last executing test programs: 4m16.346567382s ago: executing program 1 (id=127): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000500)={[{0x9, 0x1, 0x7, 0x1, 0x5, 0x1f, 0xfc, 0x6, 0x0, 0x2, 0x40, 0x80, 0x5}, {0x400, 0xea2, 0x5, 0x7f, 0x86, 0x0, 0x7, 0x0, 0x4, 0x0, 0x8, 0x1, 0x2}, {0x4, 0x225, 0x8f, 0x5, 0x3, 0x0, 0xb, 0x0, 0x7, 0x7, 0x7f, 0x7f, 0xfffffffffffffff9}], 0x3}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f00000004c0)=[0x0], 0x1, 0x0}) read(r3, &(0x7f0000001140)=""/4096, 0x1000) close(0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m15.749701272s ago: executing program 1 (id=129): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000140)="0000000001000000", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f0000000180)="0000000001000000", 0x8) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000200)="000000000100", 0x6) setsockopt(r1, 0x84, 0x81, &(0x7f0000000240)="0000000001000000", 0x8) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}], 0x10) connect(r1, &(0x7f0000000300)=@in={0x2, 0x4e20, @loopback}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000380)=[@in={0x2, 0x0, @loopback}], 0x10) 4m14.205390239s ago: executing program 1 (id=135): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m13.858303923s ago: executing program 1 (id=138): syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x2008802, &(0x7f0000002e40)=ANY=[@ANYBLOB='keep_last_dots,errors=continue,errors=remount-ro,allow_utime=00000000000000000141077,discard,dmask=00000000000000000000003,iocharset=cp864,utf8,errors=continue,errors=continue,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031312c6572726f72733d636f6e74696e75652c6d61736b3d5e4d41595f415050454e442c64656e636f6e746578743d73797361646d5f752c736d61636b66736465663d212c6673636f6e746578743d73746166665f752c736d61636b6673726f6f743d2e212d8f2c2b2c736d61636b6673726f6f743d646d61736b2c6f626a5f747970653df12124215d293a27242c636f6e746578743d73746166665f752c00"], 0x1, 0x152f, &(0x7f0000003000)="$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") mount(0x0, &(0x7f000000dd80)='./file0\x00', &(0x7f000000ddc0)='cgroup2\x00', 0x0, 0x0) open(&(0x7f000000de00)='./file0\x00', 0x0, 0x0) 4m12.395264232s ago: executing program 1 (id=141): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x180100, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0403220c"], 0x7) 4m11.815439541s ago: executing program 1 (id=148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3a0af839) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rpc\x00') getdents64(r2, 0x0, 0x43) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000002c0), &(0x7f0000000300)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x21, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000480)=0x1, 0x4) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(0xffffffffffffffff, 0x40086e81, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4m9.697765155s ago: executing program 32 (id=148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3a0af839) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rpc\x00') getdents64(r2, 0x0, 0x43) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000002c0), &(0x7f0000000300)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x21, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000480)=0x1, 0x4) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(0xffffffffffffffff, 0x40086e81, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4m8.039179873s ago: executing program 0 (id=161): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000020000000000001600000000030000000000000f0100000000000000000000150200000000002e2e"], 0x0, 0x44}, 0x28) 4m7.156316483s ago: executing program 0 (id=163): r0 = memfd_create(&(0x7f0000000980)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f000001f680)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) 4m1.901695254s ago: executing program 0 (id=184): socket$netlink(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x7, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x14b102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8000, r2, 0x0, 0xf2ffffffffffffff}, 0x38) 3m46.257582738s ago: executing program 33 (id=184): socket$netlink(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0x7, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x14b102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8000, r2, 0x0, 0xf2ffffffffffffff}, 0x38) 56.066591863s ago: executing program 3 (id=615): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) 55.69779104s ago: executing program 3 (id=616): fcntl$lock(0xffffffffffffffff, 0x410, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000000340)=""/102392, 0x18ff8) getpriority(0x2, r0) 53.161838547s ago: executing program 3 (id=620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2400000002030101000000000000000002000000080001"], 0x24}}, 0x0) 52.229910211s ago: executing program 3 (id=625): r0 = socket(0x10, 0x803, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xa541, 0x2, 0x2, 0x33}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xea2, 0x80, 0x2, 0x315}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5341, 0x4, 0x3, 0x38e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9188, 0x20000, 0x1, 0x2f5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5f48, 0x20, 0x0, 0xa8}}], 0x4, &(0x7f0000001940)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x1, 0x822, 0x0, &(0x7f0000000940)=@buf_4k="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"}}, &(0x7f00000019c0)) syz_io_uring_setup(0xefd, &(0x7f0000000580)={0x0, 0x0, 0x400, 0x2, 0x55, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x80000080}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001a00)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r5, r7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x0, 0x0}) r9 = syz_open_dev$vim2m(&(0x7f0000000400), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000440)={0x8, 0x1, 0x1}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448cb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bind$bt_hci(r10, &(0x7f0000000500)={0x1f, 0x0, 0x1}, 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000540)=0x1) 47.020927319s ago: executing program 3 (id=632): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xa541, 0x2, 0x2, 0x33}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xea2, 0x80, 0x2, 0x315}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5341, 0x4, 0x3, 0x38e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9188, 0x20000, 0x1, 0x2f5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5f48, 0x20, 0x0, 0xa8}}], 0x4, &(0x7f0000001940)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x1, 0x822, 0x0, &(0x7f0000000940)=@buf_4k="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"}}, &(0x7f00000019c0)) syz_io_uring_setup(0xefd, &(0x7f0000000580)={0x0, 0x0, 0x400, 0x2, 0x55, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x80000080}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001a00)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) dup2(r3, r5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0x1}], 0x1) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x0, 0x0}) r7 = syz_open_dev$vim2m(&(0x7f0000000400), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000440)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000480)=@mmap={0x1, 0x1, 0x4, 0x8030, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0xa, 0x0, 0x1, "bf231e4b"}}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448cb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bind$bt_hci(r8, &(0x7f0000000500)={0x1f, 0x0, 0x1}, 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000540)=0x1) 45.585855433s ago: executing program 3 (id=636): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 29.857192997s ago: executing program 34 (id=636): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000000c0)=0x2) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 22.493508152s ago: executing program 2 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000008c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000900)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e22, 0x7f, @empty, 0x4}, 0x1c) listen(r4, 0x81) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000540)=[{&(0x7f0000000580)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 19.391065906s ago: executing program 2 (id=683): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) open(&(0x7f0000000400)='.\x00', 0x0, 0x0) exit(0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x3c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 16.472284042s ago: executing program 2 (id=687): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000011c0)={0x8, 0x40000088}, 0x0) r1 = gettid() getpgid(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000001200)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000012c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001300)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000200)='j', 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000340)='highspeed', 0x9) shutdown(r7, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f000001a380)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) 14.831721748s ago: executing program 2 (id=690): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(0x0, 0x80000001, 0x28100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x1}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000003c0)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x890b, &(0x7f0000000680)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r1, &(0x7f00000006c0), 0x12) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000740)={'bond0\x00', 0x2000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./nfsd\x00', 0x8) mount(0x0, &(0x7f00000007c0)='./nfsd\x00', &(0x7f0000000800)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd/versions\x00', 0x1, 0x0) write(r3, &(0x7f0000000880)='-# ', 0x3) 13.779389405s ago: executing program 4 (id=694): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000000d000)=""/102368, 0x18fe0) getpid() getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@mcast1}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, 0x0, 0x4020) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) ioctl$KDSIGACCEPT(r2, 0x5607, 0x16) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000300)={0x3, 0x6}) 12.298717064s ago: executing program 4 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)) 11.85373467s ago: executing program 5 (id=697): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) open(&(0x7f0000000400)='.\x00', 0x0, 0x0) exit(0x0) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x3c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 10.75985802s ago: executing program 5 (id=698): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x6000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000488000/0x4000)=nil) syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0xd5ec, 0x4) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f000001a680)=ANY=[@ANYBLOB="040e"], 0x7) syz_emit_vhci(0x0, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200a7a) sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019380)=0x410000002) mount(&(0x7f00000194c0)=@filename='mtd0\x00', &(0x7f0000019500)='./file0\x00', &(0x7f0000019540)='nfs4\x00', 0x800040, 0x0) 9.342451894s ago: executing program 5 (id=700): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000100), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000001c0)=0x10, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4a23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xe73c}, 0x70bd2a, 0x40003504, 0x2, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x1000000000000192, 0x1000000000000192, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x5, 0x4}, {0xfffffffe, 0x9}, 0x8070bd2d, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x800) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x0, 0x0, 0x0, 0xa, 0xc3, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000800), 0x8, 0x10, &(0x7f0000000840), 0x10}, 0x94) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000880)={0x97, 0xfd, 0x8, 0xfb, 0x5, 0x2, 0x0, 0x8, 0x5, 0x1, 0xd, 0xfd, 0x0, 0xac}, 0xe) sendmsg$inet6(r3, &(0x7f00000008c0)={&(0x7f0000000900)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000980)="88", 0x1}], 0x1}, 0x4048043) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000009c0)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000ac0)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000b00)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) r6 = syz_open_procfs(0x0, &(0x7f0000000bc0)='net/unix\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x54, 0xa, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)={0x34, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}]}]}, 0x34}}, 0x0) pread64(r6, &(0x7f0000001040)=""/173, 0xad, 0xb0) syz_ublk_setup_io_uring(0x1e, &(0x7f0000001100)={0x0, 0x9a7a, 0x200, 0x2000002, 0x158, 0x0, r6}, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 8.075639762s ago: executing program 6 (id=703): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'tunl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x1, 0x80, 0x1000, 0xa, {{0x5, 0x4, 0x0, 0xe, 0x14, 0x64, 0x0, 0x10, 0x29, 0x0, @multicast2, @multicast2}}}}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.852989825s ago: executing program 2 (id=704): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000019340)={0x1, &(0x7f0000019380)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000000280)=""/102392, 0x18ff8) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) mount(&(0x7f0000019280)=@nullb, &(0x7f00000192c0)='./cgroup\x00', &(0x7f0000019300)='btrfs\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000010003704000092150000000000000000", @ANYRES32=0x0, @ANYBLOB="02880000000000002400128009000100697069700000000014000280050009000400000005000a00000000001400030074756e6c3000"/64], 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000000)=0x60) 7.661765024s ago: executing program 6 (id=705): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mlockall(0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x80302, 0x0) write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) syz_usb_disconnect(0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.661511854s ago: executing program 4 (id=706): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000500)={[{0x9, 0x1, 0x7, 0x1, 0x5, 0x1f, 0xfc, 0x6, 0x0, 0x2, 0x40, 0x80, 0x5}, {0x400, 0xea2, 0x5, 0x7f, 0x86, 0x0, 0x7, 0x0, 0x4, 0x0, 0x8, 0x1, 0x2}, {0x4, 0x225, 0x8f, 0x5, 0x3, 0x0, 0xb, 0x0, 0x7, 0x7, 0x7f, 0x7f, 0xfffffffffffffff9}], 0x3}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f00000004c0)=[0x0], 0x1, 0x0}) read(r3, &(0x7f0000001140)=""/4096, 0x1000) close(0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.530774007s ago: executing program 5 (id=707): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.687881454s ago: executing program 4 (id=708): mkdir(&(0x7f00000000c0)='proc_dir\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000001000)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='27', 0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x400500, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) 4.966924357s ago: executing program 2 (id=709): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='\x00', 0x89901) fchdir(r0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x110) faccessat2(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', 0x4, 0x1100) 4.903990523s ago: executing program 6 (id=710): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000d80)=""/259, 0x103}, {&(0x7f0000000ec0)=""/4134, 0x1026}, {&(0x7f0000001f00)=""/125, 0x7d}, {&(0x7f0000001f80)=""/4102, 0x1006}, {&(0x7f0000002fc0)=""/183, 0xb7}, {&(0x7f0000003080)=""/119, 0x77}, {&(0x7f0000003100)=""/109, 0x6d}, {&(0x7f0000003180)=""/4079, 0xfef}, {&(0x7f0000004180)=""/258, 0x102}, {&(0x7f00000044c0)=""/147, 0x93}], 0xa}, 0x10082) 4.658061908s ago: executing program 5 (id=711): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000800)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000840)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000880), 0x0, 0x0) read$msr(r2, &(0x7f0000000bc0)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, 0x0, 0x0, 0x0) io_uring_setup(0x46eb, &(0x7f0000019c40)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r3, 0x29, 0xce, 0x0, 0x0) open(0x0, 0x402000, 0x50) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000019cc0)="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", 0x2000, &(0x7f000001bcc0)={&(0x7f000001bd80)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f000001be00)="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", 0x2000, &(0x7f000001de00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000001dec0)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x68ec2dee, 0x1, 0x201, 0x6dc6, 0x7651, 0x5, 0x7, 0xe000, 0x601d824b499141fd, 0x800, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f000001df40)='./file0\x00', 0xee00, 0xee01, 0x1000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r5, &(0x7f0000000280), 0xffffffffffffff94, 0x15, 0x0, 0x0) 4.473546817s ago: executing program 6 (id=712): userfaultfd(0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x40}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.107250434s ago: executing program 4 (id=713): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(0x0, 0x80000001, 0x28100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x1}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000003c0)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x890b, &(0x7f0000000680)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r1, &(0x7f00000006c0), 0x12) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000740)={'bond0\x00', 0x2000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./nfsd\x00', 0x8) mount(0x0, &(0x7f00000007c0)='./nfsd\x00', &(0x7f0000000800)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./nfsd/versions\x00', 0x1, 0x0) write(r3, &(0x7f0000000880)='-# ', 0x3) 3.586386297s ago: executing program 5 (id=714): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x11e, 0x83, 0x0, &(0x7f0000000000)=0xfffffda2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf254f00000008000300", @ANYRES32=r4, @ANYBLOB="24007a800c0003"], 0x40}, 0x1, 0x0, 0x0, 0x8880}, 0xc854) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000001c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setresgid(0xee00, 0x0, 0xee00) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000000740)=""/102392, 0x18ff8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) 2.302178107s ago: executing program 6 (id=715): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000032680), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000326c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000032780)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) 810.366318ms ago: executing program 6 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, 0x0) read$msr(r3, &(0x7f0000000a00)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000019b40), 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d697400"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6(0xa, 0x3, 0x3c) writev(r5, &(0x7f0000000700)=[{&(0x7f0000000740)}], 0x1) 0s ago: executing program 4 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) prlimit64(r1, 0x5, &(0x7f0000000080)={0x100000001, 0x6}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x9) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019500)={0x0, 0x0, 0x0}, 0x4004045) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = add_key(&(0x7f0000019600)='big_key\x00', 0x0, &(0x7f0000019680)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000196c0)=""/4096, 0x1000) keyctl$read(0xb, r4, &(0x7f000001a6c0)=""/4096, 0x1000) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) kernel console output (not intermixed with test programs): rol_msg returned -32 [ 96.039973][ T127] usbtmc 3-1:16.0: can't read capabilities [ 96.105601][ T4578] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 96.119259][ T26] audit: type=1800 audit(1794266513.891:3): pid=4578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.46" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 96.842832][ T4289] ocfs2: Unmounting device (7,4) on (node local) [ 97.234742][ T4603] loop4: detected capacity change from 0 to 512 [ 97.248497][ T4602] loop1: detected capacity change from 0 to 1024 [ 97.302844][ T4602] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 97.370038][ T4602] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000e11d, mo2=0002] [ 97.386387][ T4602] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 97.443156][ T4602] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.696662][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 97.871819][ T4611] loop4: detected capacity change from 0 to 32768 [ 97.884835][ T4611] (syz.4.60,4611,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 97.898422][ T4611] (syz.4.60,4611,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 97.966242][ T4611] JBD2: Ignoring recovery information on journal [ 98.042183][ T4611] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 98.103707][ T4281] usb 3-1: USB disconnect, device number 2 [ 98.644477][ T26] audit: type=1326 audit(1794266516.411:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.1.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26ac79fb19 code=0x0 [ 98.754322][ T4618] loop3: detected capacity change from 0 to 1764 [ 98.873477][ T4618] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 99.017661][ T4622] loop2: detected capacity change from 0 to 4096 [ 99.063655][ T4622] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 99.157875][ T4289] ocfs2: Unmounting device (7,4) on (node local) [ 99.973230][ T4652] device syzkaller0 entered promiscuous mode [ 100.432960][ T4671] loop1: detected capacity change from 0 to 1764 [ 100.452100][ T4671] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 101.466351][ T4680] ip_tables: iptables: counters copy to user failed while replacing table [ 103.334362][ T4694] nvme_fabrics: no handler found for transport fc-ôraddrR+ê0x333:pn-0x0444444444444444+host_traddr?nn-0x1111111111111111ð7—Ïxé¶:pn-0x22r222. [ 104.073591][ T4703] device syzkaller0 entered promiscuous mode [ 104.896145][ T4714] loop0: detected capacity change from 0 to 32768 [ 105.029838][ T4714] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 105.057388][ T26] audit: type=1800 audit(1794266522.831:5): pid=4714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.95" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 106.217477][ T4712] loop4: detected capacity change from 0 to 32768 [ 106.318931][ T4712] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.94 (4712) [ 107.195212][ T4277] ocfs2: Unmounting device (7,0) on (node local) [ 107.354797][ T4712] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.411456][ T4712] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 107.446356][ T4740] Bluetooth: MGMT ver 1.22 [ 107.459914][ T4712] BTRFS info (device loop4): using free space tree [ 107.507595][ T4741] device syzkaller0 entered promiscuous mode [ 107.691239][ T4712] BTRFS error (device loop4): open_ctree failed: -12 [ 107.809548][ T4265] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4265) [ 107.903007][ T4770] loop2: detected capacity change from 0 to 1764 [ 107.945609][ T4770] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 108.365477][ T4777] loop0: detected capacity change from 0 to 32768 [ 108.412240][ T4777] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.428381][ T26] audit: type=1800 audit(1794266527.203:6): pid=4777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.111" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 109.541648][ T4277] ocfs2: Unmounting device (7,0) on (node local) [ 110.051191][ T4801] loop4: detected capacity change from 0 to 32768 [ 110.155044][ T4805] device syzkaller0 entered promiscuous mode [ 110.180195][ T4801] XFS (loop4): Mounting V5 Filesystem [ 110.304326][ T4801] XFS (loop4): Ending clean mount [ 110.319488][ T4801] XFS (loop4): Quotacheck needed: Please wait. [ 110.379871][ T4801] XFS (loop4): Quotacheck: Done. [ 110.683544][ T26] audit: type=1800 audit(1794266529.413:7): pid=4818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.120" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 111.001256][ T4289] XFS (loop4): Unmounting Filesystem [ 112.824020][ T4846] tmpfs: Bad value for 'size' [ 113.084483][ T26] audit: type=1326 audit(1794266531.863:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.2.134" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 113.150513][ T4854] loop3: detected capacity change from 0 to 512 [ 113.162574][ T26] audit: type=1326 audit(1794266531.863:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.2.134" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 113.244387][ T4822] loop0: detected capacity change from 0 to 40427 [ 113.281723][ T4822] F2FS-fs (loop0): Invalid log blocks per segment (1) [ 113.301520][ T26] audit: type=1326 audit(1794266531.863:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.2.134" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 113.326851][ T4822] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 113.390866][ T4822] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 113.431155][ T4822] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 113.461068][ T26] audit: type=1326 audit(1794266531.893:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.2.134" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 113.533128][ T4822] F2FS-fs (loop0): invalid crc value [ 113.573401][ T26] audit: type=1326 audit(1794266531.893:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.2.134" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 113.606446][ T4822] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.686813][ T4867] loop1: detected capacity change from 0 to 256 [ 113.695466][ T4866] ip_tables: iptables: counters copy to user failed while replacing table [ 113.711943][ T26] audit: type=1326 audit(1794266531.893:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.2.134" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 113.746196][ T4867] exfat: Deprecated parameter 'utf8' [ 113.808105][ T26] audit: type=1326 audit(1794266531.893:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.2.134" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 114.643464][ T26] audit: type=1326 audit(1794266531.893:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.2.134" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 114.668141][ T26] audit: type=1326 audit(1794266531.893:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.2.134" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 114.749202][ T4874] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 114.783904][ T4867] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 114.813951][ T4822] F2FS-fs (loop0): Start checkpoint disabled! [ 115.716941][ T4511] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.426366][ T4511] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.495624][ T4904] loop3: detected capacity change from 0 to 4096 [ 117.683504][ T4511] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.692660][ T4904] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 117.792798][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 117.792815][ T26] audit: type=1800 audit(1794266536.563:21): pid=4904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.147" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 117.821763][ T4915] syz.0.152 uses obsolete (PF_INET,SOCK_PACKET) [ 118.559237][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 118.788754][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.834668][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.852494][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.975602][ T4511] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.098174][ T4924] syz.4.156 (4924): /proc/4923/oom_adj is deprecated, please use /proc/4923/oom_score_adj instead. [ 120.343194][ T4949] process 'syz.0.163' launched '/dev/fd/3' with NULL argv: empty string added [ 120.535046][ T4292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.545668][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.557432][ T4292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.604102][ T4292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.614709][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 120.622169][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.849089][ T4951] rxe_eth0 speed is unknown, defaulting to 1000 [ 122.675097][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 123.017628][ T4973] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 123.065324][ T4973] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 124.439928][ T5014] loop3: detected capacity change from 0 to 64 [ 124.598439][ T5014] hfs: request for non-existent node 131072 in B*Tree [ 124.646320][ T5014] hfs: request for non-existent node 131072 in B*Tree [ 124.710461][ T5018] hfs: request for non-existent node 131072 in B*Tree [ 124.737258][ T5018] hfs: request for non-existent node 131072 in B*Tree [ 124.753167][ T4987] loop4: detected capacity change from 0 to 32768 [ 124.760117][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 124.793031][ T4987] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.840450][ T5014] hfs: request for non-existent node 131072 in B*Tree [ 124.858333][ T5014] hfs: request for non-existent node 131072 in B*Tree [ 124.859026][ T4987] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 124.925097][ T4987] BTRFS info (device loop4): using free space tree [ 124.935415][ T5014] hfs: request for non-existent node 131072 in B*Tree [ 124.942869][ T5014] hfs: request for non-existent node 131072 in B*Tree [ 124.961613][ T5014] hfs: request for non-existent node 131072 in B*Tree [ 124.980615][ T4951] chnl_net:caif_netlink_parms(): no params data found [ 124.980776][ T5014] hfs: request for non-existent node 131072 in B*Tree [ 125.037840][ T5018] hfs: request for non-existent node 131072 in B*Tree [ 125.046017][ T5018] hfs: request for non-existent node 131072 in B*Tree [ 125.295625][ T5014] hfs: request for non-existent node 131072 in B*Tree [ 125.441997][ T5014] hfs: request for non-existent node 131072 in B*Tree [ 125.717397][ T5014] hfs: request for non-existent node 12 in B*Tree [ 125.840952][ T4987] BTRFS info (device loop4): enabling ssd optimizations [ 125.862971][ T5014] hfs: request for non-existent node 12 in B*Tree [ 125.964106][ T5018] hfs: request for non-existent node 13 in B*Tree [ 125.970698][ T5018] hfs: request for non-existent node 13 in B*Tree [ 126.833516][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 127.095234][ T4289] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.184859][ T4511] device hsr_slave_0 left promiscuous mode [ 127.216327][ T4511] device hsr_slave_1 left promiscuous mode [ 127.502514][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.526427][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.610443][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.670604][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.724395][ T4511] device bridge_slave_1 left promiscuous mode [ 127.731452][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.807589][ T4511] device bridge_slave_0 left promiscuous mode [ 127.842849][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.959810][ T4511] device veth1_macvtap left promiscuous mode [ 127.967058][ T4511] device veth0_macvtap left promiscuous mode [ 127.977104][ T5069] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.979588][ T4511] device veth1_vlan left promiscuous mode [ 127.992179][ T4511] device veth0_vlan left promiscuous mode [ 128.180832][ T5069] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.202023][ T5069] usb 5-1: config 0 has no interface number 0 [ 128.230344][ T5069] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 128.249948][ T5069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.270647][ T5069] usb 5-1: Product: syz [ 128.280539][ T5069] usb 5-1: Manufacturer: syz [ 128.292891][ T5069] usb 5-1: SerialNumber: syz [ 128.322832][ T5069] usb 5-1: config 0 descriptor?? [ 128.542633][ T5069] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 128.579482][ T5069] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 128.606305][ T5069] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 128.619148][ T5069] usb 5-1: media controller created [ 128.651181][ T5069] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.755403][ T5069] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 128.840608][ T5081] loop2: detected capacity change from 0 to 32768 [ 128.880119][ T5081] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.191 (5081) [ 128.913874][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 128.948550][ T5081] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.969871][ T5081] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 129.010351][ T5081] BTRFS info (device loop2): using free space tree [ 129.261175][ T5081] BTRFS info (device loop2): enabling ssd optimizations [ 129.412904][ T4278] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.877595][ T5069] usb 5-1: USB disconnect, device number 3 [ 130.063723][ T7] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 130.257366][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 130.269327][ T7] usb 3-1: not running at top speed; connect to a high speed hub [ 130.284312][ T4511] team0 (unregistering): Port device team_slave_1 removed [ 130.296545][ T7] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 130.312397][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.328250][ T7] usb 3-1: Product: syz [ 130.332610][ T7] usb 3-1: Manufacturer: syz [ 130.337348][ T7] usb 3-1: SerialNumber: syz [ 130.399011][ T4511] team0 (unregistering): Port device team_slave_0 removed [ 130.465337][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.564191][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.610885][ T7] usb 3-1: MIDIStreaming interface descriptor not found [ 130.725276][ T7] usb 3-1: USB disconnect, device number 3 [ 131.149427][ T4479] udevd[4479]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.171540][ T5108] loop4: detected capacity change from 0 to 32768 [ 131.280546][ T5108] XFS (loop4): Mounting V5 Filesystem [ 131.477223][ T5108] XFS (loop4): Ending clean mount [ 131.623964][ T4289] XFS (loop4): Unmounting Filesystem [ 131.635454][ T4511] bond0 (unregistering): Released all slaves [ 131.952097][ T4951] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.974542][ T4951] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.014773][ T4951] device bridge_slave_0 entered promiscuous mode [ 132.057553][ T4951] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.082843][ T4951] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.128132][ T4951] device bridge_slave_1 entered promiscuous mode [ 132.163860][ T5125] loop2: detected capacity change from 0 to 64 [ 132.220476][ T4951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.311394][ T4951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.428680][ T4951] team0: Port device team_slave_0 added [ 132.489250][ T4951] team0: Port device team_slave_1 added [ 132.596559][ T4951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.620635][ T4951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.689756][ T4951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.721380][ T4951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.755866][ T4951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.826981][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.833936][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.848513][ T4951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.022803][ T4951] device hsr_slave_0 entered promiscuous mode [ 135.197889][ T4951] device hsr_slave_1 entered promiscuous mode [ 135.322525][ T4951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.783445][ T4951] Cannot create hsr debugfs directory [ 136.494990][ T5169] loop4: detected capacity change from 0 to 2048 [ 136.652062][ T5173] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.785202][ T5169] syz.4.210: attempt to access beyond end of device [ 136.785202][ T5169] loop4: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 136.803648][ T5169] NILFS error (device loop4): nilfs_readdir: bad page in #2 [ 136.827154][ T5175] loop3: detected capacity change from 0 to 2048 [ 136.875556][ T5169] Remounting filesystem read-only [ 136.906483][ T5176] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.909466][ T4951] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.019502][ T4951] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.075279][ T5178] NILFS (loop3): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 137.090711][ T4951] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.193062][ T4951] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.592973][ T4951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.672091][ T4951] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.729595][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.774238][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.809448][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.849250][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.878503][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.885720][ T4391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.971201][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.992126][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.074452][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.260431][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.267691][ T4391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.894279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.923199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.980610][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.008284][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.641749][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.849268][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.931051][ T5181] loop4: detected capacity change from 0 to 32768 [ 139.943135][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.040337][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.064387][ T5181] jfs_mount: Failed to read FILESYSTEM_I [ 140.083225][ T5198] ip_tables: iptables: counters copy to user failed while replacing table [ 140.084265][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.103871][ T5181] Mount JFS Failure: -5 [ 140.108105][ T5181] jfs_mount failed w/return code = -5 [ 141.040990][ T4951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.052062][ T5201] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 141.122407][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.176500][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.386903][ T4265] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.958652][ T5226] loop3: detected capacity change from 0 to 32768 [ 143.091401][ T5226] XFS (loop3): Mounting V5 Filesystem [ 143.114884][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 143.125217][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 143.135537][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.153854][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.162614][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 143.170104][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.174452][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.242166][ T5226] XFS (loop3): Ending clean mount [ 143.256369][ T5226] XFS (loop3): Quotacheck needed: Please wait. [ 143.296152][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.401589][ T4951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.467935][ T5226] XFS (loop3): Quotacheck: Done. [ 143.477514][ T5236] rxe_eth0 speed is unknown, defaulting to 1000 [ 143.761331][ T26] audit: type=1800 audit(1794266562.525:22): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.222" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 144.508270][ T4276] XFS (loop3): Unmounting Filesystem [ 144.686932][ T5255] ip_tables: iptables: counters copy to user failed while replacing table [ 145.233535][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 145.694020][ T5260] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 146.975717][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 147.303476][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 148.314239][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.342637][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.439054][ T5236] device bridge_slave_0 entered promiscuous mode [ 148.454353][ T5303] loop3: detected capacity change from 0 to 1764 [ 148.506134][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.539990][ T5303] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 148.582579][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.261272][ T5236] device bridge_slave_1 entered promiscuous mode [ 149.347309][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.423933][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 149.457725][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.587935][ T5320] loop2: detected capacity change from 0 to 64 [ 149.674452][ T5236] team0: Port device team_slave_0 added [ 149.699649][ T5320] hfs: request for non-existent node 131072 in B*Tree [ 149.714022][ T5320] hfs: request for non-existent node 131072 in B*Tree [ 149.734494][ T5236] team0: Port device team_slave_1 added [ 149.772710][ T5320] hfs: request for non-existent node 131072 in B*Tree [ 149.782232][ T5320] hfs: request for non-existent node 131072 in B*Tree [ 149.828033][ T5320] hfs: request for non-existent node 131072 in B*Tree [ 149.860590][ T5320] hfs: request for non-existent node 131072 in B*Tree [ 149.894617][ T5320] hfs: request for non-existent node 131072 in B*Tree [ 149.923184][ T5320] hfs: request for non-existent node 131072 in B*Tree [ 149.959517][ T5320] hfs: request for non-existent node 131072 in B*Tree [ 149.993338][ T5320] hfs: request for non-existent node 131072 in B*Tree [ 150.044440][ T5325] hfs: request for non-existent node 131072 in B*Tree [ 150.081916][ T5325] hfs: request for non-existent node 131072 in B*Tree [ 150.116904][ T5324] loop4: detected capacity change from 0 to 32768 [ 150.123954][ T5320] hfs: request for non-existent node 131072 in B*Tree [ 150.133947][ T5320] hfs: request for non-existent node 131072 in B*Tree [ 150.151275][ T5320] hfs: request for non-existent node 12 in B*Tree [ 150.163970][ T5320] hfs: request for non-existent node 12 in B*Tree [ 150.236454][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.265670][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.301501][ T5324] XFS (loop4): Mounting V5 Filesystem [ 150.333156][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.371345][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.470046][ T5324] XFS (loop4): Ending clean mount [ 150.523543][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.576207][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.608761][ T5324] XFS (loop4): Quotacheck needed: Please wait. [ 150.619061][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.673070][ T5324] XFS (loop4): Quotacheck: Done. [ 150.787123][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.805486][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.835236][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.861249][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.934780][ T26] audit: type=1800 audit(1794266569.695:23): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.240" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 151.020341][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.397483][ T4951] device veth0_vlan entered promiscuous mode [ 151.442200][ T4289] XFS (loop4): Unmounting Filesystem [ 151.442445][ T4951] device veth1_vlan entered promiscuous mode [ 151.463564][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 151.505942][ T5236] device hsr_slave_0 entered promiscuous mode [ 151.589847][ T5236] device hsr_slave_1 entered promiscuous mode [ 151.630314][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.673733][ T5236] Cannot create hsr debugfs directory [ 151.689297][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.697968][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.932636][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.982440][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.911844][ T4951] device veth0_macvtap entered promiscuous mode [ 153.013876][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.035474][ T4951] device veth1_macvtap entered promiscuous mode [ 154.587257][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.333111][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.528734][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.607569][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.617542][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.628651][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.639262][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.649826][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.661752][ T4951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.683404][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.746220][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.780362][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.808365][ T5366] ip_tables: iptables: counters copy to user failed while replacing table [ 155.878215][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.934323][ T5368] using random self ethernet address [ 155.940535][ T5368] using random host ethernet address [ 156.401597][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.660450][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.670508][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.681174][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.691209][ T4951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.701810][ T4951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.739678][ T4951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.831579][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.914570][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.345511][ T5373] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 157.563681][ T5374] loop4: detected capacity change from 0 to 32768 [ 157.600231][ T5374] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 157.614045][ T26] audit: type=1800 audit(1794266576.395:24): pid=5374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.252" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 157.656608][ T4951] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.899524][ T4951] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.140797][ T4951] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.150060][ T4951] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.286050][ T5236] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 158.384891][ T5236] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 158.444310][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.452284][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.502700][ T4289] ocfs2: Unmounting device (7,4) on (node local) [ 158.525108][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.543669][ T5236] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 158.586804][ T5236] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 158.653789][ T4419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.661642][ T4419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.722003][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.054616][ T5397] loop3: detected capacity change from 0 to 64 [ 159.593698][ T5397] hfs: request for non-existent node 131072 in B*Tree [ 159.600554][ T5397] hfs: request for non-existent node 131072 in B*Tree [ 159.770199][ T5400] loop4: detected capacity change from 0 to 1764 [ 159.777217][ T5399] hfs: request for non-existent node 131072 in B*Tree [ 159.793689][ T5399] hfs: request for non-existent node 131072 in B*Tree [ 159.812441][ T5397] hfs: request for non-existent node 131072 in B*Tree [ 159.834794][ T5397] hfs: request for non-existent node 131072 in B*Tree [ 159.868908][ T5397] hfs: request for non-existent node 131072 in B*Tree [ 159.964793][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.991959][ T5397] hfs: request for non-existent node 131072 in B*Tree [ 160.029127][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.077382][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.092694][ T5396] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 160.101813][ T5397] hfs: request for non-existent node 131072 in B*Tree [ 160.138171][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.146338][ T5397] hfs: request for non-existent node 131072 in B*Tree [ 160.194257][ T5399] hfs: request for non-existent node 131072 in B*Tree [ 160.206495][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.213446][ T5399] hfs: request for non-existent node 131072 in B*Tree [ 160.227133][ T5397] hfs: request for non-existent node 131072 in B*Tree [ 160.241654][ T5397] hfs: request for non-existent node 131072 in B*Tree [ 160.256446][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.259301][ T5397] hfs: request for non-existent node 12 in B*Tree [ 160.273704][ T5397] hfs: request for non-existent node 12 in B*Tree [ 160.327603][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.334951][ T4419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.368302][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.382157][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.430725][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.453298][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.460514][ T4419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.507454][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.531823][ T5417] ip_tables: iptables: counters copy to user failed while replacing table [ 160.560442][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.582331][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.648787][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.677076][ T5066] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 160.709930][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.741946][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.764398][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.813402][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.822946][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.865083][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.875345][ T5066] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 160.890169][ T1157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.902325][ T5066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.938668][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.967572][ T5066] usb 3-1: config 0 descriptor?? [ 161.021397][ T5066] cp210x 3-1:0.0: cp210x converter detected [ 161.421606][ T5417] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 161.607912][ T5066] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 162.282975][ T5066] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 162.302288][ T5066] usb 3-1: cp210x converter now attached to ttyUSB0 [ 162.324063][ T5066] usb 3-1: USB disconnect, device number 4 [ 162.407143][ T5066] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 162.416714][ T5066] cp210x 3-1:0.0: device disconnected [ 162.685257][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.692856][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.705826][ T5434] ip_tables: iptables: counters copy to user failed while replacing table [ 162.753743][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.666296][ T5442] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 164.901130][ T5461] overlayfs: overlapping lowerdir path [ 164.972517][ T5463] overlayfs: overlapping lowerdir path [ 164.999919][ T5466] loop2: detected capacity change from 0 to 64 [ 165.118679][ T5466] hfs: request for non-existent node 131072 in B*Tree [ 165.174741][ T5466] hfs: request for non-existent node 131072 in B*Tree [ 165.202628][ T5468] hfs: request for non-existent node 131072 in B*Tree [ 165.258040][ T5468] hfs: request for non-existent node 131072 in B*Tree [ 165.317852][ T5466] hfs: request for non-existent node 131072 in B*Tree [ 165.333712][ T5466] hfs: request for non-existent node 131072 in B*Tree [ 165.403503][ T5466] hfs: request for non-existent node 131072 in B*Tree [ 166.243611][ T5466] hfs: request for non-existent node 131072 in B*Tree [ 166.244345][ T5476] ip_tables: iptables: counters copy to user failed while replacing table [ 166.270358][ T5466] hfs: request for non-existent node 131072 in B*Tree [ 166.361451][ T5466] hfs: request for non-existent node 131072 in B*Tree [ 167.233450][ T5468] hfs: request for non-existent node 131072 in B*Tree [ 167.240490][ T5468] hfs: request for non-existent node 131072 in B*Tree [ 167.321061][ T5480] hfs: request for non-existent node 131072 in B*Tree [ 167.328456][ T5482] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 167.342673][ T5480] hfs: request for non-existent node 131072 in B*Tree [ 167.463902][ T5466] hfs: request for non-existent node 12 in B*Tree [ 167.517414][ T5466] hfs: request for non-existent node 12 in B*Tree [ 168.562755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.629502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.814754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.868960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.919075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.972998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.044517][ T5236] device veth0_vlan entered promiscuous mode [ 169.112052][ T5236] device veth1_vlan entered promiscuous mode [ 169.253126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.272475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.351254][ T5509] overlayfs: overlapping lowerdir path [ 169.360817][ T5236] device veth0_macvtap entered promiscuous mode [ 169.373436][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.376067][ T5236] device veth1_macvtap entered promiscuous mode [ 169.397122][ T5510] overlayfs: overlapping lowerdir path [ 169.452361][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.481805][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.502361][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.530754][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.571487][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.593334][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 169.600897][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 169.622024][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.627750][ T7] usb 3-1: config 7 has an invalid interface number: 171 but max is 0 [ 169.663879][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.682474][ T7] usb 3-1: config 7 has no interface number 0 [ 169.689338][ T7] usb 3-1: config 7 interface 171 has no altsetting 0 [ 169.689695][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.728167][ T7] usb 3-1: string descriptor 0 read error: -22 [ 169.761408][ T7] usb 3-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=29.5c [ 169.770610][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.770634][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.772273][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.823208][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.872532][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.882056][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.891148][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.900411][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.901126][ T7] gspca_main: spca505-2.14.0 probing 041e:401d [ 169.918176][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.929751][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.940037][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.953499][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.963595][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.008058][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.072279][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.141090][ T5524] loop5: detected capacity change from 0 to 32768 [ 170.319601][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.382382][ T5502] loop3: detected capacity change from 0 to 32768 [ 170.414476][ T7] gspca_spca505: reg write: error -71 [ 170.419972][ T7] spca505: probe of 3-1:7.171 failed with error -5 [ 170.440031][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.458187][ T7] usb 3-1: USB disconnect, device number 5 [ 170.464369][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.502340][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.582294][ T5524] XFS (loop5): Mounting V5 Filesystem [ 170.633093][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.811401][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.848917][ T5502] (syz.3.275,5502,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 170.932050][ T5532] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 170.953686][ T5502] (syz.3.275,5502,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 170.972546][ T5524] XFS (loop5): Ending clean mount [ 171.000395][ T5236] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.014501][ T5524] XFS (loop5): Quotacheck needed: Please wait. [ 171.028148][ T5236] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.037135][ T5236] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.055245][ T5236] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.134725][ T5524] XFS (loop5): Quotacheck: Done. [ 171.265155][ T5502] JBD2: Ignoring recovery information on journal [ 172.155665][ T4951] XFS (loop5): Unmounting Filesystem [ 172.243907][ T5502] JBD2: recovery failed [ 172.248329][ T5502] (syz.3.275,5502,0):ocfs2_journal_load:1135 ERROR: Failed to load journal! [ 172.317576][ T5502] (syz.3.275,5502,0):ocfs2_check_volume:2431 ERROR: ocfs2 journal load failed! -5 [ 172.363672][ T5502] (syz.3.275,5502,1):ocfs2_check_volume:2487 ERROR: status = -5 [ 172.371405][ T5502] (syz.3.275,5502,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 172.436561][ T5534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.479250][ T5534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.493938][ T5502] (syz.3.275,5502,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 172.535574][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.575205][ T4836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.583099][ T4836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.604493][ T5534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.980615][ T5554] fuse: Bad value for 'fd' [ 174.295598][ T3603] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 174.503414][ T3603] usb 5-1: Using ep0 maxpacket: 16 [ 174.510580][ T3603] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 174.593308][ T3603] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 174.644394][ T3603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.724809][ T3603] usb 5-1: config 0 descriptor?? [ 174.761971][ T3603] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 175.805686][ T4292] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 176.951782][ T4364] usb 5-1: USB disconnect, device number 4 [ 177.315173][ T4836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.333617][ T5600] Zero length message leads to an empty skb [ 177.535054][ T5601] fuse: Bad value for 'fd' [ 178.266445][ T4836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.806227][ T4836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.130306][ T4836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.130620][ T5678] loop6: detected capacity change from 0 to 1764 [ 184.198140][ T5678] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 184.382276][ T5680] loop4: detected capacity change from 0 to 64 [ 184.565572][ T5684] hfs: request for non-existent node 131072 in B*Tree [ 184.572424][ T5684] hfs: request for non-existent node 131072 in B*Tree [ 184.630447][ T5680] hfs: request for non-existent node 131072 in B*Tree [ 184.690867][ T5680] hfs: request for non-existent node 131072 in B*Tree [ 184.727258][ T5680] hfs: request for non-existent node 131072 in B*Tree [ 184.753491][ T5680] hfs: request for non-existent node 131072 in B*Tree [ 184.821353][ T5684] hfs: request for non-existent node 131072 in B*Tree [ 184.849724][ T5684] hfs: request for non-existent node 131072 in B*Tree [ 184.874991][ T5680] hfs: request for non-existent node 131072 in B*Tree [ 184.896925][ T5680] hfs: request for non-existent node 131072 in B*Tree [ 184.920215][ T5680] hfs: request for non-existent node 131072 in B*Tree [ 184.993893][ T5680] hfs: request for non-existent node 131072 in B*Tree [ 185.001195][ T5684] hfs: request for non-existent node 131072 in B*Tree [ 185.043433][ T5684] hfs: request for non-existent node 131072 in B*Tree [ 185.052275][ T5680] hfs: request for non-existent node 12 in B*Tree [ 185.102131][ T5680] hfs: request for non-existent node 12 in B*Tree [ 187.233919][ T5687] loop3: detected capacity change from 0 to 32768 [ 187.537422][ T5687] XFS (loop3): Mounting V5 Filesystem [ 187.668248][ T4836] device hsr_slave_0 left promiscuous mode [ 187.756141][ T5687] XFS (loop3): Ending clean mount [ 187.772604][ T4836] device hsr_slave_1 left promiscuous mode [ 187.802973][ T4836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.832598][ T4836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.861804][ T4836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.911256][ T4836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.923067][ T5752] loop6: detected capacity change from 0 to 32768 [ 188.087027][ T4836] device bridge_slave_1 left promiscuous mode [ 188.128220][ T4276] XFS (loop3): Unmounting Filesystem [ 188.137965][ T5752] XFS (loop6): Mounting V5 Filesystem [ 188.150638][ T4836] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.942046][ T4836] device bridge_slave_0 left promiscuous mode [ 189.064302][ T4836] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.263370][ T5770] loop4: detected capacity change from 0 to 32768 [ 189.271481][ T5752] XFS (loop6): Ending clean mount [ 189.286174][ T5752] XFS (loop6): Quotacheck needed: Please wait. [ 189.402304][ T5752] XFS (loop6): Quotacheck: Done. [ 189.528537][ T5770] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 189.544614][ T26] audit: type=1800 audit(1794266608.325:25): pid=5770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.339" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 190.137838][ T26] audit: type=1800 audit(1794266608.665:26): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.336" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4428 res=0 errno=0 [ 190.357655][ T5236] XFS (loop6): Unmounting Filesystem [ 190.366872][ T4836] device veth1_macvtap left promiscuous mode [ 190.403970][ T4836] device veth0_macvtap left promiscuous mode [ 190.410068][ T4836] device veth1_vlan left promiscuous mode [ 190.515997][ T4836] device veth0_vlan left promiscuous mode [ 190.523600][ T4289] ocfs2: Unmounting device (7,4) on (node local) [ 190.937842][ T5782] FAULT_INJECTION: forcing a failure. [ 190.937842][ T5782] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 191.012789][ T5782] CPU: 0 PID: 5782 Comm: syz.2.343 Not tainted syzkaller #0 [ 191.020170][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 191.030272][ T5782] Call Trace: [ 191.033587][ T5782] [ 191.036545][ T5782] dump_stack_lvl+0x188/0x24e [ 191.041284][ T5782] ? show_regs_print_info+0x12/0x12 [ 191.046524][ T5782] ? load_image+0x410/0x410 [ 191.051079][ T5782] ? __lock_acquire+0x7ea0/0x7ea0 [ 191.056157][ T5782] should_fail_ex+0x390/0x4c0 [ 191.060885][ T5782] _copy_from_user+0x2c/0x170 [ 191.065617][ T5782] iovec_from_user+0x143/0x360 [ 191.070443][ T5782] __import_iovec+0x6c/0x510 [ 191.075091][ T5782] import_iovec+0x6f/0xa0 [ 191.079476][ T5782] do_writev+0x231/0x480 [ 191.083788][ T5782] ? do_readv+0x460/0x460 [ 191.088166][ T5782] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 191.094181][ T5782] ? lock_chain_count+0x20/0x20 [ 191.099068][ T5782] ? lockdep_hardirqs_on+0x94/0x140 [ 191.104295][ T5782] do_syscall_64+0x4c/0xa0 [ 191.108731][ T5782] ? clear_bhb_loop+0x60/0xb0 [ 191.113426][ T5782] ? clear_bhb_loop+0x60/0xb0 [ 191.118117][ T5782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.124023][ T5782] RIP: 0033:0x7f01c9d9fb19 [ 191.128454][ T5782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.148071][ T5782] RSP: 002b:00007f01cad2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 191.156499][ T5782] RAX: ffffffffffffffda RBX: 00007f01ca025fa0 RCX: 00007f01c9d9fb19 [ 191.164483][ T5782] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 191.172467][ T5782] RBP: 00007f01c9e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 191.180538][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.188518][ T5782] R13: 00007f01ca026038 R14: 00007f01ca025fa0 R15: 00007ffde6157328 [ 191.196515][ T5782] [ 191.401021][ T5797] loop3: detected capacity change from 0 to 64 [ 191.498780][ T5797] hfs: request for non-existent node 131072 in B*Tree [ 191.554748][ T5797] hfs: request for non-existent node 131072 in B*Tree [ 191.603905][ T5798] hfs: request for non-existent node 131072 in B*Tree [ 191.633208][ T5798] hfs: request for non-existent node 131072 in B*Tree [ 191.671081][ T5797] hfs: request for non-existent node 131072 in B*Tree [ 191.699169][ T5797] hfs: request for non-existent node 131072 in B*Tree [ 191.724353][ T5797] hfs: request for non-existent node 131072 in B*Tree [ 191.731200][ T5797] hfs: request for non-existent node 131072 in B*Tree [ 191.764265][ T5797] hfs: request for non-existent node 131072 in B*Tree [ 191.771470][ T5797] hfs: request for non-existent node 131072 in B*Tree [ 191.801199][ T5797] hfs: request for non-existent node 131072 in B*Tree [ 191.823356][ T5797] hfs: request for non-existent node 131072 in B*Tree [ 191.834706][ T5797] hfs: request for non-existent node 131072 in B*Tree [ 191.852749][ T5797] hfs: request for non-existent node 131072 in B*Tree [ 191.894479][ T5797] hfs: request for non-existent node 12 in B*Tree [ 191.911255][ T5797] hfs: request for non-existent node 12 in B*Tree [ 192.442934][ T5814] loop4: detected capacity change from 0 to 32768 [ 192.497601][ T5814] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 192.513056][ T26] audit: type=1800 audit(1794266611.285:27): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.351" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 192.833567][ T5819] loop3: detected capacity change from 0 to 1764 [ 193.191915][ T5819] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 193.427958][ T4289] ocfs2: Unmounting device (7,4) on (node local) [ 193.439941][ T5809] loop6: detected capacity change from 0 to 32768 [ 193.589997][ T5809] XFS (loop6): Mounting V5 Filesystem [ 193.637334][ T5809] XFS (loop6): Ending clean mount [ 193.935836][ T5236] XFS (loop6): Unmounting Filesystem [ 194.267911][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.274323][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.411849][ T5856] loop5: detected capacity change from 0 to 64 [ 195.533515][ T5856] hfs: request for non-existent node 131072 in B*Tree [ 195.540493][ T5856] hfs: request for non-existent node 131072 in B*Tree [ 195.590263][ T5863] hfs: request for non-existent node 131072 in B*Tree [ 195.640520][ T5863] hfs: request for non-existent node 131072 in B*Tree [ 195.675333][ T5856] hfs: request for non-existent node 131072 in B*Tree [ 195.682285][ T5856] hfs: request for non-existent node 131072 in B*Tree [ 195.742976][ T5863] hfs: request for non-existent node 131072 in B*Tree [ 195.759771][ T5863] hfs: request for non-existent node 131072 in B*Tree [ 195.793013][ T5856] hfs: request for non-existent node 131072 in B*Tree [ 195.842944][ T5856] hfs: request for non-existent node 131072 in B*Tree [ 195.849682][ T4836] team0 (unregistering): Port device team_slave_1 removed [ 195.877100][ T5863] hfs: request for non-existent node 131072 in B*Tree [ 195.929655][ T5863] hfs: request for non-existent node 131072 in B*Tree [ 195.945862][ T5856] hfs: request for non-existent node 131072 in B*Tree [ 196.043588][ T5856] hfs: request for non-existent node 131072 in B*Tree [ 196.063728][ T5863] hfs: request for non-existent node 12 in B*Tree [ 196.086059][ T4836] team0 (unregistering): Port device team_slave_0 removed [ 196.103900][ T5863] hfs: request for non-existent node 12 in B*Tree [ 196.221696][ T5869] loop3: detected capacity change from 0 to 32768 [ 196.378028][ T5869] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 196.394580][ T26] audit: type=1800 audit(1794266615.175:28): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.367" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 196.514926][ T4836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.933511][ T3603] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 197.002583][ T4836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.151089][ T4276] ocfs2: Unmounting device (7,3) on (node local) [ 197.180977][ T3603] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.203590][ T3603] usb 6-1: config 0 has no interface number 0 [ 197.243056][ T3603] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 197.293189][ T3603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.301739][ T3603] usb 6-1: Product: syz [ 197.343408][ T3603] usb 6-1: Manufacturer: syz [ 197.388763][ T3603] usb 6-1: SerialNumber: syz [ 197.420085][ T3603] usb 6-1: config 0 descriptor?? [ 197.634106][ T5873] loop6: detected capacity change from 0 to 32768 [ 197.642579][ T3603] dvb_usb_ec168: probe of 6-1:0.1 failed with error -32 [ 199.232676][ T5903] overlayfs: overlapping lowerdir path [ 199.274984][ T5904] overlayfs: overlapping lowerdir path [ 199.697224][ T3603] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 201.390766][ T3603] usb 7-1: Using ep0 maxpacket: 32 [ 201.409250][ T3603] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.453473][ T3603] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.461258][ T4416] usb 6-1: USB disconnect, device number 2 [ 201.469327][ T4292] Bluetooth: hci4: command 0x0406 tx timeout [ 201.475852][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 201.493729][ T3603] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 202.545448][ T5919] loop5: detected capacity change from 0 to 32768 [ 202.579524][ T3603] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.591604][ T3603] usb 7-1: config 0 descriptor?? [ 202.614415][ T5919] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 202.628997][ T26] audit: type=1800 audit(1794266621.405:29): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.383" name="bus" dev="loop5" ino=17058 res=0 errno=0 [ 202.683809][ T3603] usb 7-1: can't set config #0, error -71 [ 202.855928][ T5917] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 202.887029][ T3603] usb 7-1: USB disconnect, device number 2 [ 203.546122][ T5928] loop6: detected capacity change from 0 to 32768 [ 204.376514][ T5928] XFS (loop6): Mounting V5 Filesystem [ 204.419250][ T4951] ocfs2: Unmounting device (7,5) on (node local) [ 205.696407][ T4836] bond0 (unregistering): Released all slaves [ 205.737802][ T5928] XFS (loop6): Ending clean mount [ 205.752322][ T5928] XFS (loop6): Quotacheck needed: Please wait. [ 205.836811][ T5928] XFS (loop6): Quotacheck: Done. [ 206.047294][ T5954] loop3: detected capacity change from 0 to 1764 [ 206.827176][ T26] audit: type=1800 audit(1794266624.925:30): pid=5957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.384" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4429 res=0 errno=0 [ 206.922186][ T5959] loop4: detected capacity change from 0 to 4096 [ 206.944655][ T5959] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 207.615916][ T5236] XFS (loop6): Unmounting Filesystem [ 207.652350][ T5954] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 208.463464][ T32] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 208.654809][ T32] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.665879][ T32] usb 6-1: config 0 has no interface number 0 [ 208.708053][ T32] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 208.741344][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.775721][ T32] usb 6-1: Product: syz [ 208.791594][ T32] usb 6-1: Manufacturer: syz [ 208.823395][ T32] usb 6-1: SerialNumber: syz [ 208.875846][ T32] usb 6-1: config 0 descriptor?? [ 209.091019][ T32] dvb_usb_ec168: probe of 6-1:0.1 failed with error -32 [ 211.010054][ T5988] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 211.198369][ T32] usb 6-1: USB disconnect, device number 3 [ 211.611537][ T5996] loop6: detected capacity change from 0 to 32768 [ 211.774935][ T5996] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 211.794816][ T26] audit: type=1800 audit(1794266630.575:31): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.398" name="bus" dev="loop6" ino=17058 res=0 errno=0 [ 212.367798][ T5981] loop2: detected capacity change from 0 to 32768 [ 213.614964][ T5236] ocfs2: Unmounting device (7,6) on (node local) [ 215.184468][ T6026] loop6: detected capacity change from 0 to 4096 [ 215.306521][ T6026] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 216.146229][ T6044] ip_tables: iptables: counters copy to user failed while replacing table [ 217.182288][ T6051] loop4: detected capacity change from 0 to 1764 [ 217.357777][ T6051] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 217.527154][ T6064] loop5: detected capacity change from 0 to 32768 [ 217.549841][ T6055] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 217.623595][ T6064] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 217.636216][ T26] audit: type=1800 audit(1794266636.415:32): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.413" name="bus" dev="loop5" ino=17058 res=0 errno=0 [ 217.693316][ T4367] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 218.043318][ T4367] usb 7-1: Using ep0 maxpacket: 16 [ 218.116498][ T4367] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 218.154682][ T4367] usb 7-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 218.238296][ T4367] usb 7-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 218.289801][ T4367] usb 7-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 218.350036][ T4367] usb 7-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 218.410577][ T4367] usb 7-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 218.425017][ T4951] ocfs2: Unmounting device (7,5) on (node local) [ 218.557807][ T4367] usb 7-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 218.690118][ T4367] usb 7-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 219.293857][ T4367] usb 7-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 219.369847][ T6060] using random self ethernet address [ 219.424480][ T6060] using random host ethernet address [ 219.456091][ T4367] usb 7-1: string descriptor 0 read error: -71 [ 219.471909][ T4367] usb 7-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 219.528809][ T4367] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.566426][ T4367] r8152-cfgselector 7-1: rejected 8 configurations due to insufficient available bus power [ 219.611266][ T4367] r8152-cfgselector 7-1: no configuration chosen from 8 choices [ 219.657179][ T4367] r8152-cfgselector 7-1: Unknown version 0x0000 [ 219.693508][ T4367] r8152-cfgselector 7-1: USB disconnect, device number 3 [ 219.761113][ T6084] usb0: HOST MAC ca:b0:6b:a5:49:14 [ 219.793394][ T6084] usb0: MAC d2:10:ab:ba:3f:9f [ 220.103295][ T4377] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 220.357446][ T4377] usb 1-1: Dual-Role OTG device on HNP port [ 220.375412][ T4377] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 220.911997][ T4377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.460546][ T6099] loop6: detected capacity change from 0 to 4096 [ 222.476622][ T6099] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 222.565730][ T4377] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, ca:b0:6b:a5:49:14 [ 222.883157][ T6105] netlink: 'syz.2.421': attribute type 4 has an invalid length. [ 222.913570][ T6105] netlink: 17 bytes leftover after parsing attributes in process `syz.2.421'. [ 223.550616][ T6120] netlink: 52 bytes leftover after parsing attributes in process `syz.2.425'. [ 224.334421][ T6126] loop6: detected capacity change from 0 to 32768 [ 224.378271][ T6123] ip_tables: iptables: counters copy to user failed while replacing table [ 224.446470][ T6126] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 224.470308][ T26] audit: type=1800 audit(1794266643.245:33): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.427" name="bus" dev="loop6" ino=17058 res=0 errno=0 [ 225.409565][ T6127] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 226.527526][ T5236] ocfs2: Unmounting device (7,6) on (node local) [ 227.437229][ T6152] FAULT_INJECTION: forcing a failure. [ 227.437229][ T6152] name fail_futex, interval 1, probability 0, space 0, times 1 [ 227.573442][ T6152] CPU: 0 PID: 6152 Comm: syz.2.432 Not tainted syzkaller #0 [ 227.580816][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 227.590915][ T6152] Call Trace: [ 227.594246][ T6152] [ 227.597205][ T6152] dump_stack_lvl+0x188/0x24e [ 227.601927][ T6152] ? unwind_get_return_address+0x49/0x80 [ 227.607594][ T6152] ? stack_trace_save+0xf0/0xf0 [ 227.612467][ T6152] ? show_regs_print_info+0x12/0x12 [ 227.617685][ T6152] ? load_image+0x410/0x410 [ 227.622251][ T6152] ? stack_trace_save+0xa6/0xf0 [ 227.627141][ T6152] should_fail_ex+0x390/0x4c0 [ 227.631850][ T6152] get_futex_key+0x1a6/0xe70 [ 227.636439][ T6152] ? kasan_set_track+0x4b/0x70 [ 227.641197][ T6152] ? kasan_save_free_info+0x27/0x40 [ 227.646403][ T6152] ? ____kasan_slab_free+0x126/0x1f0 [ 227.651734][ T6152] ? do_mkdirat+0x400/0x440 [ 227.656285][ T6152] ? futex_setup_timer+0xc0/0xc0 [ 227.661268][ T6152] futex_wake+0x123/0x4f0 [ 227.665628][ T6152] ? futex_wake_mark+0x150/0x150 [ 227.670578][ T6152] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 227.676572][ T6152] ? lock_chain_count+0x20/0x20 [ 227.681440][ T6152] do_futex+0x2e2/0x320 [ 227.685611][ T6152] ? __ia32_sys_get_robust_list+0x100/0x100 [ 227.691509][ T6152] ? slab_free_freelist_hook+0x133/0x1b0 [ 227.697182][ T6152] __se_sys_futex+0x381/0x410 [ 227.701879][ T6152] ? __x64_sys_futex+0xf0/0xf0 [ 227.706659][ T6152] ? __x64_sys_futex+0x1d/0xf0 [ 227.711431][ T6152] do_syscall_64+0x4c/0xa0 [ 227.715879][ T6152] ? clear_bhb_loop+0x60/0xb0 [ 227.720568][ T6152] ? clear_bhb_loop+0x60/0xb0 [ 227.725261][ T6152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.731165][ T6152] RIP: 0033:0x7f01c9d9fb19 [ 227.735594][ T6152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.755225][ T6152] RSP: 002b:00007f01cad2b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 227.763668][ T6152] RAX: ffffffffffffffda RBX: 00007f01ca025fa8 RCX: 00007f01c9d9fb19 [ 227.771695][ T6152] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f01ca025fac [ 227.779688][ T6152] RBP: 00007f01ca025fa0 R08: 0017d31c8788ee1a R09: 0000000000000000 [ 227.787678][ T6152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.795677][ T6152] R13: 00007f01ca026038 R14: 00007ffde6157240 R15: 00007ffde6157328 [ 227.803680][ T6152] [ 228.411365][ T6158] device syzkaller0 entered promiscuous mode [ 230.756206][ T6185] loop5: detected capacity change from 0 to 32768 [ 230.813622][ T6186] loop2: detected capacity change from 0 to 32768 [ 230.883697][ T6185] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 230.904049][ T26] audit: type=1800 audit(1794266649.685:34): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.441" name="bus" dev="loop5" ino=17058 res=0 errno=0 [ 231.146342][ T6186] XFS (loop2): Mounting V5 Filesystem [ 231.263976][ T6194] ip_tables: iptables: counters copy to user failed while replacing table [ 231.294969][ T6166] loop6: detected capacity change from 0 to 32768 [ 231.479899][ T6186] XFS (loop2): Ending clean mount [ 231.489205][ T6186] XFS (loop2): Quotacheck needed: Please wait. [ 231.714931][ T6186] XFS (loop2): Quotacheck: Done. [ 231.910566][ T26] audit: type=1800 audit(1794266650.685:35): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.438" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 232.190875][ T6201] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 232.357006][ T4278] XFS (loop2): Unmounting Filesystem [ 232.775389][ T4951] ocfs2: Unmounting device (7,5) on (node local) [ 236.700238][ T6234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.440'. [ 236.728998][ T6237] netlink: 56 bytes leftover after parsing attributes in process `syz.3.452'. [ 238.062055][ T6251] loop4: detected capacity change from 0 to 32768 [ 239.944930][ T6260] loop6: detected capacity change from 0 to 32768 [ 239.997737][ T6251] XFS (loop4): Mounting V5 Filesystem [ 240.012427][ T6260] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 240.029600][ T26] audit: type=1800 audit(1794266914.797:36): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.455" name="bus" dev="loop6" ino=17058 res=0 errno=0 [ 240.550677][ T6251] XFS (loop4): Ending clean mount [ 240.558929][ T6251] XFS (loop4): Quotacheck needed: Please wait. [ 240.605049][ T6251] XFS (loop4): Quotacheck: Done. [ 240.732208][ T4289] XFS (loop4): Unmounting Filesystem [ 240.771638][ T6272] loop2: detected capacity change from 0 to 64 [ 240.947592][ T6272] hfs: request for non-existent node 131072 in B*Tree [ 240.978519][ T5236] ocfs2: Unmounting device (7,6) on (node local) [ 240.983418][ T6272] hfs: request for non-existent node 131072 in B*Tree [ 241.049832][ T6272] hfs: request for non-existent node 131072 in B*Tree [ 241.105207][ T6272] hfs: request for non-existent node 131072 in B*Tree [ 241.153674][ T6272] hfs: request for non-existent node 131072 in B*Tree [ 241.160713][ T6272] hfs: request for non-existent node 131072 in B*Tree [ 242.508963][ T6277] hfs: request for non-existent node 131072 in B*Tree [ 242.543402][ T6277] hfs: request for non-existent node 131072 in B*Tree [ 242.571968][ T6272] hfs: request for non-existent node 131072 in B*Tree [ 242.583710][ T6272] hfs: request for non-existent node 131072 in B*Tree [ 242.625070][ T6277] hfs: request for non-existent node 131072 in B*Tree [ 242.631911][ T6277] hfs: request for non-existent node 131072 in B*Tree [ 242.713622][ T6272] hfs: request for non-existent node 131072 in B*Tree [ 242.744939][ T6272] hfs: request for non-existent node 131072 in B*Tree [ 242.803786][ T6272] hfs: request for non-existent node 12 in B*Tree [ 242.810279][ T6272] hfs: request for non-existent node 12 in B*Tree [ 246.495672][ T6300] FAULT_INJECTION: forcing a failure. [ 246.495672][ T6300] name failslab, interval 1, probability 0, space 0, times 1 [ 246.551835][ T6300] CPU: 1 PID: 6300 Comm: syz.2.466 Not tainted syzkaller #0 [ 246.559218][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 246.569322][ T6300] Call Trace: [ 246.572673][ T6300] [ 246.575665][ T6300] dump_stack_lvl+0x188/0x24e [ 246.580400][ T6300] ? show_regs_print_info+0x12/0x12 [ 246.585643][ T6300] ? load_image+0x410/0x410 [ 246.590196][ T6300] ? __might_sleep+0xd0/0xd0 [ 246.594871][ T6300] ? __lock_acquire+0x7ea0/0x7ea0 [ 246.599966][ T6300] should_fail_ex+0x390/0x4c0 [ 246.604703][ T6300] should_failslab+0x5/0x20 [ 246.609289][ T6300] slab_pre_alloc_hook+0x59/0x300 [ 246.614366][ T6300] ? v9fs_session_init+0xf5/0x1780 [ 246.619525][ T6300] __kmem_cache_alloc_node+0x4f/0x270 [ 246.624941][ T6300] ? v9fs_session_init+0xf5/0x1780 [ 246.630098][ T6300] __kmalloc_node_track_caller+0xa0/0x240 [ 246.635864][ T6300] kstrdup+0x37/0x70 [ 246.639807][ T6300] v9fs_session_init+0xf5/0x1780 [ 246.644800][ T6300] ? v9fs_show_options+0x610/0x610 [ 246.649977][ T6300] v9fs_mount+0xcc/0xb60 [ 246.654249][ T6300] ? rcu_is_watching+0x11/0xa0 [ 246.659056][ T6300] ? end_current_label_crit_section+0x170/0x170 [ 246.665799][ T6300] ? trace_xrep_findroot_block+0x280/0x280 [ 246.671669][ T6300] ? vfs_parse_fs_param+0x420/0x420 [ 246.676890][ T6300] legacy_get_tree+0xe6/0x180 [ 246.681584][ T6300] ? trace_xrep_findroot_block+0x280/0x280 [ 246.687415][ T6300] vfs_get_tree+0x88/0x270 [ 246.691855][ T6300] do_new_mount+0x247/0xa50 [ 246.696382][ T6300] __se_sys_mount+0x2e3/0x3d0 [ 246.701107][ T6300] ? __x64_sys_mount+0xc0/0xc0 [ 246.705911][ T6300] ? lockdep_hardirqs_on+0x94/0x140 [ 246.711138][ T6300] ? __x64_sys_mount+0x1c/0xc0 [ 246.715937][ T6300] do_syscall_64+0x4c/0xa0 [ 246.720375][ T6300] ? clear_bhb_loop+0x60/0xb0 [ 246.725099][ T6300] ? clear_bhb_loop+0x60/0xb0 [ 246.729812][ T6300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.735725][ T6300] RIP: 0033:0x7f01c9d9fb19 [ 246.740180][ T6300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.759798][ T6300] RSP: 002b:00007f01cad2b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 246.768245][ T6300] RAX: ffffffffffffffda RBX: 00007f01ca025fa0 RCX: 00007f01c9d9fb19 [ 246.776230][ T6300] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 00002000000000c0 [ 246.784217][ T6300] RBP: 00007f01c9e37b70 R08: 0000200000000100 R09: 0000000000000000 [ 246.792284][ T6300] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 246.800263][ T6300] R13: 00007f01ca026038 R14: 00007f01ca025fa0 R15: 00007ffde6157328 [ 246.808258][ T6300] [ 247.246798][ T6312] file system registered [ 247.274223][ T6312] unloading [ 248.715723][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 249.306477][ T6326] loop2: detected capacity change from 0 to 32768 [ 254.683790][ T6360] loop2: detected capacity change from 0 to 32768 [ 254.826100][ T6360] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 254.858805][ T26] audit: type=1800 audit(1794266929.627:37): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.480" name="bus" dev="loop2" ino=17058 res=0 errno=0 [ 254.913877][ T6368] ip_tables: iptables: counters copy to user failed while replacing table [ 255.708891][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.715693][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.793177][ T4278] ocfs2: Unmounting device (7,2) on (node local) [ 255.811206][ T6374] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 256.338945][ T6395] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 258.309776][ T6406] loop3: detected capacity change from 0 to 32768 [ 258.374833][ T6413] ip_tables: iptables: counters copy to user failed while replacing table [ 258.499157][ T6406] XFS (loop3): Mounting V5 Filesystem [ 258.616021][ T6406] XFS (loop3): Ending clean mount [ 258.629535][ T6406] XFS (loop3): Quotacheck needed: Please wait. [ 258.735244][ T6406] XFS (loop3): Quotacheck: Done. [ 258.904606][ T26] audit: type=1800 audit(1794266933.667:38): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.486" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 259.013665][ T6407] loop5: detected capacity change from 0 to 32768 [ 259.053010][ T6407] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.488 (6407) [ 259.130845][ T4276] XFS (loop3): Unmounting Filesystem [ 259.162975][ T6407] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 259.218118][ T6413] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 259.239432][ T6407] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 259.290785][ T6407] BTRFS info (device loop5): using free space tree [ 259.603924][ T6435] FAULT_INJECTION: forcing a failure. [ 259.603924][ T6435] name fail_futex, interval 1, probability 0, space 0, times 0 [ 259.693554][ T6435] CPU: 1 PID: 6435 Comm: syz.6.491 Not tainted syzkaller #0 [ 259.700979][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 259.711084][ T6435] Call Trace: [ 259.714398][ T6435] [ 259.717359][ T6435] dump_stack_lvl+0x188/0x24e [ 259.722096][ T6435] ? show_regs_print_info+0x12/0x12 [ 259.727356][ T6435] ? load_image+0x410/0x410 [ 259.731917][ T6435] ? kasan_save_stack+0x4c/0x60 [ 259.736823][ T6435] ? __kasan_record_aux_stack+0xb2/0xc0 [ 259.742415][ T6435] ? call_rcu+0x14f/0x950 [ 259.746797][ T6435] ? task_work_run+0x1d0/0x260 [ 259.751602][ T6435] ? exit_to_user_mode_loop+0xe6/0x110 [ 259.757110][ T6435] ? exit_to_user_mode_prepare+0xee/0x180 [ 259.762889][ T6435] ? syscall_exit_to_user_mode+0x16/0x40 [ 259.768580][ T6435] should_fail_ex+0x390/0x4c0 [ 259.773315][ T6435] get_futex_key+0x1a6/0xe70 [ 259.777962][ T6435] ? futex_setup_timer+0xc0/0xc0 [ 259.782954][ T6435] futex_wake+0x123/0x4f0 [ 259.787329][ T6435] ? lock_chain_count+0x20/0x20 [ 259.792247][ T6435] ? futex_wake_mark+0x150/0x150 [ 259.797298][ T6435] do_futex+0x2e2/0x320 [ 259.801768][ T6435] ? rcu_force_quiescent_state+0x220/0x220 [ 259.807633][ T6435] ? __ia32_sys_get_robust_list+0x100/0x100 [ 259.813545][ T6435] ? blkcg_maybe_throttle_current+0x1a0/0xa80 [ 259.819664][ T6435] __se_sys_futex+0x381/0x410 [ 259.824362][ T6435] ? __x64_sys_futex+0xf0/0xf0 [ 259.829141][ T6435] ? __x64_sys_futex+0x1d/0xf0 [ 259.833916][ T6435] do_syscall_64+0x4c/0xa0 [ 259.838348][ T6435] ? clear_bhb_loop+0x60/0xb0 [ 259.843040][ T6435] ? clear_bhb_loop+0x60/0xb0 [ 259.847735][ T6435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.853663][ T6435] RIP: 0033:0x7f037cf9fb19 [ 259.858089][ T6435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.877708][ T6435] RSP: 002b:00007f037de5b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 259.886178][ T6435] RAX: ffffffffffffffda RBX: 00007f037d225fa8 RCX: 00007f037cf9fb19 [ 259.894178][ T6435] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f037d225fac [ 259.902212][ T6435] RBP: 00007f037d225fa0 R08: 00217b39b4479512 R09: 0000000000000000 [ 259.910222][ T6435] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000000 [ 259.918207][ T6435] R13: 00007f037d226038 R14: 00007fff79ae9d00 R15: 00007fff79ae9de8 [ 259.926209][ T6435] [ 260.045771][ T6407] BTRFS info (device loop5): enabling ssd optimizations [ 260.588773][ T6457] loop4: detected capacity change from 0 to 32768 [ 260.654690][ T6457] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 260.670063][ T26] audit: type=1800 audit(1794266935.437:39): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.493" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 260.960618][ T4951] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 261.058261][ T6475] ip_tables: iptables: counters copy to user failed while replacing table [ 261.930599][ T4289] ocfs2: Unmounting device (7,4) on (node local) [ 262.015729][ T6376] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (6376) [ 262.046175][ T6489] ip_tables: iptables: counters copy to user failed while replacing table [ 262.072849][ T6492] loop3: detected capacity change from 0 to 64 [ 262.115222][ T26] audit: type=1326 audit(1794266936.887:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.6.499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cf9fb19 code=0x7ffc0000 [ 262.966717][ T6492] hfs: request for non-existent node 131072 in B*Tree [ 262.992199][ T26] audit: type=1326 audit(1794266936.887:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.6.499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cf9fb19 code=0x7ffc0000 [ 263.016340][ T6475] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 263.022804][ T6492] hfs: request for non-existent node 131072 in B*Tree [ 263.040859][ T6501] hfs: request for non-existent node 131072 in B*Tree [ 263.124812][ T6489] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 263.153992][ T6501] hfs: request for non-existent node 131072 in B*Tree [ 263.194582][ T26] audit: type=1326 audit(1794266936.887:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.6.499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cf9fb19 code=0x7ffc0000 [ 263.239914][ T6492] hfs: request for non-existent node 131072 in B*Tree [ 263.261584][ T6492] hfs: request for non-existent node 131072 in B*Tree [ 263.843113][ T6508] fuse: Bad value for 'fd' [ 264.675072][ T6505] ip_tables: iptables: counters copy to user failed while replacing table [ 264.706364][ T6492] hfs: request for non-existent node 131072 in B*Tree [ 264.744960][ T6492] hfs: request for non-existent node 131072 in B*Tree [ 264.752046][ T26] audit: type=1326 audit(1794266936.887:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.6.499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cf9fb19 code=0x7ffc0000 [ 264.813593][ T6492] hfs: request for non-existent node 131072 in B*Tree [ 264.832847][ T6492] hfs: request for non-existent node 131072 in B*Tree [ 264.850490][ T26] audit: type=1326 audit(1794266936.887:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.6.499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f037cf9fb19 code=0x7ffc0000 [ 264.853766][ T6501] hfs: request for non-existent node 131072 in B*Tree [ 264.903403][ T6501] hfs: request for non-existent node 131072 in B*Tree [ 264.952320][ T6492] hfs: request for non-existent node 131072 in B*Tree [ 264.991586][ T6492] hfs: request for non-existent node 131072 in B*Tree [ 265.032141][ T26] audit: type=1326 audit(1794266936.887:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.6.499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cf9fb19 code=0x7ffc0000 [ 265.056186][ T6505] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 265.167945][ T26] audit: type=1326 audit(1794266936.887:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.6.499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cf9fb19 code=0x7ffc0000 [ 265.248649][ T6501] hfs: request for non-existent node 12 in B*Tree [ 265.269444][ T6501] hfs: request for non-existent node 12 in B*Tree [ 265.296733][ T26] audit: type=1326 audit(1794266936.887:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.6.499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cf9fb19 code=0x7ffc0000 [ 265.411168][ T26] audit: type=1326 audit(1794266936.887:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.6.499" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cf9fb19 code=0x7ffc0000 [ 266.221317][ T6517] loop6: detected capacity change from 0 to 32768 [ 266.302060][ T6517] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 267.080621][ T6539] ip_tables: iptables: counters copy to user failed while replacing table [ 267.401108][ T6426] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 267.515014][ T6539] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 267.620410][ T6549] device syzkaller0 entered promiscuous mode [ 267.663479][ T6546] FAULT_INJECTION: forcing a failure. [ 267.663479][ T6546] name failslab, interval 1, probability 0, space 0, times 0 [ 267.705358][ T6553] loop6: detected capacity change from 0 to 2048 [ 267.735398][ T6546] CPU: 1 PID: 6546 Comm: syz.5.504 Not tainted syzkaller #0 [ 267.742773][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 267.752872][ T6546] Call Trace: [ 267.756190][ T6546] [ 267.759193][ T6546] dump_stack_lvl+0x188/0x24e [ 267.763929][ T6546] ? show_regs_print_info+0x12/0x12 [ 267.769272][ T6546] ? load_image+0x410/0x410 [ 267.773777][ T6546] ? __might_sleep+0xd0/0xd0 [ 267.778366][ T6546] ? __lock_acquire+0x7ea0/0x7ea0 [ 267.783409][ T6546] should_fail_ex+0x390/0x4c0 [ 267.788123][ T6546] should_failslab+0x5/0x20 [ 267.792634][ T6546] slab_pre_alloc_hook+0x59/0x300 [ 267.797677][ T6546] ? __kmem_cache_alloc_node+0x19d/0x270 [ 267.803338][ T6546] ? nf_tables_newchain+0x1f0e/0x2a30 [ 267.808726][ T6546] __kmem_cache_alloc_node+0x4f/0x270 [ 267.814109][ T6546] ? kvmalloc_node+0x6c/0x180 [ 267.818797][ T6546] ? nf_tables_newchain+0x1f0e/0x2a30 [ 267.824187][ T6546] kmalloc_trace+0x26/0xe0 [ 267.828600][ T6546] nf_tables_newchain+0x1f0e/0x2a30 [ 267.833806][ T6546] ? nf_tables_deltable+0xd90/0xd90 [ 267.839027][ T6546] ? __lock_acquire+0x7ea0/0x7ea0 [ 267.844049][ T6546] ? nf_tables_newtable+0xd19/0x16c0 [ 267.849334][ T6546] ? __nla_parse+0x3c/0x50 [ 267.853751][ T6546] nfnetlink_rcv+0x1119/0x2470 [ 267.858527][ T6546] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 267.864077][ T6546] ? ref_tracker_free+0x682/0x830 [ 267.869116][ T6546] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.874494][ T6546] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 267.879963][ T6546] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.885163][ T6546] netlink_unicast+0x7ad/0x920 [ 267.889971][ T6546] netlink_sendmsg+0x8ad/0xbd0 [ 267.894762][ T6546] ? netlink_getsockopt+0x550/0x550 [ 267.900011][ T6546] ? apparmor_socket_sendmsg+0x8a/0x330 [ 267.905602][ T6546] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 267.910913][ T6546] ? security_socket_sendmsg+0x7c/0xa0 [ 267.916379][ T6546] ? netlink_getsockopt+0x550/0x550 [ 267.921585][ T6546] ____sys_sendmsg+0x5ed/0x9a0 [ 267.926367][ T6546] ? __sys_sendmsg_sock+0x30/0x30 [ 267.931393][ T6546] ? __import_iovec+0x306/0x510 [ 267.936267][ T6546] ? import_iovec+0x6f/0xa0 [ 267.940773][ T6546] ___sys_sendmsg+0x2a2/0x360 [ 267.945473][ T6546] ? __sys_sendmsg+0x2a0/0x2a0 [ 267.950291][ T6546] __se_sys_sendmsg+0x1c3/0x2b0 [ 267.955207][ T6546] ? __x64_sys_sendmsg+0x80/0x80 [ 267.960202][ T6546] ? lockdep_hardirqs_on+0x94/0x140 [ 267.965511][ T6546] do_syscall_64+0x4c/0xa0 [ 267.969950][ T6546] ? clear_bhb_loop+0x60/0xb0 [ 267.974630][ T6546] ? clear_bhb_loop+0x60/0xb0 [ 267.979311][ T6546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.985205][ T6546] RIP: 0033:0x7f1acc59fb19 [ 267.989619][ T6546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.009372][ T6546] RSP: 002b:00007f1acd50b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.017882][ T6546] RAX: ffffffffffffffda RBX: 00007f1acc825fa0 RCX: 00007f1acc59fb19 [ 268.026153][ T6546] RDX: 0000000000008040 RSI: 00002000000001c0 RDI: 0000000000000004 [ 268.034222][ T6546] RBP: 00007f1acc637b70 R08: 0000000000000000 R09: 0000000000000000 [ 268.042209][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.050305][ T6546] R13: 00007f1acc826038 R14: 00007f1acc825fa0 R15: 00007ffc2f7f3518 [ 268.058330][ T6546] [ 268.065044][ T4363] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 268.065085][ T4286] Bluetooth: hci5: command 0x0406 tx timeout [ 268.132905][ T6556] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.149993][ T6553] syz.6.514: attempt to access beyond end of device [ 268.149993][ T6553] loop6: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 268.233523][ T6553] NILFS error (device loop6): nilfs_readdir: bad page in #2 [ 268.253810][ T6553] Remounting filesystem read-only [ 268.276200][ T4363] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 268.297558][ T4363] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.345471][ T4363] usb 5-1: config 0 has no interface number 0 [ 268.413826][ T4363] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 268.463984][ T4363] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 268.601990][ T4363] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.267425][ T4363] usb 5-1: config 0 interface 52 has no altsetting 0 [ 269.294090][ T4363] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 269.320338][ T4363] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 269.339419][ T4363] usb 5-1: Product: syz [ 269.343772][ T4363] usb 5-1: Manufacturer: syz [ 269.348401][ T4363] usb 5-1: SerialNumber: syz [ 269.472368][ T4363] usb 5-1: config 0 descriptor?? [ 269.699042][ T4363] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input5 [ 269.941857][ T4363] usb 5-1: USB disconnect, device number 5 [ 269.947997][ C1] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 271.044891][ T6573] ip_tables: iptables: counters copy to user failed while replacing table [ 271.467319][ T6594] loop4: detected capacity change from 0 to 32768 [ 271.541320][ T6573] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 271.550393][ T6594] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 271.565146][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 271.565164][ T26] audit: type=1800 audit(1794266946.337:59): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.523" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 272.496999][ T6603] loop5: detected capacity change from 0 to 4096 [ 273.715053][ T6603] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 274.224950][ T4289] ocfs2: Unmounting device (7,4) on (node local) [ 275.656876][ T6628] loop6: detected capacity change from 0 to 1764 [ 275.673002][ T6628] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 278.051914][ T6640] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 278.081206][ T6654] loop2: detected capacity change from 0 to 2048 [ 278.205961][ T6657] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.243892][ T6657] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 278.265304][ T6657] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 278.311478][ T6657] Remounting filesystem read-only [ 278.762178][ T6664] loop5: detected capacity change from 0 to 2048 [ 278.985358][ T6671] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.018966][ T6664] syz.5.541: attempt to access beyond end of device [ 279.018966][ T6664] loop5: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 279.155375][ T6664] NILFS error (device loop5): nilfs_readdir: bad page in #2 [ 279.330035][ T6664] Remounting filesystem read-only [ 279.502123][ T6662] loop3: detected capacity change from 0 to 32768 [ 279.541203][ T6662] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 279.921299][ T6683] loop5: detected capacity change from 0 to 7 [ 279.954926][ T6609] Dev loop5: unable to read RDB block 7 [ 279.962000][ T6609] loop5: unable to read partition table [ 279.968526][ T6609] loop5: partition table beyond EOD, truncated [ 280.233632][ T6683] Dev loop5: unable to read RDB block 7 [ 280.240623][ T6683] loop5: unable to read partition table [ 280.443837][ T6683] loop5: partition table beyond EOD, truncated [ 280.473639][ T6683] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 280.603399][ T6426] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 281.704066][ T6697] loop4: detected capacity change from 0 to 32768 [ 281.782401][ T6697] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 281.825357][ T26] audit: type=1800 audit(1794266956.597:60): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.550" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 283.020107][ T6706] loop2: detected capacity change from 0 to 2048 [ 283.225580][ T6709] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.308068][ T6709] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 283.375572][ T6711] FAULT_INJECTION: forcing a failure. [ 283.375572][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 283.393522][ T6711] CPU: 0 PID: 6711 Comm: syz.3.556 Not tainted syzkaller #0 [ 283.400902][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 283.408780][ T6709] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 283.410976][ T6711] Call Trace: [ 283.410988][ T6711] [ 283.410997][ T6711] dump_stack_lvl+0x188/0x24e [ 283.431140][ T6711] ? show_regs_print_info+0x12/0x12 [ 283.436393][ T6711] ? load_image+0x410/0x410 [ 283.440980][ T6711] ? __might_sleep+0xd0/0xd0 [ 283.445610][ T6711] ? __lock_acquire+0x7ea0/0x7ea0 [ 283.450687][ T6711] should_fail_ex+0x390/0x4c0 [ 283.455417][ T6711] should_failslab+0x5/0x20 [ 283.460350][ T6711] slab_pre_alloc_hook+0x59/0x300 [ 283.462828][ T6709] Remounting filesystem read-only [ 283.465403][ T6711] ? nla_strdup+0x94/0x130 [ 283.465436][ T6711] __kmem_cache_alloc_node+0x4f/0x270 [ 283.465467][ T6711] ? nla_strdup+0x94/0x130 [ 283.484794][ T6711] __kmalloc+0xa3/0x240 [ 283.488997][ T6711] nla_strdup+0x94/0x130 [ 283.493286][ T6711] nf_tables_newtable+0x42f/0x16c0 [ 283.498440][ T6711] ? mutex_unlock+0x10/0x10 [ 283.503007][ T6711] nfnetlink_rcv+0x1119/0x2470 [ 283.507856][ T6711] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 283.513469][ T6711] ? ref_tracker_free+0x682/0x830 [ 283.518572][ T6711] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.523825][ T6711] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 283.529349][ T6711] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.534606][ T6711] netlink_unicast+0x7ad/0x920 [ 283.539455][ T6711] netlink_sendmsg+0x8ad/0xbd0 [ 283.544287][ T6711] ? netlink_getsockopt+0x550/0x550 [ 283.549546][ T6711] ? apparmor_socket_sendmsg+0x8a/0x330 [ 283.555144][ T6711] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 283.560475][ T6711] ? security_socket_sendmsg+0x7c/0xa0 [ 283.565984][ T6711] ? netlink_getsockopt+0x550/0x550 [ 283.571239][ T6711] ____sys_sendmsg+0x5ed/0x9a0 [ 283.576065][ T6711] ? __sys_sendmsg_sock+0x30/0x30 [ 283.581136][ T6711] ? __import_iovec+0x306/0x510 [ 283.586055][ T6711] ? import_iovec+0x6f/0xa0 [ 283.590616][ T6711] ___sys_sendmsg+0x2a2/0x360 [ 283.595349][ T6711] ? __sys_sendmsg+0x2a0/0x2a0 [ 283.600221][ T6711] __se_sys_sendmsg+0x1c3/0x2b0 [ 283.605127][ T6711] ? __x64_sys_sendmsg+0x80/0x80 [ 283.610129][ T6711] ? lockdep_hardirqs_on+0x94/0x140 [ 283.615377][ T6711] do_syscall_64+0x4c/0xa0 [ 283.619839][ T6711] ? clear_bhb_loop+0x60/0xb0 [ 283.624566][ T6711] ? clear_bhb_loop+0x60/0xb0 [ 283.629299][ T6711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.635243][ T6711] RIP: 0033:0x7fe56519fb19 [ 283.639709][ T6711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.659368][ T6711] RSP: 002b:00007fe56605a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.667837][ T6711] RAX: ffffffffffffffda RBX: 00007fe565425fa0 RCX: 00007fe56519fb19 [ 283.675857][ T6711] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 283.683868][ T6711] RBP: 00007fe565237b70 R08: 0000000000000000 R09: 0000000000000000 [ 283.691882][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.699901][ T6711] R13: 00007fe565426038 R14: 00007fe565425fa0 R15: 00007fff42e92cd8 [ 283.707945][ T6711] [ 283.787604][ T4289] ocfs2: Unmounting device (7,4) on (node local) [ 285.088924][ T6724] loop2: detected capacity change from 0 to 1764 [ 285.468054][ T6724] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 287.414899][ T6746] loop6: detected capacity change from 0 to 32768 [ 287.628039][ T6753] loop3: detected capacity change from 0 to 32768 [ 289.135161][ T6753] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 289.142166][ T6746] XFS (loop6): Mounting V5 Filesystem [ 289.157405][ T26] audit: type=1800 audit(1794266963.927:61): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.566" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 289.449372][ T6746] XFS (loop6): Ending clean mount [ 289.458724][ T6746] XFS (loop6): Quotacheck needed: Please wait. [ 289.753623][ T6746] XFS (loop6): Quotacheck: Done. [ 290.066396][ T26] audit: type=1800 audit(1794266964.837:62): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.564" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4429 res=0 errno=0 [ 290.554518][ T5236] XFS (loop6): Unmounting Filesystem [ 290.616607][ T4276] ocfs2: Unmounting device (7,3) on (node local) [ 291.768875][ T6776] loop6: detected capacity change from 0 to 2048 [ 291.944360][ T6784] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.488528][ T6816] overlayfs: missing 'lowerdir' [ 296.508461][ T6810] loop5: detected capacity change from 0 to 1764 [ 296.569597][ T6810] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 296.932703][ T6821] netlink: 48 bytes leftover after parsing attributes in process `syz.2.580'. [ 297.610140][ T6831] loop5: detected capacity change from 0 to 2048 [ 297.643487][ T4416] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 297.829778][ T6837] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 297.845217][ T4416] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 297.875975][ T4416] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.926897][ T4416] usb 4-1: config 0 has no interface number 0 [ 297.933070][ T4416] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 298.013618][ T4363] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 298.031299][ T4416] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 298.073027][ T4416] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.130396][ T4416] usb 4-1: config 0 interface 52 has no altsetting 0 [ 298.183415][ T4416] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 298.210373][ T4363] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.241166][ T4363] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 298.250357][ T4416] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 298.275643][ T4416] usb 4-1: Product: syz [ 298.300529][ T4416] usb 4-1: Manufacturer: syz [ 298.300861][ T4363] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.334659][ T4363] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 298.351831][ T4363] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 298.362885][ T4363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.386268][ T6835] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 298.412536][ T4363] hub 3-1:1.0: bad descriptor, ignoring hub [ 298.458270][ T4363] hub: probe of 3-1:1.0 failed with error -5 [ 298.565301][ T6843] loop6: detected capacity change from 0 to 32768 [ 298.827809][ T4416] usb 4-1: SerialNumber: syz [ 298.831798][ T4363] cdc_wdm 3-1:1.0: skipping garbage [ 298.858343][ T4363] cdc_wdm 3-1:1.0: skipping garbage [ 298.875936][ T6843] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 298.880790][ T4363] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 298.896761][ T26] audit: type=1800 audit(1794266973.667:63): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.579" name="bus" dev="loop6" ino=17058 res=0 errno=0 [ 298.922592][ T4363] cdc_wdm 3-1:1.0: Unknown control protocol [ 299.232685][ T4416] usb 4-1: config 0 descriptor?? [ 299.285196][ T4363] usb 3-1: USB disconnect, device number 6 [ 299.841730][ T4416] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input6 [ 300.728209][ C0] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 300.728248][ T4363] usb 4-1: USB disconnect, device number 2 [ 300.809232][ T6865] overlayfs: unrecognized mount option "/" or missing value [ 301.744135][ T5236] ocfs2: Unmounting device (7,6) on (node local) [ 302.095859][ T6883] loop4: detected capacity change from 0 to 64 [ 302.428252][ T6883] hfs: request for non-existent node 131072 in B*Tree [ 302.577161][ T6883] hfs: request for non-existent node 131072 in B*Tree [ 303.053371][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 303.484885][ T6883] hfs: request for non-existent node 131072 in B*Tree [ 303.547210][ T6883] hfs: request for non-existent node 131072 in B*Tree [ 303.664071][ T6887] hfs: request for non-existent node 131072 in B*Tree [ 303.693327][ T6887] hfs: request for non-existent node 131072 in B*Tree [ 303.754400][ T6883] hfs: request for non-existent node 131072 in B*Tree [ 303.781408][ T6883] hfs: request for non-existent node 131072 in B*Tree [ 303.889053][ T6891] ip_tables: iptables: counters copy to user failed while replacing table [ 303.899953][ T6887] hfs: request for non-existent node 131072 in B*Tree [ 303.953375][ T6887] hfs: request for non-existent node 131072 in B*Tree [ 303.960847][ T6883] hfs: request for non-existent node 131072 in B*Tree [ 304.710610][ T6883] hfs: request for non-existent node 131072 in B*Tree [ 304.818522][ T6883] hfs: request for non-existent node 131072 in B*Tree [ 304.825689][ T6883] hfs: request for non-existent node 131072 in B*Tree [ 304.856391][ T6883] hfs: request for non-existent node 12 in B*Tree [ 304.888467][ T6883] hfs: request for non-existent node 12 in B*Tree [ 304.910634][ T6897] loop3: detected capacity change from 0 to 2048 [ 305.005143][ T6899] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.472301][ T6908] null_blk: disk nullb1 created [ 309.174330][ T6926] overlayfs: unrecognized mount option "/" or missing value [ 309.446005][ T6905] Set syz1 is full, maxelem 6117 reached [ 309.604578][ T6934] ip_tables: iptables: counters copy to user failed while replacing table [ 311.186434][ T6945] loop2: detected capacity change from 0 to 64 [ 311.259090][ T6941] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 311.471650][ T6945] hfs: request for non-existent node 131072 in B*Tree [ 311.586499][ T6945] hfs: request for non-existent node 131072 in B*Tree [ 311.674656][ T6950] loop4: detected capacity change from 0 to 32768 [ 311.719885][ T6950] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 311.734839][ T26] audit: type=1800 audit(1794266986.507:64): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.614" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 312.093895][ T6945] hfs: request for non-existent node 131072 in B*Tree [ 312.173520][ T6945] hfs: request for non-existent node 131072 in B*Tree [ 312.493908][ T6961] hfs: request for non-existent node 131072 in B*Tree [ 312.500747][ T6961] hfs: request for non-existent node 131072 in B*Tree [ 312.674220][ T6945] hfs: request for non-existent node 131072 in B*Tree [ 312.681079][ T6945] hfs: request for non-existent node 131072 in B*Tree [ 312.943941][ T6970] ip_tables: iptables: counters copy to user failed while replacing table [ 314.179514][ T6961] hfs: request for non-existent node 131072 in B*Tree [ 314.197351][ T6974] Can't find ip_set type h [ 314.303488][ T6961] hfs: request for non-existent node 131072 in B*Tree [ 314.456935][ T4289] ocfs2: Unmounting device (7,4) on (node local) [ 314.585357][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 314.662275][ T6981] overlayfs: unrecognized mount option "/" or missing value [ 314.680169][ T6970] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 317.150114][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.156505][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.348778][ T6996] ip_tables: iptables: counters copy to user failed while replacing table [ 319.624515][ T6998] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 319.881990][ T7012] loop4: detected capacity change from 0 to 32768 [ 319.981788][ T7012] XFS (loop4): Mounting V5 Filesystem [ 320.141146][ T7012] XFS (loop4): Ending clean mount [ 320.149084][ T7012] XFS (loop4): Quotacheck needed: Please wait. [ 320.286334][ T7012] XFS (loop4): Quotacheck: Done. [ 320.298627][ T26] audit: type=1800 audit(1794266995.067:65): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.630" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 320.607171][ T4289] XFS (loop4): Unmounting Filesystem [ 320.732491][ T7025] ip_tables: iptables: counters copy to user failed while replacing table [ 321.596931][ T7025] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 322.353347][ T26] audit: type=1326 audit(1794266997.117:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 322.476281][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 322.491719][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.500169][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.323938][ T26] audit: type=1326 audit(1794266997.127:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 323.553427][ T26] audit: type=1326 audit(1794266997.127:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 323.730932][ T26] audit: type=1326 audit(1794266997.127:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 324.738469][ T26] audit: type=1326 audit(1794266997.127:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 324.920510][ T26] audit: type=1326 audit(1794266997.127:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 325.063096][ T7074] ip_tables: iptables: counters copy to user failed while replacing table [ 325.094687][ T26] audit: type=1326 audit(1794266997.127:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 326.443239][ T26] audit: type=1326 audit(1794266997.127:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 326.631730][ T7084] netlink: 20 bytes leftover after parsing attributes in process `syz.5.644'. [ 326.735493][ T7093] ip_tables: iptables: counters copy to user failed while replacing table [ 328.267975][ T26] audit: type=1326 audit(1794266997.127:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 328.346425][ T26] audit: type=1326 audit(1794266997.127:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.637" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 328.618605][ T7097] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 330.354744][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 330.369654][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.377712][ T7110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.615556][ T7146] ip_tables: iptables: counters copy to user failed while replacing table [ 335.873659][ T7149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.661'. [ 336.808092][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 336.821942][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.830337][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 339.662331][ T7182] netlink: 288 bytes leftover after parsing attributes in process `syz.6.671'. [ 341.989985][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.000608][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.010268][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.066721][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.076345][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.085285][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.224740][ T7197] ip_tables: iptables: counters copy to user failed while replacing table [ 342.432595][ T7207] NILFS (nullb0): couldn't find nilfs on the device [ 343.494119][ T7187] rxe_eth0 speed is unknown, defaulting to 1000 [ 344.005056][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 344.018202][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.026334][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.536568][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 344.916332][ T7197] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 346.678024][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 346.929647][ T7233] syz.5.680 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 348.157952][ T7249] loop4: detected capacity change from 0 to 1764 [ 348.183577][ T7249] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 349.677223][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 349.701577][ T4836] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.843310][ T32] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 351.069272][ T4836] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.083337][ T32] usb 5-1: device descriptor read/64, error -71 [ 352.551093][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 352.713324][ T32] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 352.765401][ T4836] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.883533][ T32] usb 5-1: device descriptor read/64, error -71 [ 352.989322][ T4836] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.023657][ T32] usb usb5-port1: attempt power cycle [ 353.489112][ T7187] chnl_net:caif_netlink_parms(): no params data found [ 355.041382][ T7187] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.056206][ T7187] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.070277][ T7187] device bridge_slave_0 entered promiscuous mode [ 355.144172][ T7187] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.151513][ T7187] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.213270][ T7187] device bridge_slave_1 entered promiscuous mode [ 355.646400][ T7187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.686245][ T7187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.795968][ T7187] team0: Port device team_slave_0 added [ 356.759807][ T7187] team0: Port device team_slave_1 added [ 357.888103][ T7187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.907090][ T7187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.933226][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.987859][ T7187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.186739][ T7187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.215592][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.700'. [ 358.226180][ T7187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.344837][ T7337] netlink: 64 bytes leftover after parsing attributes in process `syz.5.700'. [ 358.357865][ T7187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.560488][ T7187] device hsr_slave_0 entered promiscuous mode [ 359.594899][ T7187] device hsr_slave_1 entered promiscuous mode [ 359.610700][ T7187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.664626][ T7187] Cannot create hsr debugfs directory [ 359.947961][ T7364] gadgetfs: bound to dummy_udc driver [ 361.309153][ T4283] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 361.318136][ T4283] Bluetooth: hci1: Injecting HCI hardware error event [ 361.326020][ T4283] Bluetooth: hci1: hardware error 0x00 [ 361.343219][ T26] audit: type=1326 audit(1794267035.027:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.704" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 361.488120][ T26] audit: type=1326 audit(1794267035.027:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.704" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 361.517571][ T26] audit: type=1326 audit(1794267035.127:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.704" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 361.550214][ T26] audit: type=1326 audit(1794267035.127:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.704" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 361.608382][ T26] audit: type=1326 audit(1794267035.127:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.704" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 361.663026][ T26] audit: type=1326 audit(1794267035.127:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.704" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 361.752504][ T26] audit: type=1326 audit(1794267035.127:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.704" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 361.836909][ T26] audit: type=1326 audit(1794267035.227:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.704" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 361.914170][ T7388] FAULT_INJECTION: forcing a failure. [ 361.914170][ T7388] name failslab, interval 1, probability 0, space 0, times 0 [ 361.933441][ T7388] CPU: 0 PID: 7388 Comm: syz.4.708 Not tainted syzkaller #0 [ 361.940800][ T7388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 361.950899][ T7388] Call Trace: [ 361.953247][ T26] audit: type=1326 audit(1794267035.227:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.704" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c9d9fb19 code=0x7ffc0000 [ 361.954224][ T7388] [ 361.954284][ T7388] dump_stack_lvl+0x188/0x24e [ 361.985798][ T7388] ? show_regs_print_info+0x12/0x12 [ 361.991053][ T7388] ? load_image+0x410/0x410 [ 361.995637][ T7388] ? __might_sleep+0xd0/0xd0 [ 362.000323][ T7388] ? __lock_acquire+0x7ea0/0x7ea0 [ 362.005432][ T7388] should_fail_ex+0x390/0x4c0 [ 362.010213][ T7388] should_failslab+0x5/0x20 [ 362.014803][ T7388] slab_pre_alloc_hook+0x59/0x300 [ 362.016353][ T26] audit: type=1326 audit(1794267035.227:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7365 comm="syz.2.704" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01c9d6034e code=0x7ffc0000 [ 362.020013][ T7388] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 362.050149][ T7388] __kmem_cache_alloc_node+0x4f/0x270 [ 362.055590][ T7388] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 362.061888][ T7388] __kmalloc+0xa3/0x240 [ 362.066091][ T7388] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 362.072215][ T7388] ? trace_contention_end+0x5f/0x170 [ 362.077563][ T7388] genl_family_rcv_msg_doit+0xe6/0x350 [ 362.083089][ T7388] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 362.089032][ T7388] ? mutex_lock_nested+0x10/0x10 [ 362.094127][ T7388] ? genl_get_cmd+0xe4/0x8b0 [ 362.098774][ T7388] ? memcpy+0x3c/0x60 [ 362.102832][ T7388] ? genl_get_cmd+0x4cf/0x8b0 [ 362.107564][ T7388] genl_rcv_msg+0x601/0x790 [ 362.112100][ T7388] ? genl_bind+0x360/0x360 [ 362.116588][ T7388] ? nla_put_string+0x30/0x30 [ 362.121345][ T7388] ? ctrl_getfamily+0x5b0/0x5b0 [ 362.126240][ T7388] netlink_rcv_skb+0x1ef/0x440 [ 362.131334][ T7388] ? genl_bind+0x360/0x360 [ 362.135789][ T7388] ? netlink_ack+0x1160/0x1160 [ 362.140584][ T7388] ? down_read+0x1a8/0x2d0 [ 362.145036][ T7388] genl_rcv+0x24/0x40 [ 362.149125][ T7388] netlink_unicast+0x7ad/0x920 [ 362.153906][ T7388] netlink_sendmsg+0x8ad/0xbd0 [ 362.158739][ T7388] ? netlink_getsockopt+0x550/0x550 [ 362.163977][ T7388] ? apparmor_socket_sendmsg+0x8a/0x330 [ 362.169701][ T7388] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 362.175042][ T7388] ? security_socket_sendmsg+0x7c/0xa0 [ 362.180645][ T7388] __sys_sendto+0x497/0x650 [ 362.185213][ T7388] ? __ia32_sys_getpeername+0x80/0x80 [ 362.190630][ T7388] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 362.196646][ T7388] ? lock_chain_count+0x20/0x20 [ 362.201538][ T7388] __x64_sys_sendto+0xda/0xf0 [ 362.206250][ T7388] do_syscall_64+0x4c/0xa0 [ 362.210676][ T7388] ? clear_bhb_loop+0x60/0xb0 [ 362.215426][ T7388] ? clear_bhb_loop+0x60/0xb0 [ 362.220114][ T7388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.226017][ T7388] RIP: 0033:0x7f84def6034e [ 362.230452][ T7388] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 362.250095][ T7388] RSP: 002b:00007f84dfe40e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 362.258561][ T7388] RAX: ffffffffffffffda RBX: 00007f84dfe426c0 RCX: 00007f84def6034e [ 362.266562][ T7388] RDX: 0000000000000020 RSI: 00007f84dfe41000 RDI: 0000000000000005 [ 362.274556][ T7388] RBP: 0000000000000000 R08: 00007f84dfe40f04 R09: 000000000000000c [ 362.282539][ T7388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 362.290516][ T7388] R13: 00007f84dfe40f58 R14: 00007f84dfe41000 R15: 0000000000000000 [ 362.298736][ T7388] [ 363.393841][ T4283] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 364.076873][ T7187] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 365.168176][ T7187] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 366.599786][ T4836] device hsr_slave_0 left promiscuous mode [ 366.610416][ T4836] device hsr_slave_1 left promiscuous mode [ 366.657256][ T4836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.428137][ T4836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.494460][ T4836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.563278][ T4836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.586766][ T4836] device bridge_slave_1 left promiscuous mode [ 367.593215][ T4836] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.828909][ C0] ------------[ cut here ]------------ [ 367.834663][ C0] WARNING: CPU: 0 PID: 7420 at net/mac80211/tx.c:4981 __ieee80211_beacon_get+0x1141/0x1520 [ 367.844812][ C0] Modules linked in: [ 367.848715][ C0] CPU: 0 PID: 7420 Comm: syz.4.717 Not tainted syzkaller #0 [ 367.856215][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 367.866303][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 367.872634][ C0] Code: f7 4c 89 ef e8 60 37 01 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 8b 6a c8 f7 0f 0b e9 61 f8 ff ff e8 7f 6a c8 f7 <0f> 0b e9 85 fb ff ff e8 73 6a c8 f7 48 c7 c7 40 13 fd 8e 4c 89 e6 [ 367.892256][ C0] RSP: 0000:ffffc90003ce79a8 EFLAGS: 00010246 [ 367.898350][ C0] RAX: ffffffff89b9fe21 RBX: dffffc0000000000 RCX: ffff8880782cbc00 [ 367.906428][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 367.914416][ C0] RBP: 0000000000000000 R08: ffff8880782cbc00 R09: 0000000000000003 [ 367.922396][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880737ba208 [ 367.930387][ C0] R13: ffff8880550ffc24 R14: ffff8880737ba740 R15: ffff8880550ffc00 [ 367.938381][ C0] FS: 00005555656f9500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 367.947422][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.954125][ C0] CR2: 00007f84df227dac CR3: 0000000068617000 CR4: 00000000003506f0 [ 367.962096][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 367.970081][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 367.978087][ C0] Call Trace: [ 367.981382][ C0] [ 367.984353][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 367.989921][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 367.995413][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 368.001017][ C0] __iterate_interfaces+0x225/0x4c0 [ 368.006675][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 368.012913][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 368.020133][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 368.026393][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 368.033436][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 368.038683][ C0] __hrtimer_run_queues+0x522/0xc90 [ 368.043929][ C0] ? hw_scan_work+0xf00/0xf00 [ 368.048790][ C0] ? hrtimer_interrupt+0x980/0x980 [ 368.053925][ C0] hrtimer_run_softirq+0x173/0x290 [ 368.059035][ C0] handle_softirqs+0x291/0x910 [ 368.063852][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 368.068697][ C0] ? do_softirq+0x210/0x210 [ 368.073226][ C0] __irq_exit_rcu+0x13b/0x230 [ 368.077919][ C0] ? irq_exit_rcu+0x20/0x20 [ 368.082418][ C0] irq_exit_rcu+0x5/0x20 [ 368.086674][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 368.092304][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 368.098317][ C0] RIP: 0033:0x7f84dee73f40 [ 368.102731][ C0] Code: d6 c6 44 24 0e 01 45 31 ed 45 31 f6 89 54 24 08 85 c0 0f 84 a1 01 00 00 66 90 48 8b 1c 24 49 8b 54 24 40 4c 89 f0 4a 03 14 eb <80> 3d 61 3e 3b 00 00 49 89 d6 48 89 d3 74 28 25 ff 0f 00 00 83 f0 [ 368.122394][ C0] RSP: 002b:00007ffd7f77f640 EFLAGS: 00000286 [ 368.128498][ C0] RAX: ffffffff817b5972 RBX: 00007f84de9ff008 RCX: ffffffff817b53f1 [ 368.136497][ C0] RDX: ffffffff817b5995 RSI: ffffffff817b53f1 RDI: 0000000000000008 [ 368.144493][ C0] RBP: 0000000000000000 R08: 00007f84df210000 R09: 00007f84df212000 [ 368.152463][ C0] R10: 00000000817b53f5 R11: 0000000000000008 R12: 00007f84df226038 [ 368.160454][ C0] R13: 00000000000481ff R14: ffffffff817b5972 R15: 00007f84dfd55720 [ 368.168554][ C0] ? __cgroup_rstat_updated+0x22/0x350 [ 368.174343][ C0] ? __cgroup_rstat_updated+0x22/0x350 [ 368.179851][ C0] ? cgroup_threadgroup_change_end+0xf1/0x130 [ 368.185965][ C0] ? __cgroup_rstat_updated+0x45/0x350 [ 368.191428][ C0] ? cgroup_threadgroup_change_end+0xf1/0x130 [ 368.197549][ C0] [ 368.200570][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 368.208366][ C0] CPU: 0 PID: 7420 Comm: syz.4.717 Not tainted syzkaller #0 [ 368.215645][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 368.225700][ C0] Call Trace: [ 368.228992][ C0] [ 368.231918][ C0] dump_stack_lvl+0x188/0x24e [ 368.236612][ C0] ? memcpy+0x3c/0x60 [ 368.240696][ C0] ? show_regs_print_info+0x12/0x12 [ 368.245908][ C0] ? load_image+0x410/0x410 [ 368.250435][ C0] panic+0x2d3/0x710 [ 368.254346][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 368.258875][ C0] __warn+0x2f8/0x4f0 [ 368.262848][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 368.268565][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 368.274284][ C0] report_bug+0x2ba/0x4f0 [ 368.278676][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 368.284390][ C0] handle_bug+0x3a/0x70 [ 368.288546][ C0] exc_invalid_op+0x16/0x40 [ 368.293053][ C0] asm_exc_invalid_op+0x16/0x20 [ 368.297898][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 368.304224][ C0] Code: f7 4c 89 ef e8 60 37 01 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 8b 6a c8 f7 0f 0b e9 61 f8 ff ff e8 7f 6a c8 f7 <0f> 0b e9 85 fb ff ff e8 73 6a c8 f7 48 c7 c7 40 13 fd 8e 4c 89 e6 [ 368.323911][ C0] RSP: 0000:ffffc90003ce79a8 EFLAGS: 00010246 [ 368.329989][ C0] RAX: ffffffff89b9fe21 RBX: dffffc0000000000 RCX: ffff8880782cbc00 [ 368.337955][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 368.345925][ C0] RBP: 0000000000000000 R08: ffff8880782cbc00 R09: 0000000000000003 [ 368.353896][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880737ba208 [ 368.361862][ C0] R13: ffff8880550ffc24 R14: ffff8880737ba740 R15: ffff8880550ffc00 [ 368.369836][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 368.375558][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 368.381285][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 368.386832][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 368.392379][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 368.398093][ C0] __iterate_interfaces+0x225/0x4c0 [ 368.403286][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 368.409515][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 368.416707][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 368.422938][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 368.429977][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 368.435195][ C0] __hrtimer_run_queues+0x522/0xc90 [ 368.440406][ C0] ? hw_scan_work+0xf00/0xf00 [ 368.445089][ C0] ? hrtimer_interrupt+0x980/0x980 [ 368.450215][ C0] hrtimer_run_softirq+0x173/0x290 [ 368.455340][ C0] handle_softirqs+0x291/0x910 [ 368.460103][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 368.464951][ C0] ? do_softirq+0x210/0x210 [ 368.469464][ C0] __irq_exit_rcu+0x13b/0x230 [ 368.474134][ C0] ? irq_exit_rcu+0x20/0x20 [ 368.478631][ C0] irq_exit_rcu+0x5/0x20 [ 368.482868][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 368.488539][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 368.494555][ C0] RIP: 0033:0x7f84dee73f40 [ 368.498979][ C0] Code: d6 c6 44 24 0e 01 45 31 ed 45 31 f6 89 54 24 08 85 c0 0f 84 a1 01 00 00 66 90 48 8b 1c 24 49 8b 54 24 40 4c 89 f0 4a 03 14 eb <80> 3d 61 3e 3b 00 00 49 89 d6 48 89 d3 74 28 25 ff 0f 00 00 83 f0 [ 368.518767][ C0] RSP: 002b:00007ffd7f77f640 EFLAGS: 00000286 [ 368.524836][ C0] RAX: ffffffff817b5972 RBX: 00007f84de9ff008 RCX: ffffffff817b53f1 [ 368.532797][ C0] RDX: ffffffff817b5995 RSI: ffffffff817b53f1 RDI: 0000000000000008 [ 368.540764][ C0] RBP: 0000000000000000 R08: 00007f84df210000 R09: 00007f84df212000 [ 368.548744][ C0] R10: 00000000817b53f5 R11: 0000000000000008 R12: 00007f84df226038 [ 368.556794][ C0] R13: 00000000000481ff R14: ffffffff817b5972 R15: 00007f84dfd55720 [ 368.564760][ C0] ? __cgroup_rstat_updated+0x22/0x350 [ 368.570217][ C0] ? __cgroup_rstat_updated+0x22/0x350 [ 368.575668][ C0] ? cgroup_threadgroup_change_end+0xf1/0x130 [ 368.581725][ C0] ? __cgroup_rstat_updated+0x45/0x350 [ 368.587277][ C0] ? cgroup_threadgroup_change_end+0xf1/0x130 [ 368.593338][ C0] [ 368.596712][ C0] Kernel Offset: disabled [ 368.601103][ C0] Rebooting in 86400 seconds..