last executing test programs: 11m3.596072743s ago: executing program 4 (id=282): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x280440e, &(0x7f0000000140), 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040804) syz_open_dev$evdev(&(0x7f00000001c0), 0x400, 0x20000) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x4, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x88be, 0x8}}}}}}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x4000000000040, 0x5, 0x7, 0xffb}) 11m3.088453615s ago: executing program 4 (id=285): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10, 0x10000000}}, 0x50) setfsgid(0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x85, 0x0, &(0x7f0000000500)) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x14c98, &(0x7f0000002780)=ANY=[@ANYBLOB, @ANYRESHEX]) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf08", 0x15) 11m2.035204001s ago: executing program 4 (id=290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x92}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0xf, 0x4, 0xb7, '\x00', 0x8}, {0xff, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x7f, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x8}, {0x7, 0x3, 0x4}]}}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0x0) 11m1.352074858s ago: executing program 4 (id=297): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@data_err_ignore}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@nodelalloc}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x85b400, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) 11m0.108730359s ago: executing program 4 (id=304): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0xfffffffffffffee0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x1000, 0x9, 0x4, 0x8000, 0xfffd, 0xec, 0x3906, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x20, 0x87, 0x2, 0xfff}, 0x0}) 10m55.892827914s ago: executing program 4 (id=331): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000004200)={0x2020}, 0x2020) 10m55.270644329s ago: executing program 32 (id=331): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000004200)={0x2020}, 0x2020) 10m18.737493684s ago: executing program 2 (id=500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) 10m18.316748295s ago: executing program 2 (id=502): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), 0x0, &(0x7f0000000280)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 10m16.939107149s ago: executing program 2 (id=510): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0xee}, &(0x7f0000000480), &(0x7f0000000040), &(0x7f00000001c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x4, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x24f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x6, 0xffffffff}}], 0x1, 0x0, 0x0) 10m15.935318464s ago: executing program 2 (id=514): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 10m14.808149452s ago: executing program 2 (id=520): syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035390000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) 10m14.181155447s ago: executing program 2 (id=526): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r0, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x28}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) 10m13.623768851s ago: executing program 33 (id=526): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r0, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x28}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) 9m54.69512287s ago: executing program 3 (id=615): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x4000000000, 0x800, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m53.597268087s ago: executing program 3 (id=621): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) userfaultfd(0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x201, 0xd4, 0xc1, 0xd6, 0x20, 0x1c40, 0x534, 0x2724, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa5, 0x8, 0x80, 0xb7, "", [{{0x9, 0x4, 0xa2, 0x5, 0x0, 0x47, 0xee, 0xb9, 0x9}}]}}]}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$hid(0x6, 0xbb30abfa5dd3bc38, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 9m51.997591947s ago: executing program 3 (id=625): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x10001, 0x200, 0x4, @random="cbc75d0ece91", 'pim6reg\x00'}) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001080)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001280)={0x0, r2, "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", "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"}) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r1, &(0x7f00000042c0)={0x60, 0x0, r3, {{0x8, 0x6, 0x2e3, 0x9, 0x2553, 0x1, 0x0, 0x6}}}, 0x60) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000004340)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) read$FUSE(r5, &(0x7f0000004380)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000064c0), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000006580)={&(0x7f0000006480)={0x10, 0x0, 0x0, 0x80200800}, 0xc, &(0x7f0000006540)={&(0x7f0000006500)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000006600), r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000006c00)={@fallback=r1, 0x0, 0x1, 0x4, &(0x7f0000006b00)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000006b40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000006b80)=[0x0, 0x0], &(0x7f0000006bc0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000006c40)={@cgroup=r5, 0xffffffffffffffff, 0x1d, 0x4, 0x0, @void, @value=r5, @void, @void, r7}, 0x20) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000006e40)={&(0x7f0000006d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000006e00)={&(0x7f0000006dc0)={0x3c, 0x3e9, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x1, 0x0, r4, 0x2, 0x5, 0x6, 0x8, 0x0, 0xff}, ["", ""]}, 0x3c}}, 0x20000000) 9m51.713124524s ago: executing program 3 (id=628): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@bh}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x5f, 0x2e, 0x0, 0x30]}}, 0x0, 0x1e, 0x0, 0x1, 0x7}, 0x28) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) 9m50.66071085s ago: executing program 3 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 9m50.26611399s ago: executing program 3 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='77', 0x2) 9m35.021113527s ago: executing program 34 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='77', 0x2) 7m17.281293471s ago: executing program 1 (id=1132): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpgrp(0x0) ioperm(0x0, 0x62ee, 0x2000000000000006) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private=0xa010102}, 0x2, 0x0, 0x0, 0x1}}, 0x2e) 7m15.998528123s ago: executing program 0 (id=1134): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @private=0xa010102}, 0x3, 0x3, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000040)=0x45dd98d7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) lseek(r4, 0x800, 0x0) 7m15.823078197s ago: executing program 1 (id=1136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 7m13.521513874s ago: executing program 1 (id=1138): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f00000001c0)=0x3f3, 0x4) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) 7m10.996687717s ago: executing program 0 (id=1140): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m9.65383819s ago: executing program 0 (id=1142): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xfffffffd, 0x51}, 0x0, &(0x7f0000000000), &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000044c0), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'cgroup.typ\\\x00', 0x3a, '\x00c6Iw\x9a\x8b\x0e\x953\x02S\xb3\xb6(\xb0/V\xca\xc6\x16\x9f\xf8\x1f\x97\x9d[\x7f\xe7\xccxh\xa1\xf2\x02\xa3\xe9*e[\xe5\xc9\x9dKx0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) 7m3.2248758s ago: executing program 1 (id=1163): mknod(0x0, 0x8000, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x25) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f00000012c0)=""/102376, 0x18fe8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x2, 0x0, 0x6}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 7m2.195517885s ago: executing program 0 (id=1154): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f0000000340)="1d", 0x1, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000400), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000d00)="3e12d23d", 0x4, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) 7m0.424084189s ago: executing program 1 (id=1155): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2, 0x0, 0x300}, 0x38) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) sysfs$1(0x1, 0x0) 6m58.890753767s ago: executing program 0 (id=1158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m44.576504962s ago: executing program 35 (id=1155): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2, 0x0, 0x300}, 0x38) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) sysfs$1(0x1, 0x0) 6m43.668302494s ago: executing program 36 (id=1158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.185723391s ago: executing program 9 (id=2257): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync() ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x4, 0x0) 6.672580414s ago: executing program 9 (id=2260): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) time(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000f00)=""/102400, 0x19000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0), 0xc) 5.457837554s ago: executing program 8 (id=2263): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [], 0xa, "26716ec47a07f6f5264a85c9"}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x20000040) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000040)=""/52, &(0x7f0000000080)=0x34) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x4804) 4.132208017s ago: executing program 8 (id=2266): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/mapper/control\x00', 0x0, 0x10) ioctl(r0, 0xc138fd0f, &(0x7f0000000000)="0400000000000000") 3.875548833s ago: executing program 8 (id=2268): fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r3, &(0x7f00000004c0)='b', 0x1) 2.640109544s ago: executing program 8 (id=2272): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket(0x2a, 0x80000, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, 0x0) ppoll(&(0x7f00000003c0), 0x0, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000440)={[0x3ff]}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 2.346356201s ago: executing program 9 (id=2274): syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401111222200010000000109023e0001010080fa0904000004080662000705010200020004240100070582020002000424020007058302000200042403000705040200020004240400"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2.105379137s ago: executing program 5 (id=2278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaeae, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="0f0b", 0x2}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.836893244s ago: executing program 5 (id=2281): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0fc5:1227:b\n', 0xc) close(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040c50f2712000101020301090212000101008032090400000000000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='auto\n', 0x5) close(r2) nanosleep(&(0x7f0000000480)={0x0, 0x1dcd6500}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='on\n', 0x3) close(r3) nanosleep(&(0x7f0000000600)={0x0, 0x1dcd6500}, 0x0) 1.706114307s ago: executing program 8 (id=2283): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, 0x0) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@cpuid={0x64, 0x18, {0x1f00}}, @wrmsr={0x65, 0x20, {0x100}}], 0x38}) ioctl$KVM_RUN(r3, 0x0, 0x0) 1.552053541s ago: executing program 8 (id=2286): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400d05030100020102030109022d0001010080320904000003ff000000070581030800010705020240000007058302400000"], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000200)="0102030405060708") syz_usb_ep_write(r0, 0x83, 0x8, &(0x7f0000000200)="0102030405060708") nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.464357153s ago: executing program 7 (id=2287): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setreuid(0x0, 0xee01) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) dup3(0xffffffffffffffff, r0, 0x0) 1.310854607s ago: executing program 7 (id=2288): syz_usb_connect(0x1, 0x51, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9375, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x84, 0x3, 0x40, 0x1}}, {{0x9, 0x5, 0x1, 0x2, 0x200}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.248686658s ago: executing program 6 (id=2289): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./temp\x00', 0x1ff) write(r0, &(0x7f0000000180)="20000000000000000000000000000000000000000000000000000000000000000000000000100000", 0x28) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./temp\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/cirrus/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0000:00:02.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/bochs-drm/unbind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f00000a0000)=nil, 0x1000, 0x3, 0x11, r4, 0x0) read(r1, &(0x7f00000a0000), 0x28) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/ehci-pci/new_id\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='1013 00b8\x00', 0xa) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:02.0\x00', 0xd) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='0000:00:02.0\x00', 0xd) 877.201348ms ago: executing program 9 (id=2290): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x0, 0x0, 0x0) 748.705151ms ago: executing program 9 (id=2291): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@in_dx={0x0, 0x0, {0x123, 0x2}}, @out_dx={0x0, 0x0, {0x456, 0x4, 0xffffffff}}]}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0x0, 0x0) 664.760963ms ago: executing program 6 (id=2292): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/mapper/control\x00', 0x0, 0x10) ioctl(r0, 0xc138fd0f, &(0x7f0000000000)="0400000000000000") 627.622594ms ago: executing program 9 (id=2293): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0x1d6b\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0x0104\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./backing_file\x00', 0x42, 0x1ff) ftruncate(r2, 0x100000) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r3, &(0x7f0000001100)='./backing_file\x00', 0xe) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='dummy_udc.0\x00', 0xb) close(r4) nanosleep(&(0x7f0000001200)={0x1}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001300), 0x0, 0x2) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) r6 = syz_open_dev$sg(&(0x7f0000001400), 0x1, 0x2) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) r7 = syz_open_dev$sg(&(0x7f0000001500), 0x2, 0x2) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2) r8 = syz_open_dev$sg(&(0x7f0000001600), 0x3, 0x2) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r8, 0x2) 597.309485ms ago: executing program 5 (id=2294): mkdir(&(0x7f0000000040)='mount_dlm/mydomain\x00', 0x1ff) 519.694176ms ago: executing program 6 (id=2295): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/i2c-adapter/i2c-0/name\x00', 0x0, 0x0) read(r0, &(0x7f0000000400), 0x64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/i2c-adapter/i2c-1/name\x00', 0x0, 0x0) read(r1, &(0x7f0000000600), 0x64) 408.734489ms ago: executing program 6 (id=2296): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002}}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x99}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 408.421089ms ago: executing program 5 (id=2297): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./mysys\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='devices', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='freeze\n', 0x7) 377.75932ms ago: executing program 5 (id=2298): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setreuid(0x0, 0xee01) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) dup3(0xffffffffffffffff, r0, 0x0) 348.729851ms ago: executing program 6 (id=2299): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync() ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x4, 0x0) 247.196863ms ago: executing program 5 (id=2300): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x40, 0x403, 0xc631, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/i2c-adapter/i2c-1/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='stm32g0-typec 0x35\x00', 0x13) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/i2c-adapter/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='stm32g0-typec 0x35\x00', 0x13) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 246.496353ms ago: executing program 7 (id=2301): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x0, 0x0, 0x0) 128.806826ms ago: executing program 6 (id=2302): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500010102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], &(0x7f00000000c0)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000140)) syz_usb_control_io(r0, &(0x7f0000000200), &(0x7f0000000240)) syz_usb_control_io(r0, &(0x7f0000000300), &(0x7f0000000340)) syz_usb_control_io(r0, &(0x7f0000000400), &(0x7f0000000440)) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)) 128.594776ms ago: executing program 7 (id=2303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040aecb, &(0x7f0000000000)) 77.893557ms ago: executing program 7 (id=2304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) 0s ago: executing program 7 (id=2305): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/mapper/control\x00', 0x0, 0x10) ioctl(r0, 0xc138fd0f, &(0x7f0000000000)="0400000000000000") kernel console output (not intermixed with test programs): : -32 [ 270.643102][ T7185] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 270.686369][ T4656] usb 2-1: USB disconnect, device number 9 [ 270.731688][ T4656] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 270.842639][ T4656] spcp8x5 2-1:1.0: device disconnected [ 270.851568][ T4294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.864359][ T4294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.873708][ T4294] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.883863][ T4294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.891672][ T4294] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.899269][ T4294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.081716][ T4593] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 272.270721][ T4593] usb 7-1: Using ep0 maxpacket: 8 [ 272.280003][ T4593] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 272.289729][ T4593] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.298140][ T4593] usb 7-1: Product: syz [ 272.302829][ T4593] usb 7-1: Manufacturer: syz [ 272.307483][ T4593] usb 7-1: SerialNumber: syz [ 272.325196][ T4593] usb 7-1: config 0 descriptor?? [ 272.345511][ T4593] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 272.963146][ T4292] Bluetooth: hci4: command 0x0409 tx timeout [ 273.046683][ T7180] chnl_net:caif_netlink_parms(): no params data found [ 273.596506][ T7180] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.604710][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.613908][ T7180] device bridge_slave_0 entered promiscuous mode [ 273.624021][ T7180] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.631576][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.640314][ T7180] device bridge_slave_1 entered promiscuous mode [ 273.717742][ T7180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.733796][ T7180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.860276][ T7180] team0: Port device team_slave_0 added [ 273.872455][ T7180] team0: Port device team_slave_1 added [ 274.018327][ T7180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.025445][ T7180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.051796][ T7180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.066291][ T7180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.077258][ T7180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.129832][ T7180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.444995][ T7180] device hsr_slave_0 entered promiscuous mode [ 274.455085][ T7180] device hsr_slave_1 entered promiscuous mode [ 274.464781][ T7180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.474644][ T7180] Cannot create hsr debugfs directory [ 275.191778][ T4292] Bluetooth: hci4: command 0x041b tx timeout [ 275.198772][ T4593] gspca_sonixj: reg_w1 err -71 [ 275.260852][ T4593] sonixj: probe of 7-1:0.0 failed with error -71 [ 275.271916][ T4593] usb 7-1: USB disconnect, device number 2 [ 275.321148][ T40] device hsr_slave_0 left promiscuous mode [ 275.343364][ T40] device hsr_slave_1 left promiscuous mode [ 275.353028][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.360528][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.392348][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.418497][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.426810][ T40] device bridge_slave_1 left promiscuous mode [ 275.433234][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.444489][ T40] device bridge_slave_0 left promiscuous mode [ 275.451144][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.545427][ T40] device veth1_macvtap left promiscuous mode [ 275.565332][ T40] device veth0_macvtap left promiscuous mode [ 275.586099][ T40] device veth1_vlan left promiscuous mode [ 275.607794][ T40] device veth0_vlan left promiscuous mode [ 277.200923][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 278.266447][ T7325] overlayfs: failed to clone upperpath [ 278.584336][ T40] team0 (unregistering): Port device team_slave_1 removed [ 278.735107][ T40] team0 (unregistering): Port device team_slave_0 removed [ 278.925453][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.342626][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 279.400320][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.366033][ T40] bond0 (unregistering): Released all slaves [ 281.078399][ T7369] loop6: detected capacity change from 0 to 2048 [ 281.144835][ T7180] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 281.373429][ T7375] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.455412][ T7180] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 281.494827][ T7180] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 281.515488][ T7180] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 281.688610][ T7381] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 281.697817][ T7381] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 281.705531][ T7381] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 281.713086][ T7381] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 281.720800][ T7381] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 281.728568][ T7381] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 281.736334][ T7381] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 281.766798][ T7382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 281.859717][ T7382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 281.902978][ T7382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 281.937314][ T7180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.972199][ T7382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 282.017532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.030378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.053813][ T7382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 282.077244][ T7180] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.117904][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.132339][ T7382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 282.153391][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.161837][ T7386] loop1: detected capacity change from 0 to 2048 [ 282.181355][ T7382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 282.206138][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.213407][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.255339][ T7375] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 282.270119][ T7382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 282.270539][ T7386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.293493][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.302628][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.316973][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.321950][ T7375] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 282.346882][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.354124][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.363198][ T7382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 282.374657][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.388832][ T7382] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 282.418819][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.447145][ T7375] Remounting filesystem read-only [ 282.471975][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.521533][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.591720][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 282.633318][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 282.687777][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.726846][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 282.771556][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.819494][ T7180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.867106][ T7180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 282.928158][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 282.951904][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.987491][ T7400] device syzkaller0 entered promiscuous mode [ 284.335009][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.344884][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.377240][ T7180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.620720][ T4325] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 284.821487][ T4325] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.840451][ T4325] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.876185][ T4325] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.896733][ T4325] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.941811][ T4325] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.979916][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 285.002150][ T4325] usb 2-1: Product: syz [ 285.006454][ T4325] usb 2-1: Manufacturer: syz [ 285.055934][ T4325] cdc_wdm 2-1:1.0: skipping garbage [ 285.075042][ T4325] cdc_wdm 2-1:1.0: skipping garbage [ 285.097063][ T4325] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 285.115154][ T4325] cdc_wdm 2-1:1.0: Unknown control protocol [ 285.264404][ T7] usb 2-1: USB disconnect, device number 10 [ 285.283172][ T7461] CIFS: Attempting to mount \\127.0.0.1\share [ 285.302653][ T7461] CIFS: VFS: Error connecting to socket. Aborting operation. [ 285.310490][ T7461] CIFS: VFS: cifs_mount failed w/return code = -111 [ 285.684371][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.722654][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.797128][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.819837][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.857330][ T7180] device veth0_vlan entered promiscuous mode [ 285.864214][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 285.874579][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.889046][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.915984][ T7180] device veth1_vlan entered promiscuous mode [ 285.974417][ T7180] device veth0_macvtap entered promiscuous mode [ 286.002400][ T7180] device veth1_macvtap entered promiscuous mode [ 286.032094][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.063405][ T7] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 286.078051][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.090984][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.128658][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.176328][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.185763][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 286.189644][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 286.203599][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 286.848200][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.971094][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.990087][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.022673][ T7] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 287.071632][ T7] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 287.096705][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.107505][ T7] usb 2-1: Product: syz [ 287.119831][ T7] usb 2-1: Manufacturer: syz [ 287.164273][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 287.169700][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 287.175511][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.192132][ T7493] binder: BINDER_SET_CONTEXT_MGR already set [ 287.199044][ T7493] binder: 7492:7493 ioctl 4018620d 200000004a80 returned -16 [ 287.210723][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.244067][ T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 287.250071][ T7] cdc_wdm 2-1:1.0: Unknown control protocol [ 287.268944][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.305699][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.358058][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.381758][ T7180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.437905][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.448238][ T5731] usb 2-1: USB disconnect, device number 11 [ 287.463212][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.513682][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.545931][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.588713][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.624255][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.659417][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.680247][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.768791][ T7180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.823393][ T7180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.908613][ T7180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.928510][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 288.225835][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 288.304411][ T7180] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.321316][ T7180] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.340714][ T7180] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.359914][ T7180] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.650245][ T7515] loop1: detected capacity change from 0 to 512 [ 288.681843][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.697058][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.755725][ T26] audit: type=1800 audit(1786987786.672:18): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.776" name="addr_trtype" dev="configfs" ino=48452 res=0 errno=0 [ 288.786563][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.866788][ T7516] nvmet_rdma: enabling port 1 (127.0.0.1:44) [ 288.916008][ T26] audit: type=1800 audit(1786987786.772:19): pid=7516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.776" name="addr_adrfam" dev="configfs" ino=49570 res=0 errno=0 [ 288.940374][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.950752][ T7515] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 288.980198][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.033114][ T7515] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.777: No space for directory leaf checksum. Please run e2fsck -D. [ 289.049595][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.094008][ T26] audit: type=1800 audit(1786987786.782:20): pid=7516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.776" name="addr_traddr" dev="configfs" ino=49571 res=0 errno=0 [ 289.111158][ T7515] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.777: checksumming directory block 0 [ 289.221009][ T26] audit: type=1800 audit(1786987786.782:21): pid=7516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.776" name="addr_trsvcid" dev="configfs" ino=49572 res=0 errno=0 [ 289.247614][ T7515] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.777: No space for directory leaf checksum. Please run e2fsck -D. [ 289.332362][ T7515] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.777: checksumming directory block 0 [ 289.401531][ T7536] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.777: No space for directory leaf checksum. Please run e2fsck -D. [ 289.436806][ T7536] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.777: checksumming directory block 0 [ 289.515852][ T7540] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.777: No space for directory leaf checksum. Please run e2fsck -D. [ 289.645879][ T7540] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.777: checksumming directory block 0 [ 289.668588][ T7515] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.777: No space for directory leaf checksum. Please run e2fsck -D. [ 289.805880][ T7515] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.777: checksumming directory block 0 [ 289.840982][ T7545] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.777: No space for directory leaf checksum. Please run e2fsck -D. [ 289.886674][ T7545] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.777: checksumming directory block 0 [ 289.928994][ T7536] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.777: No space for directory leaf checksum. Please run e2fsck -D. [ 289.964710][ T7536] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.777: checksumming directory block 0 [ 290.068634][ T7515] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.777: No space for directory leaf checksum. Please run e2fsck -D. [ 290.132052][ T7515] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.777: checksumming directory block 0 [ 290.175827][ T7536] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.777: No space for directory leaf checksum. Please run e2fsck -D. [ 290.245466][ T7536] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.777: checksumming directory block 0 [ 290.503515][ T7515] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.777: No space for directory leaf checksum. Please run e2fsck -D. [ 290.520807][ T7515] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.777: checksumming directory block 0 [ 291.369689][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 292.569354][ T7589] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 294.356564][ T26] audit: type=1326 audit(1786987792.272:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.7.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3d19e0d9 code=0x7ffc0000 [ 294.400455][ T7635] loop6: detected capacity change from 0 to 1024 [ 294.454041][ T26] audit: type=1326 audit(1786987792.302:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.7.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3d19e0d9 code=0x7ffc0000 [ 294.591054][ T26] audit: type=1326 audit(1786987792.302:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.7.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3d19e0d9 code=0x7ffc0000 [ 294.712230][ T26] audit: type=1326 audit(1786987792.302:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.7.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3d19e0d9 code=0x7ffc0000 [ 294.839518][ T26] audit: type=1326 audit(1786987792.302:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.7.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7d3d19e0d9 code=0x7ffc0000 [ 294.918553][ T6997] hfsplus: request for non-existent node 33554434 in B*Tree [ 294.932661][ T7647] netlink: 'syz.7.808': attribute type 1 has an invalid length. [ 294.950852][ T26] audit: type=1326 audit(1786987792.302:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.7.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3d19e0d9 code=0x7ffc0000 [ 294.972692][ T6997] hfsplus: request for non-existent node 33554434 in B*Tree [ 295.015030][ T6997] hfsplus: b-tree write err: -5, ino 3 [ 295.088350][ T26] audit: type=1326 audit(1786987792.302:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.7.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3d19e0d9 code=0x7ffc0000 [ 295.217776][ T26] audit: type=1326 audit(1786987792.302:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.7.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3d19e0d9 code=0x7ffc0000 [ 295.320316][ T26] audit: type=1326 audit(1786987792.302:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.7.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3d19e0d9 code=0x7ffc0000 [ 295.932768][ T26] audit: type=1326 audit(1786987792.302:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.7.805" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f7d3d19e0d9 code=0x7ffc0000 [ 297.062137][ T7681] netlink: 64 bytes leftover after parsing attributes in process `syz.1.817'. [ 298.075548][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.825'. [ 298.711844][ T7705] loop7: detected capacity change from 0 to 32768 [ 301.267160][ T7736] loop1: detected capacity change from 0 to 32768 [ 301.380850][ T7736] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.832 (7736) [ 301.547716][ T7736] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 301.587131][ T7736] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 301.637757][ T7736] BTRFS info (device loop1): using free space tree [ 301.659648][ T7774] device veth0_to_batadv entered promiscuous mode [ 301.708002][ T7774] device macvlan2 entered promiscuous mode [ 301.863894][ T7736] BTRFS info (device loop1): enabling ssd optimizations [ 302.385893][ T4276] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 304.032512][ T7830] tipc: Started in network mode [ 304.037512][ T7830] tipc: Node identity 9af0e6145699, cluster identity 4711 [ 304.143106][ T7830] tipc: Enabled bearer , priority 0 [ 304.256091][ T7829] tipc: Disabling bearer [ 305.838674][ T7882] dccp_invalid_packet: pskb_may_pull failed [ 305.988997][ T7887] MTD: Couldn't look up './dev/mtdblock0': -2 [ 306.084666][ T7890] loop1: detected capacity change from 0 to 256 [ 306.190533][ T7890] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 306.639476][ T7904] loop1: detected capacity change from 0 to 2048 [ 306.717376][ T7904] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 306.735561][ T7904] ext4 filesystem being mounted at /169/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 306.815794][ T7917] loop7: detected capacity change from 0 to 256 [ 306.863473][ T7904] fs-verity: sha512 using implementation "sha512-avx2" [ 308.408768][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 309.893547][ T7984] loop7: detected capacity change from 0 to 128 [ 309.909244][ T7984] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 309.919053][ T7984] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.954901][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 309.954917][ T26] audit: type=1804 audit(1786987807.872:52): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.885" name="/newroot/22/file1/bus" dev="loop7" ino=12 res=1 errno=0 [ 310.410514][ T8004] fuse: Bad value for 'fd' [ 310.761909][ T8015] syzkaller0: create flow: hash 2515402193 index 2 [ 311.825010][ T4322] syzkaller0: tun_net_xmit 76 [ 311.830461][ T4322] syzkaller0: tun_net_xmit 48 [ 311.841676][ T8011] syzkaller0: delete flow: hash 2515402193 index 2 [ 311.859890][ T5732] syzkaller0: tun_net_xmit 76 [ 312.196137][ T7180] EXT4-fs (loop7): unmounting filesystem. [ 312.256862][ T8040] x_tables: unsorted entry at hook 3 [ 314.230256][ T8074] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 314.250632][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 314.323221][ T8081] dccp_invalid_packet: pskb_may_pull failed [ 315.672411][ T26] audit: type=1800 audit(1786987813.592:53): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.911" name="bmaControls" dev="configfs" ino=50646 res=0 errno=0 [ 317.297946][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.304575][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.677171][ T8133] dccp_invalid_packet: pskb_may_pull failed [ 318.816480][ T8129] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 318.894147][ T8137] overlayfs: failed to clone lowerpath [ 319.252666][ T26] audit: type=1326 audit(1786987817.172:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.5.925" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b25f9e0d9 code=0x7ffc0000 [ 319.365995][ T26] audit: type=1326 audit(1786987817.192:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.5.925" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b25f9e0d9 code=0x7ffc0000 [ 319.475964][ T26] audit: type=1326 audit(1786987817.192:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.5.925" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b25f9e0d9 code=0x7ffc0000 [ 319.575601][ T26] audit: type=1326 audit(1786987817.192:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.5.925" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b25f9e0d9 code=0x7ffc0000 [ 319.634832][ T26] audit: type=1326 audit(1786987817.192:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.5.925" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1b25f9e0d9 code=0x7ffc0000 [ 319.799669][ T26] audit: type=1326 audit(1786987817.192:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.5.925" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b25f9e0d9 code=0x7ffc0000 [ 319.836555][ T4292] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 319.877704][ T26] audit: type=1326 audit(1786987817.192:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.5.925" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b25f9e0d9 code=0x7ffc0000 [ 319.909022][ T26] audit: type=1326 audit(1786987817.192:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.5.925" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b25f9e0d9 code=0x7ffc0000 [ 319.970724][ T26] audit: type=1326 audit(1786987817.192:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.5.925" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b25f9e0d9 code=0x7ffc0000 [ 321.482933][ T8195] device syzkaller0 entered promiscuous mode [ 325.127888][ T8230] device syzkaller0 entered promiscuous mode [ 325.206879][ T8232] netlink: 'syz.5.950': attribute type 11 has an invalid length. [ 325.226203][ T8232] netlink: 36 bytes leftover after parsing attributes in process `syz.5.950'. [ 325.994026][ T4327] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 326.213847][ T4327] usb 2-1: Using ep0 maxpacket: 32 [ 326.237120][ T4327] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 326.277059][ T4327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.315410][ T4327] usb 2-1: config 0 descriptor?? [ 326.340060][ T4327] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 326.466092][ T8267] futex_wake_op: syz.0.958 tries to shift op by 144; fix this program [ 330.487212][ T4327] gspca_vc032x: reg_r err -110 [ 330.492402][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.532216][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.573071][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.578450][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.634001][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.681430][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.686906][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.716543][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.740765][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.746159][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.770183][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.782031][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.787406][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.797739][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.804889][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.828938][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.836468][ T4327] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.847591][ T4327] gspca_vc032x: Unknown sensor... [ 330.854145][ T4327] vc032x: probe of 2-1:0.0 failed with error -22 [ 330.873785][ T4327] usb 2-1: USB disconnect, device number 12 [ 342.623176][ T8430] loop1: detected capacity change from 0 to 2048 [ 342.631461][ T8430] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 342.666439][ T8430] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 342.722615][ T8430] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 343.345242][ T8430] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 343.360776][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 343.360793][ T26] audit: type=1800 audit(1786987841.242:83): pid=8434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.996" name="zoned" dev="configfs" ino=51077 res=0 errno=0 [ 343.472415][ T8430] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 343.501098][ T26] audit: type=1800 audit(1786987841.312:84): pid=8434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.996" name="zone_nr_conv" dev="configfs" ino=51078 res=0 errno=0 [ 343.528682][ T8430] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 343.564168][ T8430] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 343.601138][ T26] audit: type=1800 audit(1786987841.312:85): pid=8434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.996" name="power" dev="configfs" ino=51079 res=0 errno=0 [ 343.621572][ T8430] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 343.660486][ T8430] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 343.688248][ T8430] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 343.726846][ T8430] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 343.809307][ T8430] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 343.862788][ T8434] null_blk: disk nullb1 created [ 343.868798][ T8430] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 343.950661][ T8430] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 344.001607][ T8430] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 344.041803][ T8430] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 344.101196][ T8430] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 346.213085][ T8471] loop7: detected capacity change from 0 to 128 [ 346.260703][ T8471] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 54) [ 346.269376][ T8471] FAT-fs (loop7): Filesystem has been set read-only [ 346.431846][ T8480] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 346.865625][ T7180] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 54) [ 348.570694][ T5731] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 348.792564][ T5731] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.834613][ T5731] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 348.873745][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.922917][ T5731] usb 2-1: config 0 descriptor?? [ 348.971808][ T5731] pwc: Askey VC010 type 2 USB webcam detected. [ 349.336550][ T5731] pwc: recv_control_msg error -32 req 02 val 2b00 [ 349.347216][ T5731] pwc: recv_control_msg error -32 req 02 val 2700 [ 349.363127][ T5731] pwc: recv_control_msg error -32 req 02 val 2c00 [ 349.378059][ T5731] pwc: recv_control_msg error -32 req 04 val 1000 [ 349.393501][ T5731] pwc: recv_control_msg error -32 req 04 val 1300 [ 349.409053][ T5731] pwc: recv_control_msg error -32 req 04 val 1400 [ 349.425306][ T5731] pwc: recv_control_msg error -32 req 02 val 2000 [ 349.442526][ T5731] pwc: recv_control_msg error -32 req 02 val 2100 [ 349.463589][ T5731] pwc: recv_control_msg error -32 req 04 val 1500 [ 349.476157][ T5731] pwc: recv_control_msg error -32 req 02 val 2500 [ 349.492644][ T5731] pwc: recv_control_msg error -32 req 02 val 2400 [ 349.515836][ T5731] pwc: recv_control_msg error -32 req 02 val 2600 [ 349.892954][ T5731] pwc: recv_control_msg error -71 req 02 val 2800 [ 349.899968][ T5731] pwc: recv_control_msg error -71 req 04 val 1100 [ 349.907177][ T5731] pwc: recv_control_msg error -71 req 04 val 1200 [ 349.935508][ T5731] pwc: Registered as video103. [ 349.945984][ T5731] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 350.022931][ T5731] usb 2-1: USB disconnect, device number 13 [ 352.600966][ T8587] device bond_slave_0 entered promiscuous mode [ 352.608095][ T8587] device bond_slave_1 entered promiscuous mode [ 352.652475][ T8587] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 352.698788][ T8587] bond1: (slave macvlan2): making interface the new active one [ 352.731466][ T8587] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 352.851856][ T8595] Bluetooth: MGMT ver 1.22 [ 354.841241][ T5877] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 355.143233][ T5877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 355.397244][ T4294] Bluetooth: hci1: command 0x0406 tx timeout [ 355.505833][ T5877] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01 [ 355.529912][ T5877] usb 2-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 355.538103][ T5877] usb 2-1: Product: syz [ 355.542430][ T5877] usb 2-1: Manufacturer: syz [ 355.547103][ T5877] usb 2-1: SerialNumber: syz [ 356.308300][ T5877] em28xx 2-1:1.0: New device syz syz @ 480 Mbps (0ccd:0043, interface 0, class 0) [ 356.317722][ T5877] em28xx 2-1:1.0: DVB interface 0 found: bulk [ 356.614631][ T5877] em28xx 2-1:1.0: unknown em28xx chip ID (0) [ 358.599577][ T5877] em28xx 2-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 358.666371][ T5877] em28xx 2-1:1.0: board has no eeprom [ 358.800756][ T5877] em28xx 2-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44) [ 359.651970][ T5877] em28xx 2-1:1.0: dvb set to bulk mode. [ 359.667519][ T4327] em28xx 2-1:1.0: Binding DVB extension [ 359.682225][ T5877] usb 2-1: USB disconnect, device number 14 [ 359.692583][ T4327] em28xx 2-1:1.0: writing to i2c device at 0x1e failed (error=-19) [ 359.702125][ T5877] em28xx 2-1:1.0: Disconnecting em28xx [ 359.708121][ T4327] zl10353_read_register: readreg error (reg=127, ret==-19) [ 359.717379][ T4327] em28xx 2-1:1.0: frontend initialization failed [ 359.726843][ T4327] em28xx 2-1:1.0: Remote control support is not available for this card. [ 359.738111][ T5877] em28xx 2-1:1.0: Closing input extension [ 359.818076][ T5877] em28xx 2-1:1.0: Freeing device [ 365.380908][ T8731] netlink: 'syz.0.1061': attribute type 1 has an invalid length. [ 365.472818][ T8731] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.771021][ T8734] bond2: (slave veth3): Enslaving as an active interface with a down link [ 365.829071][ T8735] device bond2 entered promiscuous mode [ 367.027218][ T8731] device macvlan3 entered promiscuous mode [ 367.095874][ T8731] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 367.566052][ T8761] tipc: Started in network mode [ 367.596697][ T8761] tipc: Node identity 5e86f8d64dd6, cluster identity 4711 [ 367.637535][ T8761] tipc: Enabled bearer , priority 0 [ 367.684376][ T8762] device syzkaller0 entered promiscuous mode [ 367.895290][ T8761] tipc: Resetting bearer [ 367.932308][ T8769] tipc: Enabling of bearer rejected, failed to enable media [ 367.984820][ T8760] tipc: Resetting bearer [ 368.147989][ T8760] tipc: Disabling bearer [ 370.516086][ T8798] loop1: detected capacity change from 0 to 2048 [ 370.608053][ T8798] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.191478][ T8803] loop7: detected capacity change from 0 to 32768 [ 371.550951][ T8803] JBD2: Ignoring recovery information on journal [ 371.559377][ T8803] jbd2_journal_bmap: journal block not found at offset 32 on loop7-75 [ 371.568336][ T8803] JBD2: bad block at offset 32 [ 371.608004][ T8803] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 372.554853][ T8814] OCFS2: ERROR (device loop7): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 372.578857][ T8814] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 372.590120][ T8814] OCFS2: File system is now read-only. [ 372.596061][ T8814] (syz.7.1076,8814,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 372.606749][ T8814] (syz.7.1076,8814,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 372.615514][ T8814] (syz.7.1076,8814,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 372.624938][ T8814] (syz.7.1076,8814,1):ocfs2_block_group_alloc_contig:455 ERROR: status = -30 [ 372.634298][ T8814] (syz.7.1076,8814,1):ocfs2_block_group_alloc:727 ERROR: status = -30 [ 372.643688][ T8814] (syz.7.1076,8814,1):ocfs2_block_group_alloc:780 ERROR: status = -30 [ 372.653484][ T8814] (syz.7.1076,8814,1):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30 [ 372.662152][ T8814] (syz.7.1076,8814,1):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30 [ 372.670881][ T8814] (syz.7.1076,8814,1):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30 [ 372.680413][ T8814] (syz.7.1076,8814,1):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30 [ 372.691534][ T8814] (syz.7.1076,8814,1):ocfs2_expand_inline_dir:2840 ERROR: status = -30 [ 372.700517][ T8814] (syz.7.1076,8814,1):ocfs2_extend_dir:3204 ERROR: status = -30 [ 372.709342][ T8814] (syz.7.1076,8814,1):ocfs2_prepare_dir_for_insert:4325 ERROR: status = -30 [ 372.718591][ T8814] (syz.7.1076,8814,1):ocfs2_mknod:298 ERROR: status = -30 [ 372.726018][ T8814] (syz.7.1076,8814,1):ocfs2_mknod:502 ERROR: status = -30 [ 372.733427][ T8814] (syz.7.1076,8814,1):ocfs2_create:676 ERROR: status = -30 [ 372.811161][ T8814] syz.7.1076 (8814) used greatest stack depth: 17664 bytes left [ 373.013807][ T7180] ocfs2: Unmounting device (7,7) on (node local) [ 374.285955][ T8830] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 374.377297][ T8830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.570863][ T8878] device syzkaller0 entered promiscuous mode [ 378.724266][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.730972][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.800946][ T8970] using random self ethernet address [ 388.806961][ T8970] using random host ethernet address [ 388.818210][ T26] audit: type=1800 audit(1786987886.732:86): pid=8970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1105" name="host_addr" dev="configfs" ino=54070 res=0 errno=0 [ 391.411022][ T26] audit: type=1326 audit(1786987889.332:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.0.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4079e0d9 code=0x7fc00000 [ 391.546058][ T26] audit: type=1326 audit(1786987889.332:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.0.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f6f4079e0d9 code=0x7fc00000 [ 391.680659][ T26] audit: type=1326 audit(1786987889.332:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.0.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4079e0d9 code=0x7fc00000 [ 391.800722][ T26] audit: type=1326 audit(1786987889.332:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.0.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4079e0d9 code=0x7fc00000 [ 393.046653][ T26] audit: type=1326 audit(1786987889.332:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.0.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4079e0d9 code=0x7fc00000 [ 394.910654][ T26] audit: type=1326 audit(1786987889.332:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.0.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4079e0d9 code=0x7fc00000 [ 395.210811][ T26] audit: type=1326 audit(1786987889.332:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.0.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4079e0d9 code=0x7fc00000 [ 395.234873][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.254845][ T9026] loop7: detected capacity change from 0 to 512 [ 396.030831][ T26] audit: type=1326 audit(1786987889.332:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.0.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4079e0d9 code=0x7fc00000 [ 396.073052][ T9026] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 396.198439][ T9026] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 396.322440][ T9026] EXT4-fs (loop7): mount failed [ 396.339309][ T26] audit: type=1326 audit(1786987889.332:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.0.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4079e0d9 code=0x7fc00000 [ 396.531982][ T26] audit: type=1326 audit(1786987889.332:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.0.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4079e0d9 code=0x7fc00000 [ 396.717979][ T26] audit: type=1326 audit(1786987889.332:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.0.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4079e0d9 code=0x7fc00000 [ 396.752050][ T26] audit: type=1326 audit(1786987889.332:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.0.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4079e0d9 code=0x7fc00000 [ 396.970728][ T26] audit: type=1326 audit(1786987889.332:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.0.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4079e0d9 code=0x7fc00000 [ 397.464765][ T9056] can0: slcan on ttyS3. [ 397.481947][ T26] audit: type=1326 audit(1786987889.332:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.0.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4079e0d9 code=0x7fc00000 [ 397.506403][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.616527][ T26] audit: type=1326 audit(1786987889.332:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8971 comm="syz.0.1107" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4079e0d9 code=0x7fc00000 [ 399.723068][ T9057] can0 (unregistered): slcan off ttyS3. [ 404.634887][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1118'. [ 404.728019][ T9095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 404.772484][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1118'. [ 405.481339][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 407.071548][ T9110] trusted_key: encrypted_key: key user:syz not found [ 414.124357][ T9169] loop7: detected capacity change from 0 to 256 [ 414.230764][ T9169] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 414.330709][ T9169] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 414.380340][ T9169] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 420.385929][ T9224] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 424.924775][ T9241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1159'. [ 426.801331][ T4292] Bluetooth: hci5: command 0x1003 tx timeout [ 426.840016][ T4294] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 432.563067][ T9280] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 438.122288][ T9362] device syzkaller0 entered promiscuous mode [ 438.306643][ T9363] tipc: Enabled bearer , priority 0 [ 438.584515][ T9362] tipc: Resetting bearer [ 438.672435][ T9359] tipc: Resetting bearer [ 438.961756][ T9359] tipc: Disabling bearer [ 439.543878][ T9387] loop7: detected capacity change from 0 to 16 [ 439.636663][ T9387] erofs: (device loop7): mounted with root inode @ nid 36. [ 440.069229][ T9393] device bridge0 entered promiscuous mode [ 440.078409][ T9393] bridge0: port 3(macsec1) entered blocking state [ 440.086360][ T9393] bridge0: port 3(macsec1) entered disabled state [ 440.911762][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.921333][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.677979][ T4292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 441.693553][ T4292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 441.708365][ T4292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 441.722114][ T4292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 441.731477][ T4292] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 441.739422][ T4292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 442.083901][ T9393] device bridge0 left promiscuous mode [ 442.250779][ T9407] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 442.266597][ T9407] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 442.276129][ T9407] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 442.293688][ T9407] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 442.301854][ T9407] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 442.310373][ T9407] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 444.437241][ T4294] Bluetooth: hci5: command 0x0409 tx timeout [ 444.561202][ T4294] Bluetooth: hci6: command 0x0409 tx timeout [ 446.469002][ T4328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.480716][ T4294] Bluetooth: hci5: command 0x041b tx timeout [ 447.520596][ T4294] Bluetooth: hci6: command 0x041b tx timeout [ 448.269052][ T4328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.580826][ T4294] Bluetooth: hci5: command 0x040f tx timeout [ 449.601295][ T4294] Bluetooth: hci6: command 0x040f tx timeout [ 449.733449][ T4328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.779433][ T9397] chnl_net:caif_netlink_parms(): no params data found [ 449.929600][ T9463] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 450.188784][ T4328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.383066][ T9403] chnl_net:caif_netlink_parms(): no params data found [ 450.640872][ T4294] Bluetooth: hci5: command 0x0419 tx timeout [ 450.990649][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.997875][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.199399][ T9397] device bridge_slave_0 entered promiscuous mode [ 451.212775][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.219961][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.720793][ T4294] Bluetooth: hci6: command 0x0419 tx timeout [ 452.563019][ T9397] device bridge_slave_1 entered promiscuous mode [ 453.789051][ T9397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.815143][ T9397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.950042][ T9403] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.957914][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.977117][ T9403] device bridge_slave_0 entered promiscuous mode [ 454.053672][ T9403] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.070892][ T9403] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.094873][ T9403] device bridge_slave_1 entered promiscuous mode [ 454.159203][ T9397] team0: Port device team_slave_0 added [ 455.352171][ T9397] team0: Port device team_slave_1 added [ 455.414881][ T9403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.449718][ T9403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.588270][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.628110][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.730814][ T9397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.798859][ T9403] team0: Port device team_slave_0 added [ 455.841546][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.848672][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.920864][ T9397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.943127][ T9403] team0: Port device team_slave_1 added [ 456.189939][ T9397] device hsr_slave_0 entered promiscuous mode [ 456.229188][ T9397] device hsr_slave_1 entered promiscuous mode [ 456.265172][ T9397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.289957][ T9397] Cannot create hsr debugfs directory [ 456.312585][ T9403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.319616][ T9403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.413371][ T9403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.569512][ T9403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.585973][ T9403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.782015][ T9403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.702410][ T9529] using random self ethernet address [ 457.707790][ T9529] using random host ethernet address [ 457.853832][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 457.853897][ T26] audit: type=1800 audit(1786987955.772:111): pid=9532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1198" name="host_addr" dev="configfs" ino=55425 res=0 errno=0 [ 457.898428][ T9403] device hsr_slave_0 entered promiscuous mode [ 457.988880][ T9403] device hsr_slave_1 entered promiscuous mode [ 458.022119][ T9403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.091199][ T9542] overlayfs: failed to clone upperpath [ 458.201196][ T9403] Cannot create hsr debugfs directory [ 458.664978][ T4328] tipc: Left network mode [ 461.954302][ T9580] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 461.963957][ T9580] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 464.445377][ T9397] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 464.478740][ T9397] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 464.514336][ T9397] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 464.544039][ T9397] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 465.140117][ T9403] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 465.341493][ T9403] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 465.364450][ T9403] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 467.436137][ T9403] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 467.518856][ T9397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.766972][ T9397] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.138316][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 469.147766][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 469.199441][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 469.231740][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 469.262078][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.269276][ T9347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.297860][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 469.322137][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 469.349608][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.356847][ T9347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.408441][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 469.469139][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 469.535461][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 469.567089][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 469.600082][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 469.629324][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 469.684403][ T4328] device hsr_slave_0 left promiscuous mode [ 469.730794][ T4328] device hsr_slave_1 left promiscuous mode [ 469.763181][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.791038][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.801715][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.809201][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.864186][ T4328] device bridge_slave_1 left promiscuous mode [ 469.881164][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.901372][ T4328] device bridge_slave_0 left promiscuous mode [ 469.908064][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.058726][ T4328] device veth1_macvtap left promiscuous mode [ 470.079137][ T4328] device veth0_macvtap left promiscuous mode [ 470.124028][ T4328] device veth1_vlan left promiscuous mode [ 470.129974][ T4328] device veth0_vlan left promiscuous mode [ 470.266224][ T9629] loop7: detected capacity change from 0 to 64 [ 470.695656][ T9629] syz.7.1208: attempt to access beyond end of device [ 470.695656][ T9629] loop7: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 470.717932][ T9629] Buffer I/O error on dev loop7, logical block 159, lost async page write [ 470.727174][ T9629] syz.7.1208: attempt to access beyond end of device [ 470.727174][ T9629] loop7: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 470.740952][ T9629] Buffer I/O error on dev loop7, logical block 160, lost async page write [ 470.750031][ T9629] syz.7.1208: attempt to access beyond end of device [ 470.750031][ T9629] loop7: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 470.763832][ T9629] Buffer I/O error on dev loop7, logical block 161, lost async page write [ 470.772869][ T9629] syz.7.1208: attempt to access beyond end of device [ 470.772869][ T9629] loop7: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 470.786629][ T9629] Buffer I/O error on dev loop7, logical block 162, lost async page write [ 470.798288][ T9629] syz.7.1208: attempt to access beyond end of device [ 470.798288][ T9629] loop7: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 470.812094][ T9629] Buffer I/O error on dev loop7, logical block 163, lost async page write [ 470.821135][ T9629] syz.7.1208: attempt to access beyond end of device [ 470.821135][ T9629] loop7: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 470.835162][ T9629] Buffer I/O error on dev loop7, logical block 167, lost async page write [ 470.844359][ T9629] syz.7.1208: attempt to access beyond end of device [ 470.844359][ T9629] loop7: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 470.859149][ T9629] Buffer I/O error on dev loop7, logical block 169, lost async page write [ 470.868177][ T9629] syz.7.1208: attempt to access beyond end of device [ 470.868177][ T9629] loop7: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 470.888438][ T9629] Buffer I/O error on dev loop7, logical block 171, lost async page write [ 470.898800][ T9629] syz.7.1208: attempt to access beyond end of device [ 470.898800][ T9629] loop7: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 470.913183][ T9629] Buffer I/O error on dev loop7, logical block 172, lost async page write [ 470.922279][ T9629] syz.7.1208: attempt to access beyond end of device [ 470.922279][ T9629] loop7: rw=2049, sector=173, nr_sectors = 1 limit=64 [ 470.935916][ T9629] Buffer I/O error on dev loop7, logical block 173, lost async page write [ 472.974571][ T9407] Bluetooth: hci4: command 0x0406 tx timeout [ 473.610769][ T9645] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1211'. [ 477.592286][ T9659] ip_tables: iptables: counters copy to user failed while replacing table [ 479.548700][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 479.791266][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 480.625618][ T9675] MTD: Couldn't look up './dev/mtdblock0': -2 [ 480.655362][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.007939][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.131531][ T4328] bond0 (unregistering): Released all slaves [ 488.441758][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 488.473855][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.509329][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 488.541787][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.560346][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.599007][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.631548][ T9397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 488.842371][ T9403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.986410][ T9403] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.039567][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 490.071082][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 490.162434][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 490.252632][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 490.281377][ T9349] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.289005][ T9349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.322520][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.381273][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.421524][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.428706][ T9349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.520942][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 490.551639][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 490.643992][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 490.687564][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 490.736223][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 490.771383][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 490.792612][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 490.815305][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 490.902111][ T9733] futex_wake_op: syz.6.1229 tries to shift op by 144; fix this program [ 490.945719][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 491.533007][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 491.632849][ T9403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.721686][ T9342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 491.749372][ T9342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.077022][ T9397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.312344][ T9342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 492.628387][ T9342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 493.130691][ T9752] input: syz0 as /devices/virtual/input/input12 [ 494.578186][ T4328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.931383][ T4328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.551451][ T9784] device wlan0 entered promiscuous mode [ 496.682950][ T4328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.763044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 496.782118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 496.816677][ T9403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.886994][ T4328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.310684][ T9825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.602464][ T9831] futex_wake_op: syz.7.1240 tries to shift op by 144; fix this program [ 499.700200][ T4294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 499.728977][ T4294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 499.739109][ T4294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 499.748518][ T4294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 499.756774][ T4294] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 499.766314][ T4294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 500.642322][ T9407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 500.662122][ T9407] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 500.673737][ T9407] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 500.681802][ T9407] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 500.691331][ T9407] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 500.701335][ T9407] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 502.090862][ T9843] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1245'. [ 502.114569][ T4294] Bluetooth: hci2: command 0x0409 tx timeout [ 502.117492][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.127824][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.800718][ T4294] Bluetooth: hci3: command 0x0409 tx timeout [ 504.180888][ T9407] Bluetooth: hci2: command 0x041b tx timeout [ 505.861237][ T9407] Bluetooth: hci3: command 0x041b tx timeout [ 506.241419][ T4294] Bluetooth: hci2: command 0x040f tx timeout [ 506.598805][ T9829] chnl_net:caif_netlink_parms(): no params data found [ 507.246261][ T9829] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.280433][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.148018][ T4294] Bluetooth: hci3: command 0x040f tx timeout [ 509.154283][ T4294] Bluetooth: hci2: command 0x0419 tx timeout [ 509.364486][ T9829] device bridge_slave_0 entered promiscuous mode [ 509.417305][ T9837] chnl_net:caif_netlink_parms(): no params data found [ 510.281527][ T9829] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.288705][ T9829] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.327085][ T9829] device bridge_slave_1 entered promiscuous mode [ 511.800600][ T9407] Bluetooth: hci3: command 0x0419 tx timeout [ 511.854055][ T9829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.987216][ T4328] device hsr_slave_0 left promiscuous mode [ 512.082576][ T4328] device hsr_slave_1 left promiscuous mode [ 512.177985][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.220360][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.238938][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.250649][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.275088][ T4328] device bridge_slave_1 left promiscuous mode [ 512.293967][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.332539][ T4328] device bridge_slave_0 left promiscuous mode [ 512.338841][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.466088][ T4328] device bond_slave_0 left promiscuous mode [ 512.473603][ T4328] device bond_slave_1 left promiscuous mode [ 512.557121][ T4328] device veth1_macvtap left promiscuous mode [ 512.569811][ T4328] device veth0_macvtap left promiscuous mode [ 512.576741][ T4328] device veth1_vlan left promiscuous mode [ 512.605012][ T4328] device veth0_vlan left promiscuous mode [ 518.407221][ T4328] bond3 (unregistering): Released all slaves [ 520.308726][ T4328] bond2 (unregistering): (slave veth3): Releasing active interface [ 520.516679][ T9939] loop7: detected capacity change from 0 to 64 [ 522.445323][ T26] audit: type=1326 audit(1786988020.292:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1267" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b25f9e0d9 code=0x7ffc0000 [ 522.510454][ T26] audit: type=1326 audit(1786988020.292:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1267" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b25f9e0d9 code=0x7ffc0000 [ 522.570644][ T26] audit: type=1326 audit(1786988020.292:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1267" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1b25f9e0d9 code=0x7ffc0000 [ 522.668261][ T26] audit: type=1326 audit(1786988020.292:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1267" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b25f9e0d9 code=0x7ffc0000 [ 522.740621][ T26] audit: type=1326 audit(1786988020.292:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1267" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b25f9e0d9 code=0x7ffc0000 [ 524.001475][ T4328] bond2 (unregistering): Released all slaves [ 524.058049][ T4328] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 524.085737][ T4328] bond1 (unregistering): Released all slaves [ 524.366929][ T9955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.108202][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 525.188825][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 525.267909][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.353020][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.362270][ T5732] infiniband syz1: ib_query_port failed (-19) [ 525.985912][ T4328] bond0 (unregistering): Released all slaves [ 526.154990][ T9829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.185711][ T4323] bond0 speed is unknown, defaulting to 1000 [ 526.259605][ T9837] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.267963][ T9837] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.276657][ T9837] device bridge_slave_0 entered promiscuous mode [ 526.303672][ T9829] team0: Port device team_slave_0 added [ 526.314076][ T9837] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.325580][ T9837] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.335284][ T9837] device bridge_slave_1 entered promiscuous mode [ 527.039672][ T9837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.053712][ T9829] team0: Port device team_slave_1 added [ 528.150900][ T9837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.272383][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.279418][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.329421][ T9829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.543153][ T9829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.550378][ T9829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.046819][ T9829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.138336][ T9837] team0: Port device team_slave_0 added [ 530.336985][ T9837] team0: Port device team_slave_1 added [ 530.474992][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.530611][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.602811][ T9837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.659392][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.671614][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.740779][ T9837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.816966][ T9829] device hsr_slave_0 entered promiscuous mode [ 530.839314][ T9829] device hsr_slave_1 entered promiscuous mode [ 530.964820][ T9837] device hsr_slave_0 entered promiscuous mode [ 530.995299][ T9837] device hsr_slave_1 entered promiscuous mode [ 531.018119][ T9837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.050568][ T9837] Cannot create hsr debugfs directory [ 532.372493][ T9996] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 533.205418][ T9999] syz.7.1281 (9999): drop_caches: 2 [ 537.870105][T10019] loop7: detected capacity change from 0 to 1024 [ 540.072776][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1291'. [ 540.178915][T10035] 9pnet_fd: Insufficient options for proto=fd [ 544.933747][T10080] 9pnet_fd: p9_fd_create_tcp (10080): problem connecting socket to 127.0.0.1 [ 547.728999][T10084] loop7: detected capacity change from 0 to 128 [ 547.781967][T10084] FAT-fs (loop7): Unrecognized mount option "184467440737095516150x000000000000000000000000000000000000" or missing value [ 550.281252][T10095] futex_wake_op: syz.6.1306 tries to shift op by 144; fix this program [ 552.098931][ T9829] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 552.144059][ T9829] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 552.181535][ T9829] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 553.100170][ T9829] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 553.813059][T10125] gfs2: not a GFS2 filesystem [ 553.846781][T10125] hpfs: Bad magic ... probably not HPFS [ 554.699632][T10132] loop7: detected capacity change from 0 to 128 [ 554.707490][T10132] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 554.733023][T10132] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 554.759718][T10132] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 554.769353][T10132] FAT-fs (loop7): Filesystem has been set read-only [ 554.814696][ T4328] device hsr_slave_0 left promiscuous mode [ 555.702466][ T4328] device hsr_slave_1 left promiscuous mode [ 555.709287][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.121441][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.972414][ T4328] device bridge_slave_1 left promiscuous mode [ 556.978853][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.203805][ T4328] device bridge_slave_0 left promiscuous mode [ 557.210205][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.290115][ T4294] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 557.301168][ T4294] CPU: 1 PID: 4294 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 557.308917][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 557.319214][ T4294] Workqueue: hci4 hci_rx_work [ 557.324235][ T4294] Call Trace: [ 557.327617][ T4294] [ 557.330690][ T4294] dump_stack_lvl+0x188/0x24e [ 557.335539][ T4294] ? show_regs_print_info+0x12/0x12 [ 557.340814][ T4294] ? load_image+0x410/0x410 [ 557.345441][ T4294] sysfs_create_dir_ns+0x26a/0x290 [ 557.350650][ T4294] ? __lock_acquire+0x7c40/0x7c40 [ 557.355775][ T4294] ? sysfs_warn_dup+0xa0/0xa0 [ 557.360523][ T4294] ? do_raw_spin_unlock+0x11d/0x230 [ 557.365789][ T4294] kobject_add_internal+0x617/0xca0 [ 557.371098][ T4294] kobject_add+0x160/0x230 [ 557.375582][ T4294] ? kobject_init+0x1c0/0x1c0 [ 557.380318][ T4294] ? __raw_spin_lock_init+0x41/0x100 [ 557.386127][ T4294] ? klist_children_get+0x50/0x50 [ 557.391374][ T4294] ? get_device_parent+0x121/0x3e0 [ 557.396525][ T4294] device_add+0x470/0x1050 [ 557.400973][ T4294] hci_conn_add_sysfs+0xd1/0x1e0 [ 557.406569][ T4294] le_conn_complete_evt+0xfac/0x15c0 [ 557.411980][ T4294] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 557.418313][ T4294] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 557.424071][ T4294] ? mutex_unlock+0x10/0x10 [ 557.428762][ T4294] ? skb_pull_data+0xec/0x1f0 [ 557.433519][ T4294] hci_le_conn_complete_evt+0x183/0x440 [ 557.439244][ T4294] ? hci_remote_host_features_evt+0x230/0x230 [ 557.445566][ T4294] hci_event_packet+0x7b3/0x1290 [ 557.450640][ T4294] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 557.456412][ T4294] ? bis_list+0x280/0x280 [ 557.460898][ T4294] ? kcov_remote_start+0x1b1/0x7e0 [ 557.466107][ T4294] ? hci_send_to_monitor+0x9c/0x4a0 [ 557.471522][ T4294] hci_rx_work+0x3eb/0xd40 [ 557.475981][ T4294] ? _raw_spin_unlock+0x40/0x40 [ 557.481120][ T4294] ? process_one_work+0x7b4/0x1160 [ 557.486412][ T4294] process_one_work+0x8ab/0x1160 [ 557.491420][ T4294] ? worker_detach_from_pool+0x240/0x240 [ 557.497123][ T4294] ? _raw_spin_lock_irq+0xb7/0xf0 [ 557.502195][ T4294] ? _raw_spin_lock_irqsave+0x100/0x100 [ 557.507956][ T4294] ? wq_worker_running+0x97/0x190 [ 557.513100][ T4294] worker_thread+0xaf5/0x12a0 [ 557.517849][ T4294] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 557.523800][ T4294] kthread+0x29d/0x330 [ 557.527932][ T4294] ? worker_clr_flags+0x1a0/0x1a0 [ 557.532998][ T4294] ? kthread_blkcg+0xd0/0xd0 [ 557.537625][ T4294] ret_from_fork+0x1f/0x30 [ 557.542166][ T4294] [ 557.546912][ T4294] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 557.560520][ T4294] Bluetooth: hci4: failed to register connection device [ 557.571904][ T4328] device hsr_slave_0 left promiscuous mode [ 557.603149][ T4328] device hsr_slave_1 left promiscuous mode [ 557.673211][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.718628][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.770820][ T4328] device bridge_slave_1 left promiscuous mode [ 557.850725][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.889870][ T4328] device bridge_slave_0 left promiscuous mode [ 557.905025][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.783132][ T9407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 562.799707][ T9407] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 562.817291][ T9407] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 562.828248][ T9407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 562.847269][ T9407] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 562.855023][ T9407] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 562.929194][ T4292] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 562.944519][ T4292] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 562.955221][ T4292] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 562.965577][ T4292] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 562.973698][ T4292] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 562.981426][ T4292] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 563.044978][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.051795][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.495896][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 563.647680][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 563.819516][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.981585][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.956311][ T4292] Bluetooth: hci5: command 0x0409 tx timeout [ 565.042846][ T4292] Bluetooth: hci6: command 0x0409 tx timeout [ 565.918038][ T4328] bond0 (unregistering): Released all slaves [ 566.670053][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 566.781285][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 566.879922][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.953983][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.050623][ T4292] Bluetooth: hci5: command 0x041b tx timeout [ 567.130753][ T4292] Bluetooth: hci6: command 0x041b tx timeout [ 567.477230][ T4328] bond0 (unregistering): Released all slaves [ 567.636385][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 567.645369][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 567.656056][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 567.663879][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 567.671491][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 567.678951][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 567.686509][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 567.694081][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 567.701848][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 567.709400][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 567.717464][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 567.725267][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 567.733304][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 567.742068][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 567.754210][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 567.761861][T10167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 567.791628][T10167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.929325][T10184] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 569.340586][ T4292] Bluetooth: hci5: command 0x040f tx timeout [ 569.346914][ T4292] Bluetooth: hci6: command 0x040f tx timeout [ 570.238760][T10175] chnl_net:caif_netlink_parms(): no params data found [ 570.411883][T10170] chnl_net:caif_netlink_parms(): no params data found [ 570.809202][T10216] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1327'. [ 570.886039][T10170] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.904171][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.921815][T10170] device bridge_slave_0 entered promiscuous mode [ 570.939594][T10175] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.949631][T10175] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.982329][T10175] device bridge_slave_0 entered promiscuous mode [ 570.998345][T10175] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.012106][T10175] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.030961][T10175] device bridge_slave_1 entered promiscuous mode [ 571.051477][T10170] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.058678][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.092201][T10170] device bridge_slave_1 entered promiscuous mode [ 571.431022][ T9407] Bluetooth: hci6: command 0x0419 tx timeout [ 571.431148][ T4292] Bluetooth: hci5: command 0x0419 tx timeout [ 572.034820][T10175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.103797][T10170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.162810][T10175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.212817][T10170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.149320][T10175] team0: Port device team_slave_0 added [ 574.371130][T10170] team0: Port device team_slave_0 added [ 574.379293][T10175] team0: Port device team_slave_1 added [ 574.504284][T10170] team0: Port device team_slave_1 added [ 574.539589][T10175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.704291][T10175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.731214][T10175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.744258][T10175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.751878][T10175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.937320][T10175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.411573][T10255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 576.597870][T10170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.628724][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.672040][T10170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.714341][T10170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.740697][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.824377][T10170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.979662][T10263] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 577.104820][T10175] device hsr_slave_0 entered promiscuous mode [ 577.138278][T10175] device hsr_slave_1 entered promiscuous mode [ 577.182384][T10175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 577.834488][T10175] Cannot create hsr debugfs directory [ 577.916278][T10170] device hsr_slave_0 entered promiscuous mode [ 577.959917][T10170] device hsr_slave_1 entered promiscuous mode [ 579.145029][T10170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.155240][T10170] Cannot create hsr debugfs directory [ 585.047858][ T4328] device hsr_slave_0 left promiscuous mode [ 585.069712][ T4328] device hsr_slave_1 left promiscuous mode [ 585.275810][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.328779][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.355362][ T4328] device bridge_slave_1 left promiscuous mode [ 585.381556][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.420670][T10353] 9pnet_fd: Insufficient options for proto=fd [ 585.442612][ T4328] device bridge_slave_0 left promiscuous mode [ 585.448950][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.491508][ T4328] device hsr_slave_0 left promiscuous mode [ 585.511442][ T4328] device hsr_slave_1 left promiscuous mode [ 585.530772][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.540724][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.561251][ T4328] device bridge_slave_1 left promiscuous mode [ 585.567546][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.625351][ T4328] device bridge_slave_0 left promiscuous mode [ 585.640659][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.341551][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 586.525053][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 586.634100][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.648259][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1353'. [ 586.781993][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.283873][ T4328] bond0 (unregistering): Released all slaves [ 588.364514][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1356'. [ 588.711280][T10368] fuse: Bad value for 'fd' [ 588.980332][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 589.135134][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 589.317013][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.454630][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.010972][T10390] overlayfs: failed to clone lowerpath [ 592.905445][ T4328] bond0 (unregistering): Released all slaves [ 594.244243][T10170] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 594.300777][T10170] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 594.472067][T10170] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 594.537276][T10170] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 594.844763][T10175] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 594.919776][T10175] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 595.060678][T10170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.078110][T10175] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 595.106824][T10175] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 595.270785][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 595.303469][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 595.367561][T10170] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.435667][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 595.462312][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 595.521235][ T4424] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.528488][ T4424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.749430][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 595.779911][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 595.861665][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 595.896310][ T4424] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.903525][ T4424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.032624][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 596.086353][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 596.147625][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 596.271948][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 596.318575][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 596.444055][T10175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.556466][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 596.582447][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 596.671663][T10175] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.679653][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 596.708781][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 596.759694][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 596.781261][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 596.799762][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 596.819962][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 596.997630][T10170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 597.388094][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 597.502489][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 597.681239][ T9349] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.688496][ T9349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.871653][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 597.901471][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 597.934745][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.942073][ T9349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.002203][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 598.034848][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 598.163597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 598.201955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 598.280579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 598.313122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 598.366132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 598.434495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 598.466614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 598.528172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 598.560076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 598.605512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 598.636039][T10175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 599.395192][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 599.421132][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 599.518269][T10170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.908705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 599.936292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 600.014734][T10175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.740071][ T6997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 602.051829][ T6997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 602.273108][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 602.329199][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 602.407358][T10170] device veth0_vlan entered promiscuous mode [ 602.415396][T10521] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 602.424880][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 602.478006][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 602.615472][T10170] device veth1_vlan entered promiscuous mode [ 602.808703][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 603.254733][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 603.276021][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 603.546002][T10170] device veth0_macvtap entered promiscuous mode [ 603.577718][T10170] device veth1_macvtap entered promiscuous mode [ 603.764327][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.005409][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.090585][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.570613][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.630592][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.690655][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.902289][T10170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.635041][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 605.654564][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 605.672937][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 605.691904][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 606.780003][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.847304][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.877113][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.928470][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.942268][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.959338][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.971719][T10170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.126469][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 607.138392][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1394'. [ 607.826074][ T9349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 607.845922][T10170] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.854727][T10170] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.937092][T10170] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.965813][T10170] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.015879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 608.065221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 608.183289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 608.215297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 608.275039][T10175] device veth0_vlan entered promiscuous mode [ 608.297785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 608.327945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 608.377576][T10175] device veth1_vlan entered promiscuous mode [ 608.487190][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.528325][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.584663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 608.624766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 608.646483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 608.670173][ T6997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.701755][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 608.720066][ T6997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.745280][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 608.788474][T10175] device veth0_macvtap entered promiscuous mode [ 608.835624][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 608.856605][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 608.895620][T10175] device veth1_macvtap entered promiscuous mode [ 608.974084][T10175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.053951][T10175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.090385][T10175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.125499][T10175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.163442][T10175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.194183][T10175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.243227][T10175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.279800][T10175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.361156][T10175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.397277][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 609.415623][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 609.461867][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 609.503661][T10175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.548561][T10175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.586689][T10175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.603046][T10175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.615575][T10175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.626394][T10175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.655377][T10175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.693673][T10175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.714031][T10175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.731002][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 609.780928][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 609.838986][T10175] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.874799][T10175] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.908142][T10175] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.938948][T10175] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.986582][T10593] loop8: detected capacity change from 0 to 1024 [ 610.175194][T10593] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 610.296887][ T4424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.322198][ T4424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.431063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 610.854304][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.885256][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.946359][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 611.088332][T10170] EXT4-fs (loop8): unmounting filesystem. [ 612.817546][T10616] loop9: detected capacity change from 0 to 32768 [ 612.885607][T10616] XFS: attr2 mount option is deprecated. [ 612.923485][T10616] XFS (loop9): sunit and swidth must be specified together [ 612.972851][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1174'. [ 618.972705][T10694] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 620.084817][T10705] overlayfs: failed to clone lowerpath [ 621.720033][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1426'. [ 624.062764][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.069196][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.039042][T10781] tmpfs: Bad value for 'nr_inodes' [ 626.051893][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1438'. [ 626.948874][T10791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1441'. [ 630.607798][T10852] tmpfs: Bad value for 'nr_inodes' [ 630.619717][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1453'. [ 631.501172][T10861] loop9: detected capacity change from 0 to 1024 [ 632.703052][T10861] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 633.513657][T10175] EXT4-fs (loop9): unmounting filesystem. [ 633.564682][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.694603][T10895] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 635.934082][T10924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1468'. [ 636.326439][T10944] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 636.585875][T10956] tmpfs: Bad value for 'nr_inodes' [ 639.440294][T10980] tmpfs: Bad value for 'nr_inodes' [ 639.452718][T10980] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1481'. [ 644.009736][T11038] loop9: detected capacity change from 0 to 1024 [ 644.188296][T11038] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 645.026477][T10175] EXT4-fs (loop9): unmounting filesystem. [ 646.283368][T11066] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1501'. [ 647.227514][T11079] loop9: detected capacity change from 0 to 2048 [ 648.558402][T11079] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 648.567695][T11079] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.842765][T10175] EXT4-fs (loop9): unmounting filesystem. [ 649.195405][T11090] loop9: detected capacity change from 0 to 1024 [ 649.337684][T11090] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 650.180915][ T26] audit: type=1800 audit(1794852469.086:117): pid=11097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1506" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 650.231643][T10175] EXT4-fs (loop9): unmounting filesystem. [ 651.423350][T11112] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 652.902631][T11134] loop9: detected capacity change from 0 to 1024 [ 653.851492][T11134] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 654.981451][ T26] audit: type=1800 audit(1798522489.989:118): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1517" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 655.064683][T10175] EXT4-fs (loop9): unmounting filesystem. [ 658.778056][T11193] loop9: detected capacity change from 0 to 1024 [ 658.868957][T11193] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 659.890366][T10175] EXT4-fs (loop9): unmounting filesystem. [ 661.321358][T11208] loop9: detected capacity change from 0 to 1024 [ 661.470084][T11208] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 662.403328][T10175] EXT4-fs (loop9): unmounting filesystem. [ 663.220499][T11234] tmpfs: Bad value for 'nr_inodes' [ 663.230876][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1539'. [ 664.444856][T11256] loop9: detected capacity change from 0 to 1024 [ 664.651202][T11256] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 665.497997][T10175] EXT4-fs (loop9): unmounting filesystem. [ 665.791308][T11276] loop8: detected capacity change from 0 to 1024 [ 666.020311][T11276] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 666.821179][T10170] EXT4-fs (loop8): unmounting filesystem. [ 666.847004][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1552'. [ 667.833189][T11311] loop9: detected capacity change from 0 to 2048 [ 670.101931][T11311] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 670.112047][T11311] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.325143][T10175] EXT4-fs (loop9): unmounting filesystem. [ 670.346421][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1557'. [ 671.789434][T11337] loop9: detected capacity change from 0 to 1024 [ 671.967411][T11337] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 672.795198][T10175] EXT4-fs (loop9): unmounting filesystem. [ 677.847931][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1583'. [ 681.119497][T11471] loop8: detected capacity change from 0 to 1024 [ 681.225768][T11471] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 681.349947][T10170] EXT4-fs (loop8): unmounting filesystem. [ 682.729858][T11499] loop8: detected capacity change from 0 to 2048 [ 682.911909][T11499] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 682.921182][T11499] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.338087][T10170] EXT4-fs (loop8): unmounting filesystem. [ 684.034221][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.040627][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.161544][T11539] loop9: detected capacity change from 0 to 1024 [ 684.389520][T11539] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 685.233692][T10175] EXT4-fs (loop9): unmounting filesystem. [ 686.063547][ T4292] Bluetooth: hci5: command 0x0406 tx timeout [ 686.069661][ T4292] Bluetooth: hci6: command 0x0406 tx timeout [ 694.790369][T11702] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 697.649019][T11754] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 700.190810][T11808] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 700.869455][T11829] loop9: detected capacity change from 0 to 1024 [ 701.028668][T11829] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 701.737628][T10175] EXT4-fs (loop9): unmounting filesystem. [ 708.878963][T11984] loop9: detected capacity change from 0 to 1024 [ 709.590223][T11984] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 714.272129][T10175] EXT4-fs (loop9): unmounting filesystem. [ 715.373723][T12044] loop8: detected capacity change from 0 to 2048 [ 715.661259][T12044] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 715.713913][T12044] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.403097][T10170] EXT4-fs (loop8): unmounting filesystem. [ 728.904747][T12209] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 733.487427][T12269] loop8: detected capacity change from 0 to 1024 [ 734.405145][T12269] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 734.995506][T10170] EXT4-fs (loop8): unmounting filesystem. [ 739.100176][T12344] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 743.565918][T12404] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 744.215036][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.228810][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 745.290537][T12433] loop9: detected capacity change from 0 to 1024 [ 745.485020][T12433] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 746.433098][T12453] loop8: detected capacity change from 0 to 1024 [ 746.597761][T12453] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 747.469510][T10170] EXT4-fs (loop8): unmounting filesystem. [ 748.546497][T12475] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 749.390728][T12503] loop8: detected capacity change from 0 to 1024 [ 749.497745][T12503] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 750.434843][T10170] EXT4-fs (loop8): unmounting filesystem. [ 751.667677][T10175] EXT4-fs (loop9): unmounting filesystem. [ 752.465045][T12539] loop9: detected capacity change from 0 to 1024 [ 752.597518][T12539] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 753.150185][ T26] audit: type=1800 audit(1817396958.488:119): pid=12554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1819" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 753.342918][T10175] EXT4-fs (loop9): unmounting filesystem. [ 757.552042][T12614] loop8: detected capacity change from 0 to 1024 [ 758.456722][T12614] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 758.778788][T10170] EXT4-fs (loop8): unmounting filesystem. [ 770.083087][T12755] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 771.489669][T12788] loop8: detected capacity change from 0 to 128 [ 773.796142][T12864] ip_tables: iptables: counters copy to user failed while replacing table [ 773.851310][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1904'. [ 774.763096][T12900] fuse: Bad value for 'fd' [ 775.176523][T12921] 9pnet_fd: Insufficient options for proto=fd [ 775.204328][T12920] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1923'. [ 775.339638][T12927] bridge1: port 1(dummy0) entered blocking state [ 775.352069][T12927] bridge1: port 1(dummy0) entered disabled state [ 775.383774][T12927] device dummy0 entered promiscuous mode [ 775.569318][T12936] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1929'. [ 776.496989][T12979] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 777.625742][T13020] team0: No ports can be present during mode change [ 777.909149][T13026] block device autoloading is deprecated and will be removed. [ 778.942208][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 778.969093][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 779.082153][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 779.141243][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 779.175364][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 779.233976][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 779.269882][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 779.299655][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 779.369056][T13086] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 779.731269][T13105] ipt_CLUSTERIP: Please specify destination IP [ 779.757862][T13106] tmpfs: Bad value for 'nr_inodes' [ 779.771273][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1982'. [ 781.766963][T13138] netlink: 4124 bytes leftover after parsing attributes in process `syz.9.1994'. [ 782.276972][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1999'. [ 782.862292][T13175] loop9: detected capacity change from 0 to 128 [ 785.470810][T13227] bond0: Device is already in use. [ 785.481616][T13227] bond0: Device is already in use. [ 786.511249][T13258] loop9: detected capacity change from 0 to 256 [ 787.188652][T13258] FAT-fs (loop9): Directory bread(block 64) failed [ 787.260768][T13258] FAT-fs (loop9): Directory bread(block 65) failed [ 787.292669][T13258] FAT-fs (loop9): Directory bread(block 66) failed [ 787.317590][T13258] FAT-fs (loop9): Directory bread(block 67) failed [ 787.350988][T13258] FAT-fs (loop9): Directory bread(block 68) failed [ 787.378007][T13265] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 787.385668][T13258] FAT-fs (loop9): Directory bread(block 69) failed [ 787.422639][T13265] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 787.436951][T13258] FAT-fs (loop9): Directory bread(block 70) failed [ 787.455573][T13265] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 787.463061][T13258] FAT-fs (loop9): Directory bread(block 71) failed [ 787.495832][T13258] FAT-fs (loop9): Directory bread(block 72) failed [ 787.513246][T13265] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 787.526453][T13258] FAT-fs (loop9): Directory bread(block 73) failed [ 787.563362][T13265] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 787.595299][T13265] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 787.630911][T13265] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 787.693181][T13265] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 787.722725][T13279] overlayfs: failed to clone upperpath [ 787.739435][T13265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 789.263344][T13321] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 789.327896][T13327] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 789.688398][T13332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 790.219621][T13354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 790.251639][T13354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 790.378532][T13354] device wlan0 left promiscuous mode [ 791.110955][T13384] loop9: detected capacity change from 0 to 8192 [ 791.713172][T13408] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 792.093020][T13423] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2081'. getty: ttyS0: read error: Resource temporarily unavailable                                                                                                                                                                                                           syzkaller syzkaller login: [ 804.244483][T10170] EXT4-fs (loop8): unmounting filesystem. [ 804.421930][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 804.428722][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 805.601497][T10175] EXT4-fs (loop9): unmounting filesystem. [ 806.733768][T13678] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 808.444230][T13701] loop9: detected capacity change from 0 to 1024 [ 808.525837][T13701] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 809.503213][T10175] EXT4-fs (loop9): unmounting filesystem. [ 810.515218][T13728] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 816.761374][T13804] overlayfs: failed to clone upperpath [ 835.747178][T14028] loop8: detected capacity change from 0 to 2048 [ 835.830984][T14028] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 835.840064][T14028] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 836.414779][T10170] EXT4-fs (loop8): unmounting filesystem. [ 839.872770][ T7] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 840.071090][ T7] usb 10-1: New USB device found, idVendor=1111, idProduct=2222, bcdDevice= 1.00 [ 840.086688][ T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.442953][ T7] usb 10-1: USB disconnect, device number 2 [ 840.670066][ T4325] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 840.848983][ T4325] usb 9-1: config index 0 descriptor too short (expected 45, got 39) [ 840.857416][ T4325] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 840.870898][ T4325] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 840.884095][ T4325] usb 9-1: New USB device found, idVendor=050d, idProduct=0103, bcdDevice= 2.00 [ 840.894564][ T4325] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.902693][ T4325] usb 9-1: Product: syz [ 840.907303][ T4325] usb 9-1: Manufacturer: syz [ 840.911952][ T4325] usb 9-1: SerialNumber: syz [ 840.935387][T14102] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 840.947417][T14102] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 840.961398][ T4325] belkin_sa 9-1:1.0: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 840.989290][ T4325] usb 9-1: bcdDevice: 0200, bfc: 1 [ 840.999684][ T4325] usb 9-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 841.059214][T14112] ip_tables: iptables: counters copy to user failed while replacing table [ 841.305925][T14118] Mass Storage Function, version: 2009/09/11 [ 841.312290][T14118] LUN: removable file: (no medium) [ 841.631211][ T4325] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 841.670807][T14136] ip_tables: iptables: counters copy to user failed while replacing table [ 841.827630][ T4325] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.840576][ T4325] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 841.858209][ T4325] usb 1-1: Dual-Role OTG device on HNP port [ 841.868971][ T4325] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 6.01 [ 841.884011][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.912667][ C1] ------------[ cut here ]------------ [ 841.919030][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 841.926332][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x27c/0x4d0 [ 841.936411][ C1] Modules linked in: [ 841.940448][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 841.947543][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 841.957666][ C1] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 841.963140][ C1] Code: 49 8b 0e 48 c7 c0 80 cf 3e 8b 49 c7 c0 a0 cf 3e 8b 4c 0f 44 c0 48 c7 c7 40 cf 3e 8b 48 c7 c6 19 aa 63 8c 89 ea e8 d4 f4 ce fa <0f> 0b e9 c4 fe ff ff e8 78 6a 03 fb 49 bc 00 00 00 00 00 fc ff df [ 841.982891][ C1] RSP: 0018:ffffc900001e0788 EFLAGS: 00010046 [ 841.989074][ C1] RAX: 27ad86efd0055100 RBX: ffff888027c400e0 RCX: ffff88813fed9e00 [ 841.997098][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 842.005102][ C1] RBP: 0000000000000081 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 842.013199][ C1] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 842.021205][ C1] R13: ffff888027c4010d R14: ffff888027c400e8 R15: ffff8880270ee9ba [ 842.029263][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 842.038347][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 842.044986][ C1] CR2: 00007f03ea2bef20 CR3: 000000007e5b1000 CR4: 00000000003506e0 [ 842.053014][ C1] DR0: ffffffffffffffff DR1: 08000000000001f8 DR2: 0000000000000000 [ 842.061025][ C1] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 842.069052][ C1] Call Trace: [ 842.072397][ C1] [ 842.075358][ C1] hidg_set_alt+0x126/0xa00 [ 842.079978][ C1] ? usb_gadget_set_state+0x142/0x310 [ 842.085391][ C1] set_config+0x6e8/0xf70 [ 842.089758][ C1] composite_setup+0x194c/0x2b00 [ 842.094821][ C1] configfs_composite_setup+0xc3/0x100 [ 842.100326][ C1] dummy_timer+0x12ea/0x3420 [ 842.105015][ C1] ? __lock_acquire+0x1465/0x7c40 [ 842.110192][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 842.115263][ C1] ? lock_chain_count+0x20/0x20 [ 842.120176][ C1] ? dummy_free_streams+0x520/0x520 [ 842.125518][ C1] __hrtimer_run_queues+0x522/0xc90 [ 842.130838][ C1] ? dummy_free_streams+0x520/0x520 [ 842.136087][ C1] ? hrtimer_interrupt+0x980/0x980 [ 842.141272][ C1] hrtimer_run_softirq+0x173/0x290 [ 842.146458][ C1] handle_softirqs+0x291/0x910 [ 842.151267][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 842.156171][ C1] ? do_softirq+0x210/0x210 [ 842.160718][ C1] ? hrtimer_interrupt+0x775/0x980 [ 842.165873][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 842.171168][ C1] __irq_exit_rcu+0x13b/0x230 [ 842.175885][ C1] ? irq_exit_rcu+0x20/0x20 [ 842.180426][ C1] irq_exit_rcu+0x5/0x20 [ 842.184721][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 842.190417][ C1] [ 842.193388][ C1] [ 842.196351][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 842.202380][ C1] RIP: 0010:default_idle+0xb/0x10 [ 842.207454][ C1] Code: 48 89 df e8 17 47 99 f7 e9 44 ff ff ff e8 fd 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 57 93 4c 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 842.227103][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 842.233243][ C1] RAX: 27ad86efd0055100 RBX: ffffffff8a3a18b7 RCX: 27ad86efd0055100 [ 842.241241][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 842.249248][ C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 842.257342][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 842.265438][ C1] R13: dffffc0000000000 R14: ffff88813fed9e00 R15: 1ffff9200002efc8 [ 842.273622][ C1] ? default_idle_call+0x77/0xc0 [ 842.278627][ C1] default_idle_call+0x84/0xc0 [ 842.283428][ C1] do_idle+0x3a2/0x680 [ 842.287615][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 842.292853][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 842.298083][ C1] ? asm_sysvec_error_interrupt+0x10/0x20 [ 842.303862][ C1] ? schedule_idle+0x57/0x90 [ 842.308505][ C1] cpu_startup_entry+0x3f/0x60 [ 842.313588][ C1] start_secondary+0xe4/0xf0 [ 842.318253][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 842.324200][ C1] [ 842.327254][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 842.334563][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 842.341620][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 842.351715][ C1] Call Trace: [ 842.355040][ C1] [ 842.357937][ C1] dump_stack_lvl+0x188/0x24e [ 842.362658][ C1] ? memcpy+0x3c/0x60 [ 842.366727][ C1] ? show_regs_print_info+0x12/0x12 [ 842.371993][ C1] ? load_image+0x410/0x410 [ 842.376658][ C1] panic+0x2d3/0x710 [ 842.380585][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 842.385150][ C1] ? secondary_startup_64_no_verify+0xcf/0xdb [ 842.391255][ C1] __warn+0x2f8/0x4f0 [ 842.395309][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 842.400116][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 842.404919][ C1] report_bug+0x2ba/0x4f0 [ 842.409288][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 842.414084][ C1] handle_bug+0x3a/0x70 [ 842.418280][ C1] exc_invalid_op+0x16/0x40 [ 842.422859][ C1] asm_exc_invalid_op+0x16/0x20 [ 842.427863][ C1] RIP: 0010:usb_ep_enable+0x27c/0x4d0 [ 842.433294][ C1] Code: 49 8b 0e 48 c7 c0 80 cf 3e 8b 49 c7 c0 a0 cf 3e 8b 4c 0f 44 c0 48 c7 c7 40 cf 3e 8b 48 c7 c6 19 aa 63 8c 89 ea e8 d4 f4 ce fa <0f> 0b e9 c4 fe ff ff e8 78 6a 03 fb 49 bc 00 00 00 00 00 fc ff df [ 842.453021][ C1] RSP: 0018:ffffc900001e0788 EFLAGS: 00010046 [ 842.459131][ C1] RAX: 27ad86efd0055100 RBX: ffff888027c400e0 RCX: ffff88813fed9e00 [ 842.467134][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 842.475130][ C1] RBP: 0000000000000081 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 842.483137][ C1] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 842.491151][ C1] R13: ffff888027c4010d R14: ffff888027c400e8 R15: ffff8880270ee9ba [ 842.499259][ C1] ? usb_ep_enable+0x27c/0x4d0 [ 842.504154][ C1] hidg_set_alt+0x126/0xa00 [ 842.508696][ C1] ? usb_gadget_set_state+0x142/0x310 [ 842.514109][ C1] set_config+0x6e8/0xf70 [ 842.518480][ C1] composite_setup+0x194c/0x2b00 [ 842.523460][ C1] configfs_composite_setup+0xc3/0x100 [ 842.528964][ C1] dummy_timer+0x12ea/0x3420 [ 842.533619][ C1] ? __lock_acquire+0x1465/0x7c40 [ 842.538794][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 842.543900][ C1] ? lock_chain_count+0x20/0x20 [ 842.548888][ C1] ? dummy_free_streams+0x520/0x520 [ 842.554138][ C1] __hrtimer_run_queues+0x522/0xc90 [ 842.559406][ C1] ? dummy_free_streams+0x520/0x520 [ 842.564660][ C1] ? hrtimer_interrupt+0x980/0x980 [ 842.569846][ C1] hrtimer_run_softirq+0x173/0x290 [ 842.574995][ C1] handle_softirqs+0x291/0x910 [ 842.579791][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 842.584665][ C1] ? do_softirq+0x210/0x210 [ 842.589187][ C1] ? hrtimer_interrupt+0x775/0x980 [ 842.594342][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 842.599569][ C1] __irq_exit_rcu+0x13b/0x230 [ 842.604271][ C1] ? irq_exit_rcu+0x20/0x20 [ 842.608806][ C1] irq_exit_rcu+0x5/0x20 [ 842.613073][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 842.618747][ C1] [ 842.621701][ C1] [ 842.624664][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 842.630689][ C1] RIP: 0010:default_idle+0xb/0x10 [ 842.635834][ C1] Code: 48 89 df e8 17 47 99 f7 e9 44 ff ff ff e8 fd 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 57 93 4c 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 842.655773][ C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6 [ 842.661879][ C1] RAX: 27ad86efd0055100 RBX: ffffffff8a3a18b7 RCX: 27ad86efd0055100 [ 842.669879][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 842.677878][ C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 842.685897][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 842.693911][ C1] R13: dffffc0000000000 R14: ffff88813fed9e00 R15: 1ffff9200002efc8 [ 842.701920][ C1] ? default_idle_call+0x77/0xc0 [ 842.706909][ C1] default_idle_call+0x84/0xc0 [ 842.711708][ C1] do_idle+0x3a2/0x680 [ 842.715815][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 842.721216][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 842.726459][ C1] ? asm_sysvec_error_interrupt+0x10/0x20 [ 842.732217][ C1] ? schedule_idle+0x57/0x90 [ 842.736844][ C1] cpu_startup_entry+0x3f/0x60 [ 842.741654][ C1] start_secondary+0xe4/0xf0 [ 842.746278][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 842.752220][ C1] [ 842.755879][ C1] Kernel Offset: disabled [ 842.760360][ C1] Rebooting in 86400 seconds..