last executing test programs: 5m15.266811251s ago: executing program 32 (id=137): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) 4m51.573249402s ago: executing program 33 (id=333): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000bc0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000d00)={0x2c, r2, 0x1, 0x70bd28, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x2c}}, 0xc010) 4m30.217909845s ago: executing program 34 (id=515): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005dc0)={&(0x7f0000005e00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000005e40), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000005e80), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000005ec0)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000005f40)={0x30, r2, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) 4m27.830446829s ago: executing program 35 (id=524): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="001001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000004c0), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000500)={0x1, 0x84, 0x3, &(0x7f0000000540)={0x10, "8105d6c721100f00000000400000a8267d87000200"}}) syz_usb_control_io$uac2(r0, 0x0, 0x0) 4m27.52121097s ago: executing program 36 (id=527): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000800)="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", 0x57b, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2, 0x5}, 0x1c) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/151, 0x97}], 0x1) 4m6.369336183s ago: executing program 6 (id=598): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 4m6.136362356s ago: executing program 6 (id=601): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001d00)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000001d40)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001d80)='batadv0\x00', 0xfc46) sendmmsg$inet6(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001e80)="82", 0x1}, {&(0x7f0000001ec0)="399bec7c10000000bb124649d73a90dd245607b1037a", 0x16}], 0x2}}], 0x1, 0x4400c840) sendto$inet6(r0, &(0x7f0000002580)='X<', 0x2, 0x47300, 0x0, 0x0) 4m5.878696273s ago: executing program 6 (id=606): fchdir(0xffffffffffffffff) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4d}}, 0x0}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffa214892ec08586dd61bcc1d700006c"], 0x0) 4m5.567104594s ago: executing program 6 (id=611): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x214802, &(0x7f00000001c0), 0xf7, 0x551, &(0x7f0000000200)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") open(&(0x7f0000000780)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f00000007c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000800)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000840)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0x19, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc661522cd31a58363361fdcf335263bd9b0abdc2542d6d71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d0000000000000300", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) lsetxattr$security_ima(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), &(0x7f0000001040)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 4m4.874967485s ago: executing program 6 (id=621): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000240)="280e", 0x2, 0x96b7ebf37ae6c9, &(0x7f0000000080)={0xa, 0x4e21, 0x429, @private1={0xfc, 0x1, '\x00', 0x4}, 0x7d8d}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2}, 0x8) 4m4.796609413s ago: executing program 9 (id=622): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='27', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x83, 0x6, 0x10400}]}, 0x10) 4m3.927016822s ago: executing program 9 (id=624): mlockall(0x7) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x10000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 4m3.913649383s ago: executing program 6 (id=625): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) 4m3.430881333s ago: executing program 37 (id=625): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) 4m3.35923519s ago: executing program 9 (id=629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f00000005c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)='<', 0x1, 0x24000045, &(0x7f0000000640)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='yeah', 0x4) shutdown(r0, 0x1) 4m3.093168148s ago: executing program 9 (id=632): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x214802, &(0x7f00000001c0), 0xf7, 0x551, &(0x7f0000000200)="$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") open(&(0x7f0000000780)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f00000007c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000800)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000840)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0x19, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc661522cd31a58363361fdcf335263bd9b0abdc2542d6d71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d0000000000000300", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) lsetxattr$security_ima(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), &(0x7f0000001040)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 4m2.534987804s ago: executing program 9 (id=637): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000003c0)="c79b533e", 0x0}, 0x20) 4m1.960167483s ago: executing program 9 (id=643): syz_usb_connect(0x2, 0x39, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810240000007050202", @ANYRESDEC], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000740)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$char_usb(r0, &(0x7f00000007c0)="620482", 0x3) 4m1.60150508s ago: executing program 38 (id=643): syz_usb_connect(0x2, 0x39, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810240000007050202", @ANYRESDEC], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000740)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$char_usb(r0, &(0x7f00000007c0)="620482", 0x3) 3m26.247079553s ago: executing program 3 (id=891): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x1, r2}) 3m26.002507938s ago: executing program 3 (id=894): mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r0, &(0x7f0000000140)=""/117, 0x75) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') 3m25.667759183s ago: executing program 3 (id=896): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d9ca38fff48f3be52163448412ba8a6bdb00ff56d959fd73942", 0x1b}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 3m25.465399923s ago: executing program 3 (id=898): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x9801) 3m25.156135765s ago: executing program 3 (id=899): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x40002101}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 3m24.751132856s ago: executing program 3 (id=901): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCDISCONN(r1, 0x7439) 3m24.175977455s ago: executing program 39 (id=901): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCDISCONN(r1, 0x7439) 1m19.115356896s ago: executing program 5 (id=2094): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m18.725304816s ago: executing program 5 (id=2097): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000480), 0x101500, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000004c0)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000500)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000540)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000580)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{}]}) 1m18.543100304s ago: executing program 5 (id=2100): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x1, 0x4) sendmmsg(r0, &(0x7f00000000c0), 0x612, 0x4000010) sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x9040) 1m17.631598207s ago: executing program 5 (id=2107): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$eJzs3M9PE2kYwPGnPyhtCZTDZje7yYZ3dy/rZQLVs9IYSIxNJEiNPxKTAabadGxJp8HUGJGTV+PNf8AD4ciNRPkHuHjTixdvXEw8yME4ptMZSssUpLSUH99PQubhfd5nOm9byDMNL1u3Xz7KZy0tq5clGFUSEBHZFhmWoHgC7jHoxBHZ7blcGPj64e+bd+5eT6XTE9NKTaZmLiaVUkMjbx8/jbnT1vtlc/j+1pfk583fN//c+jHzMGepnKUKxbLS1WzxU1mfNQ01n7PymlJTpqFbhsoVLKNUyxdr+axZXFioKL0wPxhfKBmWpfRCReWNiioXVblUUaEHeq6gNE1Tg3HBQTIr09N6qs3iuQ5fDLqkVErpIRGJ7clkVnpyQQAAoKea+/+gqE72/6v/bpQHbq0Nuf3/esSv/7/0sXauhv4/KiK+/b/3+L79v364/n9vR3RK2XZbZUfq/3EyjET2DAXqYTVZSulx9+fXsXxvddQJ6P8BAAAAAAAAAAAAAAAAAAAAADgNtm07Ydt2wjt6X/0iEnU2ltS+9ykNiciVHlwyOugIrz/OgPrGvfCQiPliMbOYqR3dCRsiYjqvf0K+O+8HVzX2dh6pqmF5Zy659UuLmZCTSWUlJ6YYMiaJPmmut+3Ja+mJMVXTWN8n8d31SUnIb/71Sd/6iPz/3656TRLyfk6KYsq8u2HOq382ptTVG+mm+pgzDwAAAACAs0BTO3zv3zWtVb5Wv3N/Pdr0+UCofn896nt/Hpa/wr1dOwAAAAAA54VVeZLXTdMo7QSDItI4EpPmOZ0Mwl06s7fCX63y/paheyvdJ/AevCEVdQc7/rQEDvG0tAiC0k7VSHU1qin1z7LP2vcLvI+NWs2RqXF35HXLOd0J/nj15lvnTnh5LXrAStsPQvu/AfqO57cPAAAAgONUb/q9kfHeXhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQcfx3tF6vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgYAAP//2a0C7Q==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) fdatasync(r0) 1m17.024924999s ago: executing program 5 (id=2117): r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = dup(r0) r2 = fanotify_init(0x1, 0x101000) fanotify_mark(r2, 0x1, 0x101b, r1, 0x0) ftruncate(r0, 0xdcb) pread64(r0, &(0x7f00000009c0)=""/239, 0xef, 0x1) 1m16.786231294s ago: executing program 5 (id=2119): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) prlimit64(r0, 0xb, 0x0, 0x0) 1m16.445002049s ago: executing program 40 (id=2119): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) prlimit64(r0, 0xb, 0x0, 0x0) 1m16.418789731s ago: executing program 1 (id=2123): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1m16.122479311s ago: executing program 1 (id=2125): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001701000003000000019400000000000018000000000000001701"], 0x30, 0x20046004}], 0x1, 0x40080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) sendmmsg$alg(r1, &(0x7f0000001580), 0x49249249249256f, 0x40484) 1m15.35115435s ago: executing program 1 (id=2127): unshare(0x2040400) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x2, 0x3, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x2, 0x9, 0x0, r0, 0x100}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 1m15.199857056s ago: executing program 1 (id=2128): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) fdatasync(r0) 1m14.544671293s ago: executing program 1 (id=2132): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f00000007c0)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[], 0x30}}, 0x40) close(r0) 1m13.672163792s ago: executing program 1 (id=2138): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000480)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f00000027c0)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x3, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4003, 0xe, 0x400, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x4, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x5cb, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x2, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x3fffffff, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000002c40)={0x3f, {0x6ce, 0x7, 0x400, 0x7, 0x4, 0x8}}) ioctl$UI_DEV_CREATE(r0, 0x5501) 1m13.311364289s ago: executing program 41 (id=2138): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000480)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f00000027c0)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x3, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4003, 0xe, 0x400, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x4, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x5cb, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x2, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x3fffffff, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000002c40)={0x3f, {0x6ce, 0x7, 0x400, 0x7, 0x4, 0x8}}) ioctl$UI_DEV_CREATE(r0, 0x5501) 11.766366688s ago: executing program 2 (id=2501): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 11.15444314s ago: executing program 2 (id=2504): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000280)='./file0\x00', r2}, 0x18) 10.27664906s ago: executing program 2 (id=2507): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r1, 0x20, &(0x7f0000000700)={&(0x7f0000000940)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000a80)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000ac0)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 9.564847133s ago: executing program 7 (id=2509): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) write(r0, &(0x7f0000000180)="bbc9", 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) 9.563903213s ago: executing program 2 (id=2510): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2814000, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}, {@noblock_validity}, {@nouid32}, {@dioread_nolock}, {@quota}, {@nomblk_io_submit}, {@delalloc}, {@nolazytime}]}, 0x1, 0x5b1, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xfff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x101042, 0x1d8) pwrite64(r1, &(0x7f0000000780)='2', 0x1, 0xbfd) io_setup(0x20fe, &(0x7f0000000800)) 8.926596628s ago: executing program 7 (id=2512): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r1, 0xcfa3e000) close(r0) 8.926238588s ago: executing program 2 (id=2513): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x30}, 0x4040810) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 8.284756363s ago: executing program 7 (id=2515): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff2}, {0xe, 0xe}, {0x1, 0xffe0}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.284518894s ago: executing program 2 (id=2516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40) 6.190721888s ago: executing program 7 (id=2519): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x4000) r2 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x0, 0x14a042) r3 = dup3(r2, r0, 0x80000) ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, 0x0) 5.564142172s ago: executing program 8 (id=2520): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x80881000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001140)={r1, 0x0, 0x0}, 0x20) 5.558276262s ago: executing program 0 (id=2121): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000007c0)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000800)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) 5.001858009s ago: executing program 4 (id=2139): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 4.453211495s ago: executing program 8 (id=2521): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000200)) 4.452040615s ago: executing program 0 (id=2121): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000007c0)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000800)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) 3.9129845s ago: executing program 7 (id=2522): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = dup2(r1, r1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4622, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) 3.910945431s ago: executing program 4 (id=2139): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 3.420913201s ago: executing program 8 (id=2523): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000a00)=[{&(0x7f00000000c0)="ce2026165daca189b5e24e948810258fe432d2932c", 0x15}], 0x1, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000080)={0xb, 0x29, 0x1, {0x1}}, 0xb) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) 3.419859851s ago: executing program 0 (id=2121): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000007c0)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000800)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) 2.858733388s ago: executing program 4 (id=2139): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 2.391222606s ago: executing program 8 (id=2524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc) 2.390246036s ago: executing program 0 (id=2121): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000007c0)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000800)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) 1.907948755s ago: executing program 7 (id=2525): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.906377325s ago: executing program 4 (id=2139): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 1.37494591s ago: executing program 8 (id=2526): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x372}]}, 0x10) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 1.368910841s ago: executing program 0 (id=2121): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000007c0)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000800)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) 875.118631ms ago: executing program 4 (id=2139): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 427.164607ms ago: executing program 0 (id=2121): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000007c0)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000800)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) 925.62µs ago: executing program 8 (id=2527): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x40002002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 0s ago: executing program 4 (id=2139): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) kernel console output (not intermixed with test programs): ing [ 279.306065][ T5922] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 279.512223][ T7016] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 279.544846][ T5922] usb 9-1: USB disconnect, device number 10 [ 279.642333][ T7013] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 279.944917][ T9915] ceph: No mds server is up or the cluster is laggy [ 279.961645][ T9920] ceph: No mds server is up or the cluster is laggy [ 280.044538][ T9950] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 280.044538][ T9950] Q&|x [ 280.069862][ T7016] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 280.210746][ T7010] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 280.249085][ T9954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.279078][ T9954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.333195][ T9954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.355679][ T9954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.374575][ T9954] batman_adv: batadv0: Removing interface: gretap1 [ 280.608801][ T9957] netlink: 'syz.1.1600': attribute type 2 has an invalid length. [ 280.632087][ T9961] netlink: 'syz.1.1600': attribute type 2 has an invalid length. [ 280.657201][ T9961] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1600'. [ 280.919989][ T9981] rxe_eth0 speed is unknown, defaulting to 1000 [ 281.032039][ T9959] loop8: detected capacity change from 0 to 32768 [ 281.122798][ T9988] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1609'. [ 281.169856][ T9988] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.179748][ T9988] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.209000][ T27] audit: type=1800 audit(1793722638.129:175): pid=9959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1599" name="file1" dev="loop8" ino=4 res=0 errno=0 [ 281.235685][ T9990] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1609'. [ 281.397356][ T4409] udevd[4409]: symlink '../../loop8' '/dev/disk/by-diskseq/282.tmp-b7:8' failed: Read-only file system [ 281.436570][ T4409] udevd[4409]: symlink '../../loop8' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:8' failed: Read-only file system [ 281.970375][T10012] loop5: detected capacity change from 0 to 1024 [ 282.091349][T10012] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 282.200765][ T4409] udevd[4409]: symlink '../../loop5' '/dev/disk/by-diskseq/283.tmp-b7:5' failed: Read-only file system [ 282.246401][ T4663] udevd[4663]: symlink '../../loop8' '/dev/disk/by-diskseq/282.tmp-b7:8' failed: Read-only file system [ 282.264760][ T4409] udevd[4409]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 282.338847][ T4663] udevd[4663]: symlink '../../loop8' '/dev/disk/by-diskseq/282.tmp-b7:8' failed: Read-only file system [ 282.438165][ T4409] udevd[4409]: symlink '../../loop5' '/dev/disk/by-diskseq/283.tmp-b7:5' failed: Read-only file system [ 282.508327][ T4409] udevd[4409]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 282.654641][ T7622] EXT4-fs (loop5): unmounting filesystem. [ 282.726551][ T4409] udevd[4409]: symlink '../../loop5' '/dev/disk/by-diskseq/283.tmp-b7:5' failed: Read-only file system [ 282.769373][ T4409] udevd[4409]: symlink '../../loop5' '/dev/disk/by-diskseq/283.tmp-b7:5' failed: Read-only file system [ 282.941566][T10044] bridge0: port 3(erspan0) entered blocking state [ 282.976696][T10044] bridge0: port 3(erspan0) entered disabled state [ 283.006641][T10044] device erspan0 entered promiscuous mode [ 283.033129][T10044] bridge0: port 3(erspan0) entered blocking state [ 283.040546][T10044] bridge0: port 3(erspan0) entered forwarding state [ 283.094567][T10049] device erspan0 left promiscuous mode [ 283.121482][T10049] bridge0: port 3(erspan0) entered disabled state [ 283.309874][T10061] loop5: detected capacity change from 0 to 512 [ 283.328126][T10061] EXT4-fs: Ignoring removed mblk_io_submit option [ 283.378557][T10061] ext4: Unknown parameter 'journal_checksum2' [ 284.978513][T10106] loop5: detected capacity change from 0 to 32768 [ 285.081297][T10106] XFS (loop5): Mounting V5 Filesystem [ 285.084908][T10138] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 285.180113][T10106] XFS (loop5): Ending clean mount [ 285.182781][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1655'. [ 285.211322][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1655'. [ 285.237133][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1655'. [ 285.256851][T10106] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 285.322184][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1655'. [ 285.541664][ T7622] XFS (loop5): Unmounting Filesystem [ 286.679169][T10187] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1667'. [ 286.701981][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1667'. [ 286.727520][T10191] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1669'. [ 286.767527][T10191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1669'. [ 286.931626][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 286.932084][ T4292] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 287.471875][ T7016] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 287.642564][T10238] netlink: 'syz.1.1686': attribute type 13 has an invalid length. [ 287.650458][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'. [ 287.665161][ T7016] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.686563][ T7016] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 287.711205][ T7016] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 287.719285][T10238] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.733345][T10238] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.739028][ T7016] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 287.742196][T10238] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.742232][T10238] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.744470][T10238] netlink: 'syz.1.1686': attribute type 13 has an invalid length. [ 287.778850][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'. [ 287.840522][ T7016] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.310620][ T7016] cxacru 9-1:1.0: send of cm 0x91 failed (-71) [ 288.328237][ T7016] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 288.337055][T10262] overlayfs: failed to clone upperpath [ 288.356950][ T7016] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 288.379981][ T7016] cxacru: probe of 9-1:1.0 failed with error -71 [ 288.414202][ T7016] usb 9-1: USB disconnect, device number 11 [ 288.494223][T10266] loop1: detected capacity change from 0 to 2048 [ 288.531677][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 288.581817][ T4409] udevd[4409]: symlink '../../loop1' '/dev/disk/by-diskseq/290.tmp-b7:1' failed: Read-only file system [ 288.604371][T10266] Alternate GPT is invalid, using primary GPT. [ 288.619937][T10266] loop1: p2 p3 p7 [ 288.646771][ T4409] udevd[4409]: symlink '../../loop1' '/dev/disk/by-diskseq/290.tmp-b7:1' failed: Read-only file system [ 288.722949][ T4666] udevd[4666]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 288.732678][ T4663] udevd[4663]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 288.736531][ T4409] udevd[4409]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 288.868874][ T4409] udevd[4409]: symlink '../../loop1' '/dev/disk/by-diskseq/290.tmp-b7:1' failed: Read-only file system [ 288.914949][ T4409] udevd[4409]: symlink '../../loop1' '/dev/disk/by-diskseq/290.tmp-b7:1' failed: Read-only file system [ 288.940161][T10287] bridge0: port 3(macvlan1) entered blocking state [ 288.982138][T10287] bridge0: port 3(macvlan1) entered disabled state [ 288.997108][T10287] device macvlan1 entered promiscuous mode [ 289.010264][T10287] bridge0: port 3(macvlan1) entered blocking state [ 289.017844][T10287] bridge0: port 3(macvlan1) entered forwarding state [ 289.057538][T10291] device macvlan1 left promiscuous mode [ 289.064098][T10291] bridge0: port 3(macvlan1) entered disabled state [ 289.281683][ T5922] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 289.473339][ T5922] usb 9-1: config 1 interface 0 has no altsetting 0 [ 289.496029][ T5922] usb 9-1: string descriptor 0 read error: -22 [ 289.526534][ T5922] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.40 [ 289.570117][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.771767][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1705'. [ 289.814871][T10316] device xfrm1 entered promiscuous mode [ 289.821129][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1705'. [ 289.960419][T10299] loop1: detected capacity change from 0 to 32768 [ 290.052771][ T5922] lua 0003:1E7D:2C2E.0009: item 0 2 0 11 parsing failed [ 290.067927][ T5922] lua 0003:1E7D:2C2E.0009: parse failed [ 290.093405][ T5922] lua: probe of 0003:1E7D:2C2E.0009 failed with error -22 [ 290.095677][T10299] XFS (loop1): Mounting V5 Filesystem [ 290.246521][T10299] XFS (loop1): Ending clean mount [ 290.279967][ T7013] usb 9-1: USB disconnect, device number 12 [ 290.287643][T10299] XFS (loop1): User initiated shutdown received. [ 290.320826][T10299] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 290.354464][T10299] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 290.438917][ T4663] udevd[4663]: symlink '../../loop1' '/dev/disk/by-diskseq/292.tmp-b7:1' failed: Read-only file system [ 290.471350][ T4663] udevd[4663]: symlink '../../loop1' '/dev/disk/by-uuid/986211a9-7d00-4ebf-a576-e3de63fa2cbd.tmp-b7:1' failed: Read-only file system [ 290.488040][ T6695] XFS (loop1): Unmounting Filesystem [ 290.649448][ T4409] udevd[4409]: symlink '../../loop1' '/dev/disk/by-diskseq/292.tmp-b7:1' failed: Read-only file system [ 291.084671][T10355] loop8: detected capacity change from 0 to 128 [ 291.275040][T10360] device wlan0 entered promiscuous mode [ 291.370187][T10363] loop5: detected capacity change from 0 to 1024 [ 291.383433][T10363] EXT4-fs: Ignoring removed bh option [ 291.467168][T10363] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 291.522241][T10363] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.629872][T10363] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1717: bg 0: block 112: padding at end of block bitmap is not set [ 291.714629][T10363] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 51 with error 28 [ 291.759048][T10363] EXT4-fs (loop5): This should not happen!! Data will be lost [ 291.759048][T10363] [ 291.800060][T10363] EXT4-fs (loop5): Total free blocks count 0 [ 291.826200][T10363] EXT4-fs (loop5): Free/Dirty block details [ 291.841887][T10363] EXT4-fs (loop5): free_blocks=0 [ 291.857340][T10363] EXT4-fs (loop5): dirty_blocks=64 [ 291.887655][T10363] EXT4-fs (loop5): Block reservation details [ 291.928639][T10363] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 292.153447][ T7622] EXT4-fs (loop5): unmounting filesystem. [ 292.367612][T10376] loop1: detected capacity change from 0 to 32768 [ 292.549010][T10376] JBD2: Ignoring recovery information on journal [ 292.653812][T10376] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 292.898952][ T27] audit: type=1800 audit(1793722649.819:176): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1721" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 292.957440][T10414] loop8: detected capacity change from 0 to 512 [ 292.990661][T10414] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.030404][T10414] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 293.095875][T10414] EXT4-fs error (device loop8): ext4_orphan_get:1435: comm syz.8.1731: bad orphan inode 131083 [ 293.119464][T10414] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 293.339796][ T6695] ocfs2: Unmounting device (7,1) on (node local) [ 293.342493][ T6191] EXT4-fs (loop8): unmounting filesystem. [ 293.956997][T10444] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 294.029892][ T7010] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 294.061175][T10449] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 295.204044][ T27] audit: type=1326 audit(1793722652.129:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.2.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853639fb19 code=0x7ffc0000 [ 295.205825][T10502] syz.2.1759 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 295.278683][ T27] audit: type=1326 audit(1793722652.129:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.2.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853639fb19 code=0x7ffc0000 [ 295.391499][ T27] audit: type=1326 audit(1793722652.129:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.2.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853639fb19 code=0x7ffc0000 [ 295.471178][ T27] audit: type=1326 audit(1793722652.129:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.2.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f853639fb19 code=0x7ffc0000 [ 295.566691][ T27] audit: type=1326 audit(1793722652.229:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.2.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f853639fb19 code=0x7ffc0000 [ 295.664835][ T27] audit: type=1326 audit(1793722652.229:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.2.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f853639f882 code=0x7ffc0000 [ 295.775875][ T27] audit: type=1326 audit(1793722652.229:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.2.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f853639f917 code=0x7ffc0000 [ 295.782290][T10524] loop8: detected capacity change from 0 to 128 [ 295.872567][ T27] audit: type=1326 audit(1793722652.229:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.2.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f853635c811 code=0x7ffc0000 [ 295.873369][T10524] EXT4-fs: Ignoring removed i_version option [ 295.960112][ T4409] udevd[4409]: symlink '../../loop8' '/dev/disk/by-diskseq/302.tmp-b7:8' failed: Read-only file system [ 295.977400][ T27] audit: type=1326 audit(1793722652.229:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.2.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f85363a0909 code=0x7ffc0000 [ 295.992385][ T4409] udevd[4409]: symlink '../../loop8' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:8' failed: Read-only file system [ 296.038453][T10524] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 296.063009][T10524] ext4 filesystem being mounted at /234/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 296.138157][ T27] audit: type=1326 audit(1793722652.229:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10501 comm="syz.2.1759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f853635c87b code=0x7ffc0000 [ 296.290503][ T4409] udevd[4409]: symlink '../../loop8' '/dev/disk/by-diskseq/302.tmp-b7:8' failed: Read-only file system [ 296.314511][ T6191] EXT4-fs (loop8): unmounting filesystem. [ 296.334735][ T4409] udevd[4409]: symlink '../../loop8' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:8' failed: Read-only file system [ 296.427277][ T4409] udevd[4409]: symlink '../../loop8' '/dev/disk/by-diskseq/302.tmp-b7:8' failed: Read-only file system [ 296.479886][ T4409] udevd[4409]: symlink '../../loop8' '/dev/disk/by-diskseq/302.tmp-b7:8' failed: Read-only file system [ 297.892088][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 297.917902][T10605] "syz.7.1790" (10605) uses obsolete ecb(arc4) skcipher [ 298.227380][T10598] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 298.392399][T10626] gadgetfs: bound to dummy_udc driver [ 298.472302][ T4663] udevd[4663]: setting mode of /dev/input/event2 to 020660 failed: Read-only file system [ 298.494333][ T4663] udevd[4663]: setting owner of /dev/input/event2 to uid=0, gid=104 failed: Read-only file system [ 298.985207][T10650] loop1: detected capacity change from 0 to 4096 [ 299.061862][T10650] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 299.347624][ T6695] EXT4-fs (loop1): unmounting filesystem. [ 299.402690][ T7013] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 299.435857][ T4409] udevd[4409]: symlink '../../loop1' '/dev/disk/by-diskseq/304.tmp-b7:1' failed: Read-only file system [ 299.485900][ T4409] udevd[4409]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 299.631915][ T7013] usb 6-1: Using ep0 maxpacket: 8 [ 299.652618][ T7013] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.681615][ T7013] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.724393][ T7013] usb 6-1: config 0 interface 0 has no altsetting 0 [ 299.741355][ T7013] usb 6-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 299.761810][ T7013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.799478][ T7013] usb 6-1: config 0 descriptor?? [ 299.825473][T10689] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1816'. [ 299.855135][T10689] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 299.885551][T10689] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 299.901350][T10689] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 299.919237][T10689] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 299.943819][T10689] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 299.967557][T10689] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 300.005997][T10689] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 300.035434][T10689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 300.081329][T10689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.111977][T10689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.228853][ T7013] wacom 0003:056A:0317.000A: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 300.256070][ T7013] wacom 0003:056A:0317.000A: hidraw0: USB HID v0.0c Device [HID 056a:0317] on usb-dummy_hcd.5-1/input0 [ 300.288514][ T7013] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0317.000A/input/input13 [ 300.418190][T10689] syz.8.1816 (10689) used greatest stack depth: 20400 bytes left [ 300.439182][ T7013] usb 6-1: USB disconnect, device number 7 [ 300.538120][ T4351] Process accounting resumed [ 300.647731][T10717] fido_id[10717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 300.694005][T10714] Process accounting resumed [ 301.818740][ T7010] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 302.006463][ T7010] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.028254][ T7010] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.060992][ T7010] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.095287][ T7010] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 302.118465][ T7010] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.127944][ T7010] usb 6-1: Product: syz [ 302.133752][ T7010] usb 6-1: Manufacturer: syz [ 302.138409][ T7010] usb 6-1: SerialNumber: syz [ 302.427226][T10794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 302.705861][ T7010] usb 6-1: Cannot retrieve CPort count: -110 [ 302.723121][ T7010] usb 6-1: Cannot retrieve CPort count: -110 [ 302.742005][ T7010] es2_ap_driver: probe of 6-1:1.0 failed with error -110 [ 303.700662][T10725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.395182][ T5922] usb 6-1: USB disconnect, device number 8 [ 304.519676][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1857'. [ 304.641672][ T7010] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 304.842324][ T7010] usb 9-1: Using ep0 maxpacket: 32 [ 304.852090][ T7010] usb 9-1: unable to get BOS descriptor or descriptor too short [ 304.899703][ T7010] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 304.941640][ T7010] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.970066][ T7010] usb 9-1: Product: syz [ 304.980197][ T7010] usb 9-1: Manufacturer: syz [ 304.999380][ T7010] usb 9-1: SerialNumber: syz [ 305.221257][T10889] loop5: detected capacity change from 0 to 32768 [ 305.263864][T10889] JBD2: Ignoring recovery information on journal [ 305.384555][T10889] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 305.571522][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 305.594713][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 305.594729][ T27] audit: type=1800 audit(1793722662.519:208): pid=10889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1856" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 305.661574][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 306.149509][ T7622] ocfs2: Unmounting device (7,5) on (node local) [ 306.240854][ T7010] snd-usb-audio: probe of 9-1:1.0 failed with error -71 [ 306.271258][ T7010] usb 9-1: USB disconnect, device number 13 [ 306.510122][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1871'. [ 306.650624][T10945] loop5: detected capacity change from 0 to 2048 [ 306.762646][T10945] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 306.907624][T10945] EXT4-fs error (device loop5): ext4_iget_extra_inode:4766: inode #12: comm syz.5.1868: corrupted in-inode xattr [ 307.036870][T10959] device bridge_slave_1 left promiscuous mode [ 307.058024][ T7622] EXT4-fs (loop5): unmounting filesystem. [ 307.067223][T10959] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.172233][T10959] device bridge_slave_0 left promiscuous mode [ 307.197437][T10959] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.573864][ T7759] rpcbind: server 127.0.0.1 not responding, timed out [ 307.716690][T10982] FAULT_INJECTION: forcing a failure. [ 307.716690][T10982] name failslab, interval 1, probability 0, space 0, times 0 [ 307.766771][T10982] CPU: 1 PID: 10982 Comm: syz.5.1884 Not tainted syzkaller #0 [ 307.774298][T10982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 307.784644][T10982] Call Trace: [ 307.787945][T10982] [ 307.790985][T10982] dump_stack_lvl+0x188/0x24e [ 307.795700][T10982] ? show_regs_print_info+0x12/0x12 [ 307.800972][T10982] ? load_image+0x410/0x410 [ 307.805594][T10982] ? __might_sleep+0xd0/0xd0 [ 307.810209][T10982] ? __lock_acquire+0x7ea0/0x7ea0 [ 307.815304][T10982] should_fail_ex+0x390/0x4c0 [ 307.819996][T10982] should_failslab+0x5/0x20 [ 307.824505][T10982] slab_pre_alloc_hook+0x59/0x300 [ 307.829834][T10982] kmem_cache_alloc_lru+0x49/0x2e0 [ 307.834953][T10982] ? sock_alloc_inode+0x24/0xc0 [ 307.840420][T10982] ? apparmor_socket_create+0x1aa/0x220 [ 307.845977][T10982] sock_alloc_inode+0x24/0xc0 [ 307.850661][T10982] ? sockfs_init_fs_context+0xa0/0xa0 [ 307.856045][T10982] new_inode_pseudo+0x5f/0x1c0 [ 307.860819][T10982] __sock_create+0x129/0x940 [ 307.865423][T10982] __sys_socketpair+0x232/0x540 [ 307.871358][T10982] __x64_sys_socketpair+0x97/0xb0 [ 307.876424][T10982] do_syscall_64+0x4c/0xa0 [ 307.880850][T10982] ? clear_bhb_loop+0x60/0xb0 [ 307.885533][T10982] ? clear_bhb_loop+0x60/0xb0 [ 307.890221][T10982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.896123][T10982] RIP: 0033:0x7ff1efd9fb19 [ 307.900539][T10982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.920158][T10982] RSP: 002b:00007ff1f0c0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 307.928681][T10982] RAX: ffffffffffffffda RBX: 00007ff1f0025fa0 RCX: 00007ff1efd9fb19 [ 307.936657][T10982] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 307.944746][T10982] RBP: 00007ff1efe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 307.952724][T10982] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 307.960720][T10982] R13: 00007ff1f0026038 R14: 00007ff1f0025fa0 R15: 00007fff68bdd008 [ 307.968709][T10982] [ 308.194442][T10982] socket: no more sockets [ 308.831193][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1896'. [ 309.197700][T11030] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 309.389828][T11033] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 309.454918][T11033] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 309.590523][T11033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.647420][T11043] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1903'. [ 309.667143][T11032] rxe_eth0 speed is unknown, defaulting to 1000 [ 310.277521][ T27] audit: type=1326 audit(1793722667.199:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1911" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888eb9fb19 code=0x7ffc0000 [ 310.377969][ T27] audit: type=1326 audit(1793722667.239:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1911" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888eb9fb19 code=0x7ffc0000 [ 310.406625][T11074] loop8: detected capacity change from 0 to 512 [ 310.418208][T11072] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1912'. [ 310.441300][T11074] EXT4-fs: Ignoring removed i_version option [ 310.448754][ T27] audit: type=1326 audit(1793722667.239:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1911" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888eb9fb19 code=0x7ffc0000 [ 310.482307][T11074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 310.521498][ T27] audit: type=1326 audit(1793722667.239:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1911" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f888eb9fb19 code=0x7ffc0000 [ 310.579379][T11074] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1913: invalid indirect mapped block 4294967295 (level 1) [ 310.608039][T11074] EXT4-fs (loop8): Remounting filesystem read-only [ 310.623509][T11074] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1913: invalid indirect mapped block 4294967295 (level 1) [ 310.672241][ T27] audit: type=1326 audit(1793722667.239:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1911" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888eb9fb19 code=0x7ffc0000 [ 310.715065][T11074] EXT4-fs (loop8): Remounting filesystem read-only [ 310.738531][T11074] EXT4-fs (loop8): 2 truncates cleaned up [ 310.759724][T11074] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 310.795834][ T27] audit: type=1326 audit(1793722667.239:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1911" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888eb9fb19 code=0x7ffc0000 [ 310.908009][ T27] audit: type=1326 audit(1793722667.239:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1911" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888eb9fb19 code=0x7ffc0000 [ 310.967524][T11074] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.1913: bg 0: block 5: invalid block bitmap [ 310.999906][ T27] audit: type=1326 audit(1793722667.239:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1911" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888eb9fb19 code=0x7ffc0000 [ 311.028110][T11074] EXT4-fs (loop8): Remounting filesystem read-only [ 311.045974][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1919'. [ 311.045974][T11074] EXT4-fs error (device loop8) in ext4_setattr:5728: error 28 [ 311.073784][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1919'. [ 311.084961][T11074] EXT4-fs (loop8): Remounting filesystem read-only [ 311.094677][ T27] audit: type=1326 audit(1793722667.239:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1911" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f888eb9fb19 code=0x7ffc0000 [ 311.199130][ T27] audit: type=1326 audit(1793722667.339:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1911" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888eb9fb19 code=0x7ffc0000 [ 311.289720][ T6191] EXT4-fs (loop8): unmounting filesystem. [ 311.300976][ T27] audit: type=1326 audit(1793722667.339:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1911" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888eb9fb19 code=0x7ffc0000 [ 311.430702][ T27] audit: type=1326 audit(1793722667.339:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1911" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888eb9fb19 code=0x7ffc0000 [ 311.438800][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1926'. [ 311.509562][ T27] audit: type=1326 audit(1793722667.339:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1911" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f888eb9f882 code=0x7ffc0000 [ 311.581616][ T27] audit: type=1326 audit(1793722667.339:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.1.1911" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f888eb9f917 code=0x7ffc0000 [ 311.844453][T11123] loop1: detected capacity change from 0 to 1024 [ 311.882721][T11123] EXT4-fs: inline encryption not supported [ 311.918410][T11126] device syz_tun left promiscuous mode [ 311.955120][T11126] bridge0: port 3(syz_tun) entered disabled state [ 311.982220][T11123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 312.016868][T11126] device bridge_slave_1 left promiscuous mode [ 312.072135][T11126] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.118534][T11126] device bridge_slave_0 left promiscuous mode [ 312.132257][T11126] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.324583][ T6695] EXT4-fs (loop1): unmounting filesystem. [ 313.413350][T11176] "syz.5.1946" (11176) uses obsolete ecb(arc4) skcipher [ 313.939709][T11204] tipc: Started in network mode [ 313.946738][T11204] tipc: Node identity ac1414aa, cluster identity 4711 [ 313.976489][T11204] tipc: New replicast peer: 172.20.20.187 [ 313.977160][ T7761] rpcbind: server 127.0.0.1 not responding, timed out [ 313.989210][T11204] tipc: Enabled bearer , priority 10 [ 314.446971][T11228] overlayfs: failed to clone upperpath [ 314.877840][T11241] bond0: invalid NS target :: specified for addition [ 314.897816][T11241] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 315.040988][ T7013] tipc: Node number set to 2886997162 [ 315.373649][T11266] netlink: 'syz.8.1978': attribute type 3 has an invalid length. [ 315.401548][T11266] netlink: 'syz.8.1978': attribute type 1 has an invalid length. [ 315.422519][T11266] netlink: 198032 bytes leftover after parsing attributes in process `syz.8.1978'. [ 316.264921][T11305] loop5: detected capacity change from 0 to 64 [ 316.395836][ T4292] Bluetooth: Unknown LE signaling command 0xf9 [ 316.402219][ T4292] Bluetooth: Wrong link type (-22) [ 316.843668][T11324] FAULT_INJECTION: forcing a failure. [ 316.843668][T11324] name failslab, interval 1, probability 0, space 0, times 0 [ 316.891848][T11324] CPU: 1 PID: 11324 Comm: syz.8.1999 Not tainted syzkaller #0 [ 316.899393][T11324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 316.909740][T11324] Call Trace: [ 316.913043][T11324] [ 316.915988][T11324] dump_stack_lvl+0x188/0x24e [ 316.920700][T11324] ? show_regs_print_info+0x12/0x12 [ 316.925928][T11324] ? load_image+0x410/0x410 [ 316.930464][T11324] ? __might_sleep+0xd0/0xd0 [ 316.935087][T11324] ? __lock_acquire+0x7ea0/0x7ea0 [ 316.940158][T11324] should_fail_ex+0x390/0x4c0 [ 316.944869][T11324] should_failslab+0x5/0x20 [ 316.949397][T11324] slab_pre_alloc_hook+0x59/0x300 [ 316.954462][T11324] kmem_cache_alloc_lru+0x49/0x2e0 [ 316.959607][T11324] ? sock_alloc_inode+0x24/0xc0 [ 316.964490][T11324] ? apparmor_socket_create+0x1aa/0x220 [ 316.970071][T11324] sock_alloc_inode+0x24/0xc0 [ 316.974781][T11324] ? sockfs_init_fs_context+0xa0/0xa0 [ 316.980191][T11324] new_inode_pseudo+0x5f/0x1c0 [ 316.984989][T11324] sock_create_lite+0x87/0x500 [ 316.989771][T11324] __netlink_kernel_create+0xf7/0x7b0 [ 316.995164][T11324] ? netlink_set_err+0x3b0/0x3b0 [ 317.000110][T11324] ? lockdep_softirqs_off+0x430/0x430 [ 317.005493][T11324] ? rtnetlink_net_init+0xa1/0x140 [ 317.010701][T11324] rtnetlink_net_init+0xb0/0x140 [ 317.015649][T11324] ? nlmsg_populate_fdb_fill+0x620/0x620 [ 317.021308][T11324] ? rtnetlink_net_exit+0x60/0x60 [ 317.026435][T11324] ? rtnetlink_rcv+0x20/0x20 [ 317.031041][T11324] ops_init+0x360/0x5e0 [ 317.035240][T11324] setup_net+0x4f2/0xbd0 [ 317.039524][T11324] ? copy_net_ns+0x5b0/0x5b0 [ 317.044130][T11324] ? copy_net_ns+0x324/0x5b0 [ 317.048752][T11324] ? down_read_killable+0x1cc/0x340 [ 317.053958][T11324] copy_net_ns+0x33e/0x5b0 [ 317.058580][T11324] create_new_namespaces+0x3ce/0x700 [ 317.063879][T11324] unshare_nsproxy_namespaces+0x116/0x160 [ 317.069608][T11324] ksys_unshare+0x4f6/0x8e0 [ 317.074130][T11324] ? sighand_ctor+0x40/0x40 [ 317.078635][T11324] ? lock_chain_count+0x20/0x20 [ 317.083496][T11324] ? syscall_enter_from_user_mode+0x21/0x80 [ 317.089399][T11324] __x64_sys_unshare+0x34/0x40 [ 317.094254][T11324] do_syscall_64+0x4c/0xa0 [ 317.098677][T11324] ? clear_bhb_loop+0x60/0xb0 [ 317.103361][T11324] ? clear_bhb_loop+0x60/0xb0 [ 317.108045][T11324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.113945][T11324] RIP: 0033:0x7fc99619fb19 [ 317.118366][T11324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.137985][T11324] RSP: 002b:00007fc997013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 317.146491][T11324] RAX: ffffffffffffffda RBX: 00007fc996425fa0 RCX: 00007fc99619fb19 [ 317.154487][T11324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 317.162462][T11324] RBP: 00007fc996237b70 R08: 0000000000000000 R09: 0000000000000000 [ 317.170441][T11324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.178418][T11324] R13: 00007fc996426038 R14: 00007fc996425fa0 R15: 00007ffcedcbe498 [ 317.186431][T11324] [ 317.210982][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.217407][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.930723][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2030'. [ 320.011990][T11425] block nbd0: Unsupported socket: should be TCP or UNIX. [ 320.136070][T11412] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 320.281708][T11433] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2032'. [ 320.838235][T11460] loop1: detected capacity change from 0 to 512 [ 320.936427][T11460] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #15: comm syz.1.2041: corrupted inode contents [ 321.011607][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 321.100562][T11460] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 321.131108][T11460] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #15: comm syz.1.2041: corrupted inode contents [ 321.155356][T11460] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.2041: mark_inode_dirty error [ 321.191112][T11460] EXT4-fs (loop1): 1 orphan inode deleted [ 321.208414][T11460] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 321.409901][ T6695] EXT4-fs (loop1): unmounting filesystem. [ 322.580603][T11474] loop8: detected capacity change from 0 to 32768 [ 322.708776][T11474] XFS (loop8): Mounting V5 Filesystem [ 322.756273][T11514] device bridge_slave_1 left promiscuous mode [ 322.766906][T11514] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.785469][T11514] device bridge_slave_0 left promiscuous mode [ 322.791980][T11514] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.926428][T11474] XFS (loop8): Ending clean mount [ 323.505373][ T6191] XFS (loop8): Unmounting Filesystem [ 323.844478][T11548] loop1: detected capacity change from 0 to 512 [ 323.911700][T11548] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 324.076641][T11548] EXT4-fs (loop1): 1 truncate cleaned up [ 324.083976][T11548] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 324.406340][T11566] 9pnet: p9_errstr2errno: server reported unknown error tun [ 324.683373][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'. [ 324.986300][ T6695] EXT4-fs (loop1): unmounting filesystem. [ 325.851640][ T4327] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 326.053291][ T4327] usb 9-1: not running at top speed; connect to a high speed hub [ 326.076985][ T4327] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.102798][ T4327] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.135727][ T4327] usb 9-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 326.175642][ T4327] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 326.189475][ T4327] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.205743][ T4327] usb 9-1: Product: syz [ 326.214462][ T4327] usb 9-1: Manufacturer: syz [ 326.223856][ T4327] usb 9-1: SerialNumber: syz [ 326.248502][ T4327] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected [ 326.274747][ T4327] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 326.318606][ T4327] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 326.355068][ T4327] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 326.385440][ T4327] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 326.421362][ T4327] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 326.733846][T11625] rxe_eth0 speed is unknown, defaulting to 1000 [ 326.815028][ T4327] usb 9-1: USB disconnect, device number 14 [ 326.848658][ T4327] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 326.875236][ T4327] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 326.903760][ T4327] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 326.933936][ T4327] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 326.982830][ T4327] keyspan 9-1:1.0: device disconnected [ 328.181215][T11680] device vlan2 left promiscuous mode [ 328.215894][T11680] bridge0: port 3(vlan2) entered disabled state [ 328.230127][T11672] loop1: detected capacity change from 0 to 8192 [ 328.279894][T11680] device bridge_slave_1 left promiscuous mode [ 328.297558][T11672] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 328.297676][T11680] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.404755][T11680] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.907870][T11718] loop1: detected capacity change from 0 to 1024 [ 329.968597][T11718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 330.230973][ T6695] EXT4-fs (loop1): unmounting filesystem. [ 330.270712][T11728] loop5: detected capacity change from 0 to 128 [ 330.543407][T11728] syz.5.2107: attempt to access beyond end of device [ 330.543407][T11728] loop5: rw=2049, sector=145, nr_sectors = 336 limit=128 [ 331.042810][ T4354] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 331.159919][ T7761] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.247736][ T4354] usb 9-1: unable to get BOS descriptor or descriptor too short [ 331.293408][ T4354] usb 9-1: config 189 has an invalid interface number: 127 but max is 0 [ 331.304084][ T4354] usb 9-1: config 189 has no interface number 0 [ 331.323399][ T4354] usb 9-1: config 189 interface 127 has no altsetting 0 [ 331.382214][ T4354] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 331.405182][ T4354] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.427903][ T4354] usb 9-1: Product: syz [ 331.435437][ T4354] usb 9-1: Manufacturer: syz [ 331.440623][ T4354] usb 9-1: SerialNumber: syz [ 331.473265][ T7761] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.648681][ T7761] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.746795][T11779] "syz.1.2125" (11779) uses obsolete ecb(arc4) skcipher [ 331.986500][ T7761] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.066797][ T4354] usbserial_generic 9-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 332.120125][ T4354] usbserial_generic 9-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 332.151551][ T4354] usbserial_generic 9-1:189.127: device has no bulk endpoints [ 332.169188][ T4354] safe_serial 9-1:189.127: safe_serial converter detected [ 332.212248][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.229205][ T4354] safe_serial: probe of 9-1:189.127 failed with error -22 [ 332.237047][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.250421][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.262790][ T4354] usb 9-1: USB disconnect, device number 15 [ 332.279379][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.287739][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 332.298346][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.333302][T11785] rxe_eth0 speed is unknown, defaulting to 1000 [ 332.726106][T11795] loop1: detected capacity change from 0 to 128 [ 332.959842][T11795] syz.1.2128: attempt to access beyond end of device [ 332.959842][T11795] loop1: rw=2049, sector=145, nr_sectors = 264 limit=128 [ 333.079684][T11799] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 333.109233][T11799] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 333.149188][T11799] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 333.168549][T11799] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 333.187455][T11799] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 333.211770][T11799] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 333.227860][T11799] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 333.240302][T11799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 333.256463][T11799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.268203][T11806] ip_tables: iptables: counters copy to user failed while replacing table [ 333.278714][T11799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.290754][T11799] bond0: (slave bond_slave_0): Releasing backup interface [ 333.341126][T11799] bond0: (slave bond_slave_1): Releasing backup interface [ 333.510184][T11799] team0: Port device team_slave_0 removed [ 333.550718][T11799] team0: Port device team_slave_1 removed [ 333.557671][T11799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.565716][T11799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.575122][T11799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.585334][T11799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.667405][T11801] team0: Port device xfrm0 added [ 334.054426][T11785] chnl_net:caif_netlink_parms(): no params data found [ 334.373446][ T50] Bluetooth: hci3: command 0x0409 tx timeout [ 334.382132][T11785] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.389370][T11785] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.397763][T11785] device bridge_slave_0 entered promiscuous mode [ 334.515641][T11785] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.531719][T11785] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.571779][T11785] device bridge_slave_1 entered promiscuous mode [ 334.750722][T11785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.910979][T11785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.110005][T11785] team0: Port device team_slave_0 added [ 335.140613][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.165060][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.175241][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.187372][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.195286][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.222505][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.423374][T11785] team0: Port device team_slave_1 added [ 335.490419][T11860] rxe_eth0 speed is unknown, defaulting to 1000 [ 335.712239][T11785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.719629][T11785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.801767][T11785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.896790][T11785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.905764][T11785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.980120][T11785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.199792][T11785] device hsr_slave_0 entered promiscuous mode [ 336.220949][T11785] device hsr_slave_1 entered promiscuous mode [ 336.244924][ T7761] device hsr_slave_0 left promiscuous mode [ 336.253966][ T7761] device hsr_slave_1 left promiscuous mode [ 336.260744][ T7761] device bridge_slave_1 left promiscuous mode [ 336.267952][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.277750][ T7761] device bridge_slave_0 left promiscuous mode [ 336.284315][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.335283][ T7761] device veth1_macvtap left promiscuous mode [ 336.353804][ T7761] device veth0_macvtap left promiscuous mode [ 336.360004][ T7761] device veth1_vlan left promiscuous mode [ 336.401640][ T7761] device veth0_vlan left promiscuous mode [ 336.451955][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 337.337586][ T50] Bluetooth: hci0: command 0x0409 tx timeout [ 337.421929][ T7761] team0 (unregistering): Port device team_slave_1 removed [ 337.492182][ T7761] team0 (unregistering): Port device team_slave_0 removed [ 337.570009][ T7761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.643357][ T7761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.157851][ T7761] bond0 (unregistering): Released all slaves [ 338.263297][T11903] netlink: 'syz.8.2164': attribute type 21 has an invalid length. [ 338.271202][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2164'. [ 338.288655][T11903] netlink: 'syz.8.2164': attribute type 21 has an invalid length. [ 338.308869][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2164'. [ 338.532499][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 338.600779][T11917] overlayfs: failed to clone upperpath [ 338.697946][T11860] chnl_net:caif_netlink_parms(): no params data found [ 338.705796][T11920] FAULT_INJECTION: forcing a failure. [ 338.705796][T11920] name failslab, interval 1, probability 0, space 0, times 0 [ 338.769344][T11920] CPU: 0 PID: 11920 Comm: syz.8.2169 Not tainted syzkaller #0 [ 338.776897][T11920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 338.786987][T11920] Call Trace: [ 338.790308][T11920] [ 338.793307][T11920] dump_stack_lvl+0x188/0x24e [ 338.798036][T11920] ? show_regs_print_info+0x12/0x12 [ 338.803286][T11920] ? load_image+0x410/0x410 [ 338.807880][T11920] ? __might_sleep+0xd0/0xd0 [ 338.812513][T11920] ? __lock_acquire+0x7ea0/0x7ea0 [ 338.817582][T11920] ? lockdep_hardirqs_on+0x94/0x140 [ 338.822825][T11920] should_fail_ex+0x390/0x4c0 [ 338.828732][T11920] should_failslab+0x5/0x20 [ 338.833282][T11920] slab_pre_alloc_hook+0x59/0x300 [ 338.838385][T11920] ? __kmem_cache_free+0xb6/0x200 [ 338.843476][T11920] kmem_cache_alloc+0x56/0x2f0 [ 338.848462][T11920] ? getname_kernel+0x56/0x2f0 [ 338.853357][T11920] getname_kernel+0x56/0x2f0 [ 338.857989][T11920] kern_path+0x19/0x50 [ 338.862106][T11920] tomoyo_mount_permission+0x787/0x9b0 [ 338.867608][T11920] ? tomoyo_mount_permission+0x2a1/0x9b0 [ 338.873373][T11920] ? kmem_cache_free+0xf7/0x2a0 [ 338.878296][T11920] ? tomoyo_get_name+0x520/0x520 [ 338.883317][T11920] ? lockdep_hardirqs_on+0x94/0x140 [ 338.889184][T11920] security_sb_mount+0x83/0xb0 [ 338.894081][T11920] path_mount+0xb8/0xfb0 [ 338.898373][T11920] __se_sys_mount+0x2e3/0x3d0 [ 338.903104][T11920] ? __x64_sys_mount+0xc0/0xc0 [ 338.907916][T11920] ? lockdep_hardirqs_on+0x94/0x140 [ 338.913163][T11920] ? __x64_sys_mount+0x1c/0xc0 [ 338.918000][T11920] do_syscall_64+0x4c/0xa0 [ 338.922462][T11920] ? clear_bhb_loop+0x60/0xb0 [ 338.927486][T11920] ? clear_bhb_loop+0x60/0xb0 [ 338.932248][T11920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.938181][T11920] RIP: 0033:0x7fc99619fb19 [ 338.943065][T11920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.962795][T11920] RSP: 002b:00007fc997013028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 338.971339][T11920] RAX: ffffffffffffffda RBX: 00007fc996425fa0 RCX: 00007fc99619fb19 [ 338.979346][T11920] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000180 [ 338.987446][T11920] RBP: 00007fc996237b70 R08: 0000000000000000 R09: 0000000000000000 [ 338.995451][T11920] R10: 00000000021a70d1 R11: 0000000000000246 R12: 0000000000000000 [ 339.003542][T11920] R13: 00007fc996426038 R14: 00007fc996425fa0 R15: 00007ffcedcbe498 [ 339.011648][T11920] [ 339.425853][ T50] Bluetooth: hci0: command 0x041b tx timeout [ 340.182354][T11860] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.212391][T11860] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.223770][T11860] device bridge_slave_0 entered promiscuous mode [ 340.358145][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2184'. [ 340.446349][T11860] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.454686][T11860] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.478244][T11860] device bridge_slave_1 entered promiscuous mode [ 340.587638][T11860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.611769][ T50] Bluetooth: hci3: command 0x0419 tx timeout [ 340.664833][T11860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.726785][T11860] team0: Port device team_slave_0 added [ 340.781000][T11860] team0: Port device team_slave_1 added [ 340.828925][T11860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.866998][T11860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.906522][T11860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.919858][T11860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.927350][T11860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.969849][T11860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.153197][ T7761] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.185723][ T7761] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.321080][ T7761] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.332366][ T7761] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.369808][T11860] device hsr_slave_0 entered promiscuous mode [ 341.386552][T11860] device hsr_slave_1 entered promiscuous mode [ 341.403571][T11860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.418654][T11860] Cannot create hsr debugfs directory [ 341.475229][ T7761] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.487376][ T7761] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.501569][ T50] Bluetooth: hci0: command 0x040f tx timeout [ 341.518343][T11785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 341.543878][T11785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.606226][ T7761] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.623988][ T7761] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.665099][T11785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.744115][T11785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.418753][T11785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.433272][T12023] overlayfs: failed to clone upperpath [ 342.499929][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.518634][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.549542][T11785] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.593888][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.605744][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.616280][ T7759] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.623498][ T7759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.652911][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.663297][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.673562][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.683444][ T7759] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.690589][ T7759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.701288][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 342.897706][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 342.911068][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 342.925766][T12033] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004 [ 342.948949][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.071327][T11785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.114860][T11785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.139939][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.152289][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.178240][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.194189][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.204969][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.215077][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.224348][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.233842][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.578174][ T50] Bluetooth: hci0: command 0x0419 tx timeout [ 343.871060][ T7761] device gretap0 left promiscuous mode [ 343.892710][T11785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.900786][T12064] device veth1_to_bond entered promiscuous mode [ 343.909144][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.918792][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 343.939350][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2214'. [ 344.013364][T12064] device veth1_to_bond left promiscuous mode [ 344.057185][T12064] bond0: (slave bond_slave_1): Releasing backup interface [ 344.100293][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.111210][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.159710][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.178686][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 344.209485][T12068] FAULT_INJECTION: forcing a failure. [ 344.209485][T12068] name failslab, interval 1, probability 0, space 0, times 0 [ 344.226047][T12068] CPU: 1 PID: 12068 Comm: syz.8.2217 Not tainted syzkaller #0 [ 344.233737][T12068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 344.243802][T12068] Call Trace: [ 344.247109][T12068] [ 344.250055][T12068] dump_stack_lvl+0x188/0x24e [ 344.254767][T12068] ? show_regs_print_info+0x12/0x12 [ 344.259986][T12068] ? load_image+0x410/0x410 [ 344.264587][T12068] ? __might_sleep+0xd0/0xd0 [ 344.269193][T12068] ? __lock_acquire+0x7ea0/0x7ea0 [ 344.274486][T12068] should_fail_ex+0x390/0x4c0 [ 344.279283][T12068] should_failslab+0x5/0x20 [ 344.283800][T12068] slab_pre_alloc_hook+0x59/0x300 [ 344.288877][T12068] ? mutex_unlock+0x10/0x10 [ 344.293410][T12068] ? __list_lru_init+0xb0/0x600 [ 344.298288][T12068] __kmem_cache_alloc_node+0x4f/0x270 [ 344.303712][T12068] ? __list_lru_init+0xb0/0x600 [ 344.308597][T12068] __kmalloc+0xa3/0x240 [ 344.312766][T12068] __list_lru_init+0xb0/0x600 [ 344.317547][T12068] alloc_super+0x795/0x930 [ 344.322147][T12068] ? kill_mtd_super+0x60/0x60 [ 344.326877][T12068] sget_fc+0x2d4/0x750 [ 344.330961][T12068] ? mtd_test_super+0x1d0/0x1d0 [ 344.335815][T12068] ? jffs2_reconfigure+0x310/0x310 [ 344.340933][T12068] mtd_get_sb+0x5a/0x2b0 [ 344.345331][T12068] ? mtd_get_sb_by_nr+0x7c/0xa0 [ 344.350244][T12068] get_tree_mtd+0x5e2/0x760 [ 344.354773][T12068] ? jffs2_reconfigure+0x310/0x310 [ 344.359902][T12068] ? mtd_proc_show+0x270/0x270 [ 344.364668][T12068] ? apparmor_capable+0x12c/0x190 [ 344.369695][T12068] ? bpf_lsm_capable+0x5/0x10 [ 344.374393][T12068] ? security_capable+0x85/0xb0 [ 344.379263][T12068] vfs_get_tree+0x88/0x270 [ 344.383685][T12068] do_new_mount+0x247/0xa50 [ 344.388198][T12068] __se_sys_mount+0x2e3/0x3d0 [ 344.392884][T12068] ? __x64_sys_mount+0xc0/0xc0 [ 344.397653][T12068] ? lockdep_hardirqs_on+0x94/0x140 [ 344.402861][T12068] ? __x64_sys_mount+0x1c/0xc0 [ 344.407728][T12068] do_syscall_64+0x4c/0xa0 [ 344.412156][T12068] ? clear_bhb_loop+0x60/0xb0 [ 344.417396][T12068] ? clear_bhb_loop+0x60/0xb0 [ 344.422523][T12068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.428429][T12068] RIP: 0033:0x7fc99619fb19 [ 344.432846][T12068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.453248][T12068] RSP: 002b:00007fc997013028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 344.461676][T12068] RAX: ffffffffffffffda RBX: 00007fc996425fa0 RCX: 00007fc99619fb19 [ 344.469650][T12068] RDX: 0000200000000480 RSI: 00002000000002c0 RDI: 0000200000000280 [ 344.477734][T12068] RBP: 00007fc996237b70 R08: 0000000000000000 R09: 0000000000000000 [ 344.485792][T12068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.493769][T12068] R13: 00007fc996426038 R14: 00007fc996425fa0 R15: 00007ffcedcbe498 [ 344.501773][T12068] [ 344.543893][T11785] device veth0_vlan entered promiscuous mode [ 344.576114][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 344.586072][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.660284][T12072] overlayfs: failed to clone upperpath [ 344.767824][T11785] device veth1_vlan entered promiscuous mode [ 345.119438][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.128754][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.575095][T11785] device veth0_macvtap entered promiscuous mode [ 345.608384][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.621824][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.636265][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.693306][T11785] device veth1_macvtap entered promiscuous mode [ 345.769271][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.799705][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.831096][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.858534][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.876112][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.899002][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.913549][T11785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.933299][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.952237][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.975933][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.995640][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.010743][T11785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.022620][T11785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.034084][T11785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.044819][ T7761] device veth1_to_team left promiscuous mode [ 346.056133][ T7761] device hsr_slave_0 left promiscuous mode [ 346.063033][ T7761] device hsr_slave_1 left promiscuous mode [ 346.069546][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.077471][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.085560][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.093192][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.120008][ T7761] device veth1_macvtap left promiscuous mode [ 346.126673][ T7761] device veth0_macvtap left promiscuous mode [ 346.136163][ T7761] device veth1_vlan left promiscuous mode [ 346.142359][ T7761] device veth0_vlan left promiscuous mode [ 347.257806][ T7761] team0 (unregistering): Port device team_slave_1 removed [ 347.324207][ T7761] team0 (unregistering): Port device team_slave_0 removed [ 347.394517][ T7761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.469529][ T7761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.035059][ T7761] bond0 (unregistering): Released all slaves [ 348.088938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.097155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 348.111292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.120640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.136122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.172802][T12110] FAULT_INJECTION: forcing a failure. [ 348.172802][T12110] name failslab, interval 1, probability 0, space 0, times 0 [ 348.186203][T12110] CPU: 0 PID: 12110 Comm: syz.8.2236 Not tainted syzkaller #0 [ 348.193696][T12110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 348.203774][T12110] Call Trace: [ 348.207057][T12110] [ 348.210003][T12110] dump_stack_lvl+0x188/0x24e [ 348.214732][T12110] ? show_regs_print_info+0x12/0x12 [ 348.219968][T12110] ? load_image+0x410/0x410 [ 348.224511][T12110] ? skb_crc32c_csum_help+0x510/0x510 [ 348.229937][T12110] should_fail_ex+0x390/0x4c0 [ 348.234662][T12110] should_failslab+0x5/0x20 [ 348.239204][T12110] slab_pre_alloc_hook+0x59/0x300 [ 348.244277][T12110] kmem_cache_alloc+0x56/0x2f0 [ 348.249085][T12110] ? skb_clone+0x1e7/0x370 [ 348.253543][T12110] skb_clone+0x1e7/0x370 [ 348.257821][T12110] ? dev_queue_xmit_nit+0x200/0xba0 [ 348.263062][T12110] dev_queue_xmit_nit+0x23b/0xba0 [ 348.268120][T12110] ? dev_queue_xmit_nit+0x29/0xba0 [ 348.273271][T12110] ? validate_xmit_skb+0x835/0xf90 [ 348.278430][T12110] dev_hard_start_xmit+0x158/0x8b0 [ 348.283593][T12110] ? validate_xmit_skb_list+0x120/0x120 [ 348.289199][T12110] __dev_queue_xmit+0x1d27/0x3a70 [ 348.294262][T12110] ? __dev_queue_xmit+0x274/0x3a70 [ 348.299421][T12110] ? netdev_core_pick_tx+0x360/0x360 [ 348.304746][T12110] ? ref_tracker_alloc+0x333/0x490 [ 348.309897][T12110] ? __copy_skb_header+0x3ba/0x4f0 [ 348.315049][T12110] ? memcpy+0x3c/0x60 [ 348.319076][T12110] ? __copy_skb_header+0x3ba/0x4f0 [ 348.324230][T12110] ? __skb_clone+0x446/0x6c0 [ 348.328863][T12110] ? skb_clone+0x21b/0x370 [ 348.333318][T12110] __netlink_deliver_tap+0x55c/0x7e0 [ 348.338647][T12110] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.343894][T12110] netlink_deliver_tap+0x19c/0x1b0 [ 348.349136][T12110] netlink_sendskb+0x64/0x130 [ 348.353857][T12110] ctrl_getfamily+0x4c3/0x5b0 [ 348.358573][T12110] ? nla_put_string+0x30/0x30 [ 348.363298][T12110] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 348.369673][T12110] genl_family_rcv_msg_doit+0x22f/0x350 [ 348.375360][T12110] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 348.381388][T12110] ? memcpy+0x3c/0x60 [ 348.385411][T12110] ? genl_get_cmd+0x4cf/0x8b0 [ 348.390136][T12110] genl_rcv_msg+0x601/0x790 [ 348.395479][T12110] ? genl_bind+0x360/0x360 [ 348.400717][T12110] ? nla_put_string+0x30/0x30 [ 348.405450][T12110] ? ctrl_getfamily+0x5b0/0x5b0 [ 348.410361][T12110] netlink_rcv_skb+0x1ef/0x440 [ 348.415170][T12110] ? genl_bind+0x360/0x360 [ 348.419629][T12110] ? netlink_ack+0x1160/0x1160 [ 348.424444][T12110] ? down_read+0x1a8/0x2d0 [ 348.428993][T12110] genl_rcv+0x24/0x40 [ 348.433023][T12110] netlink_unicast+0x7ad/0x920 [ 348.437865][T12110] netlink_sendmsg+0x8ad/0xbd0 [ 348.442733][T12110] ? netlink_getsockopt+0x550/0x550 [ 348.447969][T12110] ? apparmor_socket_sendmsg+0x8a/0x330 [ 348.453552][T12110] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 348.458874][T12110] ? security_socket_sendmsg+0x7c/0xa0 [ 348.464375][T12110] __sys_sendto+0x497/0x650 [ 348.468917][T12110] ? __ia32_sys_getpeername+0x80/0x80 [ 348.474361][T12110] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 348.480390][T12110] ? lock_chain_count+0x20/0x20 [ 348.485304][T12110] __x64_sys_sendto+0xda/0xf0 [ 348.490027][T12110] do_syscall_64+0x4c/0xa0 [ 348.494485][T12110] ? clear_bhb_loop+0x60/0xb0 [ 348.499195][T12110] ? clear_bhb_loop+0x60/0xb0 [ 348.503903][T12110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.509821][T12110] RIP: 0033:0x7fc99616034e [ 348.514243][T12110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.533961][T12110] RSP: 002b:00007fc997011e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 348.542396][T12110] RAX: ffffffffffffffda RBX: 00007fc9970136c0 RCX: 00007fc99616034e [ 348.550500][T12110] RDX: 0000000000000020 RSI: 00007fc997012000 RDI: 0000000000000005 [ 348.558587][T12110] RBP: 0000000000000000 R08: 00007fc997011f04 R09: 000000000000000c [ 348.566575][T12110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 348.574565][T12110] R13: 00007fc997011f58 R14: 00007fc997012000 R15: 0000000000000000 [ 348.582597][T12110] [ 348.590219][T11785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.617436][T11785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.628080][T11785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.640555][T11785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.664898][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2237'. [ 348.835678][T11860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 348.904926][T11860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 349.044005][T11860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 349.163602][T11860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 349.637859][T11860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.709269][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 349.741335][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.755187][T11860] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.811880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.837863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.866261][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.873501][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.906919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.919194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.936166][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.943389][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.961139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.974661][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 350.038137][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 350.051301][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 350.104901][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 350.150727][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 350.183893][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 350.207263][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 350.260902][T11860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 350.310112][T11860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.327957][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.342141][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.354245][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.366250][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 350.408990][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.654655][ T7761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.810478][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.829585][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.867289][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.879878][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.897024][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 350.905123][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 350.958319][T12177] jffs2: notice: (12177) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 351.003790][ T7761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.198901][ T7761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.236394][T12178] rxe_eth0 speed is unknown, defaulting to 1000 [ 351.410998][ T7761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.563139][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 351.570921][ T7760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 351.619142][T11860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.945585][T12184] loop8: detected capacity change from 0 to 32768 [ 351.955638][T12202] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2267'. [ 351.972455][T12184] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.2263 (12184) [ 352.033610][T12184] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 352.049079][T12184] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 352.091011][T12184] BTRFS info (device loop8): setting nodatasum [ 352.129985][T12184] BTRFS info (device loop8): force zlib compression, level 3 [ 352.170171][T12184] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 352.194691][T12178] chnl_net:caif_netlink_parms(): no params data found [ 352.217434][T12184] BTRFS info (device loop8): use lzo compression, level 0 [ 352.248807][T12184] BTRFS info (device loop8): turning on flush-on-commit [ 352.280510][T12184] BTRFS info (device loop8): enabling auto defrag [ 352.304437][T12184] BTRFS info (device loop8): max_inline at 4096 [ 352.318237][T12184] BTRFS info (device loop8): using free space tree [ 352.371536][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 352.782641][T12184] BTRFS info (device loop8): enabling ssd optimizations [ 352.840737][T12178] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.848320][T12178] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.928031][T12178] device bridge_slave_0 entered promiscuous mode [ 352.953524][ T6191] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 353.012180][ T4292] Bluetooth: hci3: command 0x0409 tx timeout [ 353.044653][T12178] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.052510][T12178] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.060756][T12178] device bridge_slave_1 entered promiscuous mode [ 353.072766][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.095670][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.310095][T11860] device veth0_vlan entered promiscuous mode [ 354.334206][T12178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.369242][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.395186][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.424698][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.446056][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.577969][T12178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.696598][T12178] team0: Port device team_slave_0 added [ 354.783577][T11860] device veth1_vlan entered promiscuous mode [ 354.805251][T12178] team0: Port device team_slave_1 added [ 354.917169][T12178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.942302][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.021614][T12178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.091523][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 355.144786][T12178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.163653][T12308] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2290'. [ 355.184932][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.231197][T12178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.436037][T12320] loop8: detected capacity change from 0 to 512 [ 355.526697][T12178] device hsr_slave_0 entered promiscuous mode [ 355.548664][T12320] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.2293: iget: bad i_size value: 38620345925642 [ 355.580678][T12178] device hsr_slave_1 entered promiscuous mode [ 355.611607][T12178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.638428][T12178] Cannot create hsr debugfs directory [ 355.651993][T12320] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.2293: couldn't read orphan inode 15 (err -117) [ 355.706436][T12320] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 355.741097][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 355.758108][ T7763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.794439][T12320] EXT4-fs (loop8): shut down requested (1) [ 355.825615][T11860] device veth0_macvtap entered promiscuous mode [ 355.914847][T11860] device veth1_macvtap entered promiscuous mode [ 355.977379][ T6191] EXT4-fs (loop8): unmounting filesystem. [ 356.039344][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.142801][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.340323][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.422350][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.500220][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.650090][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.742882][T11860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.839525][ T7761] device hsr_slave_0 left promiscuous mode [ 356.858165][ T7761] device hsr_slave_1 left promiscuous mode [ 356.866995][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.875339][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.884634][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.892519][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.900170][ T7761] device bridge_slave_1 left promiscuous mode [ 356.906586][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.916032][ T7761] device bridge_slave_0 left promiscuous mode [ 356.922570][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.954500][ T7761] device veth1_macvtap left promiscuous mode [ 356.960606][ T7761] device veth0_macvtap left promiscuous mode [ 356.967802][ T7761] device veth1_vlan left promiscuous mode [ 356.973798][ T7761] device veth0_vlan left promiscuous mode [ 357.178910][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 357.972961][ T7761] team0 (unregistering): Port device team_slave_1 removed [ 358.039459][ T7761] team0 (unregistering): Port device team_slave_0 removed [ 358.108860][ T7761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.176684][ T7761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.688890][ T7761] bond0 (unregistering): Released all slaves [ 358.848253][T12379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 358.857148][T12379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 358.865744][T12379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.874886][T12379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.888367][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.899353][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.911972][T11860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.923260][T11860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.934457][T11860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.961814][ T6430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.980553][ T6430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.028409][T11860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.067512][T11860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.089491][T11860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.098817][T11860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.254958][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 360.190926][ T7761] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.234913][T12178] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 360.274346][T12178] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 360.376399][ T7761] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.424003][T12178] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 360.444280][T12178] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 360.597386][ T7761] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.655553][T12449] rxe_eth0 speed is unknown, defaulting to 1000 [ 360.768807][ T7761] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.957240][T12178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.020233][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 361.041269][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 361.085711][T12178] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.150800][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 361.168933][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 361.185363][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.198701][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.208336][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.217690][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.226862][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 361.234469][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.285889][T12367] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.293118][T12367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.374373][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 361.386735][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 361.400361][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 361.437285][T12367] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.445300][T12367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.481938][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 361.518971][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 361.538093][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 361.567208][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 361.622114][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 361.635721][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 361.662564][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 361.724977][T12459] rxe_eth0 speed is unknown, defaulting to 1000 [ 361.754685][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 361.787760][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 361.874923][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 361.911055][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 361.965428][T12474] device ip6gre1 entered promiscuous mode [ 362.008740][T12178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 362.743908][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.785068][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 362.885855][T12512] loop8: detected capacity change from 0 to 512 [ 362.914130][T12178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.019584][T12512] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 363.045218][T12512] System zones: 1-12 [ 363.078704][T12459] chnl_net:caif_netlink_parms(): no params data found [ 363.094560][T12512] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.2332: missing EA_INODE flag [ 363.110777][T12512] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2332: error while reading EA inode 12 err=-117 [ 363.129723][T12512] EXT4-fs (loop8): 1 orphan inode deleted [ 363.136765][T12512] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 363.227070][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.240651][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.296656][ T6191] EXT4-fs (loop8): unmounting filesystem. [ 363.331807][ T50] Bluetooth: hci0: command 0x0409 tx timeout [ 363.606468][T12178] device veth0_vlan entered promiscuous mode [ 363.660451][T12369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.670240][T12369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.709561][T12178] device veth1_vlan entered promiscuous mode [ 363.781547][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.789762][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.817697][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 363.862334][T12459] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.869562][T12459] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.893632][T12459] device bridge_slave_0 entered promiscuous mode [ 364.119498][T12459] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.138397][T12459] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.162297][T12459] device bridge_slave_1 entered promiscuous mode [ 364.181776][T12369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 364.237487][T12379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 364.252988][T12379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.284353][T12178] device veth0_macvtap entered promiscuous mode [ 364.381864][T12459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.393079][T12178] device veth1_macvtap entered promiscuous mode [ 364.421428][T12459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.489557][ T7761] device hsr_slave_0 left promiscuous mode [ 364.498177][ T7761] device hsr_slave_1 left promiscuous mode [ 364.520037][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.544427][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.571264][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.587982][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.632193][ T7761] device bridge_slave_1 left promiscuous mode [ 364.647899][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.660352][ T7761] device bridge_slave_0 left promiscuous mode [ 364.686655][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.786677][ T7761] device veth1_macvtap left promiscuous mode [ 364.806403][ T7761] device veth0_macvtap left promiscuous mode [ 364.834159][ T7761] device veth1_vlan left promiscuous mode [ 364.860409][ T7761] device veth0_vlan left promiscuous mode [ 365.071872][T12571] loop8: detected capacity change from 0 to 128 [ 365.099759][T12571] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 365.152496][T12571] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 365.411540][ T50] Bluetooth: hci0: command 0x041b tx timeout [ 366.578555][ T7761] team0 (unregistering): Port device team_slave_1 removed [ 366.723841][ T7761] team0 (unregistering): Port device team_slave_0 removed [ 366.792696][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 366.792710][ T27] audit: type=1800 audit(1793722723.719:282): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2353" name="ipv4_address" dev="configfs" ino=61880 res=0 errno=0 [ 366.885659][ T7761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.037709][ T7761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.515709][ T50] Bluetooth: hci0: command 0x040f tx timeout [ 367.714959][T12627] loop8: detected capacity change from 0 to 32768 [ 367.865199][T12627] ERROR: (device loop8): duplicateIXtree: [ 367.865199][T12627] [ 367.878598][T12627] ERROR: (device loop8): remounting filesystem as read-only [ 367.919429][ T7761] bond0 (unregistering): Released all slaves [ 368.054092][T12561] netlink: 'syz.2.2345': attribute type 1 has an invalid length. [ 368.086190][ T6430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 368.102921][ T6430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 368.172452][T12459] team0: Port device team_slave_0 added [ 368.213029][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.241519][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.261525][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.301124][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.319512][T12178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.333087][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.380570][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.431657][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.465707][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.503800][T12178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.520631][T12459] team0: Port device team_slave_1 added [ 368.528457][T12369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 368.541075][T12369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 368.579320][T12369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 368.618255][T12369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 368.642905][T12178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.663054][T12178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.681609][T12178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.690396][T12178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.737076][T12459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.770976][T12459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.848600][T12459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.924791][T12459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.938251][T12459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.008738][T12459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.142207][T12459] device hsr_slave_0 entered promiscuous mode [ 369.159421][T12459] device hsr_slave_1 entered promiscuous mode [ 369.489565][T12666] netlink: 'syz.8.2370': attribute type 1 has an invalid length. [ 369.511740][T12666] netlink: 'syz.8.2370': attribute type 2 has an invalid length. [ 369.571537][ T50] Bluetooth: hci0: command 0x0419 tx timeout [ 369.899478][T12369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.034131][T12369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.202759][T12369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.568826][T12369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.056792][T12459] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 371.160463][T12459] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.183018][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.195442][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.213602][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.222521][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.230801][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 371.239138][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.366261][T12718] loop8: detected capacity change from 0 to 764 [ 371.423922][T12718] rock: directory entry would overflow storage [ 371.438600][T12718] rock: sig=0x5245, size=8, remaining=5 [ 371.476856][T12459] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.495703][T12459] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.645557][T12713] rxe_eth0 speed is unknown, defaulting to 1000 [ 372.269895][T12459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.341666][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 372.349606][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 372.435320][T12459] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.834581][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 372.844715][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 372.869697][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.876943][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.890311][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 372.899802][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 372.912904][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.920086][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.982156][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 372.990811][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.000738][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.012563][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.032397][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 373.041086][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 373.050353][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 373.071129][T12459] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 373.083881][T12459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.139883][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.148889][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.168452][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.225566][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.255363][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.286576][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 373.336855][ T4292] Bluetooth: hci3: command 0x0409 tx timeout [ 373.548481][T12713] chnl_net:caif_netlink_parms(): no params data found [ 373.794509][T12369] device hsr_slave_0 left promiscuous mode [ 373.804614][T12369] device hsr_slave_1 left promiscuous mode [ 373.819324][T12369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.828340][T12369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.836989][T12369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.844820][T12369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.853156][T12369] device bridge_slave_1 left promiscuous mode [ 373.859490][T12369] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.869786][T12369] device bridge_slave_0 left promiscuous mode [ 373.877127][T12369] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.922171][T12369] device veth1_macvtap left promiscuous mode [ 373.929481][T12369] device veth0_macvtap left promiscuous mode [ 373.935977][T12369] device veth1_vlan left promiscuous mode [ 373.941933][T12369] device veth0_vlan left promiscuous mode [ 374.673227][T12780] overlayfs: failed to clone upperpath [ 374.985962][ T27] audit: type=1326 audit(1793722731.909:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.7.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcbf9fb19 code=0x7ffc0000 [ 375.119816][ T27] audit: type=1326 audit(1793722731.909:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.7.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcbf9fb19 code=0x7ffc0000 [ 375.221654][ T27] audit: type=1326 audit(1793722731.969:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.7.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcbf9fb19 code=0x7ffc0000 [ 375.310340][ T27] audit: type=1326 audit(1793722731.969:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.7.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcbf9fb19 code=0x7ffc0000 [ 375.391781][ T27] audit: type=1326 audit(1793722731.969:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.7.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbbcbf9fb19 code=0x7ffc0000 [ 375.416667][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 375.429697][ T27] audit: type=1326 audit(1793722731.969:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.7.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbbcbf9f882 code=0x7ffc0000 [ 375.479460][ T27] audit: type=1326 audit(1793722731.969:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.7.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbbcbf9f882 code=0x7ffc0000 [ 375.584091][ T27] audit: type=1326 audit(1793722731.969:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.7.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcbf9fb19 code=0x7ffc0000 [ 375.618744][ T27] audit: type=1326 audit(1793722731.969:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.7.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcbf9fb19 code=0x7ffc0000 [ 375.689147][ T27] audit: type=1326 audit(1793722731.999:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12782 comm="syz.7.2397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcbf9fb19 code=0x7ffc0000 [ 376.096820][T12811] loop8: detected capacity change from 0 to 512 [ 376.145031][T12811] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 376.266671][T12811] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 376.352687][T12811] EXT4-fs error (device loop8): ext4_acquire_dquot:6848: comm syz.8.2404: Failed to acquire dquot type 0 [ 376.434042][T12811] EXT4-fs (loop8): 1 truncate cleaned up [ 376.447844][T12811] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 376.539389][T12811] EXT4-fs (loop8): unmounting filesystem. [ 376.952204][T12841] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2410'. [ 377.032575][T12369] team0 (unregistering): Port device team_slave_1 removed [ 377.073020][T12843] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2410'. [ 377.183848][T12369] team0 (unregistering): Port device team_slave_0 removed [ 377.347528][T12369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.478475][T12369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.491708][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 378.179526][T12369] bond0 (unregistering): Released all slaves [ 378.292363][T12818] tipc: Enabled bearer , priority 0 [ 378.298871][T12845] netlink: 'syz.8.2411': attribute type 1 has an invalid length. [ 378.321533][T12845] netlink: 'syz.8.2411': attribute type 4 has an invalid length. [ 378.329326][T12845] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.2411'. [ 378.379787][T12713] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.398472][T12713] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.442601][T12713] device bridge_slave_0 entered promiscuous mode [ 378.454545][T12713] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.467852][T12713] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.476963][T12713] device bridge_slave_1 entered promiscuous mode [ 378.560619][T12713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.624889][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.631406][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.683715][T12713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.687976][T12871] overlayfs: failed to clone upperpath [ 378.815113][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 378.833099][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 378.848444][T12713] team0: Port device team_slave_0 added [ 378.895866][T12459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.955285][T12713] team0: Port device team_slave_1 added [ 379.026885][T12713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.052841][T12713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.132131][T12713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.166378][T12713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.183865][T12713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.278182][T12713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.435193][T12713] device hsr_slave_0 entered promiscuous mode [ 379.477535][T12713] device hsr_slave_1 entered promiscuous mode [ 379.496930][T12713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.524847][T12713] Cannot create hsr debugfs directory [ 379.571583][ T50] Bluetooth: hci3: command 0x0419 tx timeout [ 380.239803][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 380.258502][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 380.326522][T12369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 380.340577][T12369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 380.359503][T12369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 380.384668][T12369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 380.405836][T12459] device veth0_vlan entered promiscuous mode [ 380.435855][T12459] device veth1_vlan entered promiscuous mode [ 380.504453][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.526929][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.550635][T12459] device veth0_macvtap entered promiscuous mode [ 380.580813][T12459] device veth1_macvtap entered promiscuous mode [ 380.686831][T12459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.716929][T12459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.744362][T12459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.766261][T12459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.796391][T12459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.828556][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 380.849002][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.876813][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.900492][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.932463][T12459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.953419][T12459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.974674][T12459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.997607][T12459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.022018][T12459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.046370][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 381.076585][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.120807][T12459] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.165346][T12459] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.196949][T12459] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.215395][T12459] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.250854][T12713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 381.282521][T12713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 381.371272][T12713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 381.415622][T12713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 381.568471][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053e81400: rx timeout, send abort [ 382.030962][ T7761] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.079762][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053e81400: abort rx timeout. Force session deactivation [ 382.129620][T12713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.297153][ T7761] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.373903][T12713] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.387950][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 382.410840][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.467651][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 382.516472][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 382.551932][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.559151][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.588192][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.609021][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.638618][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.645933][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.757754][ T7761] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.804883][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 382.818221][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 382.863629][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 382.899570][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 382.941990][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 382.971187][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.050002][ T7761] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.097931][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.116308][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.167214][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 383.194273][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.239901][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 383.275343][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.296953][T12713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.685585][T12998] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 383.751141][T13001] af_packet: packet size is too long (511 > 76) [ 384.241451][T13028] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 384.241451][T13028] Q&|x777777777777777777 [ 384.421200][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.444942][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 384.617192][T12713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.722684][ T7758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 384.744671][ T7758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 384.861795][T12365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 384.880371][T12365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 384.901636][ T7] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 384.908877][T13046] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 384.946996][T12713] device veth0_vlan entered promiscuous mode [ 385.069447][T12365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 385.091557][ T7] usb 9-1: Using ep0 maxpacket: 32 [ 385.098583][ T7] usb 9-1: config 0 has no interfaces? [ 385.098669][T12365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 385.118095][ T7] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 385.138356][T12713] device veth1_vlan entered promiscuous mode [ 385.139873][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.166114][ T7] usb 9-1: Product: syz [ 385.176367][ T7] usb 9-1: Manufacturer: syz [ 385.195054][ T7] usb 9-1: SerialNumber: syz [ 385.218280][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 385.234772][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 385.239336][ T7] usb 9-1: config 0 descriptor?? [ 385.247049][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 385.280214][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 385.301199][T12713] device veth0_macvtap entered promiscuous mode [ 385.344024][T12713] device veth1_macvtap entered promiscuous mode [ 385.378834][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.392807][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.403362][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.415318][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.425676][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.436615][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.456198][T12713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.473059][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 385.504298][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 385.522714][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 385.572064][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 385.584589][ T7] usb 9-1: USB disconnect, device number 16 [ 385.585550][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.640338][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.661010][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.673159][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.706593][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.747862][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.793480][T12713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.826607][ T7761] device hsr_slave_0 left promiscuous mode [ 385.852229][ T7761] device hsr_slave_1 left promiscuous mode [ 385.868899][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.897282][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.926746][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.950789][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.976799][ T7761] device bridge_slave_1 left promiscuous mode [ 385.989721][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.010743][ T7761] device bridge_slave_0 left promiscuous mode [ 386.028185][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.157362][ T7761] device veth1_macvtap left promiscuous mode [ 386.171712][ T7761] device veth0_macvtap left promiscuous mode [ 386.188120][ T7761] device veth1_vlan left promiscuous mode [ 386.197450][ T7761] device veth0_vlan left promiscuous mode [ 387.917303][ T7761] team0 (unregistering): Port device team_slave_1 removed [ 388.049922][ T7761] team0 (unregistering): Port device team_slave_0 removed [ 388.130853][ T7761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.201276][ T7761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.932146][ T59] wlan1: Trigger new scan to find an IBSS to join [ 388.949218][ T7761] bond0 (unregistering): Released all slaves [ 389.270193][T12365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 389.294038][T12365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 389.330749][T12713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.354803][T12713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.397934][T12713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.418665][T12713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.447411][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2460'. [ 389.689065][T13074] team0: Port device team_slave_0 removed [ 390.553725][T13151] loop8: detected capacity change from 0 to 512 [ 390.569825][T13151] EXT4-fs: Ignoring removed bh option [ 390.574525][T12902] udevd[12902]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 390.616252][T13151] EXT4-fs error (device loop8): ext4_iget_extra_inode:4766: inode #15: comm syz.8.2476: corrupted in-inode xattr [ 390.638556][T12902] udevd[12902]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 390.665556][T13151] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.2476: couldn't read orphan inode 15 (err -117) [ 390.740718][T13151] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 390.995312][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.132098][ T6191] EXT4-fs (loop8): unmounting filesystem. [ 391.173402][T12902] udevd[12902]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 391.198238][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.283075][T12902] udevd[12902]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 391.356993][T13167] loop8: detected capacity change from 0 to 1024 [ 391.368368][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.385098][T12902] udevd[12902]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 391.406317][T13167] hfsplus: catalog record size mismatch (type 1, got 46, expected 88) [ 391.469010][T12902] udevd[12902]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 391.515226][T12902] udevd[12902]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 391.526986][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.893314][ T7758] wlan1: Trigger new scan to find an IBSS to join [ 392.846358][ T7761] wlan1: Creating new IBSS network, BSSID 7e:7a:52:58:3b:59 [ 392.921875][ T7761] wlan1: Failed to join IBSS, beacons forbidden [ 393.137147][T13203] netlink: 'syz.2.2486': attribute type 1 has an invalid length. [ 393.415753][T13208] bond3: (slave bridge0): making interface the new active one [ 393.466873][T13208] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 394.357119][ T59] device hsr_slave_0 left promiscuous mode [ 394.379753][ T59] device hsr_slave_1 left promiscuous mode [ 394.393937][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.423548][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.456999][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.467181][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.484061][ T59] device bridge_slave_1 left promiscuous mode [ 394.521595][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.530816][ T59] device bridge_slave_0 left promiscuous mode [ 394.541624][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.603208][ T59] device veth1_macvtap left promiscuous mode [ 394.609335][ T59] device veth0_macvtap left promiscuous mode [ 394.661575][ T59] device veth1_vlan left promiscuous mode [ 394.667479][ T59] device veth0_vlan left promiscuous mode [ 394.702770][T13247] overlayfs: failed to clone upperpath [ 394.931806][T12365] wlan1: Trigger new scan to find an IBSS to join [ 395.776329][T12367] wlan1: Creating new IBSS network, BSSID 2a:ea:38:80:6a:7c [ 395.787112][T12367] wlan1: Failed to join IBSS, beacons forbidden [ 396.646631][T13287] loop8: detected capacity change from 0 to 128 [ 396.718891][T13292] udevd[13292]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 396.729496][T13287] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 396.804685][T13287] ext4 filesystem being mounted at /411/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 397.056199][ T6191] EXT4-fs (loop8): unmounting filesystem. [ 397.133266][T13292] udevd[13292]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 397.167525][T13292] udevd[13292]: inotify_add_watch(7, /dev/loop8, 10) failed: No such file or directory [ 397.690830][ T59] team0 (unregistering): Port device team_slave_1 removed [ 397.815408][ T59] team0 (unregistering): Port device team_slave_0 removed [ 397.891600][ T48] wlan1: Trigger new scan to find an IBSS to join [ 397.931675][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.116795][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.703514][ T7761] wlan1: Creating new IBSS network, BSSID 42:b6:36:60:59:23 [ 398.710915][ T7761] wlan1: Failed to join IBSS, beacons forbidden [ 399.116184][ T59] bond0 (unregistering): Released all slaves [ 399.555449][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2515'. [ 399.581597][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2515'. [ 399.722493][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2515'. [ 399.736184][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2515'. [ 400.932575][ T7761] wlan1: Trigger new scan to find an IBSS to join [ 401.742386][T12369] wlan1: Creating new IBSS network, BSSID aa:0d:bd:dc:e2:59 [ 401.750078][T12369] wlan1: Failed to join IBSS, beacons forbidden [ 403.893065][ T7758] wlan1: Trigger new scan to find an IBSS to join [ 404.701891][ T59] wlan1: Creating new IBSS network, BSSID a2:ea:24:43:e1:02 [ 404.709274][ T59] wlan1: Failed to join IBSS, beacons forbidden [ 406.851715][T12369] wlan1: Trigger new scan to find an IBSS to join [ 407.665008][ T7758] wlan1: Creating new IBSS network, BSSID 0a:5b:c9:37:76:7f [ 407.680480][ T7758] wlan1: Failed to join IBSS, beacons forbidden SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: open(/dev/rfkill) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=2139 state=3 status=67 (errno 32: Broken pipe) [ 408.773596][ T6073] tipc: Resetting bearer [ 408.815928][ T6073] tipc: Disabling bearer [ 409.025953][ T7761] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.154137][ T7761] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.247481][ T7761] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.352898][ T7761] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.531259][ T7761] tipc: Left network mode [ 409.891923][ T7758] wlan1: Trigger new scan to find an IBSS to join [ 410.760885][ T7761] device hsr_slave_0 left promiscuous mode [ 410.768450][ T7761] device hsr_slave_1 left promiscuous mode [ 410.776501][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.789006][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.797285][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.805005][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.828617][ T7761] device veth1_macvtap left promiscuous mode [ 410.834784][ T7761] device veth0_macvtap left promiscuous mode [ 410.841251][ T7761] device veth1_vlan left promiscuous mode [ 410.847426][ T7761] device veth0_vlan left promiscuous mode [ 410.927361][ T7761] bond3 (unregistering): (slave bridge0): Releasing active interface [ 410.939575][ T7761] bond3 (unregistering): Released all slaves [ 410.953016][ T7761] bond2 (unregistering): Released all slaves [ 410.964627][ T7761] bond1 (unregistering): Released all slaves [ 411.568850][ T7761] team0 (unregistering): Port device team_slave_1 removed [ 411.630080][ T7761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.693490][ T7761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.097376][ T7761] bond0 (unregistering): Released all slaves