last executing test programs: 6m22.804212118s ago: executing program 1 (id=185): r0 = socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6m22.525732286s ago: executing program 1 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) write(r2, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r1, &(0x7f0000000780)=""/221, 0xfdef) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 6m22.152167677s ago: executing program 1 (id=189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x101400}, 0x100000a5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x400c4) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x5, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}, 0x40000) 6m21.750182388s ago: executing program 1 (id=190): syz_mount_image$exfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[], 0x7f, 0x1519, &(0x7f00000021c0)="$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") mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mlock(&(0x7f000068d000/0x1000)=nil, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m20.823220255s ago: executing program 1 (id=197): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 6m20.242018431s ago: executing program 1 (id=203): r0 = io_uring_setup(0xa86, &(0x7f0000000300)={0x0, 0xf12b, 0x10000, 0x40000, 0x800003d7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x8) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) sendto(r3, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m19.837699503s ago: executing program 32 (id=203): r0 = io_uring_setup(0xa86, &(0x7f0000000300)={0x0, 0xf12b, 0x10000, 0x40000, 0x800003d7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x8) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept$inet(r1, 0x0, 0x0) sendto(r3, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m7.58453039s ago: executing program 4 (id=1117): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3m4.080936167s ago: executing program 4 (id=1127): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x1, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x3, [], [{{0x9, 0x5, 0xb, 0x3, 0xe96f8b4bdad37473, 0xc7, 0x7, 0x8, {0x4}}}]}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x7, 0x5, 0x6, 0x40, 0x7}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b3, 0x0, 0x7ff}]}) 3m1.800116441s ago: executing program 4 (id=1144): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x97a3, &(0x7f0000009780)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000b40)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rmdir(&(0x7f0000000080)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x48008, 0x0, 0x0, 0x0, 0x0) 2m58.281523419s ago: executing program 4 (id=1150): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@errors_remount}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") r0 = dup(0xffffffffffffffff) bind$inet6(r0, 0x0, 0x0) socket(0xa, 0x5, 0x0) mmap(&(0x7f00001ba000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100025e022d2099115268d56cd02d0301090212000100824007090499030009"], 0x0) 2m53.55691967s ago: executing program 4 (id=1167): socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$inet(0x2b, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x8) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @remote}, 0x10) 2m46.746867001s ago: executing program 4 (id=1193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m46.257453301s ago: executing program 33 (id=1193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m45.928773407s ago: executing program 0 (id=1202): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) timer_create(0x7, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x989680}}, &(0x7f0000000280)) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f") 2m45.290407619s ago: executing program 0 (id=1205): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) recvmmsg(r1, 0x0, 0x0, 0x1000400000de, 0x0) io_setup(0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000240)={'filter\x00', 0x5, "44bf0863a3"}, &(0x7f0000000180)=0x2d) 2m44.956882386s ago: executing program 0 (id=1206): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xf61cb000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m43.769829689s ago: executing program 0 (id=1209): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x5, 0x8ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc8) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) 2m43.428310455s ago: executing program 0 (id=1211): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x2, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x35, 0x0, 0x0, 0x2c}, 0x2c855) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m42.541776102s ago: executing program 0 (id=1216): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x3, 0x2, 0x6], [0x6, 0x7, 0x1, 0x5, 0x80000000008002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x2a3b, 0xc, 0xdd, 0x5, 0x1, 0x2a6, 0x2000000003, 0xc3d, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x2, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x7, 0x6a8, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0x8f, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0xbf4, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) io_uring_setup(0xa77, &(0x7f00000004c0)={0x0, 0x1ae0, 0x800, 0x21, 0x33a}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m41.775038577s ago: executing program 34 (id=1216): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x3, 0x2, 0x6], [0x6, 0x7, 0x1, 0x5, 0x80000000008002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x2a3b, 0xc, 0xdd, 0x5, 0x1, 0x2a6, 0x2000000003, 0xc3d, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x2, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x7, 0x6a8, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0x8f, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0xbf4, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) io_uring_setup(0xa77, &(0x7f00000004c0)={0x0, 0x1ae0, 0x800, 0x21, 0x33a}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.580001626s ago: executing program 2 (id=1659): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x8000) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="410309fc1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 10.021079607s ago: executing program 2 (id=1662): r0 = epoll_create(0x6) fcntl$addseals(r0, 0x409, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file2\x00', 0x220889f, &(0x7f0000000200), 0x0, 0x565, &(0x7f00000009c0)="$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") openat$rtc(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050102000200070582020002000904000104080662000705010200020003"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 7.415311357s ago: executing program 6 (id=1670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x22) ioctl$BLKROGET(r2, 0x125e, 0x0) write$FUSE_ENTRY(r2, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x2, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}}}, 0x90) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 7.215986842s ago: executing program 2 (id=1671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="03030800030016000c0045f50028006500000406"], 0x32) 6.840361228s ago: executing program 6 (id=1673): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x802, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f00000000c0)='./file1\x00', 0x34) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000940)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20402, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x60700, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x60, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x4}}, './file1\x00'}) 4.603100552s ago: executing program 5 (id=1676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtclass={0x44, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1}}]}}]}, 0x40}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 4.502485093s ago: executing program 6 (id=1677): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x14}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x40}]}}}]}, 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') 4.263787798s ago: executing program 2 (id=1678): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff80, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000) 4.139592161s ago: executing program 3 (id=1679): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x1) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) 3.938318354s ago: executing program 5 (id=1680): r0 = epoll_create(0x6) fcntl$addseals(r0, 0x409, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file2\x00', 0x220889f, &(0x7f0000000200), 0x0, 0x565, &(0x7f00000009c0)="$eJzs3e9rHGkdAPDvTHbbps25ORU5D7weetIW7aa5eHfBF2cF8d2Bcve+hu0mhG66JdneNaFoin+AIKKCb/SVCIJ/gCD9E0Q58N6LiiKa6gtfnDfH7I9kk+xmtyS7W5LPB6bzzDzPzPd5drPP7sw8nQngzHo5Iq5GRJZl2bWIKMVsc33anmK7NeXlnuw8rORTEln29r+SSPLtdh5WOvs6355fam92oZORHI67sbl1Z6lYq663l+caa8mHWbZ1fXVtaaW6Ur27sDD/+uIb52Pxxom0M2/Vm9/4249/8Mtvvvm7L7/351v/uPrdVgNbnnS1Y8+jY8dtNb2491pERCEi1o+952dHodnCltcGF89GXR8AAPorRcQnI+LzEXEtSjHV/DUHAAAAnCbZ12biw6R1/Q8AAAA4ndKImIkkLbfH+85EmpbLrTG8n46LxahvNL6UlXbPF8xGMV1erVVvtMcOzEYxyZfn22NsO8uvHlheiIjnI+JHpelk+VFUy5V67fZEz3wAAADA2XHpwPH/f0ut438AAADglJntn+VuAAAAAHBK7D/+L06sHgAAAMCIFFrH/zcnXQ8AAABgVL711lv5lHWef3373c37d+rvXr9d3bhTXrtfKVfq6/fKK/X6Sq1artTXBu2vVq/f+0rcvf9grlHdaMxtbG7dWqvfv9u4tbrvEdgAAADAGD1/+fEHaURsf3U6n2VJV14xIpvqLuxmAHCqpE9T+K+jqwcwflNH5l4cWz2A8ev9kz7ZHntFgLEb+J/9HfPDqTeoH+g7eOf3J18XAABgNK589vEHSev6f3PKnWvnXc6ybKKVA0aqff0/6Yz7+cgnHs6MqacdAwScGm72DWdX8agRgMk4awJMQjrER/341/+dSwQAgEmbaU5JWm4fB8xEmpbLEc81HwtYTJZXa9UbEfGJiPhTqXg+X55vbpk4PQAAAAAAAAAAAAAAAAAAAAAAAAAAQ8qyJLI+pnfLHBZp7/UAAADAsyci/XvSfv7XldIrMwfPD5xL/ldqziPivZ+9/ZMHS43G+ny+/t+76xs/ba9/ddxnLwAAAOCM+GPpqYp3jtM7x/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcJKe7CQR23nqYWWccf/59YiYzeM/rHSmVk4hLjTnFyKJiIv/SaLQtV2+buoE4m8/iogXuuKnexFmm1Vr1eJg/LzY9Cji77Z/cPxLJxAfzrLHef9zs9fnL42Xm/Pen79Cezqu/v1futv/TfXp/57rtcP08KoX3//NXN/4jyJeLPTuf/b3v59Z3hf/nZmh2/idd7a2+uVlv4i4Er3j78aKiLmkcG9uY3Pr+ura0kp1pXp3YWH+9cU3Fl9bvDG3vFqrtv/tGeOHn/vtR0e1/2Kf+LP72n/49X9lyPb///0HO59qJYsHsorx8yy7+oXe7/8LfeJ3vvu+2H678+UrnfR2K93tpV//4aXLR7T/dlf7C33f/8Ptv7q32PerOC937dvf/8vgVwkAGJeNza07S7Vadf0YialOovMDYdBW54bdcwy5wxNN3BxjrDOSmB7nO7gUR5Xp/I2OoT7fm8Rf7zETv5rq9Anj74sAAIDR2vv1P+wWJ3HVGwAAAAAAAAAAAAAAAAAAAOg28A58vbOyLMuG2bznnQW2J9JSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjfRwAAP//fYu9yg==") openat$rtc(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050102000200070582020002000904000104080662000705010200020003"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 3.67846015s ago: executing program 6 (id=1681): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xe000202b}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 3.566118201s ago: executing program 3 (id=1682): fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mknodat$null(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x1000, 0x103) 3.165931049s ago: executing program 3 (id=1683): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000b00), 0x1, 0x4d6, &(0x7f0000000b40)="$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") sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x138) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1000040, &(0x7f0000000080)={[{@nodiscard}, {@grpquota}, {@noquota}, {@minixdf}, {@discard}, {@quota}, {@sb}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x8) 2.768327767s ago: executing program 2 (id=1684): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000180)=[{0x5, 0x4000, 0x1, &(0x7f0000000100)="9a"}], 0x1}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x180, r5, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6624db2491c706c0ef030260447ce9bfd7bb343917dbe313"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d2ab39e2e1bfc45dc31acc0e5fb2091dd6bfeb75913a7809"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "16362b466649d8c26821574cbb962bfcf0de40ae57844d09"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b7465b12c002842dcf592be545594c1710b5ef84f4fa7f38"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9825757f9795e6d2b64b979a524f0db2278ccdd4408045cc"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@loopback, 0x4d5, 0x33}, @in=@multicast1, {0x3, 0x0, 0x0, 0x8}, {}, {0x0, 0x22}, 0x70bd27, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x148}}, 0x0) 2.680305078s ago: executing program 3 (id=1685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x81f6, r3, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) 2.336429065s ago: executing program 5 (id=1686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x3, 0xa, 0x2, 0xf, 0x6, 0x7, 0x1, 0x8, 0x4, 0xe, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x9, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x480dc}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.639528369s ago: executing program 5 (id=1687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.639211779s ago: executing program 3 (id=1688): socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x1002f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.203961537s ago: executing program 6 (id=1689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x4, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x118, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xd}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff, 0xffffff00, 0xff000000], 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x1d, 0x8, 0x0, 0x1, 0x5}}}, {{@ipv6={@private0, @loopback, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r2 = socket(0xa, 0x3, 0xff) sendto$inet6(r2, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x802, 0x88) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe}) 985.444791ms ago: executing program 5 (id=1690): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x14}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x40}]}}}]}, 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') 292.745535ms ago: executing program 5 (id=1691): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2000}) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x9b5, @rand_addr=' \x01\x00', 0x747b5461}]}, &(0x7f0000000240)=0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x1) 273.272385ms ago: executing program 3 (id=1692): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 13.46365ms ago: executing program 6 (id=1693): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f00006b1000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 0s ago: executing program 2 (id=1694): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) kernel console output (not intermixed with test programs): 23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.002437][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 226.015953][ T27] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 226.028013][ T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.028908][ T23] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 226.050962][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.063312][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.081492][ T27] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.097032][ T27] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 226.103064][ T7722] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 226.117761][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.317066][ T7722] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 226.337774][ T7722] usb 5-1: config 0 interface 0 has no altsetting 0 [ 226.351150][ T7722] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 226.367197][ T7722] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 226.384618][ T27] usb 1-1: usb_control_msg returned -32 [ 226.391501][ T27] usbtmc 1-1:16.0: can't read capabilities [ 226.392605][ T7722] usb 5-1: Product: syz [ 226.431548][ T7722] usb 5-1: Manufacturer: syz [ 226.436980][ T7722] usb 5-1: SerialNumber: syz [ 226.472348][ T7722] usb 5-1: config 0 descriptor?? [ 226.500066][ T7722] usb 5-1: selecting invalid altsetting 0 [ 226.917769][ T7722] usb 5-1: USB disconnect, device number 5 [ 226.924390][ T8039] usb 5-1: cannot submit urb 0, error -19: no device [ 226.931547][ T8039] usb 5-1: cannot submit urb 0, error -19: no device [ 227.517457][ T31] batadv1: left promiscuous mode [ 227.968903][ T7722] usb 3-1: USB disconnect, device number 3 [ 228.117964][ T7722] idmouse 3-1:1.0: disconnected [ 228.536027][ T8049] netlink: 92 bytes leftover after parsing attributes in process `syz.4.748'. [ 229.053440][ T968] usb 1-1: USB disconnect, device number 3 [ 229.835875][ T1005] batadv1: left promiscuous mode [ 229.983718][ T7722] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 230.211037][ T7722] usb 3-1: Using ep0 maxpacket: 16 [ 230.234106][ T7722] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 230.254115][ T7722] usb 3-1: config 0 has no interface number 0 [ 230.260421][ T7722] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 230.293878][ T7722] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 230.328505][ T7722] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 230.346674][ T7722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.372236][ T7722] usb 3-1: Product: syz [ 230.386887][ T7722] usb 3-1: Manufacturer: syz [ 230.407413][ T7722] usb 3-1: SerialNumber: syz [ 230.434560][ T7722] usb 3-1: config 0 descriptor?? [ 230.441693][ T8068] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.466130][ T8068] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.763848][ T8068] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.771301][ T8068] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 231.031960][ T7722] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 231.932709][ T7718] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 232.125691][ T7718] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 232.152535][ T7718] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 232.172207][ T7718] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 232.186899][ T7718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.201533][ T7718] usb 1-1: Product: syz [ 232.209721][ T7718] usb 1-1: Manufacturer: syz [ 232.233241][ T7718] usb 1-1: SerialNumber: syz [ 232.480877][ T7718] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 232.491611][ T7718] usb 1-1: unit 4 not found! [ 232.547948][ T7718] usb 1-1: USB disconnect, device number 4 [ 232.634895][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.692144][ T7722] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 232.728094][ T7722] asix: probe of 3-1:0.34 failed with error -71 [ 232.768047][ T7722] usb 3-1: USB disconnect, device number 4 [ 233.714003][ T8118] 0: reclassify loop, rule prio 0, protocol 03 [ 234.245665][ T8122] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.775'. [ 235.590017][ T968] libceph: connect (1)[c::]:6789 error -101 [ 235.612646][ T968] libceph: mon0 (1)[c::]:6789 connect error [ 235.684444][ T8145] ceph: No mds server is up or the cluster is laggy [ 235.911763][ T8152] netlink: 'syz.2.786': attribute type 2 has an invalid length. [ 235.924218][ T8152] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.786'. [ 237.748318][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 238.162593][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 238.196592][ T23] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 238.232946][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.249903][ T8183] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 238.272387][ T23] usb 5-1: Product: syz [ 238.283129][ T23] usb 5-1: Manufacturer: syz [ 238.298697][ T23] usb 5-1: SerialNumber: syz [ 239.000194][ T23] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 239.026912][ T23] usb 5-1: USB disconnect, device number 6 [ 239.209599][ T8186] loop0: detected capacity change from 0 to 32768 [ 239.303256][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 239.303274][ T28] audit: type=1800 audit(1788205591.441:114): pid=8186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.798" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 241.733715][ T8218] loop4: detected capacity change from 0 to 512 [ 241.895483][ T8218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.323713][ T7722] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 242.515190][ T6397] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.532494][ T7722] usb 1-1: Using ep0 maxpacket: 32 [ 242.547873][ T7722] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.560492][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 242.571340][ T8231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.587486][ T7722] usb 1-1: config 0 has no interface number 0 [ 242.607416][ T7722] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 242.691294][ T7722] usb 1-1: config 0 interface 1 has no altsetting 0 [ 242.753554][ T7722] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 242.782353][ T7722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.833066][ T7722] usb 1-1: Product: syz [ 242.837324][ T7722] usb 1-1: Manufacturer: syz [ 242.841971][ T7722] usb 1-1: SerialNumber: syz [ 242.868461][ T8231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.888401][ T7722] usb 1-1: config 0 descriptor?? [ 243.127579][ T7722] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 243.208632][ T7722] cx231xx 1-1:0.1: Failed to read PCB config [ 243.227213][ T7722] cx231xx: probe of 1-1:0.1 failed with error -71 [ 243.256398][ T7722] usb 1-1: USB disconnect, device number 5 [ 243.368928][ T28] audit: type=1326 audit(1788205595.511:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.2.814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 243.982401][ T28] audit: type=1326 audit(1788205595.751:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.2.814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 244.093096][ T28] audit: type=1326 audit(1788205595.761:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.2.814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 244.200571][ T28] audit: type=1326 audit(1788205595.781:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.2.814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 244.314034][ T28] audit: type=1326 audit(1788205595.781:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.2.814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 244.338613][ T7722] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 244.383930][ T28] audit: type=1326 audit(1788205596.121:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.2.814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 244.411191][ T28] audit: type=1326 audit(1788205596.121:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.2.814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde97f9dec2 code=0x7ffc0000 [ 244.438468][ T28] audit: type=1326 audit(1788205596.121:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.2.814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fde97f9df57 code=0x7ffc0000 [ 244.470453][ T28] audit: type=1326 audit(1788205596.121:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.2.814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fde97f5ae51 code=0x7ffc0000 [ 244.497224][ T28] audit: type=1326 audit(1788205596.121:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.2.814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fde97f9ef49 code=0x7ffc0000 [ 244.543087][ T28] audit: type=1326 audit(1788205596.121:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.2.814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fde97f5aebb code=0x7ffc0000 [ 244.563154][ T7722] usb 1-1: Using ep0 maxpacket: 32 [ 244.587609][ T7722] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.609982][ T7722] usb 1-1: config 0 has no interface number 0 [ 244.617329][ T28] audit: type=1326 audit(1788205596.121:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.2.814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 244.644491][ T7722] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 244.644523][ T7722] usb 1-1: config 0 interface 1 has no altsetting 0 [ 244.663750][ T7722] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 244.663782][ T7722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.663805][ T7722] usb 1-1: Product: syz [ 244.663821][ T7722] usb 1-1: Manufacturer: syz [ 244.663838][ T7722] usb 1-1: SerialNumber: syz [ 244.676508][ T7722] usb 1-1: config 0 descriptor?? [ 244.686380][ T28] audit: type=1326 audit(1788205596.121:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.2.814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 244.779118][ T28] audit: type=1326 audit(1788205596.121:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.2.814" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fde97f5a5ac code=0x7ffc0000 [ 244.893742][ T8249] loop2: detected capacity change from 0 to 8192 [ 244.937887][ T8249] netlink: 'syz.2.818': attribute type 3 has an invalid length. [ 244.955944][ T7722] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 244.974030][ T8249] netlink: 72 bytes leftover after parsing attributes in process `syz.2.818'. [ 244.989878][ T7722] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 245.120516][ T7722] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 245.162598][ T7722] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 245.182565][ T7722] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 245.232473][ T7722] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 245.259974][ T7722] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 245.291355][ T7722] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -71 [ 245.413517][ T7722] i2c i2c-2: Added multiplexed i2c bus 4 [ 245.457420][ T7722] i2c i2c-2: Added multiplexed i2c bus 5 [ 245.483505][ T7722] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 245.492112][ T7722] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 245.590932][ T7722] cx231xx: probe of 1-1:0.1 failed with error -71 [ 245.639703][ T7722] usb 1-1: USB disconnect, device number 6 [ 246.387165][ T8276] loop0: detected capacity change from 0 to 1024 [ 246.420076][ T8276] EXT4-fs: Ignoring removed oldalloc option [ 246.471399][ T8276] EXT4-fs: Ignoring removed oldalloc option [ 246.527552][ T8276] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.642638][ T8276] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 246.719418][ T8276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.053573][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.929280][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 249.099607][ T8320] syz.4.832 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 249.145292][ T7711] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 249.179073][ T8320] CPU: 0 PID: 8320 Comm: syz.4.832 Not tainted syzkaller #0 [ 249.186463][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.196584][ T8320] Call Trace: [ 249.199908][ T8320] [ 249.202884][ T8320] dump_stack_lvl+0x18c/0x250 [ 249.207637][ T8320] ? show_regs_print_info+0x20/0x20 [ 249.212891][ T8320] ? load_image+0x420/0x420 [ 249.217443][ T8320] ? ___ratelimit+0x478/0x610 [ 249.222187][ T8320] ? radix_tree_cpu_dead+0x160/0x160 [ 249.227536][ T8320] dump_header+0xd8/0x820 [ 249.231925][ T8320] oom_kill_process+0x390/0x580 [ 249.236838][ T8320] out_of_memory+0xe0e/0x1200 [ 249.241581][ T8320] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 249.247277][ T8320] ? mutex_lock_nested+0x20/0x20 [ 249.252272][ T8320] ? unregister_oom_notifier+0x20/0x20 [ 249.257839][ T8320] mem_cgroup_out_of_memory+0x2c2/0x390 [ 249.263442][ T8320] ? try_charge_memcg+0xc91/0x17c0 [ 249.268613][ T8320] ? drain_local_stock+0x630/0x630 [ 249.273784][ T8320] ? do_raw_spin_unlock+0x121/0x230 [ 249.279052][ T8320] try_charge_memcg+0xca1/0x17c0 [ 249.284065][ T8320] ? folio_flags+0x120/0x120 [ 249.288708][ T8320] ? percpu_ref_tryget+0x15/0x180 [ 249.293781][ T8320] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 249.299561][ T8320] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 249.305594][ T8320] ? percpu_ref_tryget+0x15/0x180 [ 249.310662][ T8320] ? percpu_ref_tryget+0x15/0x180 [ 249.315727][ T8320] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 249.321485][ T8320] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 249.327271][ T8320] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 249.333124][ T8320] obj_cgroup_charge+0x36e/0x630 [ 249.338105][ T8320] ? get_obj_cgroup_from_current+0xd4/0x280 [ 249.344047][ T8320] ? obj_cgroup_charge+0xed/0x630 [ 249.349113][ T8320] ? mod_objcg_mlstate+0x320/0x320 [ 249.354271][ T8320] ? get_obj_cgroup_from_current+0xd4/0x280 [ 249.360206][ T8320] ? get_obj_cgroup_from_current+0xd4/0x280 [ 249.366141][ T8320] slab_pre_alloc_hook+0x2e2/0x300 [ 249.371316][ T8320] kmem_cache_alloc+0x5a/0x2c0 [ 249.376124][ T8320] ? prepare_creds+0x30/0x5d0 [ 249.380852][ T8320] prepare_creds+0x30/0x5d0 [ 249.385409][ T8320] copy_creds+0x105/0xa70 [ 249.389789][ T8320] copy_process+0x973/0x3da0 [ 249.394426][ T8320] ? plist_add+0x3db/0x490 [ 249.398895][ T8320] ? schedule+0xc7/0x170 [ 249.403187][ T8320] ? futex_wait_queue+0x27/0x1b0 [ 249.408171][ T8320] ? futex_wait+0x4a7/0x5c0 [ 249.412718][ T8320] ? __pidfd_prepare+0x140/0x140 [ 249.417708][ T8320] kernel_clone+0x24b/0x8a0 [ 249.422258][ T8320] ? create_io_thread+0x190/0x190 [ 249.427333][ T8320] ? do_futex+0x2ff/0x3e0 [ 249.431708][ T8320] __x64_sys_clone+0x1b7/0x230 [ 249.436522][ T8320] ? __ia32_sys_vfork+0x140/0x140 [ 249.441613][ T8320] ? lock_chain_count+0x20/0x20 [ 249.446513][ T8320] ? lockdep_hardirqs_on+0x98/0x150 [ 249.451765][ T8320] do_syscall_64+0x55/0xb0 [ 249.456221][ T8320] ? clear_bhb_loop+0x40/0x90 [ 249.460940][ T8320] ? clear_bhb_loop+0x40/0x90 [ 249.465658][ T8320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.471599][ T8320] RIP: 0033:0x7fa20db9e159 [ 249.476056][ T8320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.495703][ T8320] RSP: 002b:00007fa20eb2afd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 249.504161][ T8320] RAX: ffffffffffffffda RBX: 00007fa20de26090 RCX: 00007fa20db9e159 [ 249.512175][ T8320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.520181][ T8320] RBP: 00007fa20dc35024 R08: 0000000000000000 R09: 0000000000000000 [ 249.528197][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.536238][ T8320] R13: 00007fa20de26128 R14: 00007fa20de26090 R15: 00007ffd63e18fd8 [ 249.544276][ T8320] [ 249.647974][ T8314] syz.4.832: vmalloc error: size 0, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null),cpuset=test,mems_allowed=0-1 [ 249.652788][ T8320] memory: usage 96kB, limit 96kB, failcnt 105 [ 249.693892][ T8314] CPU: 0 PID: 8314 Comm: syz.4.832 Not tainted syzkaller #0 [ 249.701273][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.711378][ T8314] Call Trace: [ 249.714698][ T8314] [ 249.717671][ T8314] dump_stack_lvl+0x18c/0x250 [ 249.722409][ T8314] ? show_regs_print_info+0x20/0x20 [ 249.727661][ T8314] ? load_image+0x420/0x420 [ 249.732212][ T8314] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 249.738682][ T8314] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 249.745244][ T8314] warn_alloc+0x246/0x340 [ 249.749624][ T8314] ? rcu_is_watching+0x15/0xb0 [ 249.754458][ T8314] ? zone_watermark_ok_safe+0x230/0x230 [ 249.760076][ T8314] __vmalloc_node_range+0x1055/0x1320 [ 249.765530][ T8314] ? free_vm_area+0x50/0x50 [ 249.770092][ T8314] ? rcu_is_watching+0x15/0xb0 [ 249.774913][ T8314] ? kvmalloc_node+0x70/0x180 [ 249.779639][ T8314] ? trace_kmalloc+0x1f/0xa0 [ 249.784286][ T8314] kvmalloc_node+0x13f/0x180 [ 249.788934][ T8314] ? alloc_netdev_mqs+0x87/0x1040 [ 249.794007][ T8314] alloc_netdev_mqs+0x87/0x1040 [ 249.798903][ T8314] ? tun_get_tx_ring+0xa0/0xa0 [ 249.803732][ T8314] tun_set_iff+0x546/0xea0 [ 249.808207][ T8314] __tun_chr_ioctl+0x7e0/0x2070 [ 249.813116][ T8314] ? tun_flow_create+0x310/0x310 [ 249.818123][ T8314] ? bpf_lsm_file_ioctl+0x9/0x10 [ 249.823137][ T8314] ? security_file_ioctl+0x80/0xa0 [ 249.828303][ T8314] ? tun_chr_poll+0x630/0x630 [ 249.833030][ T8314] __se_sys_ioctl+0xfd/0x170 [ 249.837680][ T8314] do_syscall_64+0x55/0xb0 [ 249.842146][ T8314] ? clear_bhb_loop+0x40/0x90 [ 249.846873][ T8314] ? clear_bhb_loop+0x40/0x90 [ 249.851600][ T8314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.857540][ T8314] RIP: 0033:0x7fa20db9e159 [ 249.862004][ T8314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.881662][ T8314] RSP: 002b:00007fa20eb4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.890146][ T8314] RAX: ffffffffffffffda RBX: 00007fa20de25fa0 RCX: 00007fa20db9e159 [ 249.898157][ T8314] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000006 [ 249.906173][ T8314] RBP: 00007fa20dc35024 R08: 0000000000000000 R09: 0000000000000000 [ 249.914192][ T8314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.922203][ T8314] R13: 00007fa20de26038 R14: 00007fa20de25fa0 R15: 00007ffd63e18fd8 [ 249.930238][ T8314] [ 249.950300][ T8320] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 249.958990][ T8320] kmem: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 249.966706][ T8320] Memory cgroup stats for /syz4/test: [ 249.967501][ T8320] cache 0 [ 249.994493][ T8320] rss 0 [ 249.997819][ T8320] rss_huge 0 [ 250.001519][ T8320] shmem 0 [ 250.012475][ T7711] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 250.032357][ T7711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.051784][ T8320] mapped_file 0 [ 250.056166][ T8320] dirty 0 [ 250.059544][ T8320] writeback 0 [ 250.072837][ T7711] usb 1-1: Product: syz [ 250.077820][ T7711] usb 1-1: Manufacturer: syz [ 250.088011][ T8320] workingset_refault_anon 0 [ 250.098155][ T7711] usb 1-1: SerialNumber: syz [ 250.112374][ T8320] workingset_refault_file 0 [ 250.117505][ T8320] swap 8192 [ 250.149993][ T8320] pgpgin 2 [ 250.172559][ T8314] Mem-Info: [ 250.175778][ T8314] active_anon:5659 inactive_anon:0 isolated_anon:0 [ 250.175778][ T8314] active_file:16130 inactive_file:40029 isolated_file:0 [ 250.175778][ T8314] unevictable:768 dirty:291 writeback:0 [ 250.175778][ T8314] slab_reclaimable:10420 slab_unreclaimable:99106 [ 250.175778][ T8314] mapped:24802 shmem:1363 pagetables:600 [ 250.175778][ T8314] sec_pagetables:0 bounce:0 [ 250.175778][ T8314] kernel_misc_reclaimable:0 [ 250.175778][ T8314] free:1338669 free_pcp:11507 free_cma:0 [ 250.214582][ T8320] pgpgout 2 [ 250.272645][ T8320] pgfault 9 [ 250.276328][ T8320] pgmajfault 0 [ 250.293088][ T8314] Node 0 active_anon:22736kB inactive_anon:0kB active_file:64520kB inactive_file:159912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99208kB dirty:1164kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11540kB pagetables:2500kB sec_pagetables:0kB all_unreclaimable? no [ 250.337813][ T8320] inactive_anon 0 [ 250.344864][ T8320] active_anon 0 [ 250.349039][ T8320] inactive_file 0 [ 250.353581][ T8320] active_file 0 [ 250.358024][ T8320] unevictable 0 [ 250.363132][ T8314] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 250.411078][ T8320] hierarchical_memory_limit 98304 [ 250.438145][ T7711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 250.459561][ T8314] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.503480][ T8320] hierarchical_memsw_limit 9223372036854771712 [ 250.509856][ T8320] total_cache 0 [ 250.520275][ T7711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 250.544724][ T8320] total_rss 0 [ 250.548091][ T8320] total_rss_huge 0 [ 250.582995][ T8320] total_shmem 0 [ 250.586578][ T8320] total_mapped_file 0 [ 250.590594][ T8320] total_dirty 0 [ 250.622698][ T8314] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 250.637305][ T8320] total_writeback 0 [ 250.641192][ T8320] total_workingset_refault_anon 0 [ 250.686691][ T8314] Node 0 DMA32 free:1445640kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22896kB inactive_anon:0kB active_file:64520kB inactive_file:159092kB unevictable:1536kB writepending:1164kB present:3129332kB managed:2586824kB mlocked:0kB bounce:0kB free_pcp:25240kB local_pcp:6436kB free_cma:0kB [ 250.703204][ T8320] total_workingset_refault_file 0 [ 250.751129][ T8314] lowmem_reserve[]: 0 0 0 0 0 [ 250.769781][ T8320] total_swap 8192 [ 250.783491][ T8320] total_pgpgin 2 [ 250.787132][ T8320] total_pgpgout 2 [ 250.811031][ T8320] total_pgfault 9 [ 250.814951][ T8320] total_pgmajfault 0 [ 250.818895][ T8320] total_inactive_anon 0 [ 250.856634][ T8314] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 250.969279][ T8320] total_active_anon 0 [ 250.985249][ T8314] lowmem_reserve[]: 0 0 0 0 0 [ 250.990808][ T8314] Node 1 Normal free:3893672kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20128kB local_pcp:9568kB free_cma:0kB [ 251.022072][ T8320] total_inactive_file 0 [ 251.022089][ T8320] total_active_file 0 [ 251.022106][ T8320] total_unevictable 0 [ 251.022115][ T8320] anon_cost 0 [ 251.022123][ T8320] file_cost 0 [ 251.022133][ T8320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.832,pid=8311,uid=0 [ 251.111749][ T8320] Memory cgroup out of memory: Killed process 8314 (syz.4.832) total-vm:102376kB, anon-rss:1248kB, file-rss:22656kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 251.130600][ T8314] lowmem_reserve[]: 0 0 0 0 0 [ 251.138259][ T8314] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 251.177483][ T8314] Node 0 DMA32: 1342*4kB (UME) 1052*8kB (UME) 573*16kB (UME) 494*32kB (UME) 207*64kB (UME) 58*128kB (UME) 46*256kB (UME) 20*512kB (UM) 6*1024kB (M) 3*2048kB (UME) 330*4096kB (UM) = 1445416kB [ 251.241440][ T8314] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 251.257210][ T8314] Node 1 Normal: 252*4kB (UME) 53*8kB (UME) 39*16kB (UME) 91*32kB (UME) 23*64kB (UME) 13*128kB (UME) 2*256kB (ME) 0*512kB 0*1024kB 1*2048kB (E) 948*4096kB (UM) = 3893672kB [ 251.297754][ T8314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 251.330113][ T8314] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 251.365669][ T8314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 251.378921][ T8314] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 251.391340][ T8314] 57522 total pagecache pages [ 251.397953][ T8314] 1 pages in swap cache [ 251.404130][ T8314] Free swap = 124472kB [ 251.409016][ T8314] Total swap = 124996kB [ 251.415298][ T8314] 2097051 pages RAM [ 251.419763][ T8314] 0 pages HighMem/MovableOnly [ 251.432605][ T8314] 416959 pages reserved [ 251.437688][ T8314] 0 pages cma reserved [ 251.979156][ T7711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -71 [ 252.039466][ T7711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 252.093912][ T7711] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 252.147547][ T7711] lan78xx: probe of 1-1:1.0 failed with error -71 [ 252.185027][ T7711] usb 1-1: USB disconnect, device number 7 [ 252.779280][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 253.029141][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.848'. [ 253.149999][ T8365] vlan2: entered allmulticast mode [ 253.155418][ T8365] bond2: entered allmulticast mode [ 254.630182][ T8398] loop4: detected capacity change from 0 to 256 [ 254.785084][ T8398] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 255.665130][ T8415] bridge0: port 3(syz_tun) entered blocking state [ 255.691792][ T8415] bridge0: port 3(syz_tun) entered disabled state [ 255.703034][ T8415] syz_tun: entered allmulticast mode [ 255.721201][ T8415] syz_tun: entered promiscuous mode [ 255.739802][ T8415] bridge0: port 3(syz_tun) entered blocking state [ 255.747032][ T8415] bridge0: port 3(syz_tun) entered forwarding state [ 256.055010][ T8420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.186953][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.202397][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.472707][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 259.705917][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 259.756488][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 259.822357][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 259.877456][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 259.908343][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.115672][ T23] usb 3-1: config 0 descriptor?? [ 260.231202][ T8488] bond4: (slave veth5): Enslaving as an active interface with a down link [ 260.311992][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 260.338052][ T8489] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.518746][ T8494] loop4: detected capacity change from 0 to 256 [ 260.616255][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 260.649139][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 260.711589][ T23] usb 3-1: USB disconnect, device number 5 [ 261.532665][ T8510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.891'. [ 262.003616][ T8517] TC_ACT_REPEAT abuse ? [ 263.837310][ T8548] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 263.883524][ T8551] loop4: detected capacity change from 0 to 1024 [ 263.911718][ T8551] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.940671][ T8551] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 263.961277][ T8551] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 264.155700][ T8553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.908'. [ 264.743943][ T8570] loop0: detected capacity change from 0 to 1024 [ 264.798190][ T8570] hfsplus: invalid length 32517 has been corrected to 255 [ 264.879690][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 264.879707][ T28] audit: type=1800 audit(1788205617.021:156): pid=8570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.920" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 265.175506][ T3527] hfsplus: b-tree write err: -5, ino 4 [ 265.181941][ T3527] hfsplus: b-tree write err: -5, ino 2 [ 265.199630][ T3527] hfsplus: b-tree write err: -5, ino 25 [ 265.555470][ T8582] loop2: detected capacity change from 0 to 128 [ 265.588413][ T8582] netlink: 'syz.2.918': attribute type 29 has an invalid length. [ 268.055706][ T8617] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 270.656610][ T28] audit: type=1326 audit(1788205622.791:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20db9e159 code=0x7ffc0000 [ 270.851245][ T28] audit: type=1326 audit(1788205622.791:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20db9e159 code=0x7ffc0000 [ 270.925143][ T28] audit: type=1326 audit(1788205622.801:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fa20db9e159 code=0x7ffc0000 [ 270.992229][ T28] audit: type=1326 audit(1788205622.801:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20db9e159 code=0x7ffc0000 [ 271.070355][ T28] audit: type=1326 audit(1788205622.831:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fa20db9e159 code=0x7ffc0000 [ 271.157143][ T8651] gadgetfs: bound to dummy_udc driver [ 271.166181][ T28] audit: type=1326 audit(1788205622.831:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20db9e159 code=0x7ffc0000 [ 271.253837][ T28] audit: type=1326 audit(1788205622.831:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fa20db9e159 code=0x7ffc0000 [ 271.353413][ T28] audit: type=1326 audit(1788205622.831:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20db9e159 code=0x7ffc0000 [ 271.463260][ T28] audit: type=1326 audit(1788205622.831:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fa20db9e159 code=0x7ffc0000 [ 271.487637][ T7720] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 271.509412][ C0] gadgetfs: connected [ 271.532930][ T7720] gadgetfs: disconnected [ 271.614329][ T28] audit: type=1326 audit(1788205622.831:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8643 comm="syz.4.942" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20db9e159 code=0x7ffc0000 [ 271.678834][ T8650] gadgetfs: suspended from state 2 [ 271.922531][ T7720] usb 1-1: device not accepting address 8, error -71 [ 273.146780][ T8695] loop2: detected capacity change from 0 to 128 [ 273.227203][ T8695] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 273.305274][ T8695] ext4 filesystem being mounted at /234/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 273.772212][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 275.563082][ T8744] ±ÿeóûÏÛn: renamed from lo [ 275.902192][ T8753] netlink: 'syz.2.975': attribute type 3 has an invalid length. [ 275.930354][ T8753] netlink: 'syz.2.975': attribute type 3 has an invalid length. [ 276.153485][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 279.102311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 279.516804][ T8781] netlink: 140 bytes leftover after parsing attributes in process `syz.4.986'. [ 279.541821][ T8781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.986'. [ 280.298496][ T8796] loop2: detected capacity change from 0 to 256 [ 280.330878][ T8796] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.528274][ T8801] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 281.045175][ T8807] loop0: detected capacity change from 0 to 1024 [ 281.235939][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 281.235976][ T28] audit: type=1804 audit(1788205633.381:168): pid=8812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.997" name="/newroot/243/file1/file1" dev="loop0" ino=20 res=1 errno=0 [ 281.399598][ T28] audit: type=1804 audit(1788205633.501:169): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.997" name="/newroot/243/file1/file1" dev="loop0" ino=20 res=1 errno=0 [ 281.504436][ T28] audit: type=1800 audit(1788205633.511:170): pid=8812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.997" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 282.959512][ T8837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1010'. [ 283.059262][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1010'. [ 283.946769][ T8854] vlan2: entered promiscuous mode [ 283.973937][ T8854] syz_tun: entered promiscuous mode [ 286.232564][ T968] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 286.432666][ T968] usb 1-1: Using ep0 maxpacket: 8 [ 286.445290][ T968] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 286.482464][ T968] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.535629][ T968] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.577974][ T968] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.600814][ T8908] tipc: Failed to remove unknown binding: 66,0,0/0:2638018226/2638018227 [ 286.612351][ T968] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.673899][ T8908] tipc: Failed to remove unknown binding: 66,0,0/0:2638018226/2638018227 [ 286.683274][ T968] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.730719][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.042494][ T968] usb 1-1: GET_CAPABILITIES returned 0 [ 287.048721][ T968] usbtmc 1-1:16.0: can't read capabilities [ 287.461385][ T23] usb 1-1: USB disconnect, device number 10 [ 288.588312][ T8976] binder: 8973:8976 ioctl c0306201 200000000080 returned -14 [ 288.637890][ T8976] binder: 8973:8976 ioctl c0306201 2000000003c0 returned -14 [ 289.151133][ T8978] loop0: detected capacity change from 0 to 8192 [ 289.645560][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 292.153536][ T9027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1059'. [ 292.414564][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'. [ 294.052613][ T9059] lo speed is unknown, defaulting to 1000 [ 295.032559][ T968] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 295.235698][ T968] usb 1-1: unable to get BOS descriptor or descriptor too short [ 295.265732][ T968] usb 1-1: not running at top speed; connect to a high speed hub [ 295.309221][ T968] usb 1-1: config 9 has an invalid interface number: 77 but max is 0 [ 295.432735][ T968] usb 1-1: config 9 has no interface number 0 [ 295.472592][ T968] usb 1-1: config 9 interface 77 has no altsetting 0 [ 295.526242][ T968] usb 1-1: New USB device found, idVendor=0421, idProduct=00e9, bcdDevice=ef.ba [ 295.555522][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.597682][ T968] usb 1-1: Product: syz [ 295.608079][ T968] usb 1-1: Manufacturer: syz [ 295.635155][ T968] usb 1-1: SerialNumber: syz [ 295.958167][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 296.301367][ T968] usb 1-1: bad CDC descriptors [ 296.328079][ T968] usb 1-1: bad CDC descriptors [ 296.359594][ T968] usb 1-1: USB disconnect, device number 11 [ 298.582842][ T9132] bonding: b is being created... [ 299.623856][ T9145] capability: warning: `syz.2.1088' uses deprecated v2 capabilities in a way that may be insecure [ 302.955737][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1099'. [ 303.139067][ T9189] loop0: detected capacity change from 0 to 1024 [ 303.159737][ T9182] netlink: 'syz.3.1100': attribute type 4 has an invalid length. [ 303.176179][ T9189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 303.222582][ T9185] netlink: 'syz.3.1100': attribute type 4 has an invalid length. [ 303.284203][ T23] lo speed is unknown, defaulting to 1000 [ 303.314805][ T9189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.480655][ T28] audit: type=1800 audit(1788205655.621:171): pid=9189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1102" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 303.787321][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.054420][ T9230] overlayfs: failed to clone upperpath [ 307.467519][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 307.945189][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1113'. [ 308.483537][ T7718] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 308.682473][ T7718] usb 3-1: Using ep0 maxpacket: 32 [ 308.695750][ T7718] usb 3-1: unable to get BOS descriptor or descriptor too short [ 308.717865][ T7718] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.748284][ T7718] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.781026][ T7718] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 308.827412][ T7718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.853015][ T7718] usb 3-1: Product: syz [ 308.857262][ T7718] usb 3-1: Manufacturer: syz [ 308.861897][ T7718] usb 3-1: SerialNumber: syz [ 309.351719][ T7718] usb 3-1: unit 0 not found! [ 309.564642][ T7718] usb 3-1: USB disconnect, device number 6 [ 309.672580][ T9264] netlink: 'syz.0.1123': attribute type 1 has an invalid length. [ 309.803308][ T9264] 8021q: adding VLAN 0 to HW filter on device bond5 [ 309.818335][ T9266] vlan2: entered allmulticast mode [ 309.823867][ T9266] bond5: entered allmulticast mode [ 309.887581][ T9264] bond5: (slave geneve2): making interface the new active one [ 309.895440][ T9264] geneve2: entered allmulticast mode [ 309.916733][ T9264] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 310.337777][ T968] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 310.443852][ T968] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 312.133382][ T9278] FAULT_INJECTION: forcing a failure. [ 312.133382][ T9278] name failslab, interval 1, probability 0, space 0, times 1 [ 312.146828][ T9278] CPU: 1 PID: 9278 Comm: syz.4.1127 Not tainted syzkaller #0 [ 312.154261][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.164385][ T9278] Call Trace: [ 312.167725][ T9278] [ 312.170703][ T9278] dump_stack_lvl+0x18c/0x250 [ 312.175443][ T9278] ? driver_probe_device+0x4f/0x420 [ 312.180694][ T9278] ? show_regs_print_info+0x20/0x20 [ 312.185954][ T9278] ? load_image+0x420/0x420 [ 312.190526][ T9278] should_fail_ex+0x394/0x4c0 [ 312.195271][ T9278] should_failslab+0x9/0x20 [ 312.199866][ T9278] slab_pre_alloc_hook+0x59/0x300 [ 312.204955][ T9278] ? raw_queue_event+0x83/0x2f0 [ 312.209865][ T9278] ? raw_queue_event+0x83/0x2f0 [ 312.214763][ T9278] __kmem_cache_alloc_node+0x53/0x250 [ 312.220203][ T9278] ? raw_queue_event+0x83/0x2f0 [ 312.225276][ T9278] __kmalloc+0xa7/0x240 [ 312.229505][ T9278] raw_queue_event+0x83/0x2f0 [ 312.234245][ T9278] gadget_bind+0x474/0x5b0 [ 312.238722][ T9278] ? gadget_disconnect+0x10/0x10 [ 312.243707][ T9278] gadget_bind_driver+0x2b3/0x770 [ 312.248799][ T9278] ? gadget_match_driver+0x130/0x130 [ 312.254141][ T9278] really_probe+0x247/0xae0 [ 312.258694][ T9278] ? pm_runtime_barrier+0x14b/0x1c0 [ 312.263952][ T9278] __driver_probe_device+0x1f5/0x390 [ 312.269293][ T9278] driver_probe_device+0x4f/0x420 [ 312.274350][ T9278] __driver_attach+0x444/0x6d0 [ 312.279164][ T9278] bus_for_each_dev+0x235/0x2b0 [ 312.284043][ T9278] ? driver_attach+0x50/0x50 [ 312.288665][ T9278] ? bus_remove_file+0x140/0x140 [ 312.293645][ T9278] ? do_raw_spin_unlock+0x121/0x230 [ 312.298880][ T9278] bus_add_driver+0x340/0x630 [ 312.303593][ T9278] driver_register+0x23a/0x310 [ 312.308387][ T9278] usb_gadget_register_driver_owner+0xf9/0x270 [ 312.314578][ T9278] raw_ioctl+0x1613/0x3d80 [ 312.319034][ T9278] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 312.324701][ T9278] ? tomoyo_path_number_perm+0x217/0x5e0 [ 312.330360][ T9278] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 312.335853][ T9278] ? sched_clock_cpu+0x75/0x430 [ 312.340732][ T9278] ? make_qualifier+0x260/0x260 [ 312.345642][ T9278] ? __fget_files+0x28/0x460 [ 312.350278][ T9278] ? bpf_lsm_file_ioctl+0x9/0x10 [ 312.355239][ T9278] ? security_file_ioctl+0x80/0xa0 [ 312.360377][ T9278] ? make_qualifier+0x260/0x260 [ 312.365254][ T9278] __se_sys_ioctl+0xfd/0x170 [ 312.369886][ T9278] do_syscall_64+0x55/0xb0 [ 312.374327][ T9278] ? clear_bhb_loop+0x40/0x90 [ 312.379025][ T9278] ? clear_bhb_loop+0x40/0x90 [ 312.383729][ T9278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.389647][ T9278] RIP: 0033:0x7fa20db9ddeb [ 312.394087][ T9278] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 312.413776][ T9278] RSP: 002b:00007fa20eb49f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.422238][ T9278] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa20db9ddeb [ 312.430242][ T9278] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 312.438233][ T9278] RBP: 00007fa20eb4afd0 R08: 0000000000000001 R09: 00000000ffffffff [ 312.446228][ T9278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.454226][ T9278] R13: 0000200000000180 R14: 0000000000000000 R15: 0000000000000000 [ 312.462234][ T9278] [ 312.602612][ T9278] raw-gadget.0 gadget.4: failed to queue event [ 312.640135][ T9278] udc dummy_udc.4: failed to start USB Raw Gadget: -12 [ 312.686376][ T9278] raw-gadget.0: probe of gadget.4 failed with error -12 [ 312.703457][ T9278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.756002][ T9278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.920456][ T9283] fuse: Bad value for 'fd' [ 313.038951][ T9289] binder: 9288:9289 ioctl c0306201 200000000080 returned -14 [ 313.082613][ T9289] binder: 9288:9289 ioctl c0306201 2000000003c0 returned -14 [ 313.750425][ T9300] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1135'. [ 313.897115][ T9302] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1135'. [ 313.976806][ T9302] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1135'. [ 315.672450][ T7718] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 315.864808][ T7718] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 315.885963][ T7718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.944489][ T7718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.992451][ T7718] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 316.038168][ T7718] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 316.053810][ T7718] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 316.082650][ T7718] usb 1-1: Manufacturer: syz [ 316.103553][ T7718] usb 1-1: config 0 descriptor?? [ 316.194751][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'. [ 316.359006][ T9337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.421655][ T9307] loop4: detected capacity change from 0 to 32768 [ 316.543879][ T7718] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 316.576866][ T7718] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 316.726686][ T9307] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 316.741940][ T7718] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 316.888560][ T7718] usb 1-1: USB disconnect, device number 12 [ 317.073655][ T9307] XFS (loop4): Ending clean mount [ 317.239615][ T9307] XFS (loop4): Quotacheck needed: Please wait. [ 317.313692][ T9351] fido_id[9351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 317.487274][ T28] audit: type=1326 audit(1788205669.621:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.3.1149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 317.497001][ T9307] XFS (loop4): Quotacheck: Done. [ 317.606128][ T28] audit: type=1326 audit(1788205669.621:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.3.1149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 317.635056][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.645693][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.664073][ T28] audit: type=1326 audit(1788205669.661:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.3.1149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 317.691625][ T28] audit: type=1326 audit(1788205669.661:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.3.1149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 317.744694][ T6397] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 317.790478][ T28] audit: type=1326 audit(1788205669.661:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.3.1149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 317.901031][ T28] audit: type=1326 audit(1788205669.661:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.3.1149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 318.044509][ T28] audit: type=1326 audit(1788205669.671:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.3.1149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 318.083777][ T9355] ref_ctr increment failed for inode: 0x67f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888078231300 [ 318.189717][ T28] audit: type=1326 audit(1788205669.711:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.3.1149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 318.272883][ T28] audit: type=1326 audit(1788205669.711:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.3.1149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 318.334765][ T28] audit: type=1326 audit(1788205669.741:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.3.1149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 318.809721][ T9365] netlink: 'syz.3.1155': attribute type 1 has an invalid length. [ 319.164910][ T9365] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.390723][ T9367] vlan2: entered allmulticast mode [ 319.496696][ T9367] bond3: entered allmulticast mode [ 319.662243][ C0] sched: RT throttling activated [ 320.065995][ T9369] bond3: (slave geneve2): making interface the new active one [ 320.192316][ T9369] geneve2: entered allmulticast mode [ 320.256636][ T9369] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 320.292906][ T9376] loop4: detected capacity change from 0 to 2048 [ 320.300877][ T9376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.448377][ T9376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.842070][ T9388] sch_tbf: burst 1520 is lower than device lo mtu (11337746) ! [ 320.962366][ T7718] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 321.152548][ T7718] usb 5-1: Using ep0 maxpacket: 32 [ 321.162617][ T7718] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 321.178707][ T7718] usb 5-1: config 0 has no interface number 0 [ 321.197457][ T7718] usb 5-1: config 0 interface 153 has no altsetting 0 [ 321.232735][ T7718] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 321.261515][ T7718] usb 5-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 321.288170][ T7718] usb 5-1: Product: syz [ 321.302424][ T7718] usb 5-1: Manufacturer: syz [ 321.320757][ T7718] usb 5-1: SerialNumber: syz [ 321.353818][ T7718] usb 5-1: config 0 descriptor?? [ 321.634560][ T7718] hub 5-1:0.153: bad descriptor, ignoring hub [ 321.664190][ T7718] hub: probe of 5-1:0.153 failed with error -5 [ 321.688264][ T7718] sierra 5-1:0.153: Sierra USB modem converter detected [ 321.775423][ T7718] usb 5-1: USB disconnect, device number 7 [ 321.781905][ T7718] sierra 5-1:0.153: device disconnected [ 322.433479][ T6397] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz-executor: bg 0: block 2: invalid block bitmap [ 322.510525][ T6397] EXT4-fs (loop4): Remounting filesystem read-only [ 322.781601][ T9410] overlayfs: failed to clone upperpath [ 324.257475][ T9009] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.522153][ T9422] loop0: detected capacity change from 0 to 256 [ 324.569819][ T9422] FAT-fs (loop0): Directory bread(block 1285) failed [ 324.610736][ T9422] FAT-fs (loop0): Directory bread(block 1286) failed [ 324.642530][ T9422] FAT-fs (loop0): Directory bread(block 1287) failed [ 324.684037][ T9422] FAT-fs (loop0): Directory bread(block 1288) failed [ 324.772694][ T9422] FAT-fs (loop0): Directory bread(block 1285) failed [ 324.793695][ T9422] FAT-fs (loop0): Directory bread(block 1286) failed [ 324.801382][ T9422] FAT-fs (loop0): Directory bread(block 1287) failed [ 324.842565][ T9422] FAT-fs (loop0): Directory bread(block 1288) failed [ 325.671167][ T9435] 9pnet_fd: Insufficient options for proto=fd [ 329.112161][ T9471] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 329.403174][ T9474] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 330.083373][ T9488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1201'. [ 330.270166][ T9490] syz.0.1202: attempt to access beyond end of device [ 330.270166][ T9490] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 330.432028][ T9490] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 330.444427][ T9490] device-mapper: ioctl: error adding target to table [ 330.463288][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 330.476334][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 330.490007][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 330.515117][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 330.525115][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 330.534745][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 330.599780][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 330.613069][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 330.630644][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 330.650316][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 330.659321][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 330.668243][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 330.787290][ T9495] lo speed is unknown, defaulting to 1000 [ 331.331169][ T9495] chnl_net:caif_netlink_parms(): no params data found [ 331.469886][ T9495] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.478081][ T9495] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.486212][ T9495] bridge_slave_0: entered allmulticast mode [ 331.494399][ T9495] bridge_slave_0: entered promiscuous mode [ 331.505349][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.514194][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.522164][ T9495] bridge_slave_1: entered allmulticast mode [ 331.530503][ T9495] bridge_slave_1: entered promiscuous mode [ 331.587172][ T9495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.603762][ T9495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.718363][ T9495] team0: Port device team_slave_0 added [ 331.741923][ T9495] team0: Port device team_slave_1 added [ 331.857206][ T9495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.878286][ T9495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.908598][ T9495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.949034][ T9495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.956855][ T9495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.982869][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.052956][ T9495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.289537][ T9516] loop0: detected capacity change from 0 to 1024 [ 332.311221][ T9516] EXT4-fs: Ignoring removed bh option [ 332.349972][ T9495] hsr_slave_0: entered promiscuous mode [ 332.381340][ T9495] hsr_slave_1: entered promiscuous mode [ 332.395288][ T9516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 332.410548][ T9495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.419011][ T9495] Cannot create hsr debugfs directory [ 332.752550][ T5783] Bluetooth: hci3: command tx timeout [ 332.785974][ T987] Trying to write to read-only block-device loop0 [ 332.828462][ T9402] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 332.998937][ T9402] bridge0: port 3(syz_tun) entered disabled state [ 333.162609][ T9402] syz_tun (unregistering): left allmulticast mode [ 333.169129][ T9402] syz_tun (unregistering): left promiscuous mode [ 333.203663][ T9402] bridge0: port 3(syz_tun) entered disabled state [ 333.267287][ T9534] jffs2: notice: (9534) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 333.515876][ T987] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.885268][ T987] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.167196][ T987] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.246592][ T9495] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 334.316728][ T9495] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 334.451044][ T987] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.612604][ T9495] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 334.675505][ T9495] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 334.822377][ T5783] Bluetooth: hci3: command tx timeout [ 335.341583][ T9495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.496523][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.515801][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.527026][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.535768][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.545563][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 335.562564][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.650560][ T9495] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.720820][ T9555] lo speed is unknown, defaulting to 1000 [ 335.738465][ T8950] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.747408][ T8950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.803659][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.810880][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.089600][ T9565] loop2: detected capacity change from 0 to 512 [ 336.156173][ T9565] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 336.216005][ T9565] EXT4-fs (loop2): orphan cleanup on readonly fs [ 336.279569][ T9565] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1224: iget: bogus i_mode (5) [ 336.349646][ T9565] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1224: couldn't read orphan inode 15 (err -117) [ 336.472100][ T9565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 336.715799][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.902805][ T5783] Bluetooth: hci3: command tx timeout [ 337.129602][ T9495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.622511][ T5783] Bluetooth: hci2: command tx timeout [ 338.119081][ T9495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.455532][ T9617] loop2: detected capacity change from 0 to 512 [ 338.489341][ T9617] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 338.672926][ T9617] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 338.691196][ T9617] __quota_error: 17 callbacks suppressed [ 338.691239][ T9617] Quota error (device loop2): write_blk: dquota write failed [ 338.705723][ T9617] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 338.715176][ T9617] Quota error (device loop2): write_blk: dquota write failed [ 338.725698][ T9617] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 338.736331][ T9617] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1231: Failed to acquire dquot type 1 [ 338.789727][ T9617] EXT4-fs (loop2): 1 truncate cleaned up [ 338.807129][ T9617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.983389][ T5783] Bluetooth: hci3: command tx timeout [ 339.703683][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.712903][ T5783] Bluetooth: hci2: command tx timeout [ 341.123697][ T9605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.782508][ T5783] Bluetooth: hci2: command tx timeout [ 342.092412][ T9605] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.101562][ T9605] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.112094][ T9605] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.121701][ T9605] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.170179][ T9555] chnl_net:caif_netlink_parms(): no params data found [ 342.177614][ T7720] lo speed is unknown, defaulting to 1000 [ 342.626129][ T987] bond2: (slave wlan0): Releasing active interface [ 342.662908][ T987] bond2: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 342.702494][ T987] batadv1: entered promiscuous mode [ 342.989037][ T987] hsr_slave_0: left promiscuous mode [ 343.029738][ T987] hsr_slave_1: left promiscuous mode [ 343.074557][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.088067][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.106361][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.132617][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.154072][ T987] bridge_slave_1: left allmulticast mode [ 343.160470][ T987] bridge_slave_1: left promiscuous mode [ 343.186082][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.235956][ T987] bridge_slave_0: left allmulticast mode [ 343.250808][ T987] bridge_slave_0: left promiscuous mode [ 343.270868][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.338576][ T987] veth1_macvtap: left promiscuous mode [ 343.346294][ T987] veth0_macvtap: left promiscuous mode [ 343.362782][ T987] veth1_vlan: left promiscuous mode [ 343.371302][ T987] veth0_vlan: left promiscuous mode [ 343.639107][ T987] bond5 (unregistering): (slave geneve2): Releasing active interface [ 343.648626][ T987] geneve2 (unregistering): left allmulticast mode [ 343.872536][ T5783] Bluetooth: hci2: command tx timeout [ 343.917193][ T987] bond5 (unregistering): Released all slaves [ 343.974928][ T987] bond4 (unregistering): (slave veth5): Releasing active interface [ 344.204850][ T987] bond4 (unregistering): Released all slaves [ 344.338267][ T987] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 344.420460][ T987] bond3 (unregistering): Released all slaves [ 344.470833][ T987] bond2 (unregistering): (slave batadv1): Releasing active interface [ 344.492417][ T987] batadv1 (unregistering): left promiscuous mode [ 344.647012][ T9668] loop2: detected capacity change from 0 to 512 [ 344.696129][ T9668] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 344.711558][ T9668] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 344.723656][ T9668] System zones: 0-1, 15-15, 18-18, 34-34 [ 344.730793][ T9668] EXT4-fs (loop2): orphan cleanup on readonly fs [ 344.741530][ T9668] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 344.752307][ T9668] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 344.768697][ T9668] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 344.804251][ T9668] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1240: bg 0: block 40: padding at end of block bitmap is not set [ 344.862285][ T9668] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 344.879360][ T9668] EXT4-fs (loop2): 1 truncate cleaned up [ 344.889112][ T9668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.960372][ T987] bond2 (unregistering): Released all slaves [ 344.969631][ T9668] EXT4-fs (loop2): shut down requested (1) [ 345.022765][ T987] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 345.034469][ T987] bridge2 (unregistering): left allmulticast mode [ 345.093183][ T987] bond1 (unregistering): Released all slaves [ 345.369753][ T9668] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.195653][ T987] team0 (unregistering): Port device team_slave_1 removed [ 346.270597][ T987] team0 (unregistering): Port device team_slave_0 removed [ 346.367138][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.435171][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.278029][ T987] bond0 (unregistering): (slave team0): Releasing backup interface [ 347.338763][ T987] bond0 (unregistering): Released all slaves [ 347.703825][ T9555] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.711035][ T9555] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.785498][ T9555] bridge_slave_0: entered allmulticast mode [ 347.824866][ T9555] bridge_slave_0: entered promiscuous mode [ 347.859708][ T9555] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.890230][ T9555] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.924684][ T9555] bridge_slave_1: entered allmulticast mode [ 347.952461][ T9555] bridge_slave_1: entered promiscuous mode [ 348.108679][ T9555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.156997][ T9555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.305912][ T9495] veth0_vlan: entered promiscuous mode [ 348.479993][ T9555] team0: Port device team_slave_0 added [ 348.526321][ T9495] veth1_vlan: entered promiscuous mode [ 348.561464][ T9555] team0: Port device team_slave_1 added [ 348.662883][ T9700] loop2: detected capacity change from 0 to 8 [ 348.815920][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.842467][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.931718][ T9555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.996424][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.042298][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.132538][ T9555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.229126][ T9495] veth0_macvtap: entered promiscuous mode [ 349.356846][ T9495] veth1_macvtap: entered promiscuous mode [ 349.400380][ T9555] hsr_slave_0: entered promiscuous mode [ 349.424365][ T9555] hsr_slave_1: entered promiscuous mode [ 349.450538][ T9555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.470597][ T9555] Cannot create hsr debugfs directory [ 349.571173][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.598037][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.606880][ T5812] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 349.617449][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.635797][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.648042][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.716853][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.748679][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.761614][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.783091][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.805598][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.903003][ T5812] usb 3-1: Using ep0 maxpacket: 8 [ 349.914516][ T9495] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.936756][ T9495] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.946746][ T5812] usb 3-1: config 0 has no interfaces? [ 349.955205][ T5812] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 349.962771][ T9495] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.968980][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.991615][ T5812] usb 3-1: config 0 descriptor?? [ 349.993620][ T9495] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.263895][ T5812] usb 3-1: USB disconnect, device number 7 [ 350.343778][ T9717] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1248'. [ 350.898369][ T8947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.935608][ T8947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.951995][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.022383][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.160329][ T9555] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 351.295000][ T9555] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 351.369178][ T9555] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 351.454494][ T9555] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 351.830475][ T9742] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1196'. [ 352.058071][ T9555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.135820][ T9555] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.192007][ T8943] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.199279][ T8943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.222039][ T9749] loop5: detected capacity change from 0 to 1024 [ 352.292461][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.299758][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.334741][ T9749] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 352.401106][ T9749] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 352.444207][ T9749] JBD2: no valid journal superblock found [ 352.477388][ T9749] EXT4-fs (loop5): Could not load journal inode [ 353.761169][ T9555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.095924][ T9788] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 354.228255][ T9792] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 354.680294][ T9804] loop2: detected capacity change from 0 to 256 [ 354.694955][ T9804] exfat: Bad value for 'uid' [ 355.151974][ T9555] veth0_vlan: entered promiscuous mode [ 355.191078][ T9555] veth1_vlan: entered promiscuous mode [ 355.331588][ T9555] veth0_macvtap: entered promiscuous mode [ 355.388580][ T9555] veth1_macvtap: entered promiscuous mode [ 355.486293][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.543402][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.621886][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.646057][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.679091][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.717271][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.755361][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.817987][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.863112][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.897943][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.952491][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.982594][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.023166][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.093826][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.164544][ T9555] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.202489][ T9555] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.211313][ T9555] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.282486][ T9555] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.251058][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.504626][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.712734][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.748123][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.292188][ T28] audit: type=1326 audit(1788205710.431:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.2.1270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 358.436474][ T28] audit: type=1326 audit(1788205710.451:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.2.1270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 358.548569][ T28] audit: type=1326 audit(1788205710.451:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.2.1270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 358.654513][ T28] audit: type=1326 audit(1788205710.471:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.2.1270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 358.770248][ T28] audit: type=1326 audit(1788205710.521:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.2.1270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 358.900243][ T28] audit: type=1326 audit(1788205710.521:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.2.1270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 359.020899][ T28] audit: type=1326 audit(1788205710.521:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.2.1270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 359.121460][ T28] audit: type=1326 audit(1788205710.521:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.2.1270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 359.297646][ T28] audit: type=1326 audit(1788205710.521:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.2.1270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 359.392900][ T28] audit: type=1326 audit(1788205710.521:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.2.1270" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fde97f9e159 code=0x7ffc0000 [ 359.450327][ T9867] loop5: detected capacity change from 0 to 256 [ 359.526297][ T9867] exfat: Bad value for 'uid' [ 359.633606][ T5767] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 362.736549][ T9918] Bluetooth: MGMT ver 1.22 [ 362.772479][ T9918] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 365.649982][ T9965] fuse: Bad value for 'fd' [ 367.344377][ T9987] netlink: 'syz.3.1298': attribute type 10 has an invalid length. [ 367.454158][ T9987] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 367.477222][ T9987] team0: Failed to send options change via netlink (err -105) [ 367.486366][ T9987] team0: Port device netdevsim0 added [ 367.623910][ T9995] netlink: 'syz.6.1301': attribute type 1 has an invalid length. [ 367.633753][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1301'. [ 367.650851][ T9995] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 367.726610][ T9997] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1301'. [ 368.036976][T10003] loop2: detected capacity change from 0 to 64 [ 368.218250][T10002] lo speed is unknown, defaulting to 1000 [ 368.663122][T10003] overlayfs: upper fs needs to support d_type. [ 369.410403][T10027] syz_tun: entered allmulticast mode [ 369.471403][T10026] syz_tun: left allmulticast mode [ 370.311244][T10042] xt_TCPMSS: Only works on TCP SYN packets [ 370.844032][T10054] loop2: detected capacity change from 0 to 512 [ 370.892840][T10054] EXT4-fs: Ignoring removed mblk_io_submit option [ 370.991960][T10057] loop5: detected capacity change from 0 to 128 [ 371.040055][T10054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.153965][T10057] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 371.194892][T10054] ext4 filesystem being mounted at /358/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.334954][T10057] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.666371][T10067] loop6: detected capacity change from 0 to 512 [ 371.705424][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.735294][T10067] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 371.882584][T10067] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended [ 371.953753][T10067] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1321: inode #15: comm syz.6.1321: iget: illegal inode # [ 372.016835][T10067] EXT4-fs (loop6): Remounting filesystem read-only [ 372.063850][T10067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.202342][T10078] netlink: 'syz.3.1324': attribute type 39 has an invalid length. [ 372.286521][ T9555] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.433852][T10083] syzkaller0: entered promiscuous mode [ 372.439407][T10083] syzkaller0: entered allmulticast mode [ 373.068485][T10093] syzkaller0: entered promiscuous mode [ 373.084461][T10093] syzkaller0: entered allmulticast mode [ 373.199891][T10101] loop2: detected capacity change from 0 to 512 [ 373.280959][T10101] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1331: iget: bad i_size value: 38620345925642 [ 373.340197][T10101] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1331: couldn't read orphan inode 15 (err -117) [ 373.436890][T10101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.580946][T10099] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1331'. [ 373.722528][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.743610][ T7723] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 373.968302][ T7723] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 373.984523][ T7723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.012407][ T7723] usb 6-1: Product: syz [ 374.040420][ T7723] usb 6-1: Manufacturer: syz [ 374.068825][ T7723] usb 6-1: SerialNumber: syz [ 374.362623][ T7723] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 374.401167][ T7723] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 374.789229][T10131] loop2: detected capacity change from 0 to 128 [ 375.428708][T10131] syz.2.1341: attempt to access beyond end of device [ 375.428708][T10131] loop2: rw=2049, sector=369, nr_sectors = 16 limit=128 [ 375.470558][T10131] syz.2.1341: attempt to access beyond end of device [ 375.470558][T10131] loop2: rw=2049, sector=401, nr_sectors = 16 limit=128 [ 375.624308][T10131] syz.2.1341: attempt to access beyond end of device [ 375.624308][T10131] loop2: rw=2049, sector=481, nr_sectors = 56 limit=128 [ 375.638549][T10131] syz.2.1341: attempt to access beyond end of device [ 375.638549][T10131] loop2: rw=2049, sector=553, nr_sectors = 24 limit=128 [ 375.662040][T10131] syz.2.1341: attempt to access beyond end of device [ 375.662040][T10131] loop2: rw=2049, sector=593, nr_sectors = 16 limit=128 [ 375.689279][ T7723] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 375.712972][T10131] syz.2.1341: attempt to access beyond end of device [ 375.712972][T10131] loop2: rw=2049, sector=617, nr_sectors = 32 limit=128 [ 375.792124][T10146] CIFS mount error: No usable UNC path provided in device string! [ 375.792124][T10146] [ 375.804925][T10146] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 375.851559][T10131] syz.2.1341: attempt to access beyond end of device [ 375.851559][T10131] loop2: rw=2049, sector=665, nr_sectors = 16 limit=128 [ 376.283287][T10131] syz.2.1341: attempt to access beyond end of device [ 376.283287][T10131] loop2: rw=2049, sector=689, nr_sectors = 24 limit=128 [ 376.359921][ T7723] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 376.372182][ T7723] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 376.393282][ T7723] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 376.412975][ T7723] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 376.470992][ T7723] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 376.538339][ T7723] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 376.579769][ T8941] kworker/u4:13: attempt to access beyond end of device [ 376.579769][ T8941] loop2: rw=1, sector=145, nr_sectors = 224 limit=128 [ 376.604017][ T7723] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 376.627289][ T8941] kworker/u4:13: attempt to access beyond end of device [ 376.627289][ T8941] loop2: rw=1, sector=385, nr_sectors = 16 limit=128 [ 376.647838][ T7723] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 376.670502][ T7723] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 376.727358][ T7723] lan78xx: probe of 6-1:1.0 failed with error -71 [ 376.787220][ T7723] usb 6-1: USB disconnect, device number 2 [ 376.969790][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 377.074879][T10158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.488220][T10170] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 377.652640][T10167] kvm: emulating exchange as write [ 378.277497][ T7723] smpboot: CPU 1 is now offline [ 378.606499][T10182] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 379.068335][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.074792][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.822151][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1353'. [ 383.205906][T10227] bridge_slave_0: left allmulticast mode [ 383.286474][T10227] bridge_slave_0: left promiscuous mode [ 383.333945][T10227] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.438057][T10227] bridge_slave_1: left allmulticast mode [ 383.483788][T10227] bridge_slave_1: left promiscuous mode [ 383.519625][T10227] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.606645][T10227] bond0: (slave bond_slave_0): Releasing backup interface [ 383.754515][T10227] bond0: (slave bond_slave_1): Releasing backup interface [ 384.076532][T10227] team0: Port device team_slave_0 removed [ 384.243577][T10227] team0: Port device team_slave_1 removed [ 384.295173][T10227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.353231][T10227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.413149][T10242] loop2: detected capacity change from 0 to 4096 [ 384.437617][T10227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.489046][T10227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.685232][T10231] team0: Mode changed to "activebackup" [ 384.799187][T10242] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 385.071077][T10242] ntfs3: loop2: Failed to load $Extend (-22). [ 385.123484][T10242] ntfs3: loop2: Failed to initialize $Extend. [ 385.744647][T10262] netlink: 'syz.3.1364': attribute type 1 has an invalid length. [ 386.280981][T10267] bond5: (slave gretap2): making interface the new active one [ 386.406059][T10267] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 387.177850][T10289] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1370'. [ 388.326554][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1376'. [ 388.743363][T10315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.920910][T10323] macvlan2: entered promiscuous mode [ 389.086114][T10323] macvlan2: entered allmulticast mode [ 389.136576][T10323] bond1: entered allmulticast mode [ 389.237808][T10323] bond1: entered promiscuous mode [ 389.336001][T10323] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 389.487011][T10323] team0: Port device macvlan2 added [ 389.832856][T10345] netlink: 'syz.6.1380': attribute type 12 has an invalid length. [ 389.917771][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1380'. [ 393.731866][ T3516] tipc: Subscription rejected, illegal request [ 397.746824][T10458] loop5: detected capacity change from 0 to 512 [ 397.802764][T10458] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 397.933454][T10458] EXT4-fs (loop5): 1 truncate cleaned up [ 397.997586][T10458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.559802][ T9495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.292120][T10485] netlink: 'syz.3.1409': attribute type 7 has an invalid length. [ 400.359127][T10485] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.377367][T10485] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.388606][T10485] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.401073][T10485] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.467907][T10485] netlink: 'syz.3.1409': attribute type 7 has an invalid length. [ 400.485598][T10485] netlink: 'syz.3.1409': attribute type 7 has an invalid length. [ 402.013385][T10495] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 405.213897][T10503] netlink: 'syz.6.1415': attribute type 11 has an invalid length. [ 406.094160][T10519] kvm: pic: non byte read [ 406.099818][T10519] kvm: pic: non byte read [ 406.154270][T10519] kvm: pic: non byte read [ 406.193806][T10519] kvm: pic: non byte read [ 406.224099][T10519] kvm: pic: non byte read [ 406.261265][T10519] kvm: pic: non byte read [ 406.290398][T10519] kvm: pic: non byte read [ 406.325111][T10519] kvm: pic: non byte read [ 406.353137][T10519] kvm: pic: non byte read [ 406.370313][T10519] kvm: pic: non byte read [ 413.886956][T10593] loop5: detected capacity change from 0 to 512 [ 413.933123][T10593] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 414.055336][T10593] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 414.186472][T10593] EXT4-fs (loop5): 1 truncate cleaned up [ 414.236059][T10593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.035131][ T9495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.872024][T10579] udevd[10579]: symlink '../../loop5' '/dev/disk/by-diskseq/203.tmp-b7:5' failed: Read-only file system [ 416.608940][T10579] udevd[10579]: symlink '../../loop5' '/dev/disk/by-diskseq/203.tmp-b7:5' failed: Read-only file system [ 416.876749][T10626] udevd[10626]: symlink '../../loop5' '/dev/disk/by-diskseq/203.tmp-b7:5' failed: Read-only file system [ 419.252168][ T5814] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 419.347798][ T5814] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 420.748951][T10626] udevd[10626]: symlink '../../loop5' '/dev/disk/by-diskseq/203.tmp-b7:5' failed: Read-only file system [ 422.057557][T10626] udevd[10626]: symlink '../../loop5' '/dev/disk/by-diskseq/203.tmp-b7:5' failed: Read-only file system [ 422.157657][T10646] Invalid ELF header magic: != ELF [ 422.683445][T10626] udevd[10626]: symlink '../../loop5' '/dev/disk/by-diskseq/203.tmp-b7:5' failed: Read-only file system [ 423.352452][ T5814] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 423.588208][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/203.tmp-b7:5' failed: Read-only file system [ 423.669269][ T5814] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.724824][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 423.724842][ T28] audit: type=1326 audit(1788205775.871:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.3.1471" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 423.778151][ T5814] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.819102][ T28] audit: type=1326 audit(1788205775.871:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.3.1471" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 423.857657][ T28] audit: type=1326 audit(1788205775.901:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.3.1471" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 423.884265][ T5814] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 423.909932][ T28] audit: type=1326 audit(1788205775.901:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.3.1471" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 423.934520][ T28] audit: type=1326 audit(1788205775.931:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.3.1471" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 423.961343][ T28] audit: type=1326 audit(1788205775.931:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.3.1471" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 423.986021][ T28] audit: type=1326 audit(1788205775.931:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.3.1471" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 424.025362][ T28] audit: type=1326 audit(1788205775.951:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.3.1471" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 424.060473][ T28] audit: type=1326 audit(1788205775.951:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.3.1471" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 424.094796][ T5814] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 424.104651][ T28] audit: type=1326 audit(1788205775.951:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10665 comm="syz.3.1471" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 424.324764][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.415760][ T5814] usb 7-1: config 0 descriptor?? [ 424.704987][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/203.tmp-b7:5' failed: Read-only file system [ 424.954007][T10672] futex_wake_op: syz.5.1473 tries to shift op by 144; fix this program [ 425.033473][ T5814] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 425.042111][ T5814] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 425.146970][ T5814] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 425.214298][ T5814] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 425.274322][ T5814] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 425.330258][ T5814] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 425.393537][ T5814] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 425.449562][ T5814] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 425.568297][ T5814] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 425.689098][ T5814] usb 7-1: USB disconnect, device number 2 [ 426.174203][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/203.tmp-b7:5' failed: Read-only file system [ 426.591806][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/203.tmp-b7:5' failed: Read-only file system [ 426.875422][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 427.130929][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/203.tmp-b7:5' failed: Read-only file system [ 427.615854][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/203.tmp-b7:5' failed: Read-only file system [ 431.574409][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/203.tmp-b7:5' failed: Read-only file system [ 433.356465][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 433.356483][ T28] audit: type=1326 audit(1788205785.501:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10734 comm="syz.3.1496" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 433.407706][ T28] audit: type=1326 audit(1788205785.501:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10734 comm="syz.3.1496" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 433.443746][ T28] audit: type=1326 audit(1788205785.591:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10734 comm="syz.3.1496" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 433.501421][ T28] audit: type=1326 audit(1788205785.591:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10734 comm="syz.3.1496" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 433.539285][ T28] audit: type=1326 audit(1788205785.601:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10734 comm="syz.3.1496" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 433.577611][ T28] audit: type=1326 audit(1788205785.621:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10734 comm="syz.3.1496" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 433.614958][ T28] audit: type=1326 audit(1788205785.621:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10734 comm="syz.3.1496" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 433.654910][ T28] audit: type=1326 audit(1788205785.641:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10734 comm="syz.3.1496" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 433.698593][ T28] audit: type=1326 audit(1788205785.641:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10734 comm="syz.3.1496" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 433.738601][ T28] audit: type=1326 audit(1788205785.641:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10734 comm="syz.3.1496" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511e79e159 code=0x7ffc0000 [ 433.952955][ T7723] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 434.176670][ T7723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.224579][ T7723] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 434.292356][ T7723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.344139][ T7723] usb 7-1: config 0 descriptor?? [ 434.685814][ T7723] usbhid 7-1:0.0: can't add hid device: -71 [ 434.732583][ T7723] usbhid: probe of 7-1:0.0 failed with error -71 [ 434.791016][ T7723] usb 7-1: USB disconnect, device number 3 [ 435.442770][ T7723] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 435.624846][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/203.tmp-b7:5' failed: Read-only file system [ 435.675048][ T7723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.712484][ T7723] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 435.762454][ T7723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.799732][T10759] loop5: detected capacity change from 0 to 256 [ 435.824696][ T7723] usb 7-1: config 0 descriptor?? [ 435.918823][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/204.tmp-b7:5' failed: Read-only file system [ 435.931742][T10759] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 435.952143][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 436.055136][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/204.tmp-b7:5' failed: Read-only file system [ 436.077181][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 436.293412][ T7723] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 436.399163][ T7723] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0005/input/input6 [ 436.477979][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/204.tmp-b7:5' failed: Read-only file system [ 436.507144][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 436.803607][ T7723] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 436.866939][T10759] bio_check_eod: 6 callbacks suppressed [ 436.866979][T10759] syz.5.1504: attempt to access beyond end of device [ 436.866979][T10759] loop5: rw=0, sector=184, nr_sectors = 4031 limit=256 [ 436.931164][ T7723] usb 7-1: USB disconnect, device number 4 [ 436.966072][T10763] fido_id[10763]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 437.102740][T10759] syz.5.1504: attempt to access beyond end of device [ 437.102740][T10759] loop5: rw=0, sector=4215, nr_sectors = 64 limit=256 [ 437.440262][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/204.tmp-b7:5' failed: Read-only file system [ 437.484993][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/204.tmp-b7:5' failed: Read-only file system [ 438.654621][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/205.tmp-b7:5' failed: Read-only file system [ 438.763698][T10778] netlink: 'syz.5.1508': attribute type 4 has an invalid length. [ 438.893424][T10779] netlink: 'syz.5.1508': attribute type 4 has an invalid length. [ 439.895210][T10795] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 439.921483][T10797] loop5: detected capacity change from 0 to 8 [ 440.143554][T10795] bond3: entered allmulticast mode [ 440.238817][T10799] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 440.320753][T10799] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 440.440963][T10799] bond3: (slave vti0): making interface the new active one [ 440.512854][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.519659][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.563007][T10799] vti0: entered allmulticast mode [ 440.608271][T10799] bond3: (slave vti0): Enslaving as an active interface with an up link [ 440.636733][T10811] loop6: detected capacity change from 0 to 2048 [ 440.716492][T10801] bond3 (unregistering): (slave vti0): Releasing backup interface [ 440.771188][T10662] udevd[10662]: symlink '../../loop6' '/dev/disk/by-diskseq/208.tmp-b7:6' failed: Read-only file system [ 440.811232][T10801] vti0: left allmulticast mode [ 440.899695][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/207.tmp-b7:5' failed: Read-only file system [ 440.913035][T10801] bond3 (unregistering): Released all slaves [ 442.660067][T10662] udevd[10662]: symlink '../../loop6' '/dev/disk/by-diskseq/208.tmp-b7:6' failed: Read-only file system [ 442.708397][T10662] udevd[10662]: symlink '../../loop6' '/dev/disk/by-diskseq/208.tmp-b7:6' failed: Read-only file system [ 442.785804][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1523'. [ 443.060733][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 443.060750][ T28] audit: type=1804 audit(1788205795.201:373): pid=10832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1525" name="bus" dev="ramfs" ino=27814 res=1 errno=0 [ 443.107425][ T28] audit: type=1804 audit(1788205795.251:374): pid=10832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1525" name="bus" dev="ramfs" ino=27814 res=1 errno=0 [ 443.555004][T10662] udevd[10662]: symlink '../../loop6' '/dev/disk/by-diskseq/209.tmp-b7:6' failed: Read-only file system [ 443.610612][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/207.tmp-b7:5' failed: Read-only file system [ 443.930788][T10662] udevd[10662]: symlink '../../loop6' '/dev/disk/by-diskseq/209.tmp-b7:6' failed: Read-only file system [ 444.339806][T10662] udevd[10662]: symlink '../../loop5' '/dev/disk/by-diskseq/207.tmp-b7:5' failed: Read-only file system [ 448.251636][T10857] udevd[10857]: symlink '../../loop6' '/dev/disk/by-diskseq/209.tmp-b7:6' failed: Read-only file system [ 448.326206][T10858] udevd[10858]: symlink '../../loop5' '/dev/disk/by-diskseq/207.tmp-b7:5' failed: Read-only file system [ 448.870742][T10858] udevd[10858]: symlink '../../loop6' '/dev/disk/by-diskseq/209.tmp-b7:6' failed: Read-only file system [ 448.962020][T10866] loop2: detected capacity change from 0 to 2048 [ 449.037227][T10868] syz_tun: entered allmulticast mode [ 449.085336][T10858] udevd[10858]: symlink '../../loop2' '/dev/disk/by-diskseq/210.tmp-b7:2' failed: Read-only file system [ 449.108846][T10858] udevd[10858]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 449.183994][T10858] udevd[10858]: symlink '../../loop2' '/dev/disk/by-diskseq/210.tmp-b7:2' failed: Read-only file system [ 449.207245][T10858] udevd[10858]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 449.220892][T10866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.378624][T10858] udevd[10858]: symlink '../../loop2' '/dev/disk/by-diskseq/210.tmp-b7:2' failed: Read-only file system [ 449.404635][T10858] udevd[10858]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 449.459623][T10857] udevd[10857]: symlink '../../loop6' '/dev/disk/by-diskseq/209.tmp-b7:6' failed: Read-only file system [ 449.681287][T10866] EXT4-fs (loop2): shut down requested (1) [ 449.823743][T10876] loop6: detected capacity change from 0 to 128 [ 449.896523][T10874] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 449.907823][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.891435][T10884] Process accounting resumed [ 451.172515][ T7722] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 451.406727][ T7722] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 451.464847][ T7722] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 451.525814][ T7722] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 451.576943][ T7722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.624719][ T7722] usb 7-1: Product: syz [ 451.681304][ T7722] usb 7-1: Manufacturer: syz [ 451.707930][ T7722] usb 7-1: SerialNumber: syz [ 451.761244][ T7722] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 451.843362][ T7722] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 451.985846][ T7722] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 452.827867][T10885] Bluetooth: hci3: command 0x0406 tx timeout [ 452.873780][T10906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1547'. [ 453.065092][T10909] netlink: 1320 bytes leftover after parsing attributes in process `syz.5.1548'. [ 453.943577][T10887] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 454.037759][ T5814] usb 7-1: USB disconnect, device number 5 [ 454.104361][ T5814] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 454.195024][ T5814] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 454.286255][ T5814] ti_usb_3410_5052 7-1:2.0: device disconnected [ 456.044874][T10946] netlink: 'syz.2.1561': attribute type 1 has an invalid length. [ 456.285653][T10946] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.480411][T10952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.571970][T10952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.676538][T10952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.793811][T10952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.896181][T10952] bond3: (slave geneve2): making interface the new active one [ 456.969213][T10952] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 457.023321][T10960] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.1565'. [ 457.952440][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 461.244318][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1583'. [ 465.825560][T11041] loop2: detected capacity change from 0 to 1024 [ 465.916573][T11041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 465.957075][T11041] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.054720][ T28] audit: type=1800 audit(1788205818.201:375): pid=11041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1591" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 466.084993][ T28] audit: type=1800 audit(1788205818.231:376): pid=11041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1591" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 466.130766][T11041] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.1591: lblock 0 mapped to illegal pblock 0 (length 1) [ 466.226046][T11041] EXT4-fs (loop2): Remounting filesystem read-only [ 466.518157][T11041] lo speed is unknown, defaulting to 1000 [ 466.874734][T11051] futex_wake_op: syz.3.1593 tries to shift op by 144; fix this program [ 469.036778][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 469.488331][T11078] loop2: detected capacity change from 0 to 1764 [ 470.010248][ T28] audit: type=1326 audit(1788205822.151:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11085 comm="syz.5.1607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5460f9e159 code=0x0 [ 470.126234][T11091] tipc: Enabling of bearer rejected, failed to enable media [ 471.084043][T11103] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1612'. [ 471.210545][T11103] ip6gre1: entered promiscuous mode [ 471.255796][T11103] ip6gre1: entered allmulticast mode [ 471.401237][T11107] netlink: 'syz.5.1612': attribute type 6 has an invalid length. [ 471.482502][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1612'. [ 473.542690][T11128] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1620'. [ 474.350223][T11134] team0: Mode changed to "loadbalance" [ 475.488407][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'. [ 475.623186][T11152] bridge2: port 1(veth0_to_bond) entered blocking state [ 475.673321][T11152] bridge2: port 1(veth0_to_bond) entered disabled state [ 475.790150][T11152] veth0_to_bond: entered allmulticast mode [ 475.858964][T11152] veth0_to_bond: entered promiscuous mode [ 476.680024][T11158] bridge0: port 3(syz_tun) entered blocking state [ 476.687554][T11158] bridge0: port 3(syz_tun) entered disabled state [ 476.694841][T11158] syz_tun: entered allmulticast mode [ 476.701993][T11158] syz_tun: entered promiscuous mode [ 476.708252][T11158] bridge0: port 3(syz_tun) entered blocking state [ 476.715289][T11158] bridge0: port 3(syz_tun) entered forwarding state [ 478.283709][T11179] futex_wake_op: syz.2.1642 tries to shift op by 144; fix this program [ 478.843899][T11183] loop6: detected capacity change from 0 to 1024 [ 479.339045][ T28] audit: type=1800 audit(1788205831.481:378): pid=11172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1639" name="file2" dev="loop6" ino=5 res=0 errno=0 [ 480.664116][T11199] FAULT_INJECTION: forcing a failure. [ 480.664116][T11199] name failslab, interval 1, probability 0, space 0, times 0 [ 480.719178][T11199] CPU: 0 PID: 11199 Comm: syz.6.1649 Not tainted syzkaller #0 [ 480.726706][T11199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.736805][T11199] Call Trace: [ 480.740128][T11199] [ 480.743074][T11199] dump_stack_lvl+0x18c/0x250 [ 480.747865][T11199] ? show_regs_print_info+0x20/0x20 [ 480.753083][T11199] ? load_image+0x420/0x420 [ 480.757632][T11199] ? __might_sleep+0xe0/0xe0 [ 480.762343][T11199] ? __lock_acquire+0x7d80/0x7d80 [ 480.767475][T11199] should_fail_ex+0x394/0x4c0 [ 480.772277][T11199] should_failslab+0x9/0x20 [ 480.776883][T11199] slab_pre_alloc_hook+0x59/0x300 [ 480.782014][T11199] ? crypto_create_tfm_node+0x77/0x380 [ 480.787575][T11199] ? crypto_create_tfm_node+0x77/0x380 [ 480.793101][T11199] __kmem_cache_alloc_node+0x53/0x250 [ 480.798534][T11199] ? __lock_acquire+0x7d80/0x7d80 [ 480.803617][T11199] ? crypto_create_tfm_node+0x77/0x380 [ 480.809137][T11199] __kmalloc_node+0xa6/0x240 [ 480.813774][T11199] crypto_create_tfm_node+0x77/0x380 [ 480.819132][T11199] crypto_spawn_tfm2+0x5c/0x90 [ 480.823952][T11199] cryptd_aead_init_tfm+0x45/0xf0 [ 480.829043][T11199] crypto_create_tfm_node+0x155/0x380 [ 480.834479][T11199] ? crypto_alg_mod_lookup+0x1ad/0x570 [ 480.839992][T11199] crypto_alloc_tfm_node+0x17b/0x360 [ 480.845327][T11199] cryptd_alloc_aead+0x106/0x220 [ 480.850322][T11199] ? cryptd_free_ahash+0x90/0x90 [ 480.855305][T11199] ? __kmem_cache_alloc_node+0x194/0x250 [ 480.860964][T11199] ? crypto_create_tfm_node+0x77/0x380 [ 480.866463][T11199] ? rcu_is_watching+0x15/0xb0 [ 480.871290][T11199] simd_aead_init+0x67/0x150 [ 480.875947][T11199] crypto_create_tfm_node+0x155/0x380 [ 480.881368][T11199] ? crypto_alg_mod_lookup+0x1ad/0x570 [ 480.886876][T11199] crypto_alloc_tfm_node+0x17b/0x360 [ 480.892249][T11199] tls_set_sw_offload+0xbd9/0x1680 [ 480.897594][T11199] tls_setsockopt+0xa48/0xfc0 [ 480.902327][T11199] ? build_proto_ops+0x200/0x200 [ 480.907312][T11199] ? __fget_files+0x28/0x460 [ 480.912007][T11199] ? aa_sock_opt_perm+0x74/0x100 [ 480.916997][T11199] ? sock_common_setsockopt+0x36/0xc0 [ 480.922454][T11199] ? sock_common_recvmsg+0x190/0x190 [ 480.927783][T11199] do_sock_setsockopt+0x175/0x1a0 [ 480.932912][T11199] ? __fdget+0x180/0x210 [ 480.937204][T11199] __x64_sys_setsockopt+0x182/0x200 [ 480.942454][T11199] do_syscall_64+0x55/0xb0 [ 480.946913][T11199] ? clear_bhb_loop+0x40/0x90 [ 480.951738][T11199] ? clear_bhb_loop+0x40/0x90 [ 480.956463][T11199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.962408][T11199] RIP: 0033:0x7fa9acf9e159 [ 480.966868][T11199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.986540][T11199] RSP: 002b:00007fa9ade0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 480.995002][T11199] RAX: ffffffffffffffda RBX: 00007fa9ad225fa0 RCX: 00007fa9acf9e159 [ 481.003016][T11199] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000004 [ 481.011020][T11199] RBP: 00007fa9ad035024 R08: 0000000000000038 R09: 0000000000000000 [ 481.019032][T11199] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 481.027047][T11199] R13: 00007fa9ad226038 R14: 00007fa9ad225fa0 R15: 00007ffd3ec9a988 [ 481.035064][T11199] [ 481.185832][T11201] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1650'. [ 481.426524][T11188] bridge0: port 3(syz_tun) entered disabled state [ 481.632853][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.641129][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.386723][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.512658][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.802661][T11188] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.813354][T11188] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.823785][T11188] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.834165][T11188] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.119882][T11188] bond1: left allmulticast mode [ 485.134766][T11188] bond1: left promiscuous mode [ 485.149019][T11188] macvlan2: left promiscuous mode [ 485.163652][T11188] macvlan2: left allmulticast mode [ 485.197092][T11228] binder: BINDER_SET_CONTEXT_MGR already set [ 485.208698][T11188] ip6gre1: left promiscuous mode [ 485.219876][T11228] binder: 11227:11228 ioctl 4018620d 2000000002c0 returned -16 [ 485.233193][T11188] ip6gre1: left allmulticast mode [ 485.263439][T11190] bridge0: entered allmulticast mode [ 485.604947][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1659'. [ 486.168465][T11239] loop2: detected capacity change from 0 to 512 [ 486.682440][ T7722] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 486.887227][ T7722] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.929050][ T7722] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 486.996951][ T7722] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 487.039661][ T7722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.073570][ T7722] usb 3-1: Product: syz [ 487.094699][ T7722] usb 3-1: Manufacturer: syz [ 487.115792][ T7722] usb 3-1: SerialNumber: syz [ 487.149268][T11251] netlink: 'syz.6.1665': attribute type 10 has an invalid length. [ 487.175528][ T7722] usb-storage 3-1:1.0: USB Mass Storage device detected [ 487.216818][ T7722] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 487.279848][ T7722] scsi host1: usb-storage 3-1:1.0 [ 487.286363][T11251] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 487.339455][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1665'. [ 487.649632][T11255] bond0: (slave bridge0): Releasing backup interface [ 487.805571][T11239] tipc: Resetting bearer [ 488.037706][ T7722] usb 3-1: USB disconnect, device number 8 [ 488.072996][T11261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1668'. [ 489.193684][T11273] net_ratelimit: 2 callbacks suppressed [ 489.193735][T11273] 0: reclassify loop, rule prio 0, protocol 03 [ 491.951808][T11296] netlink: 'syz.2.1678': attribute type 1 has an invalid length. [ 492.572558][T11309] overlayfs: failed to clone upperpath [ 492.584215][T11297] 8021q: adding VLAN 0 to HW filter on device bond5 [ 492.616657][T11309] overlayfs: failed to clone upperpath [ 492.658701][T11297] bond4: (slave bond5): making interface the new active one [ 492.695613][T11297] bond4: (slave bond5): Enslaving as an active interface with an up link [ 492.849565][T11300] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 492.948431][T11303] team0: Device macvlan2 failed to change mtu [ 493.649350][ T7722] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 493.922436][ T7722] usb 3-1: Using ep0 maxpacket: 8 [ 493.943495][ T7722] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 493.966046][ T7722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.065107][ T7722] pvrusb2: Hardware description: Terratec Grabster AV400 [ 494.094727][ T7722] pvrusb2: ********** [ 494.108703][ T7722] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 494.141886][ T7722] pvrusb2: Important functionality might not be entirely working. [ 494.161367][ T7722] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 494.226633][ T7722] pvrusb2: ********** [ 494.264006][ T2325] pvrusb2: Invalid write control endpoint [ 494.457132][ T2325] pvrusb2: Invalid write control endpoint [ 494.472448][ T2325] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 494.492853][ T2325] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 494.500506][ T2325] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 494.521455][ T2325] pvrusb2: Device being rendered inoperable [ 494.548871][ T2325] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 494.571323][ T2325] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 494.592999][T11333] futex_wake_op: syz.3.1688 tries to shift op by 144; fix this program [ 494.632858][ T2325] pvrusb2: Attached sub-driver cx25840 [ 494.639274][ T2325] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 494.660484][T11316] pvrusb2: Attempted to execute control transfer when device not ok [ 494.666294][ T2325] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 495.087374][T11341] xt_HMARK: spi-set and port-set can't be combined [ 495.178054][ T28] audit: type=1326 audit(1788205847.321:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.6.1689" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9acf9e159 code=0x0 [ 495.239333][ T5764] usb 3-1: USB disconnect, device number 9 [ 495.820956][T11351] netlink: 'syz.3.1692': attribute type 10 has an invalid length. [ 495.871538][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'. [ 609.472354][ C0] ------------[ cut here ]------------ [ 609.479582][ C0] WARNING: CPU: 0 PID: 11358 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 609.490222][ C0] Modules linked in: [ 609.494148][ C0] CPU: 0 PID: 11358 Comm: syz.2.1694 Not tainted syzkaller #0 [ 609.501642][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.511733][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 609.518111][ C0] Code: ff ff ff 48 c7 c7 a0 84 33 97 be 04 00 00 00 e8 3a 21 6e 00 48 89 df b8 01 00 00 00 87 05 ac b3 c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 70 13 8d 74 47 48 c7 c0 ec bb 8c 8e 48 c1 e8 03 [ 609.537750][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 609.543840][ C0] RAX: 0000000000000000 RBX: ffffffff8d137000 RCX: ffffffff8171d0e6 [ 609.551874][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137000 [ 609.559867][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 609.567866][ C0] R10: dffffc0000000000 R11: fffffbfff2e67094 R12: 0000000000002904 [ 609.575872][ C0] R13: 1ffff92000000f94 R14: 0000000000000a02 R15: dffffc0000000000 [ 609.583949][ C0] FS: 00007fde961f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 609.592903][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.599672][ C0] CR2: 0000001b2de1eff8 CR3: 0000000060944000 CR4: 00000000003506f0 [ 609.607667][ C0] DR0: 0000000000000009 DR1: 0000000000000001 DR2: 0000000000000004 [ 609.615652][ C0] DR3: 0000000000000a7e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 609.623647][ C0] Call Trace: [ 609.626944][ C0] [ 609.629808][ C0] rcu_core+0x5ec/0x17f0 [ 609.634077][ C0] ? xfrm_dev_backlog+0x24c/0x3c0 [ 609.639202][ C0] ? xfrm_dev_resume+0x560/0x560 [ 609.644181][ C0] ? net_tx_action+0x5ec/0x950 [ 609.649036][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 609.654283][ C0] ? net_tx_action+0x5ec/0x950 [ 609.659083][ C0] ? net_tx_action+0x5ec/0x950 [ 609.663884][ C0] ? net_tx_action+0x8ed/0x950 [ 609.668670][ C0] ? net_tx_action+0x5ec/0x950 [ 609.673453][ C0] ? process_backlog+0x710/0x710 [ 609.678405][ C0] ? lock_chain_count+0x20/0x20 [ 609.683301][ C0] handle_softirqs+0x27d/0x820 [ 609.688110][ C0] ? read_tsc+0x9/0x20 [ 609.692249][ C0] ? ktime_get+0x24b/0x280 [ 609.696757][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 609.701555][ C0] ? do_softirq+0x1a0/0x1a0 [ 609.706094][ C0] __irq_exit_rcu+0xd3/0x190 [ 609.710845][ C0] ? irq_exit_rcu+0x20/0x20 [ 609.715417][ C0] irq_exit_rcu+0x9/0x20 [ 609.719685][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 609.725897][ C0] [ 609.728864][ C0] [ 609.731823][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 609.737859][ C0] RIP: 0010:mas_find_setup+0x4f6/0x590 [ 609.743383][ C0] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 12 37 63 f7 48 8b 1b 48 89 df 4c 89 ee e8 44 bb 0a f7 4c 39 eb 0f 94 c0 48 83 c4 18 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1a b9 0a f7 e9 74 ff ff ff e8 [ 609.763037][ C0] RSP: 0018:ffffc9000429fce0 EFLAGS: 00000292 [ 609.769224][ C0] RAX: ffffffff8a7cb400 RBX: 00007fde961f7fff RCX: ffff888028041e00 [ 609.777222][ C0] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: 00007fde961f7fff [ 609.785226][ C0] RBP: dffffc0000000000 R08: ffff888028041e00 R09: 0000000000000003 [ 609.793221][ C0] R10: 0000000000000002 R11: 0000000000000002 R12: ffff888025a3aa0c [ 609.801231][ C0] R13: ffffffffffffffff R14: 1ffff92000853fb3 R15: ffffc9000429fd98 [ 609.809250][ C0] ? mas_find+0x40/0x90 [ 609.813467][ C0] mas_find+0x3a/0x90 [ 609.817475][ C0] ksm_disable_merge_any+0x167/0x200 [ 609.822857][ C0] ? mmap_write_lock_killable+0x1d/0x70 [ 609.828460][ C0] ? ksm_enable_merge_any+0x250/0x250 [ 609.833882][ C0] __se_sys_prctl+0x1288/0x1510 [ 609.838781][ C0] ? __x64_sys_prctl+0xc0/0xc0 [ 609.843694][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 609.848948][ C0] ? __x64_sys_prctl+0x20/0xc0 [ 609.853757][ C0] do_syscall_64+0x55/0xb0 [ 609.858189][ C0] ? clear_bhb_loop+0x40/0x90 [ 609.862885][ C0] ? clear_bhb_loop+0x40/0x90 [ 609.867608][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.873564][ C0] RIP: 0033:0x7fde97f9e159 [ 609.878004][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.897631][ C0] RSP: 002b:00007fde961f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 609.906059][ C0] RAX: ffffffffffffffda RBX: 00007fde98225fa0 RCX: 00007fde97f9e159 [ 609.914046][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 609.922053][ C0] RBP: 00007fde98035024 R08: 0000000000000000 R09: 0000000000000000 [ 609.930042][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.938025][ C0] R13: 00007fde98226038 R14: 00007fde98225fa0 R15: 00007ffe3f0e1808 [ 609.946021][ C0] [ 609.949061][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 609.956349][ C0] CPU: 0 PID: 11358 Comm: syz.2.1694 Not tainted syzkaller #0 [ 609.963811][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.973889][ C0] Call Trace: [ 609.977191][ C0] [ 609.980046][ C0] dump_stack_lvl+0x18c/0x250 [ 609.984781][ C0] ? show_regs_print_info+0x20/0x20 [ 609.990013][ C0] ? load_image+0x420/0x420 [ 609.994543][ C0] panic+0x2ca/0x720 [ 609.998466][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 610.002999][ C0] __warn+0x2e0/0x470 [ 610.006999][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 610.012764][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 610.018524][ C0] report_bug+0x2be/0x4f0 [ 610.022944][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 610.028691][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 610.034448][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 610.040203][ C0] handle_bug+0xcf/0x120 [ 610.044489][ C0] exc_invalid_op+0x1a/0x50 [ 610.049049][ C0] asm_exc_invalid_op+0x1a/0x20 [ 610.053924][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 610.060302][ C0] Code: ff ff ff 48 c7 c7 a0 84 33 97 be 04 00 00 00 e8 3a 21 6e 00 48 89 df b8 01 00 00 00 87 05 ac b3 c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 70 13 8d 74 47 48 c7 c0 ec bb 8c 8e 48 c1 e8 03 [ 610.079933][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 610.086051][ C0] RAX: 0000000000000000 RBX: ffffffff8d137000 RCX: ffffffff8171d0e6 [ 610.094053][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137000 [ 610.102045][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 610.110056][ C0] R10: dffffc0000000000 R11: fffffbfff2e67094 R12: 0000000000002904 [ 610.118061][ C0] R13: 1ffff92000000f94 R14: 0000000000000a02 R15: dffffc0000000000 [ 610.126060][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 610.131820][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 610.137567][ C0] rcu_core+0x5ec/0x17f0 [ 610.141838][ C0] ? xfrm_dev_backlog+0x24c/0x3c0 [ 610.146895][ C0] ? xfrm_dev_resume+0x560/0x560 [ 610.151861][ C0] ? net_tx_action+0x5ec/0x950 [ 610.156680][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 610.161908][ C0] ? net_tx_action+0x5ec/0x950 [ 610.166702][ C0] ? net_tx_action+0x5ec/0x950 [ 610.171519][ C0] ? net_tx_action+0x8ed/0x950 [ 610.176319][ C0] ? net_tx_action+0x5ec/0x950 [ 610.181104][ C0] ? process_backlog+0x710/0x710 [ 610.186067][ C0] ? lock_chain_count+0x20/0x20 [ 610.190942][ C0] handle_softirqs+0x27d/0x820 [ 610.195777][ C0] ? read_tsc+0x9/0x20 [ 610.200321][ C0] ? ktime_get+0x24b/0x280 [ 610.204764][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 610.209564][ C0] ? do_softirq+0x1a0/0x1a0 [ 610.214112][ C0] __irq_exit_rcu+0xd3/0x190 [ 610.218717][ C0] ? irq_exit_rcu+0x20/0x20 [ 610.223241][ C0] irq_exit_rcu+0x9/0x20 [ 610.227518][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 610.233194][ C0] [ 610.236156][ C0] [ 610.239099][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 610.245134][ C0] RIP: 0010:mas_find_setup+0x4f6/0x590 [ 610.250613][ C0] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 12 37 63 f7 48 8b 1b 48 89 df 4c 89 ee e8 44 bb 0a f7 4c 39 eb 0f 94 c0 48 83 c4 18 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1a b9 0a f7 e9 74 ff ff ff e8 [ 610.270309][ C0] RSP: 0018:ffffc9000429fce0 EFLAGS: 00000292 [ 610.276416][ C0] RAX: ffffffff8a7cb400 RBX: 00007fde961f7fff RCX: ffff888028041e00 [ 610.284415][ C0] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: 00007fde961f7fff [ 610.292401][ C0] RBP: dffffc0000000000 R08: ffff888028041e00 R09: 0000000000000003 [ 610.300404][ C0] R10: 0000000000000002 R11: 0000000000000002 R12: ffff888025a3aa0c [ 610.308386][ C0] R13: ffffffffffffffff R14: 1ffff92000853fb3 R15: ffffc9000429fd98 [ 610.316378][ C0] ? mas_find+0x40/0x90 [ 610.320656][ C0] mas_find+0x3a/0x90 [ 610.324652][ C0] ksm_disable_merge_any+0x167/0x200 [ 610.329968][ C0] ? mmap_write_lock_killable+0x1d/0x70 [ 610.335552][ C0] ? ksm_enable_merge_any+0x250/0x250 [ 610.340958][ C0] __se_sys_prctl+0x1288/0x1510 [ 610.345833][ C0] ? __x64_sys_prctl+0xc0/0xc0 [ 610.350621][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 610.355866][ C0] ? __x64_sys_prctl+0x20/0xc0 [ 610.360664][ C0] do_syscall_64+0x55/0xb0 [ 610.365100][ C0] ? clear_bhb_loop+0x40/0x90 [ 610.369833][ C0] ? clear_bhb_loop+0x40/0x90 [ 610.374563][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.380566][ C0] RIP: 0033:0x7fde97f9e159 [ 610.385121][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.404761][ C0] RSP: 002b:00007fde961f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 610.413284][ C0] RAX: ffffffffffffffda RBX: 00007fde98225fa0 RCX: 00007fde97f9e159 [ 610.421269][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 610.429251][ C0] RBP: 00007fde98035024 R08: 0000000000000000 R09: 0000000000000000 [ 610.437247][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.445235][ C0] R13: 00007fde98226038 R14: 00007fde98225fa0 R15: 00007ffe3f0e1808 [ 610.453230][ C0] [ 610.456845][ C0] Kernel Offset: disabled [ 610.462056][ C0] Rebooting in 86400 seconds..