last executing test programs: 8m56.123008996s ago: executing program 32 (id=445): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0xb, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x7, 0xf69b, 0x40000006, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x89b, 0xad, 0x2, 0x809, 0x40, 0xa7, 0xffd, 0x0, 0x200b398, 0xff, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x8002, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x1, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x8d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x0, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r4, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) 8m35.126478167s ago: executing program 0 (id=597): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xfffffffdffffffff) 8m34.508040596s ago: executing program 33 (id=597): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xfffffffdffffffff) 8m33.618674988s ago: executing program 4 (id=608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40) 8m33.15599899s ago: executing program 4 (id=611): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 8m32.799989967s ago: executing program 4 (id=613): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 8m32.579093268s ago: executing program 4 (id=615): syz_mount_image$xfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x1200000, &(0x7f0000000100)={[{@nolazytime}, {@dax_never}, {@inode32}, {@sysvgroups}, {@grpquota}, {@bsdgroups}, {@nouuid}]}, 0x4, 0x977e, &(0x7f0000006780)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) 8m30.303941416s ago: executing program 4 (id=625): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 8m28.858434455s ago: executing program 4 (id=636): alarm(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000074000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) alarm(0x6) 8m28.368424669s ago: executing program 34 (id=636): alarm(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000074000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) alarm(0x6) 6m36.694358827s ago: executing program 1 (id=1376): socket(0x2b, 0xa, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, r2, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) 6m35.646964567s ago: executing program 1 (id=1387): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 6m33.944594407s ago: executing program 1 (id=1399): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601010000000000000040030040000e0003006269746d61703a697000000005000400000000000900020073797a30000000002800078018000280"], 0x60}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001", 0x37}], 0x1}, 0x40004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xbe7d2cbb21b866d9}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x5c, 0x1, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x7}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) ioctl$BLKRRPART(r1, 0x125f, 0x0) 6m33.209125702s ago: executing program 1 (id=1407): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r1, r0, 0x0, 0x7ffff000) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 6m32.477072767s ago: executing program 1 (id=1416): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000480)="2f2896", 0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) splice(r0, 0x0, r3, 0x0, 0x1e8640, 0x0) 6m30.031947344s ago: executing program 1 (id=1438): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) flock(r0, 0x2) 6m29.705355259s ago: executing program 35 (id=1438): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) flock(r0, 0x2) 2m35.65441458s ago: executing program 3 (id=2909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) 2m28.660906563s ago: executing program 3 (id=2920): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) 2m28.346647917s ago: executing program 3 (id=2925): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m28.096321379s ago: executing program 3 (id=2926): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2m27.553666295s ago: executing program 3 (id=2929): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x8}) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2m26.447816917s ago: executing program 3 (id=2938): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000280), 0x1, 0x0) recvmmsg$unix(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/32, 0x20}], 0x1}}], 0x1, 0x40000000, 0x0) 2m26.068127345s ago: executing program 36 (id=2938): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000280), 0x1, 0x0) recvmmsg$unix(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/32, 0x20}], 0x1}}], 0x1, 0x40000000, 0x0) 46.169109798s ago: executing program 8 (id=3612): r0 = open$dir(&(0x7f0000000080)='.\x00', 0x480, 0x10) fcntl$notify(r0, 0x402, 0x80000023) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r0, 0x402, 0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) close(0x3) 45.168992825s ago: executing program 8 (id=3616): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000540)={0x0, 0x1aa5, 0x1000, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x3e5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x1, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x0, 0x3fffff, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x80003, 0x1, 0x0, r2}}], 0x1, 0x0, 0x0) 44.958460775s ago: executing program 8 (id=3617): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 44.704702597s ago: executing program 8 (id=3619): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000057c0)=ANY=[], 0x21, 0x554e, &(0x7f0000000240)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000080)='./file0/file2\x00', 0x0, 0x10000, 0x0) 42.384107637s ago: executing program 8 (id=3635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000140), 0xa283, r0}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 39.263761016s ago: executing program 8 (id=3658): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) 38.483391562s ago: executing program 37 (id=3658): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) 35.336129662s ago: executing program 6 (id=3676): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2d516fba, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x3fd) 32.080096887s ago: executing program 6 (id=3689): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) 31.59125691s ago: executing program 6 (id=3700): unshare(0x6a060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000ff"], 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x24, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) close(0xffffffffffffffff) 22.95454498s ago: executing program 9 (id=3735): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000300)={0xfffffffc, 0xb, 0x0, 0x86, 0xa, "d38f2d2b3b7505000000000001001c61823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x32, 0x0, 0xffffd000) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x4, 0x0, 0x40000003, 0x20b, 0xb, "d206000894f3ffffd51930f9000100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x6) 22.250099173s ago: executing program 6 (id=3739): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000440)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) creat(0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x100011, 0x2, 0x8000}) 21.858842332s ago: executing program 9 (id=3743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x40000) r3 = eventfd(0x2) read(r3, &(0x7f0000001000), 0x8) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 21.588729815s ago: executing program 6 (id=3745): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r2, 0x2b, 0xfffffffffffffffd}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000680), &(0x7f0000000700)=r3}, 0x20) 21.448405611s ago: executing program 9 (id=3746): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x80940, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) socket(0x10, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 21.164055695s ago: executing program 9 (id=3747): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x185093, 0x0) 21.044172431s ago: executing program 6 (id=3748): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x14000000, @mcast1, 0x6}}}, 0x84) 20.320735505s ago: executing program 38 (id=3748): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x14000000, @mcast1, 0x6}}}, 0x84) 20.311259796s ago: executing program 9 (id=3753): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x4000491, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000002680)={0x1080, &(0x7f0000000080), &(0x7f0000000180), 0x0, {0x40}, &(0x7f00000015c0)=""/4096, 0x1000, 0x0, &(0x7f0000002640)=[r1], 0x1, {r0}}, 0x58) 19.955744792s ago: executing program 9 (id=3754): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0xffffff78) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 19.447526686s ago: executing program 39 (id=3754): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0xffffff78) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 9.818623554s ago: executing program 7 (id=3798): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) 9.214600392s ago: executing program 2 (id=3802): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000140)=0xfffffffa, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xb375) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0xff9e) 8.967268144s ago: executing program 2 (id=3804): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x4000201e}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 8.807188172s ago: executing program 7 (id=3806): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x7f, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 7.949577143s ago: executing program 7 (id=3809): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[], 0x0) 7.527002702s ago: executing program 7 (id=3810): close(0x3) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b1, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x1800, 0x1, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa225, 0x2000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c42, 0x2000, 0x2, 0xa8}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 6.225019704s ago: executing program 7 (id=3813): syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x311, 0x6c, 0xcb, 0x58, 0x20, 0x10c4, 0x8938, 0xb8b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x1, 0x90, 0x6, "", [{{0x9, 0x4, 0x49, 0x9, 0x1, 0x86, 0x40, 0x30, 0x8, [], [{{0x9, 0x5, 0xe, 0x3, 0x10, 0x7, 0x3, 0x7e}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x0, 0x9, 0x0, 0x5, 0x10, 0x9}, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000009b80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x8000000000000001}}, 0x18) 5.67918618s ago: executing program 2 (id=3816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x38}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.236404021s ago: executing program 5 (id=3818): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc8082, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x8, 0x2, 0x33d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x2000, 0x0, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x134}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 4.914455716s ago: executing program 2 (id=3819): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x9, 0xfff, 0x9}) write$binfmt_format(r0, &(0x7f00000002c0)='0\x00', 0x2) fallocate(r2, 0x10, 0x1, 0x8000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xc, r0, 0x9, 0x1, 0x400, 0xfffffffffdffffff}) 4.376283442s ago: executing program 2 (id=3820): unshare(0x28000600) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) setpgid(0x0, 0x0) 4.019912729s ago: executing program 5 (id=3821): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) 3.620668288s ago: executing program 5 (id=3822): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x258, 0x1398, 0x1398, 0x258, 0x1398, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0x0, 0x322], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'vlan1\x00', {}, {}, 0x11}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0xd586, 0x8, 0x1, 'pptp\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000001080)=@get={0x1, &(0x7f0000000080)=""/4096, 0x8b0}) 2.750425639s ago: executing program 2 (id=3823): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x2d516fba, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x3fd) 2.52215091s ago: executing program 0 (id=3751): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x4, 0x78, 0xa3, 0x6, 0x2, 0x3e, 0xcd, 0x1b8, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x281, 0x9, 0xff5, 0x3ff, 0x97, 0x80000005}]}, 0x78) r2 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) r3 = fanotify_init(0x200, 0x1000) r4 = dup(r2) fanotify_mark(r3, 0x1, 0x48001028, r4, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.427537064s ago: executing program 7 (id=3824): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x4000201e}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.217736964s ago: executing program 0 (id=3825): pipe2$9p(&(0x7f0000000080), 0x4800) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f00000007c0)=ANY=[@ANYBLOB='cruft,block=0x0000000000000000,showassoc,dmode=0x0000000000000005,nojoliet,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=iocharset=iso8859-9,dmode=0x0000000000000000,nojoliet,\x00'], 0x0, 0x688, &(0x7f0000000100)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xb3e, 0x4, 0x40, 0x2, 0x4, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0xffff, 0x7, 0x0, 0x5, 0x0, 0x8, 0x5, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x84, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x57, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x5, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x84, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x401, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x3, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000f800000000000000fb"], 0x200000) 1.89097437s ago: executing program 0 (id=3826): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e0"], 0xfc}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 1.762079956s ago: executing program 5 (id=3827): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2, 0x81, 0x1ff, 0x1}, 0x10) 1.541108507s ago: executing program 5 (id=3828): write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1.218917032s ago: executing program 5 (id=3829): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x4080) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'lblc\x00', 0x1d, 0x80002, 0x64}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x50}, 0x4e23, 0x1, 0xcd, 0x4}}, 0x44) 585.507732ms ago: executing program 0 (id=3830): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c, 0x80000) 0s ago: executing program 0 (id=3831): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0\n\x00', 0x2) write(r0, &(0x7f0000000200)='5\n\x00', 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) kernel console output (not intermixed with test programs): _global_system_inodes:463 ERROR: Unable to load system inode 4, possibly corrupt fs? [ 538.026012][T14244] (syz.6.2960,14244,0):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 538.078385][T14244] (syz.6.2960,14244,0):ocfs2_initialize_super:2253 ERROR: status = -22 [ 538.103303][T14244] (syz.6.2960,14244,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 538.104028][T14178] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 538.225188][ T4563] device hsr_slave_0 left promiscuous mode [ 538.246395][ T4563] device hsr_slave_1 left promiscuous mode [ 538.275780][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.306365][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.326547][ T4563] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.367069][ T4563] device bridge_slave_0 left promiscuous mode [ 538.373394][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.609199][ T4563] bond2 (unregistering): (slave geneve2): Releasing active interface [ 539.190449][T14286] loop7: detected capacity change from 0 to 32768 [ 539.246549][T14286] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.2969 (14286) [ 539.267480][T14286] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 539.277784][T14286] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 539.286606][T14286] BTRFS info (device loop7): use zlib compression, level 3 [ 539.293851][T14286] BTRFS info (device loop7): turning on sync discard [ 539.300726][T14286] BTRFS info (device loop7): using free space tree [ 539.572396][ T4563] bond2 (unregistering): Released all slaves [ 539.583273][T14286] BTRFS info (device loop7): enabling ssd optimizations [ 539.677356][ T26] kauditd_printk_skb: 142 callbacks suppressed [ 539.677375][ T26] audit: type=1800 audit(1789725828.302:712): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2969" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 539.827424][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 540.141695][ T6405] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 540.347960][T12572] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop7 scanned by udevd (12572) [ 540.772927][ T4563] bond1 (unregistering): Released all slaves [ 540.966438][ T4326] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 541.157466][ T4326] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 541.179648][ T4326] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 541.199797][ T4326] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 541.211133][ T4326] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.227417][ T4326] usb 8-1: Product: syz [ 541.231753][ T4326] usb 8-1: Manufacturer: syz [ 541.241725][ T4326] usb 8-1: SerialNumber: syz [ 541.773630][ T4563] team0 (unregistering): Port device team_slave_1 removed [ 541.851623][ T4563] team0 (unregistering): Port device team_slave_0 removed [ 541.886463][ C0] usb 8-1: invalid arpc response id received: 16 [ 541.914710][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 541.939415][ T4563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.011826][ T4563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.082166][ T4326] usb 8-1: failed to send ARPC request 1: -71 [ 542.129698][ T4326] usb 8-1: failed to execute ARPC: -71 [ 542.135926][ T4326] usb 8-1: failed to set connected state for cport 0: -71 [ 542.144105][ T4326] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 542.170142][ T4326] usb 8-1: failed to send ARPC request 3: -71 [ 542.177086][ T4326] usb 8-1: failed to execute ARPC: -71 [ 542.186491][ T4326] usb 8-1: failed to clear cport 0: -71 [ 542.192207][ T4326] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 542.209605][ T4326] es2_ap_driver: probe of 8-1:1.0 failed with error -71 [ 542.222609][ T4326] usb 8-1: USB disconnect, device number 23 [ 542.693403][ T4563] bond0 (unregistering): Released all slaves [ 542.837021][T14327] loop7: detected capacity change from 0 to 128 [ 542.878129][T14327] FAT-fs (loop7): error, invalid FAT chain (i_pos 548, last_block 8) [ 542.886530][T14327] FAT-fs (loop7): Filesystem has been set read-only [ 542.893275][T14327] FAT-fs (loop7): error, corrupted file size (i_pos 548, 522) [ 543.115122][T14319] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2974'. [ 543.335019][T14178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.392501][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 543.408401][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 543.421259][T14343] FAULT_INJECTION: forcing a failure. [ 543.421259][T14343] name failslab, interval 1, probability 0, space 0, times 0 [ 543.444210][T14178] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.485646][T14343] CPU: 0 PID: 14343 Comm: syz.7.2981 Not tainted syzkaller #0 [ 543.493235][T14343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 543.503437][T14343] Call Trace: [ 543.506750][T14343] [ 543.509722][T14343] dump_stack_lvl+0x188/0x24e [ 543.514453][T14343] ? show_regs_print_info+0x12/0x12 [ 543.519705][T14343] ? load_image+0x410/0x410 [ 543.524274][T14343] ? __might_sleep+0xd0/0xd0 [ 543.528926][T14343] ? __lock_acquire+0x7c40/0x7c40 [ 543.534018][T14343] should_fail_ex+0x390/0x4c0 [ 543.538759][T14343] should_failslab+0x5/0x20 [ 543.543308][T14343] slab_pre_alloc_hook+0x59/0x300 [ 543.548394][T14343] ? newseg+0x231/0xb00 [ 543.552718][T14343] __kmem_cache_alloc_node+0x4f/0x270 [ 543.558158][T14343] ? newseg+0x231/0xb00 [ 543.562408][T14343] kmalloc_trace+0x26/0xe0 [ 543.566876][T14343] newseg+0x231/0xb00 [ 543.570906][T14343] ? rwsem_write_trylock+0x135/0x1c0 [ 543.576243][T14343] ? ksys_shmget+0x140/0x140 [ 543.580908][T14343] ipcget+0x1cd/0xe10 [ 543.585033][T14343] ? do_futex+0x310/0x320 [ 543.589502][T14343] ? __ia32_sys_get_robust_list+0x100/0x100 [ 543.595448][T14343] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 543.601146][T14343] __x64_sys_shmget+0x13d/0x180 [ 543.606038][T14343] ? lock_chain_count+0x20/0x20 [ 543.610925][T14343] ? shm_more_checks+0x80/0x80 [ 543.615728][T14343] ? lockdep_hardirqs_on+0x94/0x140 [ 543.620962][T14343] do_syscall_64+0x4c/0xa0 [ 543.625400][T14343] ? clear_bhb_loop+0x60/0xb0 [ 543.630108][T14343] ? clear_bhb_loop+0x60/0xb0 [ 543.634812][T14343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.640739][T14343] RIP: 0033:0x7fdc3a59e159 [ 543.645185][T14343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.664819][T14343] RSP: 002b:00007fdc3b550028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 543.673266][T14343] RAX: ffffffffffffffda RBX: 00007fdc3a825fa0 RCX: 00007fdc3a59e159 [ 543.681359][T14343] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000000000000 [ 543.689374][T14343] RBP: 00007fdc3a63506b R08: 0000000000000000 R09: 0000000000000000 [ 543.697380][T14343] R10: 0000200000ffd000 R11: 0000000000000246 R12: 0000000000000000 [ 543.705386][T14343] R13: 00007fdc3a826038 R14: 00007fdc3a825fa0 R15: 00007ffd3ff2dca8 [ 543.713408][T14343] [ 543.727487][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 543.796529][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 543.814388][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.821585][ T4572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.840437][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 543.849551][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 543.858752][ T4572] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.865929][ T4572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.874140][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 543.903088][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 543.943802][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 544.009700][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 544.040722][T14353] loop6: detected capacity change from 0 to 16 [ 544.059379][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 544.106479][T14353] erofs: (device loop6): mounted with root inode @ nid 36. [ 544.114144][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 544.148436][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 544.169220][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 544.212271][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 544.246289][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 544.256371][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 544.280777][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 544.330154][T14178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 544.449841][T14360] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2986'. [ 545.354967][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 545.363999][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.401686][T14178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.676763][T14407] loop6: detected capacity change from 0 to 2048 [ 545.730108][T14407] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.989030][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 547.011443][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 547.097332][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 547.115097][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 547.159651][T14178] device veth0_vlan entered promiscuous mode [ 547.178616][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 547.213521][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 547.228557][T14178] device veth1_vlan entered promiscuous mode [ 547.262717][T14447] netlink: 'syz.8.3009': attribute type 1 has an invalid length. [ 547.335582][T14447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 547.493701][T14451] bond1: (slave gretap1): making interface the new active one [ 547.557909][T14451] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 547.618675][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 547.653726][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 547.677940][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 547.722671][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 547.742307][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 547.816459][T14178] device veth0_macvtap entered promiscuous mode [ 547.862318][T14178] device veth1_macvtap entered promiscuous mode [ 547.909723][T14468] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3015'. [ 547.946047][T14468] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3015'. [ 547.989711][T14468] device gretap0 entered promiscuous mode [ 551.305751][T14468] device gretap0 left promiscuous mode [ 551.347032][T14473] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3015'. [ 551.373487][T14473] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3015'. [ 551.406200][T14473] device gretap0 entered promiscuous mode [ 551.440454][T14473] device gretap0 left promiscuous mode [ 551.482737][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 551.516809][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 551.562906][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.591458][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.622910][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.665536][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.685522][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.705548][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.737782][T14178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.749938][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 551.770486][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 551.830897][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.849634][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.883788][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.904625][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.925532][T14178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.953963][T14178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.991968][T14178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.001015][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 552.016854][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 552.035020][T14178] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.051343][T14178] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.072740][T14178] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.106571][T14178] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.306208][ T4576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.314127][ T4576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.402071][T14505] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3025'. [ 552.420149][T14505] netlink: 'syz.8.3025': attribute type 11 has an invalid length. [ 552.478260][T14505] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.487222][T14505] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.496124][T14505] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.504887][T14505] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.637535][T14505] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3025'. [ 552.688792][T14505] netlink: 'syz.8.3025': attribute type 11 has an invalid length. [ 552.716521][ T4563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 552.760986][ T4563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.793364][ T4563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.827074][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 553.162431][T14531] device netdevsim0 entered promiscuous mode [ 553.187295][T14531] device netdevsim0 left promiscuous mode [ 553.285835][ T14] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 553.370238][T14538] loop7: detected capacity change from 0 to 256 [ 553.494895][ T14] usb 9-1: Using ep0 maxpacket: 8 [ 553.502019][ T14] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 553.530860][ T14] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 553.561640][ T14] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 553.591080][ T14] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 553.619094][ T14] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.666820][ T14] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 553.694179][ T14] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.966751][ T14] usb 9-1: usb_control_msg returned -32 [ 553.972419][ T14] usbtmc 9-1:16.0: can't read capabilities [ 554.525253][T14575] FAULT_INJECTION: forcing a failure. [ 554.525253][T14575] name failslab, interval 1, probability 0, space 0, times 0 [ 554.552802][T14575] CPU: 0 PID: 14575 Comm: syz.6.3046 Not tainted syzkaller #0 [ 554.560348][T14575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.570472][T14575] Call Trace: [ 554.573807][T14575] [ 554.576790][T14575] dump_stack_lvl+0x188/0x24e [ 554.581524][T14575] ? show_regs_print_info+0x12/0x12 [ 554.586784][T14575] ? load_image+0x410/0x410 [ 554.591345][T14575] ? __might_sleep+0xd0/0xd0 [ 554.596008][T14575] ? __lock_acquire+0x7c40/0x7c40 [ 554.601092][T14575] should_fail_ex+0x390/0x4c0 [ 554.605831][T14575] should_failslab+0x5/0x20 [ 554.610377][T14575] slab_pre_alloc_hook+0x59/0x300 [ 554.615446][T14575] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.621574][T14575] ? p9_client_create+0xcb/0x1040 [ 554.626745][T14575] __kmem_cache_alloc_node+0x4f/0x270 [ 554.632171][T14575] ? p9_client_create+0xcb/0x1040 [ 554.637245][T14575] kmalloc_trace+0x26/0xe0 [ 554.641720][T14575] p9_client_create+0xcb/0x1040 [ 554.646624][T14575] ? memset+0x1e/0x40 [ 554.650758][T14575] ? lockdep_init_map_type+0x98/0x8d0 [ 554.656191][T14575] ? do_trace_9p_fid_put+0x20/0x20 [ 554.661379][T14575] ? lockdep_softirqs_off+0x430/0x430 [ 554.666813][T14575] ? lockdep_softirqs_off+0x430/0x430 [ 554.672241][T14575] ? free_zapped_rcu+0x1f0/0x1f0 [ 554.677242][T14575] ? v9fs_session_init+0xf5/0x1780 [ 554.682441][T14575] ? __raw_spin_lock_init+0x41/0x100 [ 554.687793][T14575] v9fs_session_init+0x1a9/0x1780 [ 554.692890][T14575] ? v9fs_show_options+0x610/0x610 [ 554.698067][T14575] v9fs_mount+0xcc/0xb60 [ 554.702434][T14575] ? rcu_is_watching+0x11/0xa0 [ 554.707268][T14575] ? end_current_label_crit_section+0x170/0x170 [ 554.713581][T14575] ? trace_xrep_findroot_block+0x280/0x280 [ 554.719439][T14575] ? vfs_parse_fs_param+0x420/0x420 [ 554.724781][T14575] legacy_get_tree+0xe6/0x180 [ 554.729593][T14575] ? trace_xrep_findroot_block+0x280/0x280 [ 554.735478][T14575] vfs_get_tree+0x88/0x270 [ 554.740045][T14575] do_new_mount+0x247/0xa40 [ 554.744606][T14575] __se_sys_mount+0x2e3/0x3d0 [ 554.749337][T14575] ? __x64_sys_mount+0xc0/0xc0 [ 554.754158][T14575] ? lockdep_hardirqs_on+0x94/0x140 [ 554.759490][T14575] ? __x64_sys_mount+0x1c/0xc0 [ 554.764310][T14575] do_syscall_64+0x4c/0xa0 [ 554.768777][T14575] ? clear_bhb_loop+0x60/0xb0 [ 554.773506][T14575] ? clear_bhb_loop+0x60/0xb0 [ 554.778242][T14575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.784207][T14575] RIP: 0033:0x7f9b5c99e159 [ 554.788663][T14575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.808320][T14575] RSP: 002b:00007f9b5d8d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 554.816956][T14575] RAX: ffffffffffffffda RBX: 00007f9b5cc25fa0 RCX: 00007f9b5c99e159 [ 554.824981][T14575] RDX: 0000200000000380 RSI: 00002000000001c0 RDI: 00002000000000c0 [ 554.833017][T14575] RBP: 00007f9b5ca3506b R08: 0000200000000200 R09: 0000000000000000 [ 554.841038][T14575] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 554.849048][T14575] R13: 00007f9b5cc26038 R14: 00007f9b5cc25fa0 R15: 00007ffd9678bf28 [ 554.857084][T14575] [ 554.916267][T14577] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 555.118351][ T14] usb 9-1: USB disconnect, device number 19 [ 555.567832][ T26] audit: type=1326 audit(1789725844.232:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.7.3053" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3a59e159 code=0x7ffc0000 [ 555.625750][ T26] audit: type=1326 audit(1789725844.232:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.7.3053" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3a59e159 code=0x7ffc0000 [ 555.733146][ T26] audit: type=1326 audit(1789725844.232:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.7.3053" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3a59e159 code=0x7ffc0000 [ 555.790469][ T26] audit: type=1326 audit(1789725844.232:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.7.3053" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc3a59e159 code=0x7ffc0000 [ 555.832483][ T26] audit: type=1326 audit(1789725844.232:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.7.3053" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3a59e159 code=0x7ffc0000 [ 555.923529][ T26] audit: type=1326 audit(1789725844.232:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.7.3053" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3a59e159 code=0x7ffc0000 [ 555.962086][ T26] audit: type=1326 audit(1789725844.242:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.7.3053" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3a59e159 code=0x7ffc0000 [ 555.988659][ T26] audit: type=1326 audit(1789725844.242:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.7.3053" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3a59e159 code=0x7ffc0000 [ 556.024141][ T26] audit: type=1326 audit(1789725844.242:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.7.3053" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdc3a59e159 code=0x7ffc0000 [ 556.055134][ T26] audit: type=1326 audit(1789725844.252:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.7.3053" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3a59e159 code=0x7ffc0000 [ 556.894864][T14639] loop8: detected capacity change from 0 to 256 [ 557.472729][T14652] loop7: detected capacity change from 0 to 1024 [ 557.557625][T14652] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.3066: Failed to acquire dquot type 0 [ 557.674867][T14652] EXT4-fs error (device loop7): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 557.813537][T14652] EXT4-fs (loop7): 1 truncate cleaned up [ 557.843554][T14652] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 558.107377][ T6405] EXT4-fs (loop7): unmounting filesystem. [ 558.245572][ T14] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 558.448824][ T14] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.469698][ T14] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 558.509172][ T14] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 558.545919][ T14] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 558.575526][ T14] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 558.604480][ T14] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 558.645292][ T14] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 558.684520][ T14] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 558.710810][ T14] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 558.741174][ T14] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 558.781576][ T14] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 558.805521][ T14] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 558.836048][ T14] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 558.869692][ T14] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 558.909862][ T14] usb 7-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 558.954009][ T14] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 558.997817][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.072717][ T14] usb 7-1: Product: syz [ 559.113251][ T14] usb 7-1: Manufacturer: syz [ 559.138806][ T14] usb 7-1: SerialNumber: syz [ 559.182105][T14663] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 559.205733][T14663] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 559.244999][T14663] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 559.285950][T14663] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 559.326252][T14663] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 559.333680][T14663] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 559.393494][T14663] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 559.424873][T14663] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 559.425568][T14738] lo speed is unknown, defaulting to 1000 [ 559.466535][T14663] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 559.480114][T14738] lo speed is unknown, defaulting to 1000 [ 559.507892][T14663] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 559.533198][T14738] lo speed is unknown, defaulting to 1000 [ 559.549630][T14663] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 559.587677][ T14] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 559.602192][ T14] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7 [ 559.642116][T14738] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 559.661419][ T14] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 559.698229][ T14] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 559.713591][T14738] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 559.737348][ T14] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 559.943695][T14738] lo speed is unknown, defaulting to 1000 [ 559.976782][T14738] lo speed is unknown, defaulting to 1000 [ 560.012628][T14738] lo speed is unknown, defaulting to 1000 [ 560.032219][T14738] lo speed is unknown, defaulting to 1000 [ 560.054407][T14738] lo speed is unknown, defaulting to 1000 [ 560.087371][T14738] lo speed is unknown, defaulting to 1000 [ 560.159418][ T1172] usb 7-1: USB disconnect, device number 13 [ 560.191306][ T1172] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 560.233116][ T1172] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 560.278741][ T1172] keyspan 7-1:1.0: device disconnected [ 561.415350][T14779] loop6: detected capacity change from 0 to 4096 [ 561.456655][T14779] EXT4-fs: Ignoring removed orlov option [ 561.547977][T14779] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 561.818357][T14765] loop8: detected capacity change from 0 to 1024 [ 561.849433][T14765] hfsplus: unable to parse mount options [ 561.873994][ T6270] EXT4-fs (loop6): unmounting filesystem. [ 562.569165][T14816] loop8: detected capacity change from 0 to 512 [ 562.642915][T14816] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 562.714832][T14816] EXT4-fs warning (device loop8): ext4_begin_enable_verity:137: inode #18: comm syz.8.3103: verity is only allowed on extent-based files [ 562.869639][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.876322][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.925203][ T9223] EXT4-fs (loop8): unmounting filesystem. [ 562.963110][T14825] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3106'. [ 563.153833][T14829] ptp: physical clock is free running [ 563.209393][T14806] loop6: detected capacity change from 0 to 32768 [ 563.275968][T14806] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.3099 (14806) [ 563.378796][T14806] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 563.414638][T14806] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 563.445088][T14806] BTRFS info (device loop6): setting nodatasum [ 563.462840][T14835] loop8: detected capacity change from 0 to 256 [ 563.469396][T14806] BTRFS info (device loop6): force zlib compression, level 3 [ 563.485685][T14806] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 563.526642][T14835] FAT-fs (loop8): Unrecognized mount option "shortname=wiÈ6Üjqâ¶õŠ¡^n95" or missing value [ 563.555522][T14806] BTRFS info (device loop6): use lzo compression, level 0 [ 563.606611][T14806] BTRFS info (device loop6): turning on flush-on-commit [ 563.668188][T14806] BTRFS info (device loop6): enabling auto defrag [ 563.674771][T14806] BTRFS info (device loop6): max_inline at 4096 [ 563.731716][T14806] BTRFS info (device loop6): using free space tree [ 564.035677][ T1172] atkbd serio3: Failed to deactivate keyboard on [ 564.131822][T14806] BTRFS info (device loop6): enabling ssd optimizations [ 564.193129][T14869] loop7: detected capacity change from 0 to 128 [ 564.308365][T14869] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 564.346797][T14869] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.368597][ T6270] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 564.455612][ T1172] atkbd serio3: Failed to enable keyboard on [ 564.507309][ T1172] input: AT Raw Set 2 keyboard as /devices/serio3/input/input32 [ 565.101551][ T6405] EXT4-fs (loop7): unmounting filesystem. [ 565.725159][T14910] ip_tables: iptables: counters copy to user failed while replacing table [ 565.760355][T14914] device batadv_slave_1 entered promiscuous mode [ 565.771125][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3127'. [ 565.894938][T14912] device batadv_slave_1 left promiscuous mode [ 566.187531][T14924] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 566.394587][ T1172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 567.372003][T14958] loop6: detected capacity change from 0 to 512 [ 567.407114][T14958] EXT4-fs: Ignoring removed mblk_io_submit option [ 567.434504][T14958] EXT4-fs: Mount option(s) incompatible with ext2 [ 567.491642][T12572] blk_print_req_error: 24 callbacks suppressed [ 567.491664][T12572] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 567.645550][T10256] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 567.845647][T10256] usb 8-1: Using ep0 maxpacket: 32 [ 567.853310][T10256] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.894832][T10256] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.917980][T10256] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 567.937634][T10256] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.960813][T10256] usb 8-1: config 0 descriptor?? [ 567.968997][T10256] hub 8-1:0.0: USB hub found [ 568.171812][T10256] hub 8-1:0.0: 1 port detected [ 568.813976][T10256] hub 8-1:0.0: activate --> -90 [ 569.229700][ T1172] usb 8-1: USB disconnect, device number 24 [ 569.425618][ T9445] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 569.615552][ T9445] usb 7-1: Using ep0 maxpacket: 16 [ 569.622913][ T9445] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.674088][ T9445] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.707237][ T9445] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 569.730826][ T9445] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.776266][ T9445] usb 7-1: Product: syz [ 569.790770][ T9445] usb 7-1: Manufacturer: syz [ 569.805556][ T9445] usb 7-1: SerialNumber: syz [ 570.034510][ T9445] usb 7-1: 0:2 : does not exist [ 570.055321][ T9445] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 570.123894][ T9445] usb 7-1: USB disconnect, device number 14 [ 570.385729][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 570.404287][T12572] udevd[12572]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.523192][T15039] netlink: 'syz.7.3169': attribute type 1 has an invalid length. [ 570.614796][T15039] 8021q: adding VLAN 0 to HW filter on device bond4 [ 570.666969][T15041] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.706611][T15041] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.747001][T15041] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.770917][T15041] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.798049][T15041] bond4: (slave geneve2): making interface the new active one [ 570.866379][T15041] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 570.912750][T14720] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 571.463738][ T26] kauditd_printk_skb: 1459 callbacks suppressed [ 571.463755][ T26] audit: type=1326 audit(1789725860.122:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.8.3181" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c2f9e159 code=0x7ffc0000 [ 571.623376][ T26] audit: type=1326 audit(1789725860.162:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.8.3181" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c2f9e159 code=0x7ffc0000 [ 571.776396][ T26] audit: type=1326 audit(1789725860.162:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.8.3181" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c2f9e159 code=0x7ffc0000 [ 571.842732][ T26] audit: type=1326 audit(1789725860.162:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.8.3181" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c2f9e159 code=0x7ffc0000 [ 571.954125][ T26] audit: type=1326 audit(1789725860.162:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.8.3181" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f84c2f9e159 code=0x7ffc0000 [ 572.076052][ T26] audit: type=1326 audit(1789725860.162:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.8.3181" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c2f9e159 code=0x7ffc0000 [ 572.140622][ T26] audit: type=1326 audit(1789725860.162:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.8.3181" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c2f9e159 code=0x7ffc0000 [ 572.290398][ T26] audit: type=1326 audit(1789725860.162:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.8.3181" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f84c2f9e159 code=0x7ffc0000 [ 572.370976][ T26] audit: type=1326 audit(1789725860.172:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15072 comm="syz.8.3181" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f84c2f9e159 code=0x7ffc0000 [ 572.438909][T15105] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3191'. [ 572.479647][T15105] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3191'. [ 572.509562][T15105] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3191'. [ 572.985766][T15114] tipc: Enabling of bearer rejected, failed to enable media [ 575.469883][T15120] loop7: detected capacity change from 0 to 32768 [ 575.674950][T15120] XFS (loop7): Mounting V5 Filesystem [ 575.807689][T15120] XFS (loop7): Ending clean mount [ 576.237255][ T6405] XFS (loop7): Unmounting Filesystem [ 576.420937][ T126] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 576.634270][ T126] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 576.651660][ T126] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.689676][ T126] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.704472][ T126] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 576.729357][ T126] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 576.758618][ T126] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 576.793245][ T126] usb 10-1: Manufacturer: syz [ 576.813684][ T126] usb 10-1: config 0 descriptor?? [ 577.205526][T10256] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 577.245113][ T126] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 577.253720][ T126] appleir 0003:05AC:8243.0019: No inputs registered, leaving [ 577.273803][ T126] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 577.397910][T10256] usb 7-1: Using ep0 maxpacket: 16 [ 577.405174][T10256] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.427886][T10256] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.450306][T10256] usb 7-1: config 0 interface 0 has no altsetting 0 [ 577.465111][T10256] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 577.491531][T10256] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.558033][T10256] usb 7-1: config 0 descriptor?? [ 578.053187][T15201] loop6: detected capacity change from 0 to 512 [ 578.122804][T15201] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 578.196668][T15201] EXT4-fs (loop6): 1 truncate cleaned up [ 578.210435][T15201] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 578.226669][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 578.312526][T10256] mcp2221 0003:04D8:00DD.001A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 579.236440][T15241] loop9: detected capacity change from 0 to 512 [ 579.256639][T15201] EXT4-fs (loop6): unmounting filesystem. [ 579.269716][ T1172] usb 7-1: USB disconnect, device number 15 [ 579.282289][T15241] EXT4-fs: inline encryption not supported [ 579.334786][T15241] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 579.380495][ T9445] usb 10-1: USB disconnect, device number 2 [ 579.417694][T15241] EXT4-fs (loop9): orphan cleanup on readonly fs [ 579.443601][T15242] loop7: detected capacity change from 0 to 4096 [ 579.546412][T15241] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.3232: inode #15: comm syz.9.3232: iget: illegal inode # [ 579.613175][T15241] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.3232: couldn't read orphan inode 15 (err -117) [ 579.645961][T15241] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 579.858939][T15242] EXT4-fs: Ignoring removed nobh option [ 579.867606][T15242] EXT4-fs: Ignoring removed bh option [ 579.926088][T15242] EXT4-fs (loop7): Test dummy encryption mode enabled [ 580.008320][T15242] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 580.017737][T14178] EXT4-fs (loop9): unmounting filesystem. [ 581.103622][T15226] loop8: detected capacity change from 0 to 32768 [ 581.254214][T15226] JBD2: Ignoring recovery information on journal [ 581.363741][ T6405] EXT4-fs (loop7): unmounting filesystem. [ 581.384289][T15226] JBD2: recovery failed [ 581.404587][T15226] (syz.8.3227,15226,0):ocfs2_journal_load:1135 ERROR: Failed to load journal! [ 581.441159][T15226] (syz.8.3227,15226,0):ocfs2_check_volume:2431 ERROR: ocfs2 journal load failed! -5 [ 581.465236][T15273] loop6: detected capacity change from 0 to 1024 [ 581.494183][T15226] (syz.8.3227,15226,0):ocfs2_check_volume:2487 ERROR: status = -5 [ 581.534823][T15226] (syz.8.3227,15226,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 581.546534][T15273] EXT4-fs: Ignoring removed orlov option [ 581.628219][T15226] (syz.8.3227,15226,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 581.667392][T15273] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 582.254428][ T6270] EXT4-fs (loop6): unmounting filesystem. [ 583.663591][T15335] gadgetfs: bound to dummy_udc driver [ 583.850541][ T26] audit: type=1326 audit(1789725872.512:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.9.3259" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 583.944043][ T26] audit: type=1326 audit(1789725872.552:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.9.3259" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 584.072406][ T26] audit: type=1326 audit(1789725872.552:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.9.3259" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 584.137574][T15346] loop8: detected capacity change from 0 to 2048 [ 584.173216][ T26] audit: type=1326 audit(1789725872.552:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.9.3259" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 584.232979][T15346] Alternate GPT is invalid, using primary GPT. [ 584.263800][T15346] loop8: p2 p3 p7 [ 584.271714][ T26] audit: type=1326 audit(1789725872.552:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.9.3259" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 584.373674][ T26] audit: type=1326 audit(1789725872.552:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.9.3259" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 584.418082][ T3639] Alternate GPT is invalid, using primary GPT. [ 584.433006][ T26] audit: type=1326 audit(1789725872.552:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.9.3259" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 584.446334][ T3639] loop8: p2 p3 p7 [ 584.507557][ T26] audit: type=1326 audit(1789725872.552:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.9.3259" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 584.611034][ T26] audit: type=1326 audit(1789725872.562:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.9.3259" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 584.725882][ T26] audit: type=1326 audit(1789725872.562:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15337 comm="syz.9.3259" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 584.745832][T15365] loop6: detected capacity change from 0 to 512 [ 584.852073][T15365] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 584.894957][T15365] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.3264: corrupted in-inode xattr [ 584.946773][T15365] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.3264: couldn't read orphan inode 15 (err -117) [ 584.990430][T15365] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 585.026116][T13183] udevd[13183]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 585.039799][T12573] udevd[12573]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 585.057238][T12572] udevd[12572]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 585.331128][ T6270] EXT4-fs (loop6): unmounting filesystem. [ 585.665703][ T4289] Bluetooth: hci2: command 0x0401 tx timeout [ 585.722400][T15387] netlink: 'syz.9.3269': attribute type 1 has an invalid length. [ 585.778241][T15387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.815614][ T9445] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 585.850133][T15390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.896406][T14717] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 585.935493][T15390] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 585.954159][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 586.017848][ T9445] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 586.049257][ T9445] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.107728][ T9445] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.120305][ T4572] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 586.153443][ T9445] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 586.227100][ T9445] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 586.266939][ T9445] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 586.275194][ T9445] usb 7-1: Manufacturer: syz [ 586.334665][ T9445] usb 7-1: config 0 descriptor?? [ 586.766936][ T9445] appleir 0003:05AC:8243.001B: unknown main item tag 0x0 [ 586.811528][ T9445] appleir 0003:05AC:8243.001B: No inputs registered, leaving [ 586.860331][ T9445] appleir 0003:05AC:8243.001B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 587.183011][T15427] X25: received unknown 00 with LCI 000 [ 587.516102][ T7481] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 587.717490][ T7481] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.740454][ T7481] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 587.774638][ T7481] usb 10-1: config 0 interface 0 has no altsetting 0 [ 587.790678][ T7481] usb 10-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00 [ 587.846807][ T7481] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.874607][ T7481] usb 10-1: config 0 descriptor?? [ 588.312692][ T7481] input: HID 046d:c704 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:046D:C704.001C/input/input33 [ 588.436421][ T7481] logitech 0003:046D:C704.001C: input,hidraw1: USB HID v0.00 Joystick [HID 046d:c704] on usb-dummy_hcd.9-1/input0 [ 588.526414][ T7481] usb 10-1: USB disconnect, device number 3 [ 588.918070][T15458] fido_id[15458]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 588.953552][ T9445] usb 7-1: USB disconnect, device number 16 [ 589.801495][T15487] loop6: detected capacity change from 0 to 512 [ 589.867908][T15490] loop7: detected capacity change from 0 to 8 [ 589.913365][T15490] squashfs image failed sanity check [ 589.921071][T15487] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 589.966224][T15487] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.254343][ T6270] EXT4-fs (loop6): unmounting filesystem. [ 590.265720][ T4326] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 590.473697][ T4326] usb 8-1: Using ep0 maxpacket: 8 [ 590.489004][ T4326] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 590.526101][ T4326] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 590.580321][ T4326] usb 8-1: config 0 interface 0 has no altsetting 0 [ 590.602735][ T4326] usb 8-1: New USB device found, idVendor=045e, idProduct=071d, bcdDevice= 0.00 [ 590.649281][ T4326] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.684429][ T4326] usb 8-1: config 0 descriptor?? [ 591.120467][ T4326] input: HID 045e:071d as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:071D.001D/input/input34 [ 591.270769][ T4326] microsoft 0003:045E:071D.001D: input,hiddev0,hidraw0: USB HID v0.10 Device [HID 045e:071d] on usb-dummy_hcd.7-1/input0 [ 591.781779][T15544] CIFS: Attempting to mount \\127.0.0.1\share [ 591.809077][T15544] CIFS: VFS: Error connecting to socket. Aborting operation. [ 591.844055][T15544] CIFS: VFS: cifs_mount failed w/return code = -101 [ 591.928959][T10256] usb 8-1: USB disconnect, device number 25 [ 592.049041][ T4279] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 592.162241][T15531] loop8: detected capacity change from 0 to 32768 [ 592.831363][T15563] loop9: detected capacity change from 0 to 512 [ 592.882944][T15563] EXT4-fs: Ignoring removed bh option [ 592.957838][T15563] EXT4-fs error (device loop9): ext4_iget_extra_inode:4763: inode #15: comm syz.9.3323: corrupted in-inode xattr [ 593.001178][T15563] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.3323: couldn't read orphan inode 15 (err -117) [ 593.062824][T15563] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 593.161467][T15563] EXT4-fs warning (device loop9): dx_probe:833: inode #2: comm syz.9.3323: Unrecognised inode hash code 4 [ 593.211549][T15563] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.3323: Corrupt directory, running e2fsck is recommended [ 593.512541][T14178] EXT4-fs (loop9): unmounting filesystem. [ 593.578997][T15568] syzkaller0: renamed from gre4 [ 593.652815][T15581] loop9: detected capacity change from 0 to 256 [ 593.704479][T15581] FAT-fs (loop9): bogus logical sector size 11520 [ 593.724326][T15581] FAT-fs (loop9): Can't find a valid FAT filesystem [ 593.770538][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 593.770555][ T26] audit: type=1326 audit(1789725882.432:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15580 comm="syz.9.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 593.925538][ T26] audit: type=1326 audit(1789725882.432:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15580 comm="syz.9.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 593.986421][ T26] audit: type=1326 audit(1789725882.432:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15580 comm="syz.9.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 594.031420][ T26] audit: type=1326 audit(1789725882.432:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15580 comm="syz.9.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 594.144267][ T26] audit: type=1326 audit(1789725882.432:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15580 comm="syz.9.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 594.157686][T15585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.225583][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.242824][ T26] audit: type=1326 audit(1789725882.442:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15580 comm="syz.9.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 594.367101][ T26] audit: type=1326 audit(1789725882.442:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15580 comm="syz.9.3327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd668d9e159 code=0x7ffc0000 [ 594.670810][T15603] netlink: 'syz.5.3335': attribute type 4 has an invalid length. [ 594.741361][T15584] loop9: detected capacity change from 0 to 40427 [ 594.754208][T15584] F2FS-fs (loop9): build fault injection attr: rate: 14, type: 0x3ffff [ 594.770521][T15584] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x30e4 [ 594.782404][T15584] F2FS-fs (loop9): invalid crc value [ 594.801490][T15584] F2FS-fs (loop9): Found nat_bits in checkpoint [ 594.871597][T15584] F2FS-fs (loop9) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 595.038002][T15584] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 595.214985][T15584] F2FS-fs (loop9) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 595.238855][T15584] F2FS-fs (loop9) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0x107/0x640 [ 595.299951][T15584] F2FS-fs (loop9) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 595.389113][T15584] F2FS-fs (loop9) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xf88/0x19b0 [ 595.441346][T15584] syz.9.3328: attempt to access beyond end of device [ 595.441346][T15584] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 595.556546][T15624] device team_slave_0 entered promiscuous mode [ 595.577337][T15623] device team_slave_0 left promiscuous mode [ 596.137921][T15633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.381583][T15640] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3348'. [ 596.823437][T15652] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3353'. [ 596.865119][T15652] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3353'. [ 598.825708][T15680] loop7: detected capacity change from 0 to 131072 [ 598.848192][T15680] F2FS-fs (loop7): invalid crc value [ 598.903575][T15680] F2FS-fs (loop7): Found nat_bits in checkpoint [ 598.952598][T15680] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 598.995736][T15680] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 599.554244][T15713] IPVS: Error connecting to the multicast addr [ 600.461392][T15733] loop6: detected capacity change from 0 to 512 [ 600.471166][T15732] xt_connbytes: Forcing CT accounting to be enabled [ 600.506720][T15732] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 600.526813][T15733] EXT4-fs (loop6): Test dummy encryption mode enabled [ 600.579919][T15733] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.3386: inode has both inline data and extents flags [ 600.728513][T15733] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.3386: couldn't read orphan inode 15 (err -117) [ 600.805538][T15733] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 600.931846][T15733] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 601.066118][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3387'. [ 601.107310][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3387'. [ 601.178169][ T6270] EXT4-fs (loop6): unmounting filesystem. [ 601.551761][T15753] tipc: Started in network mode [ 601.575872][T15753] tipc: Node identity 9, cluster identity 4711 [ 601.605722][T15753] tipc: Node number set to 9 [ 601.855152][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3377'. [ 602.329978][T15751] loop9: detected capacity change from 0 to 32768 [ 602.697704][T15772] loop7: detected capacity change from 0 to 4096 [ 602.775157][T15772] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 603.053120][T15781] loop9: detected capacity change from 0 to 1024 [ 603.086721][T15783] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3401'. [ 603.143157][T15783] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3401'. [ 603.157849][T15781] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 603.166741][T15781] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 603.194942][ T26] audit: type=1800 audit(1789725891.848:2213): pid=15781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3403" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 603.215751][ T26] audit: type=1800 audit(1789725891.858:2214): pid=15781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3403" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 603.242725][T15781] EXT4-fs error (device loop9): ext4_map_blocks:747: inode #15: comm syz.9.3403: lblock 0 mapped to illegal pblock 0 (length 1) [ 603.367543][ T6405] EXT4-fs (loop7): unmounting filesystem. [ 603.371928][T15781] EXT4-fs (loop9): Remounting filesystem read-only [ 603.548750][T14178] EXT4-fs (loop9): unmounting filesystem. [ 603.980419][T15798] loop7: detected capacity change from 0 to 512 [ 604.046714][T15798] EXT4-fs: Ignoring removed oldalloc option [ 604.123805][T15798] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 604.145669][T15798] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.320453][T15810] loop8: detected capacity change from 0 to 256 [ 604.371934][T15810] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 604.413775][ T6405] EXT4-fs (loop7): unmounting filesystem. [ 605.172644][T15830] loop6: detected capacity change from 0 to 1024 [ 605.252318][T15830] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 605.496842][ T6270] EXT4-fs (loop6): unmounting filesystem. [ 606.398528][T15851] input: syz0 as /devices/virtual/input/input35 [ 607.037953][T15859] overlayfs: failed to clone upperpath [ 607.666045][ T1172] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 607.729707][T15898] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3444'. [ 607.746910][T15898] netlink: 'syz.9.3444': attribute type 12 has an invalid length. [ 607.769294][T15898] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.778321][T15898] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.787191][T15898] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.796055][T15898] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.817595][T15898] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3444'. [ 607.833309][T15898] netlink: 'syz.9.3444': attribute type 12 has an invalid length. [ 607.878341][ T1172] usb 7-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 607.905545][ T1172] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.969994][T15901] netlink: 'syz.5.3445': attribute type 1 has an invalid length. [ 608.068421][T15901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 608.099379][T15905] loop9: detected capacity change from 0 to 1024 [ 608.144239][T15905] EXT4-fs: quotafile must be on filesystem root [ 608.298637][T15909] loop8: detected capacity change from 0 to 512 [ 608.327374][T15909] EXT4-fs: Ignoring removed i_version option [ 608.384332][T15909] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 608.456002][T15909] EXT4-fs (loop8): failed to open journal device unknown-block(8,0) -16 [ 608.952230][ T1172] rtsx_usb: probe of 7-1:1.0 failed with error -71 [ 608.986005][ T1172] usb 7-1: USB disconnect, device number 17 [ 609.199264][ T4326] kernel write not supported for file /gssd/clntXX/gssd (pid: 4326 comm: kworker/0:7) [ 609.652775][T15949] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3464'. [ 609.718726][T15949] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3464'. [ 611.433003][T16002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.453567][T16002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.859261][T16016] loop7: detected capacity change from 0 to 1024 [ 611.906580][T16016] EXT4-fs: inline encryption not supported [ 611.924727][T16018] loop6: detected capacity change from 0 to 128 [ 611.935621][T16016] ext4: Unknown parameter 'fsuuid' [ 612.265591][ T1172] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 612.460897][ T1172] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 612.503676][ T1172] usb 7-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 612.545817][ T1172] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.553902][ T1172] usb 7-1: Product: syz [ 612.609026][ T1172] usb 7-1: Manufacturer: syz [ 612.629425][ T1172] usb 7-1: SerialNumber: syz [ 612.874542][ T1172] usb 7-1: Can't get UAC3 power state for id 10 [ 612.898041][ T1172] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 612.942315][T16032] loop9: detected capacity change from 0 to 164 [ 612.950485][ T1172] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 612.992825][T16032] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 613.094140][ T1172] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 613.186787][ T1172] usb 7-1: USB disconnect, device number 18 [ 613.284433][T16037] netlink: 'syz.9.3493': attribute type 10 has an invalid length. [ 613.354178][T16037] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.391612][T16037] bond0: (slave team0): Enslaving as an active interface with an up link [ 613.506241][T12573] udevd[12573]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.744569][T16047] loop9: detected capacity change from 0 to 1024 [ 613.826553][T16041] lo speed is unknown, defaulting to 1000 [ 613.827976][ T4572] hfsplus: b-tree write err: -5, ino 25 [ 613.881445][T16048] hfsplus: request for non-existent node 33423360 in B*Tree [ 613.920773][ T4572] hfsplus: b-tree write err: -5, ino 4 [ 613.935617][T16048] hfsplus: request for non-existent node 33423360 in B*Tree [ 613.976245][ T4572] hfsplus: b-tree write err: -5, ino 2 [ 614.316024][T16057] loop9: detected capacity change from 0 to 512 [ 614.334191][T16057] EXT4-fs: Ignoring removed oldalloc option [ 614.401288][T16057] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 614.439374][T16057] netlink: 'syz.9.3503': attribute type 28 has an invalid length. [ 614.529920][T14178] EXT4-fs (loop9): unmounting filesystem. [ 614.806871][ T26] audit: type=1326 audit(43698.580:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.8.3501" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84c2f9e159 code=0x0 [ 615.075800][ T26] audit: type=1326 audit(43698.860:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16040 comm="syz.5.3495" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ff659e159 code=0x0 [ 615.637930][T16097] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3517'. [ 615.683490][T16097] unsupported nlmsg_type 40 [ 615.765464][ T4434] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 615.947378][ T4434] usb 10-1: config 1 has an invalid descriptor of length 26, skipping remainder of the config [ 615.963737][ T4434] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 615.975605][ T4434] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 616.011099][ T4434] usb 10-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 616.061186][ T4434] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.074673][ T4434] usb 10-1: Product: syz [ 616.085514][ T4434] usb 10-1: Manufacturer: syz [ 616.090329][ T4434] usb 10-1: SerialNumber: syz [ 616.115443][T16094] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 616.383980][ T4434] usb 10-1: MIDIStreaming interface descriptor not found [ 616.496365][T16124] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3528'. [ 616.503740][ T4434] usb 10-1: USB disconnect, device number 4 [ 617.161412][T16141] device syzkaller0 entered promiscuous mode [ 617.968685][T16181] loop7: detected capacity change from 0 to 1024 [ 618.047153][T16181] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 2: comm syz.7.3545: lblock 2 mapped to illegal pblock 2 (length 1) [ 618.113098][T16181] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 618.126857][T16181] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 48: comm syz.7.3545: lblock 0 mapped to illegal pblock 48 (length 1) [ 618.155476][ T1172] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 618.188544][T16181] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 618.235583][T16181] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.3545: Failed to acquire dquot type 0 [ 618.275942][T16181] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 618.306109][T16181] EXT4-fs error (device loop7): ext4_evict_inode:281: inode #11: comm syz.7.3545: mark_inode_dirty error [ 618.341232][T16181] EXT4-fs warning (device loop7): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 618.351863][ T1172] usb 9-1: Using ep0 maxpacket: 32 [ 618.359970][ T1172] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 618.394121][T16181] EXT4-fs (loop7): 1 orphan inode deleted [ 618.411023][ T1172] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.439797][T16181] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 618.452445][T16185] netlink: 276 bytes leftover after parsing attributes in process `syz.6.3546'. [ 618.468201][ T1172] usb 9-1: config 0 interface 0 has no altsetting 0 [ 618.507200][ T1172] usb 9-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 618.523872][ T1172] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.564105][ T1172] usb 9-1: config 0 descriptor?? [ 618.672138][ T6405] EXT4-fs (loop7): unmounting filesystem. [ 618.712173][T14718] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:45: lblock 1 mapped to illegal pblock 1 (length 1) [ 618.777659][T14718] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 618.786769][T14718] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:45: Failed to release dquot type 0 [ 618.853683][ T6405] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 618.905594][ T6405] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 618.986187][ T6405] EXT4-fs error (device loop7): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 619.062198][T16191] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 620.026868][ T1172] hid-alps 0003:044E:120B.001E: failed read register (-71) [ 620.041845][ T1172] hid-alps 0003:044E:120B.001E: failed U1_NUM_SENS_X (-71) [ 620.061990][ T1172] hid-alps 0003:044E:120B.001E: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.8-1/input0 [ 620.092053][ T1172] usb 9-1: USB disconnect, device number 20 [ 620.314302][T16211] fido_id[16211]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 621.210347][ T1172] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 621.478030][ T1172] usb 9-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 621.488299][ T1172] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.496740][ T1172] usb 9-1: Product: syz [ 621.501282][ T1172] usb 9-1: Manufacturer: syz [ 621.506352][ T1172] usb 9-1: SerialNumber: syz [ 621.536936][ T1172] usb 9-1: config 0 descriptor?? [ 621.778519][ T1172] RobotFuzz Open Source InterFace, OSIF 9-1:0.0: version d4.15 found at bus 009 address 021 [ 622.599456][T16221] i2c i2c-1: failure reading status [ 622.634249][ T1172] usb 9-1: USB disconnect, device number 21 [ 623.683111][T16213] lo speed is unknown, defaulting to 1000 [ 624.309584][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.316053][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.477320][T16256] loop6: detected capacity change from 0 to 128 [ 624.509234][T16256] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 624.660014][T16256] FAT-fs (loop6): error, parent dir link count too low (2) [ 624.691047][T16256] FAT-fs (loop6): Filesystem has been set read-only [ 624.803045][ T6270] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 625.591505][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 628.684493][T16275] loop6: detected capacity change from 0 to 512 [ 628.721398][T16275] EXT4-fs: Ignoring removed bh option [ 628.755593][T16275] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 628.885231][T16275] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 629.062806][T16275] EXT4-fs (loop6): shut down requested (1) [ 629.263106][ T6270] EXT4-fs (loop6): unmounting filesystem. [ 630.291734][T16337] loop7: detected capacity change from 0 to 512 [ 630.370291][T16337] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 630.749524][ T6405] EXT4-fs (loop7): unmounting filesystem. [ 631.339667][T16371] device bridge_slave_1 left promiscuous mode [ 631.404861][T16371] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.489876][T16371] device bridge_slave_0 left promiscuous mode [ 631.520363][T16371] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.576206][ T4572] Bluetooth: hci5: Frame reassembly failed (-84) [ 631.724939][T16388] loop6: detected capacity change from 0 to 256 [ 631.750543][T16388] FAT-fs (loop6): bogus logical sector size 0 [ 631.759144][T16388] FAT-fs (loop6): Can't find a valid FAT filesystem [ 632.078701][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3609'. [ 632.108425][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3609'. [ 632.142440][T16397] netlink: 'syz.6.3609': attribute type 15 has an invalid length. [ 632.204345][T16397] netdevsim netdevsim6 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 632.213293][T16397] netdevsim netdevsim6 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 632.222559][T16397] netdevsim netdevsim6 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 632.231356][T16397] netdevsim netdevsim6 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 632.367251][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3609'. [ 632.405586][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3609'. [ 632.446701][T16397] netlink: 'syz.6.3609': attribute type 15 has an invalid length. [ 632.486309][T16397] netdevsim netdevsim6 netdevsim0: set [0, 2] type 1 family 0 port 60387 - 0 [ 632.495254][T16397] netdevsim netdevsim6 netdevsim1: set [0, 2] type 1 family 0 port 60387 - 0 [ 632.504277][T16397] netdevsim netdevsim6 netdevsim2: set [0, 2] type 1 family 0 port 60387 - 0 [ 632.513381][T16397] netdevsim netdevsim6 netdevsim3: set [0, 2] type 1 family 0 port 60387 - 0 [ 632.728712][T16419] FAULT_INJECTION: forcing a failure. [ 632.728712][T16419] name failslab, interval 1, probability 0, space 0, times 0 [ 632.741968][ T9445] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 632.765322][T16419] CPU: 0 PID: 16419 Comm: syz.6.3615 Not tainted syzkaller #0 [ 632.772870][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 632.782970][T16419] Call Trace: [ 632.786296][T16419] [ 632.789271][T16419] dump_stack_lvl+0x188/0x24e [ 632.794011][T16419] ? show_regs_print_info+0x12/0x12 [ 632.799264][T16419] ? load_image+0x410/0x410 [ 632.803923][T16419] ? __might_sleep+0xd0/0xd0 [ 632.808567][T16419] ? __lock_acquire+0x7c40/0x7c40 [ 632.813661][T16419] should_fail_ex+0x390/0x4c0 [ 632.818411][T16419] should_failslab+0x5/0x20 [ 632.822973][T16419] slab_pre_alloc_hook+0x59/0x300 [ 632.828052][T16419] ? find_vma_prev+0x111/0x190 [ 632.832871][T16419] kmem_cache_alloc+0x56/0x2f0 [ 632.837684][T16419] ? __khugepaged_enter+0x2c/0x2f0 [ 632.842953][T16419] __khugepaged_enter+0x2c/0x2f0 [ 632.847955][T16419] hugepage_madvise+0x177/0x1a0 [ 632.852868][T16419] do_madvise+0x831/0x3520 [ 632.857348][T16419] ? release_firmware_map_entry+0x187/0x187 [ 632.863294][T16419] ? plist_add+0x3d7/0x490 [ 632.867748][T16419] ? madvise_set_anon_name+0x420/0x420 [ 632.873244][T16419] ? schedule+0xd0/0x180 [ 632.877523][T16419] ? futex_wait_queue+0x23/0x1b0 [ 632.882494][T16419] ? futex_wait_queue+0x134/0x1b0 [ 632.887558][T16419] ? futex_unqueue+0xc7/0xf0 [ 632.892181][T16419] ? futex_wait+0x4a3/0x5c0 [ 632.896721][T16419] ? futex_wait_setup+0x270/0x270 [ 632.901788][T16419] ? file_end_write+0x156/0x250 [ 632.906759][T16419] ? vfs_write+0x777/0x9a0 [ 632.911213][T16419] ? do_futex+0x310/0x320 [ 632.915581][T16419] ? __ia32_sys_get_robust_list+0x100/0x100 [ 632.921633][T16419] ? __x64_sys_clone+0x1a7/0x220 [ 632.926669][T16419] ? lock_chain_count+0x20/0x20 [ 632.931572][T16419] __x64_sys_madvise+0xa2/0xb0 [ 632.936376][T16419] do_syscall_64+0x4c/0xa0 [ 632.940861][T16419] ? clear_bhb_loop+0x60/0xb0 [ 632.945605][T16419] ? clear_bhb_loop+0x60/0xb0 [ 632.950324][T16419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.956269][T16419] RIP: 0033:0x7f9b5c99e159 [ 632.960724][T16419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.980449][T16419] RSP: 002b:00007f9b5d8d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 632.988900][T16419] RAX: ffffffffffffffda RBX: 00007f9b5cc25fa0 RCX: 00007f9b5c99e159 [ 632.996906][T16419] RDX: 000000000000000e RSI: 0000000000800000 RDI: 0000200000000000 [ 633.004908][T16419] RBP: 00007f9b5ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 633.012908][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.020911][T16419] R13: 00007f9b5cc26038 R14: 00007f9b5cc25fa0 R15: 00007ffd9678bf28 [ 633.028926][T16419] [ 633.137530][ T9445] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.152503][ T9445] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 633.173720][ T9445] usb 8-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 633.197556][ T9445] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.241797][ T9445] idmouse 8-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 633.585920][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 633.586093][ T4289] Bluetooth: hci5: command 0x1003 tx timeout [ 633.980056][T16439] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3620'. [ 634.547692][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.058223][T16465] netlink: 'syz.5.3629': attribute type 4 has an invalid length. [ 635.099146][T16465] netlink: 'syz.5.3629': attribute type 4 has an invalid length. [ 635.227427][T16438] loop8: detected capacity change from 0 to 40427 [ 635.275682][T16438] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 635.313439][T16438] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 635.373909][T16438] F2FS-fs (loop8): invalid crc value [ 635.390145][ T1172] usb 8-1: USB disconnect, device number 26 [ 635.407640][ T1172] idmouse 8-1:1.0: disconnected [ 635.438818][T16438] F2FS-fs (loop8): Found nat_bits in checkpoint [ 635.514677][T16431] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 635.571788][T16469] loop9: detected capacity change from 0 to 4096 [ 635.599983][T16438] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 635.615549][T16438] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 636.119792][ T9223] syz-executor: attempt to access beyond end of device [ 636.119792][ T9223] loop8: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 636.196285][ T9223] syz-executor: attempt to access beyond end of device [ 636.196285][ T9223] loop8: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 636.556150][T14718] kworker/u4:45: attempt to access beyond end of device [ 636.556150][T14718] loop8: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 636.754487][T16488] overlayfs: missing 'lowerdir' [ 637.429045][T16498] lo speed is unknown, defaulting to 1000 [ 638.153892][T16513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3646'. [ 638.200749][T16521] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3650'. [ 638.218232][T16521] device ip6erspan0 entered promiscuous mode [ 638.251762][T16521] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3650'. [ 638.300304][T16519] loop9: detected capacity change from 0 to 1024 [ 638.332127][T16519] EXT4-fs: quotafile must be on filesystem root [ 638.829305][T16537] loop6: detected capacity change from 0 to 512 [ 638.868139][T16537] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 639.061665][T16537] EXT4-fs (loop6): 1 truncate cleaned up [ 639.095624][T16537] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 639.360247][T16537] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.3656: corrupted xattr entries [ 639.486936][T16537] EXT4-fs (loop6): Remounting filesystem read-only [ 639.562761][T14718] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.636868][T14718] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.919211][ T6270] EXT4-fs (loop6): unmounting filesystem. [ 640.201053][T14718] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.228791][T14718] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.287372][T16561] netlink: 'syz.9.3663': attribute type 1 has an invalid length. [ 640.348262][T16561] device bond2 entered promiscuous mode [ 640.365294][T16561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 640.414340][T16565] device macvlan2 entered promiscuous mode [ 640.423004][T16565] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 640.592413][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3664'. [ 640.806909][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 640.821834][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 640.831855][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 640.842950][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 640.853941][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 640.861314][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 641.211554][T16577] loop9: detected capacity change from 0 to 32768 [ 641.321016][T14718] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.354348][T16577] XFS (loop9): Mounting V5 Filesystem [ 641.372950][T14718] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.419894][T16575] lo speed is unknown, defaulting to 1000 [ 641.445556][T16577] XFS (loop9): Ending clean mount [ 641.534516][T16577] XFS (loop9): User initiated shutdown received. [ 641.565769][T16577] XFS (loop9): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 641.596656][T14718] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.615020][T14718] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.616054][T16577] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 641.720746][T16573] loop6: detected capacity change from 0 to 40427 [ 641.748520][T14178] XFS (loop9): Unmounting Filesystem [ 641.806429][T16573] F2FS-fs (loop6): Unrecognized mount option "age_extent_cache" or missing value [ 641.913184][T16575] chnl_net:caif_netlink_parms(): no params data found [ 642.081527][T14718] netdevsim netdevsim8 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.201903][T14718] netdevsim netdevsim8 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.244716][ T26] audit: type=1326 audit(43726.030:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16594 comm="syz.7.3667" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fdc3a597ed7 code=0x0 [ 642.247265][T16575] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.297069][T16575] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.308324][T16575] device bridge_slave_0 entered promiscuous mode [ 642.358750][T14718] netdevsim netdevsim8 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.394421][T16575] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.418548][T16575] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.436566][T16575] device bridge_slave_1 entered promiscuous mode [ 642.494640][T14718] netdevsim netdevsim8 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.536172][T16575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.559016][T16575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.732627][T16575] team0: Port device team_slave_0 added [ 642.855979][T16575] team0: Port device team_slave_1 added [ 642.861954][T14718] tipc: Left network mode [ 642.939081][T16575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.946254][T16431] Bluetooth: hci0: command 0x0409 tx timeout [ 642.965556][T16575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.037984][T16575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.180973][T16614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.285933][T16616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.407339][T16620] loop9: detected capacity change from 0 to 1764 [ 643.463876][T16620] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3677'. [ 643.529848][T16575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.547831][T16575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.629466][T16575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.648585][T16620] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3677'. [ 643.685558][ T1172] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 643.900279][ T1172] usb 8-1: config 0 has no interfaces? [ 643.906122][ T1172] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 643.926724][T16575] device hsr_slave_0 entered promiscuous mode [ 643.935497][ T1172] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.956305][T16575] device hsr_slave_1 entered promiscuous mode [ 643.972960][T16575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.984830][ T1172] usb 8-1: config 0 descriptor?? [ 644.004241][T16575] Cannot create hsr debugfs directory [ 644.859849][T16655] 9pnet_fd: Insufficient options for proto=fd [ 645.025733][T16431] Bluetooth: hci0: command 0x041b tx timeout [ 645.312821][ T1172] usb 8-1: USB disconnect, device number 27 [ 645.633673][T14718] bond1: (slave gretap1): Releasing active interface [ 646.361035][T16575] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.382441][T16675] kvm: MWAIT instruction emulated as NOP! [ 647.105606][T16431] Bluetooth: hci0: command 0x040f tx timeout [ 647.237105][T16694] loop7: detected capacity change from 0 to 1024 [ 647.453961][T16694] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 647.638676][T16575] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.167055][ T6405] EXT4-fs (loop7): unmounting filesystem. [ 648.214581][T16575] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.282549][T16712] device vlan2 left promiscuous mode [ 648.288150][T16712] device geneve0 left promiscuous mode [ 648.311394][T16712] bridge0: port 3(vlan2) entered disabled state [ 648.360617][T16712] device bridge_slave_1 left promiscuous mode [ 648.417754][T16712] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.508849][T16712] device bridge_slave_0 left promiscuous mode [ 648.515228][T16712] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.838131][T16691] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3700'. [ 648.895626][T16689] lo speed is unknown, defaulting to 1000 [ 649.185663][T16431] Bluetooth: hci0: command 0x0419 tx timeout [ 649.292788][T16575] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.443821][T14718] device hsr_slave_0 left promiscuous mode [ 649.458014][T14718] device hsr_slave_1 left promiscuous mode [ 649.466127][T14718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.473609][T14718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.490525][T14718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.510649][T14718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.582606][T14718] device veth1_macvtap left promiscuous mode [ 649.622483][T14718] device veth0_macvtap left promiscuous mode [ 649.647786][T14718] device veth1_vlan left promiscuous mode [ 649.664248][T14718] device veth0_vlan left promiscuous mode [ 650.409771][T14718] bond1 (unregistering): Released all slaves [ 651.192883][T16763] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3713'. [ 653.045792][T14718] team0 (unregistering): Port device team_slave_1 removed [ 653.157013][T14718] team0 (unregistering): Port device team_slave_0 removed [ 653.375921][T14718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.566217][T14718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.347737][T14718] bond0 (unregistering): Released all slaves [ 654.491975][T16802] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 654.526116][T16802] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 654.546245][T16802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.556902][T16802] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.582231][T16802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 654.630192][T16805] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 654.653409][T16805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 654.681379][T16805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 655.294984][T16575] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 655.376282][T16575] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 655.428135][T16575] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 655.458195][T16575] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 655.767852][T16575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.822369][T14719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 655.838026][T14719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 655.848971][T16839] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3736'. [ 655.868401][T16575] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.902489][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 655.916293][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 655.929924][T14722] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.937135][T14722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.967834][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 655.984269][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 655.998910][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 656.015083][T14722] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.022297][T14722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.044747][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 656.077650][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 656.120120][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 656.155142][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 656.201174][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 656.217441][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 656.256957][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 656.310694][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 656.342346][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 656.392553][T16575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 656.437395][T16850] loop6: detected capacity change from 0 to 1024 [ 656.449099][T16575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 656.468761][T16850] EXT4-fs: Ignoring removed mblk_io_submit option [ 656.482848][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 656.504971][ T26] audit: type=1326 audit(43740.290:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16852 comm="syz.7.3741" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc3a59e159 code=0x0 [ 656.529621][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 656.550436][T16850] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 656.619401][T16850] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.3739: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 656.685936][T16850] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.3739: couldn't read orphan inode 11 (err -117) [ 656.708340][T16850] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 656.929651][ T6270] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /606/file2: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 657.061867][ T6270] EXT4-fs error (device loop6): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 11 [ 657.089884][ T6270] EXT4-fs error (device loop6): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 11 [ 657.108513][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 657.292666][T11864] EXT4-fs (loop6): unmounting filesystem. [ 657.851997][T14718] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.906797][T14718] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 657.936052][T14718] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 60387 - 0 [ 658.003227][T14718] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.166683][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 658.174198][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 658.330804][T16575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.413727][T14718] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.430976][T14718] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 658.442180][T14718] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 60387 - 0 [ 658.461017][T14718] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.625815][T14718] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.662082][T14718] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 658.705446][T14718] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 60387 - 0 [ 658.735623][T14718] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.788965][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 658.819846][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 658.926497][T16431] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 658.941673][T16431] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 658.951068][T16431] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 658.966281][T16431] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 658.973881][T16431] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 658.981611][T16431] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 659.078407][T14718] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.104295][T14718] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 659.138632][T14718] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 2] type 1 family 0 port 60387 - 0 [ 659.194363][T14718] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.255734][T16575] device veth0_vlan entered promiscuous mode [ 659.262492][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 659.280331][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 659.309952][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 659.342102][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 659.381937][T16905] lo speed is unknown, defaulting to 1000 [ 659.397861][T16575] device veth1_vlan entered promiscuous mode [ 659.624004][T14718] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.732235][T14718] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.846298][T14718] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.894357][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 659.912529][T16575] device veth0_macvtap entered promiscuous mode [ 659.914965][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 659.927123][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 659.938325][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 659.940575][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 659.954367][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 659.964596][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 659.976848][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 659.994436][T16575] device veth1_macvtap entered promiscuous mode [ 660.060475][T14718] netdevsim netdevsim6 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.087427][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 660.102261][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 660.190584][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.218614][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.234618][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.248688][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.262769][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.280968][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.295172][T16575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.344470][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.355308][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.416809][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.434216][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.444925][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.462121][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.510566][T16575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.521390][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 660.532519][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 660.542695][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 660.553063][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 660.569948][T16930] lo speed is unknown, defaulting to 1000 [ 660.570416][T16905] chnl_net:caif_netlink_parms(): no params data found [ 660.624661][T16575] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.642848][T16575] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.655035][T16575] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.668456][T16575] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.025560][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 661.235539][T16905] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.253018][T16905] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.269739][T16905] device bridge_slave_0 entered promiscuous mode [ 661.291250][T16905] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.309940][T16905] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.327177][T16905] device bridge_slave_1 entered promiscuous mode [ 661.554618][T14719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.574077][T14719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.589706][T16905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.671503][T14717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 661.691637][T16905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.761969][T14719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.814858][T14719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.854720][T16905] team0: Port device team_slave_0 added [ 661.879720][T14720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 661.931623][T16971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3770'. [ 661.964939][T16905] team0: Port device team_slave_1 added [ 662.065937][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 662.151170][T14718] bond1: (slave gre2): Releasing backup interface [ 662.158333][T14718] device gre2 left promiscuous mode [ 662.165155][T14718] bond1: Destroying bond [ 662.461518][T14718] bond1 (unregistering): Released all slaves [ 662.512689][T16971] bridge0: port 1(vlan4) entered blocking state [ 662.523792][T16971] bridge0: port 1(vlan4) entered disabled state [ 662.650124][T16905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.664533][T16905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.698990][T16905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.733409][T16905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.748016][T16905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.781426][T16905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.807835][T16976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.105744][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 663.131524][T16930] chnl_net:caif_netlink_parms(): no params data found [ 663.201600][T16905] device hsr_slave_0 entered promiscuous mode [ 663.210657][T16905] device hsr_slave_1 entered promiscuous mode [ 663.230020][T16905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 663.238077][T16905] Cannot create hsr debugfs directory [ 663.295015][T14718] device hsr_slave_0 left promiscuous mode [ 663.305301][T14718] device hsr_slave_1 left promiscuous mode [ 663.321080][T14718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.342401][T14718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.354565][T14718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.370561][T14718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.392238][T14718] device veth0 left promiscuous mode [ 663.402037][T14718] bridge0: port 3(veth0) entered disabled state [ 663.421971][T14718] device bridge_slave_1 left promiscuous mode [ 663.440988][T14718] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.453197][T14718] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.548059][T14718] device veth1_macvtap left promiscuous mode [ 663.554142][T14718] device veth0_macvtap left promiscuous mode [ 663.566137][T14718] device veth1_vlan left promiscuous mode [ 663.571987][T14718] device veth0_vlan left promiscuous mode [ 664.152971][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 664.281299][T14718] bond0 (unregistering): (slave team0): Removing an active aggregator [ 664.297122][T14718] bond0 (unregistering): (slave team0): Releasing backup interface [ 664.307987][T14718] bond0 (unregistering): Released all slaves [ 664.599125][T17009] overlayfs: failed to clone upperpath [ 665.190875][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 665.455112][T14718] team0 (unregistering): Port device team_slave_1 removed [ 665.539944][T14718] team0 (unregistering): Port device team_slave_0 removed [ 665.620733][T14718] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.699681][T14718] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.226132][T16431] Bluetooth: hci4: command 0x040f tx timeout [ 666.263644][T14718] .` (unregistering): Released all slaves [ 666.395601][T17013] netlink: 'syz.5.3781': attribute type 1 has an invalid length. [ 666.692624][T17030] overlayfs: upper fs does not support file handles, falling back to index=off. [ 666.732421][T16930] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.765958][T16930] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.810778][T16930] device bridge_slave_0 entered promiscuous mode [ 666.876903][T16930] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.919081][T16930] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.947210][T16930] device bridge_slave_1 entered promiscuous mode [ 667.127523][T16930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.265701][T16431] Bluetooth: hci3: command 0x0419 tx timeout [ 667.488571][T17052] device-mapper: table: 248:0: thin-pool: Gap in table (-EINVAL) [ 667.538940][T17052] device-mapper: ioctl: error adding target to table [ 667.592188][T16905] netdevsim netdevsim0 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.657384][T16930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.072101][T16905] netdevsim netdevsim0 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.107108][T17064] overlayfs: failed to clone upperpath [ 668.305555][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 668.540685][T16905] netdevsim netdevsim0 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.609362][T16930] team0: Port device team_slave_0 added [ 668.623141][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3794'. [ 668.670403][T17079] binder: 17078:17079 ioctl c0306201 0 returned -14 [ 668.960897][T16905] netdevsim netdevsim0 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.983733][T16930] team0: Port device team_slave_1 added [ 669.011947][T17087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3800'. [ 669.127580][T17087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3800'. [ 669.174681][T16930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.190493][T16930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.273289][T16930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.304646][T16930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.329308][T16930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.407826][T16930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.579974][T16930] device hsr_slave_0 entered promiscuous mode [ 669.607187][T16930] device hsr_slave_1 entered promiscuous mode [ 669.625583][T16930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.633214][T16930] Cannot create hsr debugfs directory [ 669.645997][T16905] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 669.680582][T16905] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 669.721636][T16905] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 669.776549][T17103] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3805'. [ 669.818758][T16905] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 669.995775][ T9445] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 670.150966][T16905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.185493][ T9445] usb 3-1: Using ep0 maxpacket: 8 [ 670.194014][ T9445] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 670.216194][T14718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 670.229646][ T9445] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 670.241068][T14718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 670.273718][ T9445] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 670.304452][ T9445] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 670.339509][ T9445] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.383291][ T9445] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 670.424314][ T9445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.679578][ T9445] usb 3-1: usb_control_msg returned -32 [ 670.685335][ T9445] usbtmc 3-1:16.0: can't read capabilities [ 670.805312][T16930] netdevsim netdevsim4 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.853534][T16905] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.881873][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 670.899217][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 670.908946][T14722] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.916141][T14722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.203523][T16930] netdevsim netdevsim4 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.236082][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 671.248514][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 671.267307][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 671.287567][T14722] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.294757][T14722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.333439][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 671.351214][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 671.363640][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 671.382797][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 671.653884][T16930] netdevsim netdevsim4 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.682508][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 671.698293][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 671.713640][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 671.738787][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 671.762371][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 672.016009][T16930] netdevsim netdevsim4 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.054825][T14719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 672.082979][T14719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 672.116490][T16905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 672.392753][T16930] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 672.437318][T16930] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 672.467837][T16930] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 672.489090][T16930] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 672.692397][ T1172] usb 3-1: USB disconnect, device number 4 [ 672.698685][ T9445] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 672.807205][T16930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.895084][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 672.905680][ T9445] usb 8-1: Using ep0 maxpacket: 32 [ 672.913600][ T9445] usb 8-1: unable to get BOS descriptor or descriptor too short [ 672.922232][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 672.937791][ T9445] usb 8-1: config 3 has an invalid interface number: 73 but max is 0 [ 672.947613][ T9445] usb 8-1: config 3 has no interface number 0 [ 672.954150][ T9445] usb 8-1: config 3 interface 73 has no altsetting 0 [ 672.965267][T16930] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.974635][T17171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3816'. [ 672.995304][ T9445] usb 8-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice= b.8b [ 673.031798][ T9445] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.033958][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 673.050654][ T9445] usb 8-1: Product: syz [ 673.054993][ T9445] usb 8-1: Manufacturer: syz [ 673.077108][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 673.084849][ T9445] usb 8-1: SerialNumber: syz [ 673.098625][T14722] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.105906][T14722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.153300][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 673.173384][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 673.214444][T14722] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.221699][T14722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.239070][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 673.252902][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 673.284730][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 673.295858][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 673.323080][T17171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3816'. [ 673.375590][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 673.389659][T16905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.428460][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 673.449264][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 673.496532][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 673.515948][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 673.528947][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 673.556880][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 673.575790][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 673.596299][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 673.626530][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 673.659251][T16930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 673.686190][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 673.701164][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 673.779675][T17187] loop2: detected capacity change from 0 to 512 [ 673.781373][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 673.797386][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 673.850458][T16905] device veth0_vlan entered promiscuous mode [ 673.868663][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 673.890649][T17187] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 673.897490][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 673.964730][T16905] device veth1_vlan entered promiscuous mode [ 674.111462][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 674.133675][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 674.157375][T16575] EXT4-fs (loop2): unmounting filesystem. [ 674.166548][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 674.215042][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 674.238774][T16905] device veth0_macvtap entered promiscuous mode [ 674.278800][T16905] device veth1_macvtap entered promiscuous mode [ 674.347090][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 674.369814][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 674.443176][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.505478][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.546579][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.585772][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.642416][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.661282][T17159] loop7: detected capacity change from 0 to 32768 [ 674.705012][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.723546][T17159] (syz.7.3813,17159,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 674.750470][T16905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.777142][T14717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 674.799206][T14717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 674.828338][T17159] (syz.7.3813,17159,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 674.868066][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.886659][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.918681][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.946830][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.962074][T17159] JBD2: Ignoring recovery information on journal [ 674.969761][T16905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.986551][T14719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 675.009766][T14719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 675.058135][T16905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.109886][T17159] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 675.125635][T16905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.159642][T16905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.185969][T16905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.232251][T16930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.300410][T14717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 675.319687][T14717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 675.339900][ T26] audit: type=1800 audit(43759.130:2219): pid=17159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3813" name="file1" dev="loop7" ino=16978 res=0 errno=0 [ 675.368872][ T9445] cp210x 8-1:3.73: cp210x converter detected [ 675.415673][ T9445] cp210x 8-1:3.73: failed to get vendor val 0x370b size 1: -71 [ 675.443874][ T9445] cp210x 8-1:3.73: querying part number failed [ 675.486675][ T9445] usb 8-1: cp210x converter now attached to ttyUSB0 [ 675.525137][ T9445] usb 8-1: USB disconnect, device number 28 [ 675.635934][ T9445] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 675.657513][T14717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.675235][ T9445] cp210x 8-1:3.73: device disconnected [ 675.695803][T14717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.727834][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 675.817484][ T4580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.861173][ T4580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.889538][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 676.108829][ T6405] ocfs2: Unmounting device (7,7) on (node local) [ 676.925790][T10256] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 677.050950][T14718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 677.060682][T14718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 677.100401][T16930] device veth0_vlan entered promiscuous mode [ 677.115497][T10256] usb 8-1: Using ep0 maxpacket: 8 [ 677.124955][T10256] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 677.128423][T14718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 677.156862][T14718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 677.173011][T10256] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 677.190645][T16930] device veth1_vlan entered promiscuous mode [ 677.221200][T14718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 677.223866][T10256] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 677.239414][T14718] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 677.282444][T14718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 677.287065][T10256] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 677.340334][T14718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 677.351294][T10256] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.360946][T14718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 677.403581][T14718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 677.422382][T10256] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 677.439039][T16930] device veth0_macvtap entered promiscuous mode [ 677.472022][T16930] device veth1_macvtap entered promiscuous mode [ 677.473502][T10256] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.581344][T17241] lo speed is unknown, defaulting to 1000 [ 677.590872][T16930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.637638][T16930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.689880][T16930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.718072][T16930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.748408][T10256] usb 8-1: usb_control_msg returned -32 [ 677.754065][T10256] usbtmc 8-1:16.0: can't read capabilities [ 677.784932][T16930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.835609][T16930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.865627][T16930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.902603][T16930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.953988][T16930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.036111][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 678.054573][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 678.079006][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 678.113092][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 678.163569][T16930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.181549][T16930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.216362][T16930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.251634][T16930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.284212][T16930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.326338][T16930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.345324][T16930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.371004][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 678.386811][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 678.415337][T16930] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.425045][T16930] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.462970][T16930] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.502255][T16930] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.699589][T17258] ptp ptp0: delete virtual clock ptp5 [ 678.852235][T17258] [ 678.854650][T17258] ====================================================== [ 678.861707][T17258] WARNING: possible circular locking dependency detected [ 678.868768][T17258] syzkaller #0 Not tainted [ 678.873217][T17258] ------------------------------------------------------ [ 678.880267][T17258] syz.0.3831/17258 is trying to acquire lock: [ 678.886361][T17258] ffff888064bbc130 (&clk->rwsem){++++}-{3:3}, at: posix_clock_unregister+0x5b/0xc0 [ 678.895827][T17258] [ 678.895827][T17258] but task is already holding lock: [ 678.903224][T17258] ffff88814c8d18f0 (&ptp->n_vclocks_mux){+.+.}-{3:3}, at: n_vclocks_store+0xfc/0x750 [ 678.912866][T17258] [ 678.912866][T17258] which lock already depends on the new lock. [ 678.912866][T17258] [ 678.923302][T17258] [ 678.923302][T17258] the existing dependency chain (in reverse order) is: [ 678.925250][T14722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.932331][T17258] [ 678.932331][T17258] -> #1 (&ptp->n_vclocks_mux){+.+.}-{3:3}: [ 678.932369][T17258] __mutex_lock+0x12d/0xae0 [ 678.953239][T17258] ptp_clock_adjtime+0x12f/0x870 [ 678.958758][T17258] pc_clock_adjtime+0x1d4/0x260 [ 678.964167][T17258] __x64_sys_clock_adjtime+0x240/0x320 [ 678.970166][T17258] do_syscall_64+0x4c/0xa0 [ 678.975125][T17258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.981584][T17258] [ 678.981584][T17258] -> #0 (&clk->rwsem){++++}-{3:3}: [ 678.988910][T17258] __lock_acquire+0x2d18/0x7c40 [ 678.994313][T17258] lock_acquire+0x1bb/0x4a0 [ 678.999386][T17258] down_write+0x36/0x60 [ 679.004092][T17258] posix_clock_unregister+0x5b/0xc0 [ 679.009845][T17258] ptp_clock_unregister+0x18a/0x200 [ 679.015581][T17258] ptp_vclock_unregister+0x110/0x140 [ 679.021408][T17258] unregister_vclock+0xca/0x130 [ 679.026863][T17258] device_for_each_child_reverse+0x112/0x1b0 [ 679.033417][T17258] n_vclocks_store+0x226/0x750 [ 679.038724][T17258] kernfs_fop_write_iter+0x3a0/0x520 [ 679.044566][T17258] vfs_write+0x482/0x9a0 [ 679.049363][T17258] ksys_write+0x14d/0x260 [ 679.054236][T17258] do_syscall_64+0x4c/0xa0 [ 679.059193][T17258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.065638][T17258] [ 679.065638][T17258] other info that might help us debug this: [ 679.065638][T17258] [ 679.075883][T17258] Possible unsafe locking scenario: [ 679.075883][T17258] [ 679.083343][T17258] CPU0 CPU1 [ 679.088742][T17258] ---- ---- [ 679.094132][T17258] lock(&ptp->n_vclocks_mux); [ 679.098944][T17258] lock(&clk->rwsem); [ 679.105556][T17258] lock(&ptp->n_vclocks_mux); [ 679.112854][T17258] lock(&clk->rwsem); [ 679.116945][T17258] [ 679.116945][T17258] *** DEADLOCK *** [ 679.116945][T17258] [ 679.125103][T17258] 5 locks held by syz.0.3831/17258: [ 679.130325][T17258] #0: ffff88802726f768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 679.139586][T17258] #1: ffff888063de2460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 679.148513][T17258] #2: ffff8880303af888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1d8/0x520 [ 679.158311][T17258] #3: ffff88814c8b4830 (kn->active#80){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x520 [ 679.168367][T17258] #4: ffff88814c8d18f0 (&ptp->n_vclocks_mux){+.+.}-{3:3}, at: n_vclocks_store+0xfc/0x750 [ 679.178409][T17258] [ 679.178409][T17258] stack backtrace: [ 679.184309][T17258] CPU: 0 PID: 17258 Comm: syz.0.3831 Not tainted syzkaller #0 [ 679.191793][T17258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 679.201869][T17258] Call Trace: [ 679.205207][T17258] [ 679.208158][T17258] dump_stack_lvl+0x188/0x24e [ 679.212865][T17258] ? load_image+0x410/0x410 [ 679.217399][T17258] ? show_regs_print_info+0x12/0x12 [ 679.222626][T17258] ? print_circular_bug+0x12b/0x1a0 [ 679.227860][T17258] check_noncircular+0x296/0x330 [ 679.232834][T17258] ? add_chain_block+0x9b0/0x9b0 [ 679.237799][T17258] ? lockdep_lock+0xf1/0x1f0 [ 679.242415][T17258] ? _find_first_zero_bit+0xd2/0x100 [ 679.247834][T17258] __lock_acquire+0x2d18/0x7c40 [ 679.252723][T17258] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.258824][T17258] ? verify_lock_unused+0x140/0x140 [ 679.264066][T17258] lock_acquire+0x1bb/0x4a0 [ 679.268602][T17258] ? posix_clock_unregister+0x5b/0xc0 [ 679.273999][T17258] ? __might_sleep+0xd0/0xd0 [ 679.278635][T17258] ? read_lock_is_recursive+0x10/0x10 [ 679.284031][T17258] ? kobject_put+0x416/0x450 [ 679.288661][T17258] ? cdev_default_release+0x18b/0x1b0 [ 679.294072][T17258] ? kobject_put+0x41d/0x450 [ 679.298692][T17258] down_write+0x36/0x60 [ 679.302875][T17258] ? posix_clock_unregister+0x5b/0xc0 [ 679.308272][T17258] posix_clock_unregister+0x5b/0xc0 [ 679.313499][T17258] ptp_clock_unregister+0x18a/0x200 [ 679.318722][T17258] ptp_vclock_unregister+0x110/0x140 [ 679.324056][T17258] unregister_vclock+0xca/0x130 [ 679.328933][T17258] ? pps_echo_client_default+0x70/0x70 [ 679.334428][T17258] device_for_each_child_reverse+0x112/0x1b0 [ 679.340439][T17258] ? device_get_devnode+0x290/0x290 [ 679.345672][T17258] n_vclocks_store+0x226/0x750 [ 679.350456][T17258] ? n_vclocks_show+0xd0/0xd0 [ 679.355175][T17258] ? sysfs_kf_write+0x183/0x2a0 [ 679.360061][T17258] ? sysfs_kf_read+0x350/0x350 [ 679.364848][T17258] kernfs_fop_write_iter+0x3a0/0x520 [ 679.370159][T17258] vfs_write+0x482/0x9a0 [ 679.374434][T17258] ? file_end_write+0x250/0x250 [ 679.379320][T17258] ? __fget_files+0x3fc/0x460 [ 679.384033][T17258] ? __fdget_pos+0x2ae/0x360 [ 679.388652][T17258] ? ksys_write+0x70/0x260 [ 679.393101][T17258] ksys_write+0x14d/0x260 [ 679.397484][T17258] ? __ia32_sys_read+0x80/0x80 [ 679.402371][T17258] ? lockdep_hardirqs_on+0x94/0x140 [ 679.407611][T17258] do_syscall_64+0x4c/0xa0 [ 679.412055][T17258] ? clear_bhb_loop+0x60/0xb0 [ 679.416758][T17258] ? clear_bhb_loop+0x60/0xb0 [ 679.421461][T17258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.427386][T17258] RIP: 0033:0x7f140e19e159 [ 679.431820][T17258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.451450][T17258] RSP: 002b:00007f140f0f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 679.459887][T17258] RAX: ffffffffffffffda RBX: 00007f140e425fa0 RCX: 00007f140e19e159 [ 679.467876][T17258] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000003 [ 679.475867][T17258] RBP: 00007f140e23506b R08: 0000000000000000 R09: 0000000000000000 [ 679.483857][T17258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.491862][T17258] R13: 00007f140e426038 R14: 00007f140e425fa0 R15: 00007ffceb59c158 [ 679.499861][T17258] [ 679.523607][T16930] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 679.545793][T14722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.575146][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 679.619644][T14722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.640014][T14722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.648800][ T9445] usb 8-1: USB disconnect, device number 29 [ 679.664166][T14719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 679.774831][T17258] ptp ptp0: delete virtual clock ptp4 [ 679.808402][T17258] ptp ptp0: delete virtual clock ptp3 [ 679.839839][T17258] ptp ptp0: delete virtual clock ptp2 [ 679.859135][T17258] ptp ptp0: delete virtual clock ptp1 [ 679.871727][T17258] ptp ptp0: only physical clock in use now [ 679.890424][T17259] ptp ptp0: new virtual clock ptp1 [ 679.912153][T17259] ptp ptp0: new virtual clock ptp2 [ 679.921867][T17259] ptp ptp0: new virtual clock ptp3 [ 679.943925][T17259] ptp ptp0: new virtual clock ptp4 [ 679.964454][T17259] ptp ptp0: new virtual clock ptp5 [ 679.969976][T17259] ptp ptp0: guarantee physical clock free running [ 685.747327][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.754185][ T1280] ieee802154 phy1 wpan1: encryption failed: -22