070406][ T4199] lock_acquire+0x19f/0x400 [ 538.074954][ T4199] ? rfcomm_security_cfm+0x95/0x780 [ 538.080192][ T4199] ? __might_sleep+0xf0/0xf0 [ 538.084823][ T4199] ? read_lock_is_recursive+0x10/0x10 [ 538.090254][ T4199] __mutex_lock_common+0x1e5/0x2400 [ 538.095484][ T4199] ? rfcomm_security_cfm+0x95/0x780 [ 538.100730][ T4199] ? rcu_lock_release+0x20/0x20 [ 538.105645][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 538.110912][ T4199] ? rfcomm_security_cfm+0x95/0x780 [ 538.116148][ T4199] ? mutex_lock_io_nested+0x60/0x60 [ 538.121388][ T4199] ? l2cap_security_cfm+0x12b4/0x1340 [ 538.126794][ T4199] ? kmem_cache_free+0x14c/0x210 [ 538.131767][ T4199] ? l2cap_disconn_cfm+0xc0/0xc0 [ 538.136746][ T4199] mutex_lock_nested+0x17/0x20 [ 538.141558][ T4199] rfcomm_security_cfm+0x95/0x780 [ 538.146620][ T4199] ? rfcomm_send_msc+0x340/0x340 [ 538.151601][ T4199] ? rfcomm_send_msc+0x340/0x340 [ 538.156580][ T4199] hci_auth_complete_evt+0x388/0xbb0 [ 538.162024][ T4199] ? hci_disconn_complete_evt+0xae0/0xae0 [ 538.167793][ T4199] ? lock_chain_count+0x20/0x20 [ 538.172689][ T4199] ? __rwlock_init+0x140/0x140 [ 538.177531][ T4199] hci_event_packet+0x701/0x1310 [ 538.182514][ T4199] ? _raw_spin_unlock+0x40/0x40 [ 538.187403][ T4199] ? rcu_lock_release+0x20/0x20 [ 538.192291][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 538.197525][ T4199] hci_rx_work+0x255/0xa10 [ 538.202024][ T4199] process_one_work+0x867/0xff0 [ 538.206919][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 538.212594][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 538.217915][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 538.222970][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 538.228560][ T4199] ? wq_worker_running+0x97/0x170 [ 538.233638][ T4199] worker_thread+0xad7/0x12a0 [ 538.238360][ T4199] kthread+0x42e/0x520 [ 538.242465][ T4199] ? rcu_lock_release+0x20/0x20 [ 538.247331][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 538.251936][ T4199] ret_from_fork+0x1f/0x30 [ 538.256392][ T4199] [ 542.373802][ T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 542.373999][ T4368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 544.372854][ T1107] Bluetooth: hci2: command 0x0406 tx timeout