last executing test programs: 2m17.436632871s ago: executing program 4 (id=100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='highspeed', 0x9) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540), 0x1c) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2m17.222953117s ago: executing program 4 (id=102): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0x2020) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 2m17.107895079s ago: executing program 4 (id=103): socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e3b, 0x4, @mcast2, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2m16.995035392s ago: executing program 4 (id=105): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m16.871542725s ago: executing program 4 (id=107): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) 2m16.327431438s ago: executing program 4 (id=112): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd6, 0x4, 0x3ff, 0x400, 0x1, 0x1040000, r4}) 2m16.061083145s ago: executing program 32 (id=112): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd6, 0x4, 0x3ff, 0x400, 0x1, 0x1040000, r4}) 1m41.120737319s ago: executing program 2 (id=314): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe88fffa000000000000000000000001ac14142500000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x102, 0xa, 0x20, 0x30, 0x3a, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x9, 0x4, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x80000003, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) 1m40.745345127s ago: executing program 2 (id=315): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000000)="e1", 0x1, 0x20000000, 0x0, 0x0) sendmmsg(r0, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="aa", 0x1}], 0x1}}], 0x1, 0x81) 1m40.466869784s ago: executing program 2 (id=316): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 1m39.285626333s ago: executing program 2 (id=320): openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000e80)={[0xffff, 0xfffffffffffffffe, 0x2e, 0xa4e, 0xffff, 0xffff, 0x2, 0x7, 0x6, 0x0, 0x10, 0x5, 0x100, 0x1, 0x8, 0x9], 0x1, 0x140200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x5, 0x0, '\x00', 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m38.684607677s ago: executing program 2 (id=324): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) 1m37.864736827s ago: executing program 2 (id=328): sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x40) mount(0x0, &(0x7f0000000200)='./sys\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 1m22.029251649s ago: executing program 33 (id=328): sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x40) mount(0x0, &(0x7f0000000200)='./sys\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 16.220964849s ago: executing program 6 (id=396): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000e, 0x3032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000140)=""/44, 0x2c) getdents64(r2, &(0x7f0000002f40)=""/4079, 0x7c4) 13.336443407s ago: executing program 6 (id=396): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000e, 0x3032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000140)=""/44, 0x2c) getdents64(r2, &(0x7f0000002f40)=""/4079, 0x7c4) 11.253164358s ago: executing program 5 (id=619): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) fchmodat(0xffffffffffffff9c, 0x0, 0x1eb) gettid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x0, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 10.648589563s ago: executing program 5 (id=624): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x48040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff00c}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0x9, 0xa1, 0x1000}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@setlink={0x3c, 0x13, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x278d4, 0x1c536}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 10.281691772s ago: executing program 6 (id=396): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000e, 0x3032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000140)=""/44, 0x2c) getdents64(r2, &(0x7f0000002f40)=""/4079, 0x7c4) 8.035952156s ago: executing program 3 (id=630): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2005}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x1ff) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002140)=0x1) 8.017893746s ago: executing program 5 (id=631): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="000008050010010b10"], 0xb) 7.658102115s ago: executing program 1 (id=632): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000000)={[{@errors_remount}, {@dioread_lock}, {@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0xf0}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) lseek(0xffffffffffffffff, 0x3ff, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.572842227s ago: executing program 0 (id=633): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2f, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) 7.346362252s ago: executing program 3 (id=634): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x0, r1, 0x0, 0x80000}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x12) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x40) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 7.162162267s ago: executing program 5 (id=635): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x10, &(0x7f0000000600)={[{@uni_xlate}, {@uni_xlateno}, {@fat=@check_strict}, {@numtail}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@uni_xlate}]}, 0x2, 0x29e, &(0x7f0000000240)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) fchown(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) openat(r0, 0x0, 0x100, 0x84) mount$9p_rdma(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x200001c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 6.957276272s ago: executing program 0 (id=636): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x10000, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000a00)={r4, r2, r3, 0x3, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20003, 0x200003}) 6.957021382s ago: executing program 3 (id=637): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x40000000, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000004) 6.922915373s ago: executing program 6 (id=396): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000e, 0x3032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000140)=""/44, 0x2c) getdents64(r2, &(0x7f0000002f40)=""/4079, 0x7c4) 4.471861752s ago: executing program 0 (id=638): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x8000046, r2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fremovexattr(r2, &(0x7f0000000080)=@known='system.posix_acl_access\x00') 4.426347463s ago: executing program 1 (id=639): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.339664265s ago: executing program 3 (id=640): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000578000/0x4000)=nil, 0x4000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.058588872s ago: executing program 5 (id=641): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x4, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x8, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd36, 0x80, 0x4, 0x81}) 3.994362473s ago: executing program 1 (id=642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x5, 0x3, 0xfc, 0xf7, 0x8, 0x0, 0x7f, 0x1, 0x8, 0x5, 0xf, 0x80, 0x1, 0x2, 0x7, 0x8}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x792, 0x80000001, 0x80000000, 0x400000004, 0x3, 0x8a5, 0x4d2, 0xfffffc, 0x42, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x10000, 0x3c4210}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x6, 0xe4, 0x62, 0x4, 0x78, 0x7, 0x5, 0x1, 0x2, 0xfe, 0x64, 0x2, 0xb6, 0x6, 0x0, 0x1}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.820863928s ago: executing program 0 (id=643): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='ms_mode\x00', &(0x7f0000000100)='crc\x00', 0x0) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.504898275s ago: executing program 1 (id=644): r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) 3.447473586s ago: executing program 6 (id=396): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000e, 0x3032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000140)=""/44, 0x2c) getdents64(r2, &(0x7f0000002f40)=""/4079, 0x7c4) 801.99128ms ago: executing program 0 (id=645): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000003c0)='.\x00', 0x12158b9, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRESHEX, @ANYBLOB="08128bfe888c9ef9da456bbd1d25ffa5b80d211bfa8ebb7c314fb394d577718ab6a77d04cca1ace93fbdf267a685b65ee7892006928f1fc82665921211bbd80e4cb45a8fce86ae7609", @ANYRES32, @ANYRES64, @ANYRESHEX], 0x5, 0x0, &(0x7f0000000000)) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000002200)='.\x00', 0x0, 0x3209864, 0x0) 766.748781ms ago: executing program 1 (id=646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 753.611372ms ago: executing program 3 (id=647): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 707.062653ms ago: executing program 5 (id=648): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x7, &(0x7f0000000e00)=0x0) write$binfmt_misc(r0, &(0x7f0000000100)='>', 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r2}]) 604.456435ms ago: executing program 3 (id=649): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$poke(0x4, r0, &(0x7f00000000c0), 0x6) 362.353721ms ago: executing program 0 (id=650): r0 = gettid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getresgid(0x0, 0x0, 0x0) 220.767225ms ago: executing program 1 (id=651): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40d0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0105b08, &(0x7f0000000040)={0x1, 0x2, 0x3cf3, 0x202000, 0x110001, 0x9}) 0s ago: executing program 6 (id=396): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000e, 0x3032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000140)=""/44, 0x2c) getdents64(r2, &(0x7f0000002f40)=""/4079, 0x7c4) kernel console output (not intermixed with test programs): ee [ 84.220129][ T2302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.261977][ T2302] usb 5-1: Product: syz [ 84.266233][ T2302] usb 5-1: Manufacturer: syz [ 84.289116][ T2302] usb 5-1: SerialNumber: syz [ 84.318175][ T2302] usb 5-1: config 0 descriptor?? [ 84.370351][ T2302] smsc75xx v1.0.0 [ 84.420397][ T4449] loop1: detected capacity change from 0 to 164 [ 84.438066][ T4373] syz.3.32 (4373) used greatest stack depth: 20496 bytes left [ 84.499190][ T4449] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 84.852278][ T4463] loop2: detected capacity change from 0 to 256 [ 84.946352][ T4463] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 85.029099][ T2302] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 85.055909][ T2302] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 85.158297][ T4467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.64'. [ 85.405163][ T4477] loop2: detected capacity change from 0 to 256 [ 85.427623][ T4477] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.620609][ T4483] Zero length message leads to an empty skb [ 85.663400][ T4456] loop0: detected capacity change from 0 to 40427 [ 85.696170][ T4456] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 85.766545][ T4456] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 85.835988][ T4456] F2FS-fs (loop0): invalid crc value [ 85.858626][ T4488] loop2: detected capacity change from 0 to 2048 [ 85.900118][ T4456] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.987451][ T2302] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 86.013987][ T2302] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 86.048955][ T4488] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,user_xattr,,errors=continue. Quota mode: none. [ 86.054800][ T2302] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 86.074600][ T2302] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 86.087284][ T2302] usb 5-1: USB disconnect, device number 3 [ 86.169216][ T4488] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.207475][ T4456] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 86.225226][ T4456] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 86.298285][ T4502] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.72: bg 0: block 345: padding at end of block bitmap is not set [ 86.351339][ T4502] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 113 with error 117 [ 86.397594][ T26] audit: type=1804 audit(1791379825.881:2): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.60" name="/newroot/11/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 86.475921][ T4502] EXT4-fs (loop2): This should not happen!! Data will be lost [ 86.475921][ T4502] [ 86.657032][ T1108] cfg80211: failed to load regulatory.db [ 86.752927][ T144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 86.789867][ T144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 86.789867][ T144] [ 86.848815][ T144] EXT4-fs (loop2): Total free blocks count 0 [ 86.855749][ T144] EXT4-fs (loop2): Free/Dirty block details [ 86.901682][ T144] EXT4-fs (loop2): free_blocks=0 [ 86.916994][ T144] EXT4-fs (loop2): dirty_blocks=16 [ 86.944254][ T144] EXT4-fs (loop2): Block reservation details [ 86.959788][ T144] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 87.286300][ T4196] attempt to access beyond end of device [ 87.286300][ T4196] loop0: rw=2049, want=45104, limit=40427 [ 87.572563][ T4527] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.752073][ T4533] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 87.759180][ T4533] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 88.974220][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.117036][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.252084][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.341244][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.769256][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.229198][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.256457][ T13] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.280674][ T4576] chnl_net:caif_netlink_parms(): no params data found [ 90.293618][ T13] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 90.319998][ T13] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.342318][ T4600] loop0: detected capacity change from 0 to 512 [ 90.370714][ T13] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 90.382014][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.458065][ T4600] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.510442][ T4600] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.621890][ T4576] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.630257][ T4600] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.114: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 90.660919][ T4576] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.704721][ T4576] device bridge_slave_0 entered promiscuous mode [ 90.781940][ T4576] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.798981][ T4576] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.830512][ T4576] device bridge_slave_1 entered promiscuous mode [ 91.054449][ T4576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.086776][ T4576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.283210][ T4576] team0: Port device team_slave_0 added [ 91.326209][ T4576] team0: Port device team_slave_1 added [ 91.473600][ T4576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.492478][ T4576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.539215][ T4232] Bluetooth: hci1: command 0x0409 tx timeout [ 91.568919][ T4576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.600916][ T4576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.607930][ T4576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.625214][ T13] [drm] Initialized gud 1.0.0 20200422 for 3-1:1.0 on minor 2 [ 91.707103][ T4576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.834625][ T144] device hsr_slave_0 left promiscuous mode [ 91.919524][ T144] device hsr_slave_1 left promiscuous mode [ 91.976951][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.990209][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.035468][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.056954][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.080662][ T144] device bridge_slave_1 left promiscuous mode [ 92.109317][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.128482][ T4626] loop0: detected capacity change from 0 to 32768 [ 92.167658][ T144] device bridge_slave_0 left promiscuous mode [ 92.176625][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.229828][ T13] gud 3-1:1.0: [drm] Cannot find any crtc or sizes [ 92.250911][ T13] usb 3-1: USB disconnect, device number 3 [ 92.282593][ T144] device veth1_macvtap left promiscuous mode [ 92.306689][ T144] device veth0_macvtap left promiscuous mode [ 92.335839][ T4626] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.117 (4626) [ 92.349035][ T144] device veth1_vlan left promiscuous mode [ 92.381608][ T144] device veth0_vlan left promiscuous mode [ 92.555944][ T4626] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 92.660561][ T4626] BTRFS info (device loop0): disabling free space tree [ 92.718584][ T4626] BTRFS error (device loop0): unrecognized mount option 'euid>00000000000000000000' [ 92.770975][ T4626] BTRFS error (device loop0): cannot disable free space tree [ 92.888979][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 92.915057][ T4626] BTRFS error (device loop0): open_ctree failed: -22 [ 92.996158][ T4649] loop2: detected capacity change from 0 to 4096 [ 93.075811][ T4649] EXT4-fs (loop2): Ignoring removed nobh option [ 93.358420][ T4649] EXT4-fs (loop2): Test dummy encryption mode enabled [ 93.375226][ T4649] EXT4-fs (loop2): Ignoring removed bh option [ 93.443791][ T4649] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 93.520812][ T144] team0 (unregistering): Port device team_slave_1 removed [ 93.604276][ T144] team0 (unregistering): Port device team_slave_0 removed [ 93.609497][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 93.674891][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.762772][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.786785][ T4649] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 94.081171][ T144] bond0 (unregistering): Released all slaves [ 94.321396][ T4576] device hsr_slave_0 entered promiscuous mode [ 94.373420][ T4576] device hsr_slave_1 entered promiscuous mode [ 94.393174][ T4576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.404939][ T4576] Cannot create hsr debugfs directory [ 94.441962][ T4611] chnl_net:caif_netlink_parms(): no params data found [ 94.854881][ T4684] loop2: detected capacity change from 0 to 8 [ 94.924823][ T4684] SQUASHFS error: zstd decompression error: 2 [ 94.969059][ T2302] Bluetooth: hci3: command 0x041b tx timeout [ 94.988938][ T4684] SQUASHFS error: zstd decompression failed, data probably corrupt [ 94.997406][ T4684] SQUASHFS error: Failed to read block 0x4ea: -5 [ 95.049166][ T4684] SQUASHFS error: Unable to read metadata cache entry [4e8] [ 95.056584][ T4684] SQUASHFS error: Unable to read inode 0x11f [ 95.465024][ T4611] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.490179][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.525047][ T4611] device bridge_slave_0 entered promiscuous mode [ 95.632928][ T4704] netlink: 'syz.2.130': attribute type 1 has an invalid length. [ 95.652448][ T4704] netlink: 'syz.2.130': attribute type 4 has an invalid length. [ 95.686801][ T4704] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.130'. [ 95.689519][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 95.740079][ T4706] netlink: 'syz.2.130': attribute type 1 has an invalid length. [ 95.758892][ T4706] netlink: 'syz.2.130': attribute type 4 has an invalid length. [ 95.811376][ T4706] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.130'. [ 95.842080][ T4611] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.860031][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.898221][ T4611] device bridge_slave_1 entered promiscuous mode [ 96.059058][ T4717] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.265031][ T4611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.329131][ T4611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.957638][ T4737] syz.0.138 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 97.049064][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 97.059144][ T4738] loop0: detected capacity change from 0 to 128 [ 97.149087][ T4738] FAT-fs (loop0): invalid media value (0x00) [ 97.161631][ T4738] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 97.222745][ T4611] team0: Port device team_slave_0 added [ 97.253255][ T4738] FAT-fs (loop0): Can't find a valid FAT filesystem [ 97.276908][ T4611] team0: Port device team_slave_1 added [ 97.346056][ T4737] device ip6gre1 entered promiscuous mode [ 97.730087][ T4611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.766999][ T4611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.793435][ T2302] Bluetooth: hci1: command 0x0419 tx timeout [ 97.886769][ T4611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.989959][ T4611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.997050][ T4611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.997079][ T4611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.385488][ T4611] device hsr_slave_0 entered promiscuous mode [ 98.398396][ T4611] device hsr_slave_1 entered promiscuous mode [ 98.426501][ T4611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.452209][ T4611] Cannot create hsr debugfs directory [ 98.760190][ T4576] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.858156][ T4576] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.960428][ T4576] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.110899][ T4576] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.128930][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 99.448886][ T4352] net_ratelimit: 39 callbacks suppressed [ 99.629885][ T4576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.740466][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.759107][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.852842][ T4576] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.909724][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.927508][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.967997][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.975158][ T4354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.072867][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.099440][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.124025][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.167147][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.175013][ T4354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.235465][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.332770][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.362755][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.413380][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.465350][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.497235][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.549882][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.608468][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.646162][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.675393][ T4611] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 100.719432][ T4611] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.818509][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.875171][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.900423][ T4611] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 100.950661][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.001041][ T4611] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.448611][ T4611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.504047][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.522434][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.554789][ T4611] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.587311][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.604325][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.636940][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.644129][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.713246][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.756848][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.802986][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.842784][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.849989][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.911850][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.953730][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.970638][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.005781][ T4576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.066466][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.085376][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.120291][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.141939][ T4236] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.191311][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.229983][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.242934][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.330981][ T4856] kernel read not supported for file /memory.swap.events (pid: 4856 comm: syz.3.160) [ 102.351691][ T26] audit: type=1800 audit(1791379841.841:3): pid=4856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.160" name="memory.swap.events" dev="mqueue" ino=34702 res=0 errno=0 [ 102.395171][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.626517][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.652320][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.717776][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.772022][ T4611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.783060][ T4236] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 102.799218][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.807267][ T4236] usb 3-1: Product: syz [ 102.807316][ T4236] usb 3-1: Manufacturer: syz [ 102.807334][ T4236] usb 3-1: SerialNumber: syz [ 102.837138][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.866531][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.894795][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.929952][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.975225][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.031249][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.158500][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.217009][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.233752][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.249852][ T4236] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 103.283186][ T4576] device veth0_vlan entered promiscuous mode [ 103.294004][ T4236] usb 3-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8203 device_setup=1 to enable and report any issues to g@b4.vu [ 103.318321][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.330245][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.356315][ T4576] device veth1_vlan entered promiscuous mode [ 103.492018][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.519240][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.527732][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.558683][ T4236] usb 3-1: USB disconnect, device number 4 [ 103.649978][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.688197][ T4576] device veth0_macvtap entered promiscuous mode [ 103.743589][ T4576] device veth1_macvtap entered promiscuous mode [ 103.804590][ T4576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.866168][ T4576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.913873][ T4576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.927181][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.955467][ T4576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.993921][ T4576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.060434][ T4576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.106226][ T4576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.153154][ T4576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.194725][ T4576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.215149][ T4576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.250246][ T4576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.270458][ T4576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.307816][ T4576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.369864][ T4576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.393057][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.410708][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.440015][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.459475][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.467140][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.506861][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.553931][ T4611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.569347][ T4352] net_ratelimit: 23 callbacks suppressed [ 104.581913][ T4921] xt_hashlimit: max too large, truncated to 1048576 [ 104.593069][ T4576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.622413][ T4576] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.655326][ T4576] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.699252][ T4576] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.598317][ T4934] loop2: detected capacity change from 0 to 1024 [ 105.666856][ T4934] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 105.749210][ T4934] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #32: comm syz.2.175: iget: special inode unallocated [ 105.764293][ T4934] EXT4-fs (loop2): no journal found [ 105.789990][ T4934] EXT4-fs (loop2): can't get journal size [ 105.805664][ T4934] EXT4-fs (loop2): filesystem is read-only [ 105.812920][ T4934] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 105.837518][ T4934] EXT4-fs (loop2): shut down requested (2) [ 106.055136][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.078941][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.129074][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.234981][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.269509][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.299822][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.307699][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.374337][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.416436][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.435511][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.470290][ T4611] device veth0_vlan entered promiscuous mode [ 106.555277][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.575763][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.605684][ T4959] netlink: 7 bytes leftover after parsing attributes in process `syz.2.179'. [ 106.684120][ T4611] device veth1_vlan entered promiscuous mode [ 106.790502][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.808957][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.837249][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.861121][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.902158][ T4611] device veth0_macvtap entered promiscuous mode [ 106.963414][ T4611] device veth1_macvtap entered promiscuous mode [ 106.991077][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.008677][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.128316][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.185920][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.234064][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.286761][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.327437][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.368628][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.388150][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.411622][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.444092][ T4611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.529717][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.550257][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.601186][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.614686][ T4992] loop1: detected capacity change from 0 to 256 [ 107.624005][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.636375][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.648261][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.665374][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.705625][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.729618][ T4611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.755881][ T4611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.774267][ T4611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.860616][ T4992] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 107.893734][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.923127][ T4992] FAT-fs (loop1): Filesystem has been set read-only [ 107.945669][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.967141][ T5003] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 107.997860][ T4992] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 108.023904][ T4992] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 108.040593][ T26] audit: type=1800 audit(1791379847.531:4): pid=4992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.189" name="file1" dev="loop1" ino=1048643 res=0 errno=0 [ 108.085731][ T4985] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.136242][ T4985] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 108.188059][ T4611] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.248016][ T4611] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.265825][ T5008] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.288409][ T4611] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.313176][ T4611] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.746760][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.789734][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.829474][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.096388][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.124757][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.217034][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.276860][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.199'. [ 109.379771][ T144] device hsr_slave_0 left promiscuous mode [ 109.421223][ T144] device hsr_slave_1 left promiscuous mode [ 109.463357][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.482861][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.520153][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.546786][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.599453][ T144] device bridge_slave_1 left promiscuous mode [ 109.606777][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.614475][ T1279] net_ratelimit: 98 callbacks suppressed [ 109.656477][ T144] device bridge_slave_0 left promiscuous mode [ 109.684522][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.763072][ T144] device veth1_macvtap left promiscuous mode [ 109.801471][ T144] device veth0_macvtap left promiscuous mode [ 109.807649][ T144] device veth1_vlan left promiscuous mode [ 109.845294][ T144] device veth0_vlan left promiscuous mode [ 110.943632][ T144] team0 (unregistering): Port device team_slave_1 removed [ 111.006660][ T144] team0 (unregistering): Port device team_slave_0 removed [ 111.065264][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.136440][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.545264][ T144] bond0 (unregistering): Released all slaves [ 111.615742][ T5042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.199'. [ 111.741145][ T5060] tipc: Started in network mode [ 111.748838][ T5060] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 111.756389][ T5060] tipc: Enabled bearer , priority 0 [ 111.863490][ T5070] mmap: syz.5.113 (5070) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 112.871393][ T4235] tipc: Node number set to 43690 [ 113.859290][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.867112][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.278701][ T4348] rpcbind: server 127.0.0.1 not responding, timed out [ 114.728863][ C1] net_ratelimit: 68 callbacks suppressed [ 115.029477][ T5144] loop5: detected capacity change from 0 to 128 [ 115.048373][ T5142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'. [ 115.099002][ T5144] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 115.209269][ T5144] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.324221][ T5144] ext2 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.703280][ T5144] EXT4-fs error (device loop5): dx_make_map:1328: inode #2: block 33: comm syz.5.232: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 115.848718][ T5144] EXT4-fs error (device loop5) in do_split:2097: Corrupt filesystem [ 116.078720][ T5177] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.235078][ T5182] overlayfs: failed to clone upperpath [ 116.703789][ T5198] FAULT_INJECTION: forcing a failure. [ 116.703789][ T5198] name failslab, interval 1, probability 0, space 0, times 1 [ 116.774048][ T5198] CPU: 0 PID: 5198 Comm: syz.2.246 Not tainted syzkaller #0 [ 116.781400][ T5198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.781452][ T5198] Call Trace: [ 116.781462][ T5198] [ 116.781471][ T5198] dump_stack_lvl+0x188/0x250 [ 116.795691][ T5198] ? show_regs_print_info+0x20/0x20 [ 116.808565][ T5198] ? load_image+0x410/0x410 [ 116.813121][ T5198] ? __might_sleep+0xf0/0xf0 [ 116.813152][ T5198] ? __lock_acquire+0x7d40/0x7d40 [ 116.822826][ T5198] should_fail+0x383/0x4b0 [ 116.827311][ T5198] should_failslab+0x5/0x20 [ 116.831861][ T5198] slab_pre_alloc_hook+0x51/0xc0 [ 116.836846][ T5198] ? key_alloc+0x302/0x1030 [ 116.841786][ T5198] kmem_cache_alloc+0x3d/0x280 [ 116.846650][ T5198] ? key_user_lookup+0x1b8/0x450 [ 116.851646][ T5198] key_alloc+0x302/0x1030 [ 116.851678][ T5198] ? clear_nonspinnable+0x60/0x60 [ 116.851715][ T5198] keyring_alloc+0x41/0xa0 [ 116.851742][ T5198] keyctl_get_persistent+0x4a0/0x780 [ 116.861454][ T5198] ? proc_key_users_show+0x310/0x310 [ 116.861489][ T5198] ? verify_lock_unused+0x140/0x140 [ 116.861521][ T5198] ? do_futex+0xdc2/0x12b0 [ 116.871231][ T5198] ? vfs_write+0xaa6/0xd70 [ 116.871265][ T5198] __se_sys_keyctl+0x61e/0xa20 [ 116.871295][ T5198] ? __x64_sys_keyctl+0xc0/0xc0 [ 116.901196][ T5198] ? __context_tracking_exit+0x4c/0x80 [ 116.906990][ T5198] ? __lock_acquire+0x7d40/0x7d40 [ 116.912077][ T5198] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.918108][ T5198] ? lock_chain_count+0x20/0x20 [ 116.918149][ T5198] ? lockdep_hardirqs_on+0x94/0x140 [ 116.928238][ T5198] ? __x64_sys_keyctl+0x1c/0xc0 [ 116.933131][ T5198] do_syscall_64+0x4c/0xa0 [ 116.933158][ T5198] ? clear_bhb_loop+0x30/0x80 [ 116.933182][ T5198] ? clear_bhb_loop+0x30/0x80 [ 116.942296][ T5198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.942325][ T5198] RIP: 0033:0x7faff669f199 [ 116.942347][ T5198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.953039][ T5198] RSP: 002b:00007faff48f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 116.953083][ T5198] RAX: ffffffffffffffda RBX: 00007faff6926fa0 RCX: 00007faff669f199 [ 116.953100][ T5198] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 116.953117][ T5198] RBP: 00007faff67368e0 R08: 0000000000000000 R09: 0000000000000000 [ 116.953131][ T5198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.953143][ T5198] R13: 00007faff6927038 R14: 00007faff6926fa0 R15: 00007ffc83008b98 [ 116.977699][ T5198] [ 117.539114][ T5216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 118.395804][ T5232] file system registered [ 118.455935][ T5236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.256'. [ 118.595095][ T4196] ffs_data_put(): freeing [ 118.719894][ T5244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'. [ 119.060572][ T5263] device veth0_macvtap left promiscuous mode [ 119.281071][ T5267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.264'. [ 119.320454][ T5269] sch_tbf: burst 88 is lower than device hsr0 mtu (1508) ! [ 119.384753][ T5263] syz.0.260 (5263) used greatest stack depth: 20432 bytes left [ 119.768930][ C0] net_ratelimit: 39 callbacks suppressed [ 119.790334][ T5286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 119.836085][ T5287] netlink: 'syz.5.271': attribute type 1 has an invalid length. [ 119.924944][ T5287] batman_adv: batadv0: Adding interface: geneve2 [ 119.972045][ T5287] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 120.271764][ T5306] syz.5.275 uses obsolete (PF_INET,SOCK_PACKET) [ 121.083639][ T5337] netlink: 24 bytes leftover after parsing attributes in process `syz.5.282'. [ 121.445932][ T5351] netlink: 24 bytes leftover after parsing attributes in process `syz.5.285'. [ 121.872359][ T5362] loop1: detected capacity change from 0 to 8192 [ 122.031189][ T5362] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.197203][ T5386] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 122.823025][ T5401] netlink: 'syz.1.298': attribute type 21 has an invalid length. [ 122.853058][ T5401] netlink: 'syz.1.298': attribute type 10 has an invalid length. [ 122.869229][ T5401] netlink: 'syz.1.298': attribute type 12 has an invalid length. [ 122.897813][ T5401] netlink: 'syz.1.298': attribute type 13 has an invalid length. [ 122.947472][ T5401] netlink: 'syz.1.298': attribute type 14 has an invalid length. [ 122.975989][ T5401] netlink: 'syz.1.298': attribute type 15 has an invalid length. [ 122.979136][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.039067][ T5401] netlink: 'syz.1.298': attribute type 16 has an invalid length. [ 123.099180][ T5401] netlink: 'syz.1.298': attribute type 19 has an invalid length. [ 123.107500][ T5401] netlink: 'syz.1.298': attribute type 21 has an invalid length. [ 123.250125][ T5401] netlink: 12226 bytes leftover after parsing attributes in process `syz.1.298'. [ 123.268824][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 123.429293][ T23] usb 6-1: unable to get BOS descriptor or descriptor too short [ 123.509174][ T23] usb 6-1: config 14 has an invalid interface number: 228 but max is 0 [ 123.548869][ T23] usb 6-1: config 14 has no interface number 0 [ 123.586174][ T23] usb 6-1: config 14 interface 228 has no altsetting 0 [ 123.750893][ T4265] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.759288][ T23] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 123.780962][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.818405][ T23] usb 6-1: Product: syz [ 123.831191][ T23] usb 6-1: Manufacturer: syz [ 123.853636][ T23] usb 6-1: SerialNumber: syz [ 123.962109][ T5437] FAULT_INJECTION: forcing a failure. [ 123.962109][ T5437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.000155][ T3852] device veth0_macvtap entered promiscuous mode [ 124.051539][ T5437] CPU: 0 PID: 5437 Comm: syz.1.310 Not tainted syzkaller #0 [ 124.059108][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.069249][ T5437] Call Trace: [ 124.072968][ T5437] [ 124.075954][ T5437] dump_stack_lvl+0x188/0x250 [ 124.080821][ T5437] ? show_regs_print_info+0x20/0x20 [ 124.086560][ T5437] ? load_image+0x410/0x410 [ 124.091700][ T5437] ? __lock_acquire+0x7d40/0x7d40 [ 124.097670][ T5437] should_fail+0x383/0x4b0 [ 124.102247][ T5437] _copy_from_user+0x2e/0x170 [ 124.106983][ T5437] do_ipt_set_ctl+0x630/0xd70 [ 124.111941][ T5437] ? nf_setsockopt+0x218/0x280 [ 124.117302][ T5437] ? ipt_unregister_table_exit+0x220/0x220 [ 124.123252][ T5437] ? __lock_acquire+0x7d40/0x7d40 [ 124.128434][ T5437] ? __mutex_lock_common+0x435/0x2400 [ 124.134014][ T5437] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 124.139805][ T5437] ? mutex_unlock+0x10/0x10 [ 124.145235][ T5437] ? __local_bh_enable_ip+0x136/0x1c0 [ 124.150666][ T5437] ? lockdep_hardirqs_on+0x94/0x140 [ 124.156464][ T5437] ? __local_bh_enable_ip+0x136/0x1c0 [ 124.162003][ T5437] nf_setsockopt+0x25f/0x280 [ 124.166699][ T5437] ip_setsockopt+0x29c3/0x31e0 [ 124.171627][ T5437] ? ipv4_pktinfo_prepare+0x6b0/0x6b0 [ 124.177191][ T5437] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.183242][ T5437] ? __lock_acquire+0x7d40/0x7d40 [ 124.188328][ T5437] ? udp_setsockopt+0x77/0xa0 [ 124.193092][ T5437] ipv6_setsockopt+0x2cf/0x3cc0 [ 124.199023][ T5437] ? finish_lock_switch+0x12d/0x290 [ 124.204424][ T5437] ? finish_lock_switch+0x12d/0x290 [ 124.209681][ T5437] ? finish_task_switch+0x12f/0x650 [ 124.214942][ T5437] ? ipv6_update_options+0x400/0x400 [ 124.220275][ T5437] ? __schedule+0x11cb/0x4350 [ 124.224997][ T5437] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 124.231057][ T5437] ? futex_wait_queue_me+0x16e/0x440 [ 124.236396][ T5437] ? __might_sleep+0xf0/0xf0 [ 124.241072][ T5437] ? __lock_acquire+0x7d40/0x7d40 [ 124.246162][ T5437] ? futex_wait_queue_me+0x2d6/0x440 [ 124.251740][ T5437] ? mark_lock+0x94/0x320 [ 124.256134][ T5437] ? __lock_acquire+0x13b3/0x7d40 [ 124.261269][ T5437] ? aa_label_sk_perm+0x3e6/0x540 [ 124.266880][ T5437] ? aa_sk_perm+0x910/0x910 [ 124.271497][ T5437] ? do_futex+0xdc2/0x12b0 [ 124.275970][ T5437] ? __might_sleep+0xf0/0xf0 [ 124.280607][ T5437] ? rcu_is_watching+0x11/0xa0 [ 124.285422][ T5437] ? kfree+0x4a/0x2a0 [ 124.289467][ T5437] tcp_setsockopt+0x229/0x1e60 [ 124.294286][ T5437] ? aa_sk_perm+0x7dc/0x910 [ 124.298837][ T5437] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 124.304399][ T5437] ? aa_af_perm+0x340/0x340 [ 124.309111][ T5437] ? __lock_acquire+0x7d40/0x7d40 [ 124.314737][ T5437] ? aa_sock_opt_perm+0x74/0x100 [ 124.320094][ T5437] ? sock_common_setsockopt+0x32/0xb0 [ 124.325793][ T5437] ? sock_common_recvmsg+0x1c0/0x1c0 [ 124.331618][ T5437] __sys_setsockopt+0x2bf/0x3d0 [ 124.336567][ T5437] __x64_sys_setsockopt+0xb1/0xc0 [ 124.341779][ T5437] do_syscall_64+0x4c/0xa0 [ 124.346268][ T5437] ? clear_bhb_loop+0x30/0x80 [ 124.351000][ T5437] ? clear_bhb_loop+0x30/0x80 [ 124.355747][ T5437] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.362253][ T5437] RIP: 0033:0x7fa81781c199 [ 124.366997][ T5437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.387343][ T5437] RSP: 002b:00007fa815a74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 124.395814][ T5437] RAX: ffffffffffffffda RBX: 00007fa817aa3fa0 RCX: 00007fa81781c199 [ 124.403930][ T5437] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 124.412468][ T5437] RBP: 00007fa8178b38e0 R08: 0000000000000400 R09: 0000000000000000 [ 124.412497][ T5437] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 124.412511][ T5437] R13: 00007fa817aa4038 R14: 00007fa817aa3fa0 R15: 00007ffc4e538e28 [ 124.412543][ T5437] [ 124.971653][ C1] net_ratelimit: 38 callbacks suppressed [ 125.990443][ T23] legousbtower 6-1:14.228: interrupt endpoints not found [ 126.157270][ T23] usb 6-1: USB disconnect, device number 2 [ 126.765745][ T5484] loop1: detected capacity change from 0 to 256 [ 126.922976][ T5484] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 127.472894][ T5494] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 127.480348][ T5494] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 127.555448][ T5494] vhci_hcd vhci_hcd.0: Device attached [ 127.634018][ T5501] loop2: detected capacity change from 0 to 512 [ 127.819203][ T4237] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 127.858945][ T7] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 127.891481][ T5501] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 127.928940][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.933000][ T5501] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.047111][ T5501] EXT4-fs (loop2): 1 truncate cleaned up [ 128.115753][ T5501] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,quota,lazytime,errors=remount-ro,quota,quota,. Quota mode: writeback. [ 128.261771][ T7] usb 6-1: config 0 has no interfaces? [ 128.267427][ T7] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.318822][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.370545][ T7] usb 6-1: config 0 descriptor?? [ 128.461961][ T4204] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 128.580185][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 128.633893][ T4204] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 128.676737][ T7] usb 6-1: USB disconnect, device number 3 [ 128.692862][ T5495] usb 43-1: recv xbuf, 0 [ 128.705250][ T4352] vhci_hcd: stop threads [ 128.711002][ T4352] vhci_hcd: release socket [ 128.748801][ T4352] vhci_hcd: disconnect device [ 128.778995][ T4237] vhci_hcd: vhci_device speed not set [ 128.962960][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 129.040559][ T4204] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 129.203902][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 129.249089][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 129.296940][ T5539] loop1: detected capacity change from 0 to 256 [ 129.309310][ T4204] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 129.400102][ T5539] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d) [ 129.530820][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 129.593045][ T4204] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 129.761086][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 129.767700][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 129.947013][ T4204] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 130.168803][ C0] net_ratelimit: 41 callbacks suppressed [ 130.238069][ C0] hrtimer: interrupt took 106732 ns [ 130.266913][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 130.306651][ T4204] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 130.525791][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 130.561854][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 130.648448][ T4204] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 130.832217][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 130.850826][ T4204] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 131.051146][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 131.109118][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 131.182942][ T4204] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 131.301261][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 131.353776][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 131.552275][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 131.627653][ T5593] netlink: 24 bytes leftover after parsing attributes in process `syz.5.340'. [ 131.687253][ T5591] FAULT_INJECTION: forcing a failure. [ 131.687253][ T5591] name failslab, interval 1, probability 0, space 0, times 0 [ 131.712358][ T5591] CPU: 0 PID: 5591 Comm: syz.1.339 Not tainted syzkaller #0 [ 131.719725][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.729833][ T5591] Call Trace: [ 131.733204][ T5591] [ 131.736216][ T5591] dump_stack_lvl+0x188/0x250 [ 131.742084][ T5591] ? show_regs_print_info+0x20/0x20 [ 131.748070][ T5591] ? load_image+0x410/0x410 [ 131.753130][ T5591] ? __might_sleep+0xf0/0xf0 [ 131.757958][ T5591] ? __lock_acquire+0x7d40/0x7d40 [ 131.763055][ T5591] should_fail+0x383/0x4b0 [ 131.767662][ T5591] should_failslab+0x5/0x20 [ 131.772365][ T5591] slab_pre_alloc_hook+0x51/0xc0 [ 131.775814][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 131.777365][ T5591] ? security_inode_alloc+0x30/0x110 [ 131.797938][ T5591] kmem_cache_alloc+0x3d/0x280 [ 131.802771][ T5591] security_inode_alloc+0x30/0x110 [ 131.807947][ T5591] inode_init_always+0x8e5/0xc90 [ 131.812952][ T5591] new_inode_pseudo+0x8e/0x210 [ 131.817781][ T5591] __ns_get_path+0x21d/0x600 [ 131.822440][ T5591] ns_get_path+0x50/0x90 [ 131.826851][ T5591] proc_ns_get_link+0x168/0x290 [ 131.831766][ T5591] ? proc_ns_instantiate+0xf0/0xf0 [ 131.836977][ T5591] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 131.843199][ T5591] ? lockdep_hardirqs_on+0x94/0x140 [ 131.848465][ T5591] ? pick_link+0x112/0xdc0 [ 131.852937][ T5591] ? bpf_lsm_inode_follow_link+0x5/0x10 [ 131.858535][ T5591] ? security_inode_follow_link+0xb3/0x100 [ 131.864395][ T5591] ? proc_ns_instantiate+0xf0/0xf0 [ 131.870097][ T5591] pick_link+0x6ba/0xdc0 [ 131.874425][ T5591] step_into+0xac6/0xcd0 [ 131.878754][ T5591] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 131.884094][ T5591] ? set_root+0x3a0/0x3a0 [ 131.888513][ T5591] ? d_splice_alias+0x110/0x320 [ 131.893519][ T5591] path_openat+0x1641/0x2fb0 [ 131.898228][ T5591] ? do_filp_open+0x400/0x400 [ 131.903004][ T5591] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 131.909066][ T5591] do_filp_open+0x1df/0x400 [ 131.913631][ T5591] ? vfs_tmpfile+0x300/0x300 [ 131.918421][ T5591] ? _raw_spin_unlock+0x24/0x40 [ 131.923308][ T5591] ? alloc_fd+0x59e/0x650 [ 131.923341][ T5591] do_sys_openat2+0x14b/0x500 [ 131.923363][ T5591] ? __lock_acquire+0x7d40/0x7d40 [ 131.932429][ T5591] ? do_sys_open+0xe0/0xe0 [ 131.932457][ T5591] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 131.942122][ T5591] ? lock_chain_count+0x20/0x20 [ 131.942160][ T5591] __x64_sys_openat+0x135/0x160 [ 131.942190][ T5591] do_syscall_64+0x4c/0xa0 [ 131.953026][ T5591] ? clear_bhb_loop+0x30/0x80 [ 131.953059][ T5591] ? clear_bhb_loop+0x30/0x80 [ 131.953089][ T5591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.962368][ T5591] RIP: 0033:0x7fa8177dc9ce [ 131.962393][ T5591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.962412][ T5591] RSP: 002b:00007fa815a73ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.972091][ T5591] RAX: ffffffffffffffda RBX: 00007fa815a746c0 RCX: 00007fa8177dc9ce [ 131.972111][ T5591] RDX: 0000000000000002 RSI: 00007fa815a73f90 RDI: ffffffffffffff9c [ 131.972126][ T5591] RBP: 00007fa8178b38e0 R08: 0000000000000000 R09: 0000000000000000 [ 131.972141][ T5591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.982661][ T5591] R13: 00007fa817aa4038 R14: 00007fa817aa3fa0 R15: 00007ffc4e538e28 [ 131.982697][ T5591] [ 132.209997][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 132.422727][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 132.527134][ T5599] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4576] was attempted by "\x22"[5599] [ 132.571275][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 132.650929][ T5601] bridge0: port 3(vlan2) entered blocking state [ 132.665276][ T5601] bridge0: port 3(vlan2) entered disabled state [ 132.687773][ T5601] device vlan2 entered promiscuous mode [ 132.733370][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.744186][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.754111][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 133.474129][ T4204] EXT4-fs error: 130 callbacks suppressed [ 133.518409][ T4204] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 133.791187][ T4204] EXT4-fs: 130 callbacks suppressed [ 133.791207][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 133.803942][ T5634] netlink: 48 bytes leftover after parsing attributes in process `syz.1.351'. [ 133.839367][ T5634] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 133.886080][ T5636] loop0: detected capacity change from 0 to 128 [ 133.954343][ T4204] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 134.158624][ T5637] netlink: 48 bytes leftover after parsing attributes in process `syz.1.351'. [ 134.261799][ T5637] bond1: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 134.414039][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 134.497949][ T4204] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 134.698829][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 134.849759][ T4204] EXT4-fs warning: 60 callbacks suppressed [ 134.849818][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 135.022747][ T4204] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 135.063312][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 135.117483][ T4204] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 135.208804][ C1] net_ratelimit: 41 callbacks suppressed [ 135.231857][ T5663] device veth0 entered promiscuous mode [ 135.265636][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 135.346378][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 135.422277][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 135.541047][ T4204] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 135.651488][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 135.736128][ T4204] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 135.821259][ T5670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.361'. [ 135.951906][ T5670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.361'. [ 135.962767][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 136.054023][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 136.214355][ T4204] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 136.509644][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 136.516484][ T4204] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 136.568987][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.740288][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 136.746886][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 136.991609][ T4204] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 137.221678][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 137.298370][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 137.452542][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 137.716107][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 137.821972][ T5698] loop1: detected capacity change from 0 to 4096 [ 137.877192][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 137.914824][ T5698] ntfs3: Unknown parameter 'nocase' [ 138.122977][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 138.323274][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 138.490913][ T4204] EXT4-fs error: 13 callbacks suppressed [ 138.490976][ T4204] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 138.620942][ T4204] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 138.781504][ T4204] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 138.976797][ T4204] EXT4-fs: 15 callbacks suppressed [ 138.976817][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 139.116909][ T4204] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 139.195019][ T5716] FAULT_INJECTION: forcing a failure. [ 139.195019][ T5716] name fail_futex, interval 1, probability 0, space 0, times 1 [ 139.265802][ T5716] CPU: 1 PID: 5716 Comm: syz.1.372 Not tainted syzkaller #0 [ 139.273200][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.283290][ T5716] Call Trace: [ 139.286610][ T5716] [ 139.289572][ T5716] dump_stack_lvl+0x188/0x250 [ 139.294324][ T5716] ? show_regs_print_info+0x20/0x20 [ 139.299567][ T5716] ? load_image+0x410/0x410 [ 139.304908][ T5716] ? kfree+0xef/0x2a0 [ 139.308943][ T5716] should_fail+0x383/0x4b0 [ 139.313518][ T5716] get_futex_key+0x1a1/0x12d0 [ 139.318282][ T5716] ? __lock_acquire+0x13b3/0x7d40 [ 139.323354][ T5716] ? futex_wait_restart+0x250/0x250 [ 139.328618][ T5716] futex_wake+0x101/0x540 [ 139.333008][ T5716] ? futex_wait+0x680/0x680 [ 139.337558][ T5716] ? verify_lock_unused+0x140/0x140 [ 139.342815][ T5716] ? verify_lock_unused+0x140/0x140 [ 139.348070][ T5716] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 139.354236][ T5716] do_futex+0xd83/0x12b0 [ 139.358650][ T5716] ? futex_exit_release+0x1c0/0x1c0 [ 139.363904][ T5716] ? __context_tracking_exit+0x4c/0x80 [ 139.369422][ T5716] __se_sys_futex+0x389/0x420 [ 139.374151][ T5716] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 139.380231][ T5716] ? __x64_sys_futex+0xf0/0xf0 [ 139.385045][ T5716] ? __x64_sys_futex+0x1d/0xf0 [ 139.389864][ T5716] do_syscall_64+0x4c/0xa0 [ 139.394756][ T5716] ? clear_bhb_loop+0x30/0x80 [ 139.399555][ T5716] ? clear_bhb_loop+0x30/0x80 [ 139.404449][ T5716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.410396][ T5716] RIP: 0033:0x7fa81781c199 [ 139.414858][ T5716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.434519][ T5716] RSP: 002b:00007fa815a740e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 139.442992][ T5716] RAX: ffffffffffffffda RBX: 00007fa817aa3fa8 RCX: 00007fa81781c199 [ 139.451036][ T5716] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa817aa3fac [ 139.459169][ T5716] RBP: 00007fa817aa3fa0 R08: 0008b841d554686e R09: 0000000000000000 [ 139.467461][ T5716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.475465][ T5716] R13: 00007fa817aa4038 R14: 00007ffc4e538d40 R15: 00007ffc4e538e28 [ 139.475504][ T5716] [ 139.550726][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 139.590776][ T4204] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 139.797277][ T5723] loop5: detected capacity change from 0 to 164 [ 139.900867][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 139.995796][ T4204] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 140.163049][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 140.236356][ T4204] EXT4-fs warning: 3 callbacks suppressed [ 140.236394][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 140.315569][ T5732] input: syz1 as /devices/virtual/input/input6 [ 140.387548][ T5622] udevd[5622]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 140.408803][ C1] net_ratelimit: 40 callbacks suppressed [ 140.542191][ T4204] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 140.648986][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 140.743768][ T4204] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 140.966197][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 141.036308][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 141.162848][ T4204] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz-executor: path /84/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 141.335227][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 141.371877][ T4204] EXT4-fs error (device loop2): empty_inline_dir:1890: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 141.506457][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 141.542609][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 141.685654][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 141.694787][ T4204] EXT4-fs (loop2): Remounting filesystem read-only [ 141.744737][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 141.865969][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 141.970179][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 142.086246][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 142.230641][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 142.306126][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 142.438195][ T4204] EXT4-fs warning (device loop2): empty_inline_dir:1897: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 143.219579][ T5784] bridge0: port 3(syz_tun) entered blocking state [ 143.275488][ T5784] bridge0: port 3(syz_tun) entered disabled state [ 143.336501][ T5784] device syz_tun entered promiscuous mode [ 143.449186][ T5769] loop1: detected capacity change from 0 to 40427 [ 143.549409][ T5769] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 143.556427][ T5769] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 143.652462][ T1279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.712675][ T5769] F2FS-fs (loop1): invalid crc value [ 143.827625][ T5769] F2FS-fs (loop1): Found nat_bits in checkpoint [ 143.950015][ T5793] xt_TPROXY: Can be used only with -p tcp or -p udp [ 144.018274][ T5794] loop0: detected capacity change from 0 to 512 [ 144.042379][ T1279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.196721][ T5794] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.395: missing EA_INODE flag [ 144.219909][ T5769] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 144.227093][ T5769] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 144.299773][ T5794] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.395: error while reading EA inode 2 err=-117 [ 144.357476][ T5781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.389'. [ 144.459250][ T1279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.487293][ T5794] EXT4-fs (loop0): 1 orphan inode deleted [ 144.493482][ T5794] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 144.650306][ T5793] EXT4-fs (loop0): shut down requested (2) [ 144.781107][ T1279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.911382][ T5793] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 145.028958][ T5793] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 145.112317][ T5793] EXT4-fs (loop0): re-mounted. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 145.161451][ T4576] attempt to access beyond end of device [ 145.161451][ T4576] loop1: rw=2049, want=45104, limit=40427 [ 145.528876][ C1] net_ratelimit: 39 callbacks suppressed [ 146.650165][ T4204] syz-executor (4204) used greatest stack depth: 19984 bytes left [ 147.448958][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 147.784029][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 147.914499][ T5855] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 147.914499][ T5855] The task syz.3.403 (5855) triggered the difference, watch for misbehavior. [ 148.773869][ T26] audit: type=1804 audit(1791379888.261:5): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.408" name="/newroot/98/file0/file1" dev="overlay" ino=565 res=1 errno=0 [ 149.557807][ T4237] Bluetooth: hci4: command 0x041b tx timeout [ 149.614357][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.769740][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.829479][ T5808] device bridge_slave_0 entered promiscuous mode [ 149.873195][ T5853] loop1: detected capacity change from 0 to 32768 [ 149.897074][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.971983][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.047724][ T5808] device bridge_slave_1 entered promiscuous mode [ 150.101999][ T5853] (syz.1.405,5853,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "hear [ 150.101999][ T5853] " or missing value [ 150.202197][ T5853] (syz.1.405,5853,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 150.485392][ T5853] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 150.648826][ C1] net_ratelimit: 42 callbacks suppressed [ 150.747265][ T5896] loop0: detected capacity change from 0 to 164 [ 151.235841][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.305373][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.688945][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 151.923782][ T5808] team0: Port device team_slave_0 added [ 151.978063][ T5808] team0: Port device team_slave_1 added [ 152.437071][ T5921] FAULT_INJECTION: forcing a failure. [ 152.437071][ T5921] name failslab, interval 1, probability 0, space 0, times 0 [ 152.487079][ T5921] CPU: 0 PID: 5921 Comm: syz.0.416 Not tainted syzkaller #0 [ 152.494442][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.504543][ T5921] Call Trace: [ 152.507860][ T5921] [ 152.510820][ T5921] dump_stack_lvl+0x188/0x250 [ 152.510852][ T5921] ? show_regs_print_info+0x20/0x20 [ 152.510876][ T5921] ? load_image+0x410/0x410 [ 152.510901][ T5921] ? __might_sleep+0xf0/0xf0 [ 152.510922][ T5921] ? __lock_acquire+0x7d40/0x7d40 [ 152.510953][ T5921] should_fail+0x383/0x4b0 [ 152.539482][ T5921] should_failslab+0x5/0x20 [ 152.544031][ T5921] slab_pre_alloc_hook+0x51/0xc0 [ 152.549013][ T5921] __kmalloc+0x6b/0x340 [ 152.553204][ T5921] ? io_wq_create+0xc3/0xc00 [ 152.557859][ T5921] io_wq_create+0xc3/0xc00 [ 152.562326][ T5921] ? __init_waitqueue_head+0xa4/0x140 [ 152.567740][ T5921] io_uring_alloc_task_context+0x298/0x5c0 [ 152.573594][ T5921] ? __io_uring_add_tctx_node+0x500/0x500 [ 152.573622][ T5921] ? io_wq_free_work+0x1b0/0x1b0 [ 152.573643][ T5921] ? tctx_task_work+0x5e0/0x5e0 [ 152.573674][ T5921] ? __lock_acquire+0x7d40/0x7d40 [ 152.573702][ T5921] ? __rwlock_init+0x140/0x140 [ 152.573727][ T5921] __io_uring_add_tctx_node+0x37b/0x500 [ 152.573753][ T5921] ? __io_cqring_overflow_flush+0xa30/0xa30 [ 152.573777][ T5921] ? _raw_spin_unlock+0x24/0x40 [ 152.573799][ T5921] ? alloc_fd+0x59e/0x650 [ 152.573830][ T5921] io_uring_install_fd+0xc0/0xf0 [ 152.573858][ T5921] __se_sys_io_uring_setup+0x2303/0x2900 [ 152.573899][ T5921] ? __x64_sys_io_uring_setup+0x60/0x60 [ 152.573941][ T5921] ? lockdep_hardirqs_on+0x94/0x140 [ 152.573971][ T5921] do_syscall_64+0x4c/0xa0 [ 152.573992][ T5921] ? clear_bhb_loop+0x30/0x80 [ 152.574015][ T5921] ? clear_bhb_loop+0x30/0x80 [ 152.574040][ T5921] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.574065][ T5921] RIP: 0033:0x7f24040c6199 [ 152.584757][ T5921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.584783][ T5921] RSP: 002b:00007f240231dfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 152.595076][ T5921] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f24040c6199 [ 152.605411][ T5921] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000010 [ 152.666123][ T5921] RBP: 00007f240415d8e0 R08: 0000000000000000 R09: 0000000000000000 [ 152.666144][ T5921] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 152.666160][ T5921] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff4163c358 [ 152.666190][ T5921] [ 153.150043][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.157044][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.318291][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.472994][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061d6f000: rx timeout, send abort [ 153.501246][ T5933] xt_TPROXY: Can be used only with -p tcp or -p udp [ 153.556697][ T5933] loop1: detected capacity change from 0 to 512 [ 153.591193][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 153.801906][ T2302] Bluetooth: hci4: command 0x0419 tx timeout [ 153.858401][ T5933] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.418: missing EA_INODE flag [ 153.864502][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.924065][ T5933] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.418: error while reading EA inode 2 err=-117 [ 153.986507][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.013875][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.051516][ T5933] EXT4-fs (loop1): 1 orphan inode deleted [ 154.057322][ T5933] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 154.232075][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.304859][ T5933] EXT4-fs (loop1): shut down requested (2) [ 154.427540][ T5933] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 154.520268][ T5933] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 154.583046][ T5933] EXT4-fs (loop1): re-mounted. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 155.470898][ T1279] device hsr_slave_0 left promiscuous mode [ 155.886839][ T1279] device hsr_slave_1 left promiscuous mode [ 155.933877][ T5973] loop1: detected capacity change from 0 to 164 [ 156.248801][ C1] net_ratelimit: 42 callbacks suppressed [ 156.433115][ T1279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.444322][ T1279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.603428][ T5983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.428'. [ 156.637404][ T1279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.663614][ T1279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.849577][ T1279] device bridge_slave_1 left promiscuous mode [ 156.856036][ T1279] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.134688][ T1279] device bridge_slave_0 left promiscuous mode [ 157.153483][ T1279] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.341520][ T1279] device veth1_macvtap left promiscuous mode [ 157.358679][ T1279] device veth0_macvtap left promiscuous mode [ 157.390265][ T1279] device veth1_vlan left promiscuous mode [ 157.396168][ T1279] device veth0_vlan left promiscuous mode [ 159.585668][ T1279] team0 (unregistering): Port device team_slave_1 removed [ 159.689602][ T1279] team0 (unregistering): Port device team_slave_0 removed [ 159.859976][ T1279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.968432][ T4485] syz.3.71 (4485) used greatest stack depth: 17520 bytes left [ 160.049855][ T1279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.099539][ T6006] loop1: detected capacity change from 0 to 128 [ 160.980555][ T1279] bond0 (unregistering): Released all slaves [ 161.235940][ T5990] netlink: 48 bytes leftover after parsing attributes in process `syz.0.429'. [ 161.253986][ T5990] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 161.287505][ T5991] netlink: 48 bytes leftover after parsing attributes in process `syz.0.429'. [ 161.343448][ T5991] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 161.536329][ T5808] device hsr_slave_0 entered promiscuous mode [ 161.574779][ T5808] device hsr_slave_1 entered promiscuous mode [ 161.608785][ C1] net_ratelimit: 39 callbacks suppressed [ 163.943301][ T5808] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.158071][ T5808] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 164.501539][ T6072] loop0: detected capacity change from 0 to 1024 [ 164.609927][ T6072] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 164.683701][ T6072] EXT4-fs error (device loop0): ext4_get_journal_inode:5187: inode #32: comm syz.0.461: iget: special inode unallocated [ 164.789387][ T5808] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.808113][ T6072] EXT4-fs (loop0): no journal found [ 164.859296][ T6072] EXT4-fs (loop0): can't get journal size [ 164.893710][ T6072] EXT4-fs (loop0): filesystem is read-only [ 164.937143][ T6080] loop5: detected capacity change from 0 to 128 [ 164.969946][ T6072] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 165.075283][ T6080] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.229658][ T5808] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 165.252070][ T6080] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.370796][ T6088] validate_nla: 2 callbacks suppressed [ 165.370828][ T6088] netlink: 'syz.3.453': attribute type 2 has an invalid length. [ 165.811916][ T4352] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.032380][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.186152][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.222027][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.320410][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.359005][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 166.388690][ T6104] netlink: 180 bytes leftover after parsing attributes in process `syz.5.457'. [ 166.423345][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.459370][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.526009][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.533177][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.675335][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.698234][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.752502][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.799454][ T7] usb 1-1: config 0 has no interfaces? [ 166.807480][ T7] usb 1-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 166.809099][ C1] net_ratelimit: 32 callbacks suppressed [ 166.826998][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.834157][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.877313][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.926035][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.942031][ T7] usb 1-1: config 0 descriptor?? [ 166.993271][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.100187][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.155653][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.243565][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.308537][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.322672][ T6120] FAULT_INJECTION: forcing a failure. [ 167.322672][ T6120] name failslab, interval 1, probability 0, space 0, times 0 [ 167.337607][ T6120] CPU: 0 PID: 6120 Comm: syz.5.464 Not tainted syzkaller #0 [ 167.344950][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.355129][ T6120] Call Trace: [ 167.358448][ T6120] [ 167.361417][ T6120] dump_stack_lvl+0x188/0x250 [ 167.366142][ T6120] ? show_regs_print_info+0x20/0x20 [ 167.371396][ T6120] ? load_image+0x410/0x410 [ 167.376039][ T6120] ? __might_sleep+0xf0/0xf0 [ 167.380675][ T6120] ? __lock_acquire+0x7d40/0x7d40 [ 167.385754][ T6120] should_fail+0x383/0x4b0 [ 167.390218][ T6120] should_failslab+0x5/0x20 [ 167.394768][ T6120] slab_pre_alloc_hook+0x51/0xc0 [ 167.399744][ T6120] __kmalloc+0x6b/0x340 [ 167.403935][ T6120] ? io_wq_create+0xc3/0xc00 [ 167.408579][ T6120] io_wq_create+0xc3/0xc00 [ 167.413052][ T6120] ? __init_waitqueue_head+0xa4/0x140 [ 167.418478][ T6120] io_uring_alloc_task_context+0x298/0x5c0 [ 167.424342][ T6120] ? __io_uring_add_tctx_node+0x500/0x500 [ 167.430790][ T6120] ? io_wq_free_work+0x1b0/0x1b0 [ 167.430823][ T6120] ? tctx_task_work+0x5e0/0x5e0 [ 167.430847][ T6120] ? __lock_acquire+0x7d40/0x7d40 [ 167.440770][ T6120] ? __rwlock_init+0x140/0x140 [ 167.440801][ T6120] __io_uring_add_tctx_node+0x37b/0x500 [ 167.440832][ T6120] ? __io_cqring_overflow_flush+0xa30/0xa30 [ 167.450651][ T6120] ? _raw_spin_unlock+0x24/0x40 [ 167.450680][ T6120] ? alloc_fd+0x59e/0x650 [ 167.450709][ T6120] io_uring_install_fd+0xc0/0xf0 [ 167.462185][ T6120] __se_sys_io_uring_setup+0x2303/0x2900 [ 167.471389][ T6120] ? __x64_sys_io_uring_setup+0x60/0x60 [ 167.482038][ T6120] ? lockdep_hardirqs_on+0x94/0x140 [ 167.482075][ T6120] do_syscall_64+0x4c/0xa0 [ 167.492863][ T6120] ? clear_bhb_loop+0x30/0x80 [ 167.492890][ T6120] ? clear_bhb_loop+0x30/0x80 [ 167.492917][ T6120] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.502028][ T6120] RIP: 0033:0x7fa8c34ef199 [ 167.502051][ T6120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.502070][ T6120] RSP: 002b:00007fa8c1746fb8 EFLAGS: 00000206 [ 167.512961][ T6120] ORIG_RAX: 00000000000001a9 [ 167.512977][ T6120] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fa8c34ef199 [ 167.512996][ T6120] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000010 [ 167.513009][ T6120] RBP: 00007fa8c35868e0 R08: 0000000000000000 R09: 0000000000000000 [ 167.513025][ T6120] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 167.537380][ T6120] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff7fca2028 [ 167.537419][ T6120] [ 167.690728][ T13] usb 1-1: USB disconnect, device number 2 [ 167.703130][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.747429][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.762825][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.773139][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.813783][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.867711][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.125086][ T6132] fuse: Bad value for 'fd' [ 168.373656][ T6136] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 169.285370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.309253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.400562][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.885667][ T6166] loop0: detected capacity change from 0 to 256 [ 170.012700][ T6168] FAULT_INJECTION: forcing a failure. [ 170.012700][ T6168] name failslab, interval 1, probability 0, space 0, times 0 [ 170.036194][ T6106] udevd[6106]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 170.176244][ T6168] CPU: 1 PID: 6168 Comm: syz.1.475 Not tainted syzkaller #0 [ 170.183992][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 170.194110][ T6168] Call Trace: [ 170.198033][ T6168] [ 170.201009][ T6168] dump_stack_lvl+0x188/0x250 [ 170.205735][ T6168] ? show_regs_print_info+0x20/0x20 [ 170.210975][ T6168] ? load_image+0x410/0x410 [ 170.215519][ T6168] ? __might_sleep+0xf0/0xf0 [ 170.220148][ T6168] ? __lock_acquire+0x7d40/0x7d40 [ 170.225233][ T6168] should_fail+0x383/0x4b0 [ 170.229699][ T6168] should_failslab+0x5/0x20 [ 170.234240][ T6168] slab_pre_alloc_hook+0x51/0xc0 [ 170.239251][ T6168] __kmalloc+0x6b/0x340 [ 170.243526][ T6168] ? io_wq_create+0xc3/0xc00 [ 170.248163][ T6168] io_wq_create+0xc3/0xc00 [ 170.252735][ T6168] ? __init_waitqueue_head+0xa4/0x140 [ 170.258248][ T6168] io_uring_alloc_task_context+0x298/0x5c0 [ 170.264110][ T6168] ? __io_uring_add_tctx_node+0x500/0x500 [ 170.269892][ T6168] ? io_wq_free_work+0x1b0/0x1b0 [ 170.274877][ T6168] ? tctx_task_work+0x5e0/0x5e0 [ 170.279771][ T6168] ? __lock_acquire+0x7d40/0x7d40 [ 170.279806][ T6168] ? __rwlock_init+0x140/0x140 [ 170.284869][ T6168] __io_uring_add_tctx_node+0x37b/0x500 [ 170.284905][ T6168] ? __io_cqring_overflow_flush+0xa30/0xa30 [ 170.284930][ T6168] ? _raw_spin_unlock+0x24/0x40 [ 170.284955][ T6168] ? alloc_fd+0x59e/0x650 [ 170.284985][ T6168] io_uring_install_fd+0xc0/0xf0 [ 170.285014][ T6168] __se_sys_io_uring_setup+0x2303/0x2900 [ 170.285057][ T6168] ? __x64_sys_io_uring_setup+0x60/0x60 [ 170.285100][ T6168] ? lockdep_hardirqs_on+0x94/0x140 [ 170.285131][ T6168] do_syscall_64+0x4c/0xa0 [ 170.285153][ T6168] ? clear_bhb_loop+0x30/0x80 [ 170.285176][ T6168] ? clear_bhb_loop+0x30/0x80 [ 170.285203][ T6168] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.285236][ T6168] RIP: 0033:0x7fa81781c199 [ 170.285258][ T6168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.285278][ T6168] RSP: 002b:00007fa815a73fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 170.285305][ T6168] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007fa81781c199 [ 170.285323][ T6168] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000010 [ 170.285339][ T6168] RBP: 00007fa8178b38e0 R08: 0000000000000000 R09: 0000000000000000 [ 170.285354][ T6168] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 170.285369][ T6168] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc4e538e28 [ 170.285401][ T6168] [ 170.655087][ T6106] udevd[6106]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 170.726883][ T6106] udevd[6106]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 171.487915][ T6199] loop1: detected capacity change from 0 to 256 [ 171.552596][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.578275][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.657324][ T6106] udevd[6106]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 171.733306][ T6199] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.828970][ T6199] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.885003][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.914138][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.985086][ T5808] device veth0_vlan entered promiscuous mode [ 172.012762][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.045224][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.088858][ C0] net_ratelimit: 19 callbacks suppressed [ 172.155937][ T5808] device veth1_vlan entered promiscuous mode [ 172.293235][ T6211] loop5: detected capacity change from 0 to 2048 [ 172.349448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.372968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.443520][ T6106] udevd[6106]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 172.466088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.559828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.580784][ T6106] udevd[6106]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 172.598900][ T6211] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.706214][ T6106] udevd[6106]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 172.776027][ T5808] device veth0_macvtap entered promiscuous mode [ 172.832569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.842259][ T6106] udevd[6106]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 172.917742][ T5808] device veth1_macvtap entered promiscuous mode [ 173.137681][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.289475][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.347094][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.398586][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.426391][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.452684][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.544022][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.648436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.670938][ T6106] udevd[6106]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 173.730189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.760050][ T6106] udevd[6106]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 173.808342][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.870518][ T6237] loop5: detected capacity change from 0 to 16 [ 173.888394][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.938897][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.983239][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.017012][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.063011][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.115257][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.164712][ T6237] erofs: (device loop5): mounted with root inode @ nid 36. [ 174.198926][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.219374][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.228866][ T2302] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 174.291980][ T5808] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.322000][ T5808] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.361262][ T5808] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.369059][ T26] audit: type=1800 audit(1791379913.851:6): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.488" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 174.375772][ T5808] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.589261][ T2302] usb 2-1: config 0 has no interfaces? [ 174.595107][ T2302] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 174.678246][ T2302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.741812][ T2302] usb 2-1: config 0 descriptor?? [ 175.059048][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 175.260180][ T1237] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.298946][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 175.306087][ T7] usb 2-1: USB disconnect, device number 2 [ 175.497508][ T1237] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.579153][ T23] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 175.613367][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.646321][ T23] usb 1-1: Product: syz [ 175.671924][ T23] usb 1-1: Manufacturer: syz [ 175.724326][ T23] usb 1-1: SerialNumber: syz [ 175.762532][ T23] usb 1-1: config 0 descriptor?? [ 175.771732][ T6262] loop5: detected capacity change from 0 to 256 [ 175.784253][ T6107] udevd[6107]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 175.813627][ T23] gspca_main: se401-2.14.0 probing 047d:5003 [ 175.871722][ T6262] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 175.921121][ T1237] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.108528][ T26] audit: type=1804 audit(1791379915.591:7): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.494" name="/newroot/57/file0/bus" dev="loop5" ino=1048670 res=1 errno=0 [ 176.152602][ T1237] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.240009][ T23] gspca_se401: ExtraFeatures: 255 [ 176.245238][ T23] gspca_se401: Frame size: 0x256 bayer [ 176.277983][ T23] gspca_se401: Frame size: 8x6 bayer [ 176.318807][ T23] gspca_se401: Frame size: 0x0 1/16th janggu [ 176.325284][ T23] gspca_se401: Frame size: 0x0 1/16th janggu [ 176.411999][ T23] gspca_se401: Frame size: 0x0 1/16th janggu [ 176.459110][ T23] gspca_se401: Frame size: 0x0 1/16th janggu [ 176.501994][ T23] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 176.749914][ T23] usb 1-1: USB disconnect, device number 3 [ 177.056542][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 177.195420][ T6272] udevd[6272]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 177.288814][ C1] net_ratelimit: 59 callbacks suppressed [ 177.477397][ T6283] udevd[6283]: open /dev/null failed: No such file or directory [ 178.063927][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 178.748374][ T6306] Illegal XDP return value 4294967262, expect packet loss! [ 179.437448][ T1237] device hsr_slave_0 left promiscuous mode [ 179.468464][ T1237] device hsr_slave_1 left promiscuous mode [ 179.524260][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.567076][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.612090][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.656885][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.708899][ T1237] device bridge_slave_1 left promiscuous mode [ 179.743886][ T1237] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.759386][ T6326] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 179.788861][ T4237] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 179.906899][ T1237] device bridge_slave_0 left promiscuous mode [ 179.921102][ T1237] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.028966][ T4237] usb 6-1: Using ep0 maxpacket: 8 [ 180.049716][ T1237] device veth1_macvtap left promiscuous mode [ 180.076094][ T1237] device veth0_macvtap left promiscuous mode [ 180.119871][ T1237] device veth1_vlan left promiscuous mode [ 180.149276][ T4237] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.159770][ T1237] device veth0_vlan left promiscuous mode [ 180.181193][ T4237] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 180.218885][ T4237] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.300311][ T4237] usb 6-1: config 0 descriptor?? [ 180.362226][ T4237] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 181.077781][ T6333] loop0: detected capacity change from 0 to 512 [ 181.193627][ T6106] udevd[6106]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 181.271909][ T6106] udevd[6106]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 181.387651][ T6106] udevd[6106]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 181.899038][ T4237] gspca_vc032x: reg_w err -71 [ 181.903831][ T4237] vc032x: probe of 6-1:0.0 failed with error -71 [ 181.950201][ T4237] usb 6-1: USB disconnect, device number 4 [ 182.355751][ T1237] team0 (unregistering): Port device team_slave_1 removed [ 182.512725][ T1237] team0 (unregistering): Port device team_slave_0 removed [ 182.640869][ T1237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.651329][ C0] net_ratelimit: 37 callbacks suppressed [ 182.745792][ T1237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.323173][ T6351] FAULT_INJECTION: forcing a failure. [ 183.323173][ T6351] name failslab, interval 1, probability 0, space 0, times 0 [ 183.390621][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f1e6800: rx timeout, send abort [ 183.468064][ T6351] CPU: 1 PID: 6351 Comm: syz.0.516 Not tainted syzkaller #0 [ 183.475424][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 183.485533][ T6351] Call Trace: [ 183.488849][ T6351] [ 183.491811][ T6351] dump_stack_lvl+0x188/0x250 [ 183.496534][ T6351] ? show_regs_print_info+0x20/0x20 [ 183.501768][ T6351] ? load_image+0x410/0x410 [ 183.506324][ T6351] ? __might_sleep+0xf0/0xf0 [ 183.510949][ T6351] ? __lock_acquire+0x7d40/0x7d40 [ 183.516010][ T6351] ? preempt_schedule+0xbc/0xd0 [ 183.520909][ T6351] should_fail+0x383/0x4b0 [ 183.520946][ T6351] should_failslab+0x5/0x20 [ 183.520969][ T6351] slab_pre_alloc_hook+0x51/0xc0 [ 183.520994][ T6351] ? __d_alloc+0x27/0x6d0 [ 183.521018][ T6351] kmem_cache_alloc+0x3d/0x280 [ 183.521051][ T6351] __d_alloc+0x27/0x6d0 [ 183.521074][ T6351] ? d_alloc_pseudo+0xe/0x70 [ 183.521100][ T6351] d_alloc_pseudo+0x19/0x70 [ 183.521123][ T6351] alloc_file_pseudo+0xe0/0x200 [ 183.521153][ T6351] ? alloc_empty_file_noaccount+0x80/0x80 [ 183.521185][ T6351] ? alloc_fd+0x59e/0x650 [ 183.521210][ T6351] sock_alloc_file+0xb3/0x240 [ 183.530157][ T6351] __sys_socket+0x11d/0x170 [ 183.544259][ T6351] __x64_sys_socket+0x76/0x80 [ 183.544292][ T6351] do_syscall_64+0x4c/0xa0 [ 183.544317][ T6351] ? clear_bhb_loop+0x30/0x80 [ 183.544341][ T6351] ? clear_bhb_loop+0x30/0x80 [ 183.544369][ T6351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.544396][ T6351] RIP: 0033:0x7f24040c6199 [ 183.544417][ T6351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.544450][ T6351] RSP: 002b:00007f240231dfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 183.544476][ T6351] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f24040c6199 [ 183.544493][ T6351] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001a [ 183.544508][ T6351] RBP: 00007f240415d8e0 R08: 0000000000000000 R09: 0000000000000000 [ 183.544523][ T6351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.544538][ T6351] R13: 00007f240434e038 R14: 00007f240434dfa0 R15: 00007fff4163c358 [ 183.544571][ T6351] [ 183.891009][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f1e4000: rx timeout, send abort [ 183.902341][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f1e6800: abort rx timeout. Force session deactivation [ 184.092118][ T1237] bond0 (unregistering): Released all slaves [ 184.282504][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.515'. [ 187.368640][ T6402] loop1: detected capacity change from 0 to 256 [ 187.543004][ T6405] udevd[6405]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 187.779136][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.855322][ T6408] FAULT_INJECTION: forcing a failure. [ 187.855322][ T6408] name failslab, interval 1, probability 0, space 0, times 0 [ 187.869134][ T6408] CPU: 1 PID: 6408 Comm: syz.0.528 Not tainted syzkaller #0 [ 187.876474][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 187.886567][ T6408] Call Trace: [ 187.889916][ T6408] [ 187.892880][ T6408] dump_stack_lvl+0x188/0x250 [ 187.897594][ T6408] ? do_raw_read_unlock+0x70/0x70 [ 187.902656][ T6408] ? show_regs_print_info+0x20/0x20 [ 187.907887][ T6408] ? load_image+0x410/0x410 [ 187.912451][ T6408] ? lockdep_hardirqs_off+0x70/0x100 [ 187.917781][ T6408] ? _raw_write_lock_irq+0xb7/0xf0 [ 187.922928][ T6408] ? _raw_write_lock_irqsave+0x100/0x100 [ 187.928601][ T6408] should_fail+0x383/0x4b0 [ 187.933058][ T6408] should_failslab+0x5/0x20 [ 187.937623][ T6408] slab_pre_alloc_hook+0x51/0xc0 [ 187.942620][ T6408] ? netlink_realloc_groups+0x114/0x270 [ 187.948214][ T6408] __kmalloc_track_caller+0x69/0x330 [ 187.953533][ T6408] ? netlink_realloc_groups+0x114/0x270 [ 187.959124][ T6408] krealloc+0x5a/0xf0 [ 187.963141][ T6408] netlink_realloc_groups+0x114/0x270 [ 187.968571][ T6408] netlink_bind+0x2a7/0xd30 [ 187.973115][ T6408] ? netlink_release+0x1790/0x1790 [ 187.978265][ T6408] ? bpf_lsm_socket_bind+0x5/0x10 [ 187.983324][ T6408] ? security_socket_bind+0x7c/0xa0 [ 187.988564][ T6408] __sys_bind+0x2e9/0x3e0 [ 187.993041][ T6408] ? __ia32_sys_socketpair+0xb0/0xb0 [ 187.998397][ T6408] __x64_sys_bind+0x76/0x80 [ 188.002969][ T6408] do_syscall_64+0x4c/0xa0 [ 188.007431][ T6408] ? clear_bhb_loop+0x30/0x80 [ 188.012141][ T6408] ? clear_bhb_loop+0x30/0x80 [ 188.012368][ T6408] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.012396][ T6408] RIP: 0033:0x7f24040c6199 [ 188.012419][ T6408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.012445][ T6408] RSP: 002b:00007f240231e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 188.012472][ T6408] RAX: ffffffffffffffda RBX: 00007f240434dfa0 RCX: 00007f24040c6199 [ 188.012490][ T6408] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000003 [ 188.012505][ T6408] RBP: 00007f240415d8e0 R08: 0000000000000000 R09: 0000000000000000 [ 188.012520][ T6408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.012535][ T6408] R13: 00007f240434e038 R14: 00007f240434dfa0 R15: 00007fff4163c358 [ 188.012570][ T6408] [ 188.316009][ T6405] udevd[6405]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 188.345715][ T6414] loop5: detected capacity change from 0 to 1024 [ 188.381600][ T6405] udevd[6405]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 188.480913][ T6414] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.543050][ T6416] udevd[6416]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 188.568779][ C1] net_ratelimit: 24 callbacks suppressed [ 188.643315][ T6414] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsold,dioread_nolock,resuid=0x0000000000000000,usrquota,nobarrier,journal_ioprio=0x0000000000000005,abort,nombcache,nouid32,norecovery,,errors=continue. Quota mode: writeback. [ 188.717882][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 189.190867][ T6416] udevd[6416]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 189.280471][ T6416] udevd[6416]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 190.935383][ T6448] bond0: (slave bond_slave_1): Releasing backup interface [ 191.129862][ T4235] Bluetooth: hci2: command 0x0406 tx timeout [ 191.166756][ T4235] Bluetooth: hci0: command 0x0406 tx timeout [ 191.226971][ T6456] netlink: 'syz.3.536': attribute type 8 has an invalid length. [ 193.306191][ T6459] loop5: detected capacity change from 0 to 40427 [ 193.374413][ T6482] udevd[6482]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 193.465361][ T6459] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 193.504215][ T6459] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 193.643037][ T6459] F2FS-fs (loop5): invalid crc value [ 193.711301][ T6459] F2FS-fs (loop5): Found nat_bits in checkpoint [ 193.768777][ C1] net_ratelimit: 27 callbacks suppressed [ 194.107507][ T6459] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 194.137992][ T6459] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 194.174436][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.184950][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.775317][ T6482] udevd[6482]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 194.836698][ T6482] udevd[6482]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 197.925694][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 198.170378][ T13] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 198.458984][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 198.609686][ T13] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 198.640288][ T13] usb 6-1: config 0 has no interface number 0 [ 198.648587][ T13] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 198.758977][ T13] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.812000][ T13] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 198.849552][ T13] usb 6-1: config 0 interface 196 has no altsetting 0 [ 199.048787][ C1] net_ratelimit: 23 callbacks suppressed [ 199.059506][ T13] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 199.078900][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.088333][ T13] usb 6-1: Product: syz [ 199.129014][ T13] usb 6-1: Manufacturer: syz [ 199.134579][ T13] usb 6-1: SerialNumber: syz [ 199.151555][ T13] usb 6-1: config 0 descriptor?? [ 199.179605][ T6579] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 199.649369][ T13] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 199.679360][ T13] ipheth: probe of 6-1:0.196 failed with error -22 [ 199.730550][ T13] usb 6-1: USB disconnect, device number 5 [ 200.413886][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 203.572610][ T6699] loop1: detected capacity change from 0 to 512 [ 203.678350][ T6700] udevd[6700]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 204.217173][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 204.248796][ C1] net_ratelimit: 26 callbacks suppressed [ 204.338461][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 204.427920][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 205.316979][ T6702] loop5: detected capacity change from 0 to 32768 [ 205.332561][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 205.450905][ T6702] XFS (loop5): Mounting V5 Filesystem [ 205.515520][ T6702] XFS (loop5): Ending clean mount [ 205.567852][ T26] audit: type=1800 audit(1791379945.051:8): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.581" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 206.015567][ T4611] XFS (loop5): Unmounting Filesystem [ 206.608391][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 206.652747][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 206.776550][ T6764] loop1: detected capacity change from 0 to 256 [ 206.838664][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 206.937095][ T6764] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xe93b6305, utbl_chksum : 0xe619d30d) [ 207.040523][ T6769] overlayfs: failed to clone upperpath [ 207.357954][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 207.419921][ T6777] netlink: 24 bytes leftover after parsing attributes in process `syz.5.586'. [ 207.436611][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 207.701520][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.5.586'. [ 209.481332][ T6815] loop5: detected capacity change from 0 to 128 [ 209.608766][ C1] net_ratelimit: 24 callbacks suppressed [ 209.647739][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 209.685761][ T6820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.600'. [ 210.324580][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 210.433199][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 211.619270][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 212.391566][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'. [ 213.177166][ T6878] netlink: 100 bytes leftover after parsing attributes in process `syz.5.615'. [ 214.650221][ T4354] net_ratelimit: 24 callbacks suppressed [ 215.065265][ T6907] loop0: detected capacity change from 0 to 4096 [ 215.107419][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 215.155020][ T6909] loop5: detected capacity change from 0 to 256 [ 215.174012][ T6912] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 215.197718][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 215.215167][ T6912] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 215.232742][ T6912] loop0: [ 215.254439][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 215.310267][ T6909] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 215.377624][ T6915] 8021q: VLANs not supported on gre0 [ 215.405693][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 215.521826][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 215.727616][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 215.852534][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 216.739200][ T4237] Bluetooth: hci3: command 0x0406 tx timeout [ 218.321991][ T6997] FAULT_INJECTION: forcing a failure. [ 218.321991][ T6997] name failslab, interval 1, probability 0, space 0, times 0 [ 218.374642][ T6997] CPU: 1 PID: 6997 Comm: syz.0.628 Not tainted syzkaller #0 [ 218.382003][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 218.392103][ T6997] Call Trace: [ 218.395426][ T6997] [ 218.398424][ T6997] dump_stack_lvl+0x188/0x250 [ 218.403144][ T6997] ? show_regs_print_info+0x20/0x20 [ 218.408386][ T6997] ? load_image+0x410/0x410 [ 218.412930][ T6997] ? __might_sleep+0xf0/0xf0 [ 218.417569][ T6997] ? __lock_acquire+0x7d40/0x7d40 [ 218.422650][ T6997] should_fail+0x383/0x4b0 [ 218.427134][ T6997] should_failslab+0x5/0x20 [ 218.431677][ T6997] slab_pre_alloc_hook+0x51/0xc0 [ 218.436658][ T6997] kmem_cache_alloc_trace+0x47/0x290 [ 218.441999][ T6997] ? mqueue_init_fs_context+0x53/0x360 [ 218.447699][ T6997] mqueue_init_fs_context+0x53/0x360 [ 218.453024][ T6997] alloc_fs_context+0x628/0x7d0 [ 218.457936][ T6997] mq_init_ns+0x106/0x510 [ 218.462309][ T6997] copy_ipcs+0x2ea/0x4b0 [ 218.466608][ T6997] create_new_namespaces+0x212/0x700 [ 218.472114][ T6997] unshare_nsproxy_namespaces+0x116/0x160 [ 218.477887][ T6997] ksys_unshare+0x4f6/0x8e0 [ 218.482437][ T6997] ? __lock_acquire+0x7d40/0x7d40 [ 218.487531][ T6997] ? sighand_ctor+0x40/0x40 [ 218.492086][ T6997] ? lock_chain_count+0x20/0x20 [ 218.497252][ T6997] ? syscall_enter_from_user_mode+0x21/0x70 [ 218.503195][ T6997] __x64_sys_unshare+0x34/0x40 [ 218.508012][ T6997] do_syscall_64+0x4c/0xa0 [ 218.512474][ T6997] ? clear_bhb_loop+0x30/0x80 [ 218.512500][ T6997] ? clear_bhb_loop+0x30/0x80 [ 218.512524][ T6997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.512550][ T6997] RIP: 0033:0x7f24040c6199 [ 218.512572][ T6997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.512593][ T6997] RSP: 002b:00007f240231e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 218.512618][ T6997] RAX: ffffffffffffffda RBX: 00007f240434dfa0 RCX: 00007f24040c6199 [ 218.512637][ T6997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 218.512651][ T6997] RBP: 00007f240415d8e0 R08: 0000000000000000 R09: 0000000000000000 [ 218.512667][ T6997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.512682][ T6997] R13: 00007f240434e038 R14: 00007f240434dfa0 R15: 00007fff4163c358 [ 218.512715][ T6997] [ 218.844578][ T7008] loop1: detected capacity change from 0 to 512 [ 218.898080][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 218.913062][ T7011] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 218.963725][ T7008] EXT4-fs (loop1): Ignoring removed bh option [ 219.152272][ T7008] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.632: corrupted in-inode xattr [ 219.230720][ T7019] loop5: detected capacity change from 0 to 256 [ 219.253196][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 219.270312][ T7008] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.632: couldn't read orphan inode 15 (err -117) [ 219.379263][ T7008] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 219.420914][ T7023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.637'. [ 219.491178][ T7026] loop0: detected capacity change from 0 to 512 [ 219.556915][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 219.615651][ T7026] EXT4-fs (loop0): inline encryption not supported [ 219.639181][ T7026] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 219.731586][ T7026] EXT4-fs (loop0): 1 truncate cleaned up [ 219.758897][ T7026] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 219.778616][ C0] net_ratelimit: 25 callbacks suppressed [ 219.789717][ T7008] EXT4-fs (loop1): shut down requested (2) [ 220.123303][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 220.156477][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 220.522942][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 220.563368][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 221.890079][ T26] audit: type=1326 audit(1791379961.371:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.0.638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24040c6199 code=0x7ffc0000 [ 221.988132][ T26] audit: type=1326 audit(1791379961.371:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.0.638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24040c6199 code=0x7ffc0000 [ 222.109206][ T26] audit: type=1326 audit(1791379961.401:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.0.638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f24040825ec code=0x7ffc0000 [ 222.299696][ T26] audit: type=1326 audit(1791379961.401:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.0.638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f240408264e code=0x7ffc0000 [ 222.435526][ T26] audit: type=1326 audit(1791379961.401:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.0.638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f24040c5e2b code=0x7ffc0000 [ 222.584004][ T26] audit: type=1326 audit(1791379961.401:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.0.638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f24040c6199 code=0x7ffc0000 [ 222.853007][ T26] audit: type=1326 audit(1791379961.401:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.0.638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24040c6199 code=0x7ffc0000 [ 223.059539][ T7135] block nbd1: Device being setup by another task [ 223.078135][ T26] audit: type=1326 audit(1791379961.401:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.0.638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24040c6199 code=0x7ffc0000 [ 223.114959][ T7133] block nbd1: shutting down sockets [ 223.271858][ T6695] udevd[6695]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 223.287046][ T26] audit: type=1326 audit(1791379961.401:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.0.638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24040c6199 code=0x7ffc0000 [ 223.326884][ T26] audit: type=1326 audit(1791379961.431:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.0.638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24040c6199 code=0x7ffc0000 [ 223.374720][ T7120] ceph: No mds server is up or the cluster is laggy [ 223.376093][ T7126] ceph: No mds server is up or the cluster is laggy [ 224.892512][ T13] net_ratelimit: 27 callbacks suppressed [ 225.612530][ T7192] netlink: 'syz.1.646': attribute type 11 has an invalid length. [ 225.645962][ T7197] loop5: detected capacity change from 0 to 512 [ 225.729992][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 225.854512][ T7197] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 225.916220][ T7197] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.384064][ T5033] tipc: Resetting bearer [ 226.389396][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 226.548038][ T5033] device syz_tun left promiscuous mode [ 226.580737][ T5033] bridge0: port 3(syz_tun) entered disabled state [ 226.604652][ T5033] tipc: Disabling bearer [ 226.657520][ T4611] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz-executor: Failed to acquire dquot type 0 [ 226.679075][ T7] usb 2-1: Using ep0 maxpacket: 8 SYZFAIL: open(/dev/rfkill) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=396 state=3 status=67 (errno 9: Bad file descriptor) [ 226.839934][ T7] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 226.860189][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.880897][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.948798][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.003785][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.076788][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 227.118675][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.351199][ T4352] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.419285][ T7] usb 2-1: usb_control_msg returned -32 [ 227.425907][ T7] usbtmc 2-1:16.0: can't read capabilities [ 227.867413][ T4352] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.046166][ T4352] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.285084][ T4352] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.216337][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 229.277794][ T6695] udevd[6695]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 229.785136][ T1108] usb 2-1: USB disconnect, device number 3 [ 229.929197][ T4348] net_ratelimit: 24 callbacks suppressed [ 230.536548][ T4352] device hsr_slave_0 left promiscuous mode [ 230.566423][ T4352] device hsr_slave_1 left promiscuous mode [ 230.591392][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.614232][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.631144][ T4352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.642094][ T4352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.652479][ T4352] batman_adv: batadv0: Removing interface: geneve2 [ 230.662275][ T4352] device vlan2 left promiscuous mode [ 230.669744][ T4352] bridge0: port 3(vlan2) entered disabled state [ 230.692257][ T4352] device bridge_slave_1 left promiscuous mode [ 230.719299][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.761567][ T4352] device bridge_slave_0 left promiscuous mode [ 230.781783][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.892675][ T4352] device veth1_macvtap left promiscuous mode [ 230.919205][ T4352] device veth0_macvtap left promiscuous mode [ 230.925357][ T4352] device veth1_vlan left promiscuous mode [ 230.939608][ T4352] device veth0_vlan left promiscuous mode [ 231.633375][ T4352] team0 (unregistering): Port device team_slave_1 removed [ 231.668378][ T4352] team0 (unregistering): Port device team_slave_0 removed [ 231.719412][ T4352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.751243][ T4352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.935391][ T4352] bond0 (unregistering): Released all slaves [ 234.968813][ C1] net_ratelimit: 21 callbacks suppressed [ 235.463164][ T4352] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.574008][ T4352] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.703651][ T4352] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.787438][ T4352] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.167165][ T4352] team0: Port device netdevsim0 removed