last executing test programs: 1m54.109169787s ago: executing program 1 (id=1496): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) fsopen(&(0x7f0000000100)='vfat\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) 1m53.665649772s ago: executing program 1 (id=1499): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0xffffffffffffff38) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$key(0xf, 0x3, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r3, 0x402, 0x3b) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) r5 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) splice(r5, 0x0, r4, 0x0, 0x59, 0x2) 1m49.197666105s ago: executing program 1 (id=1506): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xa, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1m48.193730809s ago: executing program 1 (id=1508): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x40, r3, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000000540)="$eJzs3MtvG8UfAPDvrp206eOX/Ep59AEECiLikTRpgR4QEggkLkhIcCjHkKRVqdugJki0qqAgxBVV4o44IvEXcIILAk5IiBt/AKpUoV5aOBmtvdvYjp3WqV0H/PlIG8/sjDPz9e7YsztxAhhak9mPJGJXRPweEeP1bHOFyfrDjWsXF/66dnEhiWr1zT+TWr3r1y4uFFWL5+3MM1NpRPppEgfatLty/sLp+Upl6VyeL+ePz5w6M39y6eTS2bljx44emX3+ublnNxvaQ42ZrE/X93+4fHDfa29ffn3h+OV3fvomKeJviaNHJl/coPDxarXHzQ3W7oZ0Uh5gR+hKKR97I7XxPx6lWDt44/HqJwPtHNBX1Wq1urNz8aUq8B+WxKB7AAxG8UGfXf8W212aemwJV1+qXwBlcd/It3pJOdK8zkjL9W0vTUbE8Ut/f5lt0Z/7EAAATb7L5j9Pt5v/pXFfQ73/5WtDExHx/4jYExH3RMTeiLg3olb3/oh4oMv2J1vy6+c/6ZVNBXabsvnfC/naVvP8r5j9xUQpz+2uxT+SnDhVWTqcvyZTMbIty89u0Mb3r/z6eaeyxvlftmXtF3PBvB9Xytuan7M4vzp/JzE3uvpxxP5yc/xjtZLk5kpAEhH7ImL/Jts49eTXBzuV3Tr+DfRgnan6VcQT9eN/KZqO/9oqaJaaWT3z3szK+Qtt1idntkdl6fBMcVas9/Mvn73Rqf07ir8HsuO/o+35fzP+iaRxvXalu9+/7Rblmz3/R5O3aunRfN8H86ur52YjRk83nBSlfP/c2q4iX9TP4p861H7874m1V+JARGQn8YP5wvLDed8fiYhHI+LQBjH++PJj724+/v7K4l/s6vivJUajdU/7ROn0D9/G9oZGJ7qJPzv+R2upqXxPh/e/3xozt9Ov7s9mAAAA+HdKI2JXJOn0zXSaTk/X/15+b+xIK8srq0+dWH7/7GL9OwITMZIWd7rGG+6HzuaX9UV+riV/JL9v/EVprJafXliuLA46eBhyOzuM/8wfpUH3Dug739eC4WX8w/Ay/mF4Gf8wvNqM/7FB9AO4+9p9/n80gH4Ad1/L+LfsB0PE9T8ML+MfhpfxD0NpZSxu/SV5CYl1iUi3RDf6mEjKW6IbfU1E/t9/1xcN+p0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgN/4JAAD//wUA5Iw=") utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m45.195090838s ago: executing program 1 (id=1515): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./lower1/dir1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./lower1/dir1\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/dir2\x00', 0x0) umount2(&(0x7f0000000600)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000640)='./mnt\x00', 0x0, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xe10, 0x80000001f000000}) 1m42.769612626s ago: executing program 1 (id=1522): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) signalfd(r2, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@empty}}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) 1m25.126530269s ago: executing program 32 (id=1522): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) signalfd(r2, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@empty}}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) 24.362012167s ago: executing program 4 (id=1552): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, {0x0, r1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x40003) syz_open_procfs$namespace(r3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000180)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x4, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r6, 0x1) 19.900169466s ago: executing program 4 (id=1552): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, {0x0, r1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x40003) syz_open_procfs$namespace(r3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000180)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x4, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r6, 0x1) 15.428863077s ago: executing program 2 (id=1669): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd2c, 0x8010, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, &(0x7f0000001140)={0x3, 0x4}) preadv(r5, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c8c5a5caa4d79aab8b68f677b50070078ec184795aa99ebf8f943577e9e23454cf12fab75d2c0", @ANYBLOB="20810e56"], 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 14.600050354s ago: executing program 4 (id=1552): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, {0x0, r1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x40003) syz_open_procfs$namespace(r3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000180)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x4, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r6, 0x1) 12.507550938s ago: executing program 2 (id=1671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 11.731106398s ago: executing program 2 (id=1673): prlimit64(0x0, 0xe, 0x0, 0x0) setrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(r3) 11.715088s ago: executing program 0 (id=1674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x2882026, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2000080, &(0x7f0000000440)=ANY=[@ANYBLOB='noswap,mpol=interleave']) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x400a8, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 11.510353122s ago: executing program 3 (id=1675): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c1"}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000008, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x1000000000, 0x0, 0x401, 0x0, 0x1136f858, 0xd, 0xffffffffffffffff}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 10.828245588s ago: executing program 4 (id=1552): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, {0x0, r1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x40003) syz_open_procfs$namespace(r3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000180)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x4, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r6, 0x1) 8.620689928s ago: executing program 0 (id=1676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0xfffffff2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x2882026, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2000080, &(0x7f0000000440)=ANY=[@ANYBLOB='noswap,mpol=interleave']) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x400a8, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 8.620057848s ago: executing program 2 (id=1677): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[], 0x0}, 0x94) r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x1000, &(0x7f0000000340)={[{@dioread_lock}, {@quota}, {@delalloc}, {@data_journal}, {@nolazytime}, {@noacl, 0x2e}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x40}}, {@barrier}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getgroups(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x44000) getdents64(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x0, 0x40001) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 8.616998099s ago: executing program 3 (id=1678): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x5, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x2042, 0x19) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 7.281624015s ago: executing program 2 (id=1679): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x5, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000800)={'fscrypt:', @auto=[0x39, 0x34, 0x31, 0x38, 0x30, 0x30, 0x66, 0x65, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3a}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x35, 0x30, 0x32, 0x30, 0x30, 0x31, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x8, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$link(0x8, r0, r1) 7.271202567s ago: executing program 0 (id=1680): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x111) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000040)={0x401, 0x1}) 6.34385723s ago: executing program 3 (id=1681): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x1e, &(0x7f0000000040)=0x6) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "0f57e611c8da8af32ed98a22d3e0ac8492df23752344507178c06d80db05e73f89c0fcfd02d5c82d25ecd9199a85cb38bbf4295c1f16c4d6fcec69267741c40c", 0x13}, 0x48, r4) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x55) keyctl$unlink(0x9, r5, r4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) 6.27991918s ago: executing program 0 (id=1682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) r3 = shmget$private(0x0, 0x11000, 0x0, &(0x7f00005ba000/0x11000)=nil) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xc000000000, {0x3, 0x0, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getuid() shmctl$IPC_SET(r3, 0x1, &(0x7f0000000900)={{0x3, r5, r6, r7, 0x0, 0x11d, 0x3}, 0x1, 0x90000, 0xfffffffffffffff7, 0x0, r0, r0, 0x59a}) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x0, 0x40008000, 0x2, 0x810, 0xffffffffffffffff, 0x0) 5.261997897s ago: executing program 4 (id=1552): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, {0x0, r1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x40003) syz_open_procfs$namespace(r3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000180)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x4, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r6, 0x1) 4.904140922s ago: executing program 0 (id=1683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) clock_gettime(0xfffffff2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x2882026, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2000080, &(0x7f0000000440)=ANY=[@ANYBLOB='noswap,mpol=interleave']) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x400a8, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.38792088s ago: executing program 0 (id=1684): timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setgid(0xee00) syz_open_procfs$pagemap(0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.386771361s ago: executing program 2 (id=1685): prlimit64(0x0, 0xe, 0x0, 0x0) setrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(r3) 2.386203371s ago: executing program 3 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x2882026, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2000080, &(0x7f0000000440)=ANY=[@ANYBLOB='noswap,mpol=interleave']) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x400a8, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.410914582s ago: executing program 3 (id=1687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$getregs(0xc, r0, 0x8, &(0x7f0000000180)=""/133) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$overlay(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000001c0), 0x10040, &(0x7f0000000000)={[], [], 0x2c}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 308.761772ms ago: executing program 3 (id=1688): syz_emit_vhci(&(0x7f0000001a00)=ANY=[@ANYBLOB="040efd018720", @ANYBLOB="05"], 0x100) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c91016000100830082000000000000000000000012397c9c1c312e673fe852f756626523e783ef8d4bcd08492be35e4ec8962072d0fbc61eaa"], 0x1b) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xaad80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000000c0)={0xfffffffc, 0x7a120, 0x7, {0x98c1, 0x400}, 0x200}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) r6 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x431]}, 0x8) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup2(r7, r6) connect$unix(r6, &(0x7f0000006680)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000240)) clock_adjtime(0x5, &(0x7f0000000180)={0x7, 0x1, 0x0, 0x80000001, 0x3, 0x100, 0x9, 0x9, 0x0, 0x4, 0x9, 0x80000001, 0x5, 0x2, 0x5, 0x0, 0x3, 0x0, 0x2, 0x4, 0x8, 0xd6f, 0x0, 0x3c9, 0x0, 0x8000}) 0s ago: executing program 4 (id=1552): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, {0x0, r1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x40003) syz_open_procfs$namespace(r3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000180)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x4, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r6, 0x1) kernel console output (not intermixed with test programs): 224][ T23] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 513.156420][ T23] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 513.163764][ T23] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 513.237663][ T23] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 513.304665][ T23] usb 2-1: USB disconnect, device number 18 [ 513.442838][ T8990] udevd[8990]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.483813][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.886786][ T9064] loop1: detected capacity change from 0 to 512 [ 513.946729][ T9064] EXT4-fs: inline encryption not supported [ 513.958945][ T9064] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 514.708563][ T9055] ceph: No mds server is up or the cluster is laggy [ 514.724904][ T9064] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.762: corrupted in-inode xattr: e_value size too large [ 514.837840][ T9064] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.762: couldn't read orphan inode 15 (err -117) [ 514.902421][ T9064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.158568][ T9082] loop2: detected capacity change from 0 to 512 [ 516.539485][ T9082] EXT4-fs (loop2): Test dummy encryption mode enabled [ 516.546431][ T9082] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 516.556108][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.588585][ T9082] EXT4-fs (loop2): 1 truncate cleaned up [ 516.595762][ T9082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.060311][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.314684][ T9089] loop1: detected capacity change from 0 to 2048 [ 517.560421][ T9102] loop3: detected capacity change from 0 to 512 [ 517.775022][ T9101] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 517.783980][ T9101] netdevsim netdevsim10 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 518.501527][ T9102] EXT4-fs (loop3): Test dummy encryption mode enabled [ 518.508393][ T9102] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 518.590072][ T9102] EXT4-fs (loop3): 1 truncate cleaned up [ 518.596458][ T9102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.638928][ T9089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.675817][ T9089] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.055094][ T9116] atomic_op ffff88801ff67998 conn xmit_atomic 0000000000000000 [ 519.186868][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.697859][ T9108] ceph: No mds server is up or the cluster is laggy [ 519.735577][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.940019][ T9150] ip_tables: iptables: counters copy to user failed while replacing table [ 524.052126][ T9129] loop1: detected capacity change from 0 to 32768 [ 524.115366][ T9129] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 524.324054][ T9129] XFS (loop1): Ending clean mount [ 525.176449][ T28] audit: type=1800 audit(1791502461.594:8): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.779" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 527.286840][ T5777] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 531.050145][ T9218] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5775] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9218] [ 531.073378][ T5784] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 533.535553][ T9236] loop1: detected capacity change from 0 to 8192 [ 533.564099][ T9236] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 533.577516][ T9236] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 533.587342][ T9236] REISERFS (device loop1): using ordered data mode [ 533.594228][ T9236] reiserfs: using flush barriers [ 533.602288][ T9236] REISERFS warning (device loop1): sh-462 check_advise_trans_params: bad transaction max size (1). FSCK? [ 533.996474][ T9251] gadgetfs: bound to dummy_udc driver [ 534.378535][ T5780] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 534.503262][ C1] gadgetfs: connected [ 534.524615][ T5780] gadgetfs: disconnected [ 534.759486][ T9247] gadgetfs: suspended from state 2 [ 535.060630][ T5780] usb 1-1: device not accepting address 17, error -71 [ 535.325374][ T9261] loop1: detected capacity change from 0 to 32768 [ 535.385698][ T9261] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 535.476545][ T9261] XFS (loop1): Ending clean mount [ 535.497734][ T9261] XFS (loop1): Quotacheck needed: Please wait. [ 535.558036][ T9261] XFS (loop1): Quotacheck: Done. [ 536.259838][ T9279] FAULT_INJECTION: forcing a failure. [ 536.259838][ T9279] name failslab, interval 1, probability 0, space 0, times 0 [ 536.408016][ T9279] CPU: 1 PID: 9279 Comm: syz.3.817 Not tainted syzkaller #0 [ 536.415360][ T9279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 536.425444][ T9279] Call Trace: [ 536.428745][ T9279] [ 536.431696][ T9279] dump_stack_lvl+0x18c/0x250 [ 536.436411][ T9279] ? show_regs_print_info+0x20/0x20 [ 536.441656][ T9279] ? load_image+0x420/0x420 [ 536.446188][ T9279] ? __might_sleep+0xe0/0xe0 [ 536.450809][ T9279] ? __lock_acquire+0x7d80/0x7d80 [ 536.455872][ T9279] should_fail_ex+0x394/0x4c0 [ 536.460589][ T9279] should_failslab+0x9/0x20 [ 536.465129][ T9279] slab_pre_alloc_hook+0x59/0x300 [ 536.470186][ T9279] ? rcu_is_watching+0x15/0xb0 [ 536.474962][ T9279] ? mempool_create+0x5e/0xc0 [ 536.479646][ T9279] ? ceph_msgpool_init+0x180/0x180 [ 536.484762][ T9279] __kmem_cache_alloc_node+0x53/0x250 [ 536.490139][ T9279] ? mempool_create+0x5e/0xc0 [ 536.494814][ T9279] ? ceph_msgpool_init+0x180/0x180 [ 536.499920][ T9279] kmalloc_node_trace+0x26/0xe0 [ 536.504780][ T9279] ? msgpool_alloc+0x1b0/0x1b0 [ 536.509543][ T9279] ? ceph_msgpool_init+0x180/0x180 [ 536.514649][ T9279] mempool_create+0x5e/0xc0 [ 536.519156][ T9279] ceph_msgpool_init+0xa7/0x180 [ 536.524035][ T9279] ceph_osdc_init+0x54f/0x8c0 [ 536.528720][ T9279] ceph_create_client+0x246/0x300 [ 536.533748][ T9279] ceph_get_tree+0x1ca/0x1800 [ 536.538436][ T9279] ? bpf_lsm_capable+0x9/0x10 [ 536.543106][ T9279] ? security_capable+0x89/0xb0 [ 536.547960][ T9279] vfs_get_tree+0x8c/0x280 [ 536.552379][ T9279] vfs_cmd_create+0xe3/0x230 [ 536.556983][ T9279] __se_sys_fsconfig+0x70a/0x850 [ 536.561925][ T9279] ? __x64_sys_fsconfig+0xc0/0xc0 [ 536.566960][ T9279] ? lockdep_hardirqs_on+0x98/0x150 [ 536.572154][ T9279] ? __x64_sys_fsconfig+0x20/0xc0 [ 536.577183][ T9279] do_syscall_64+0x55/0xb0 [ 536.581597][ T9279] ? clear_bhb_loop+0x40/0x90 [ 536.586275][ T9279] ? clear_bhb_loop+0x40/0x90 [ 536.590956][ T9279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.596851][ T9279] RIP: 0033:0x7fdcc8d9e159 [ 536.601265][ T9279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.620871][ T9279] RSP: 002b:00007fdcc9b97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 536.629284][ T9279] RAX: ffffffffffffffda RBX: 00007fdcc9025fa0 RCX: 00007fdcc8d9e159 [ 536.637255][ T9279] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 536.645245][ T9279] RBP: 00007fdcc8e3506b R08: 0000000000000000 R09: 0000000000000000 [ 536.653213][ T9279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.661179][ T9279] R13: 00007fdcc9026038 R14: 00007fdcc9025fa0 R15: 00007fff78be04b8 [ 536.669158][ T9279] [ 536.930776][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 541.107369][ T9316] overlayfs: failed to clone upperpath [ 541.814467][ T5814] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 542.084193][ T5815] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 542.590158][ T9324] ceph: No mds server is up or the cluster is laggy [ 542.603775][ T5815] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 545.728159][ T9367] netlink: 'syz.3.840': attribute type 10 has an invalid length. [ 548.561743][ T9387] loop1: detected capacity change from 0 to 512 [ 548.595916][ T9387] EXT4-fs (loop1): Test dummy encryption mode enabled [ 548.602850][ T9387] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 548.761899][ T9387] EXT4-fs (loop1): 1 truncate cleaned up [ 548.773521][ T9387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.946439][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.300331][ T23] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 550.495837][ T23] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 550.569697][ T23] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 550.813545][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.897507][ T23] usb 4-1: Product: syz [ 550.935336][ T23] usb 4-1: Manufacturer: syz [ 550.960257][ T23] usb 4-1: SerialNumber: syz [ 555.531562][ T23] usb 4-1: can't set config #1, error -71 [ 555.538958][ T23] usb 4-1: USB disconnect, device number 22 [ 557.880175][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.864'. [ 557.889061][ T9460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.864'. [ 563.695534][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.702747][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.518565][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.878'. [ 565.990824][ T23] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 566.338929][ T23] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 566.479006][ T23] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 566.680665][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.688705][ T23] usb 4-1: Product: syz [ 566.730366][ T23] usb 4-1: Manufacturer: syz [ 566.735002][ T23] usb 4-1: SerialNumber: syz [ 567.289725][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 569.991080][ T23] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 570.009010][ T23] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 570.016354][ T23] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 570.043183][ T23] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 570.080002][ T23] usb 4-1: USB disconnect, device number 23 [ 570.139184][ T9526] udevd[9526]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.240947][ T9560] netlink: 'syz.3.893': attribute type 10 has an invalid length. [ 570.279584][ T9560] netlink: 'syz.3.893': attribute type 10 has an invalid length. [ 570.335714][ T9560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.378115][ T9560] team0: Port device bond0 added [ 571.108028][ T9574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.897'. [ 573.919961][ T788] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 574.270568][ T788] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 574.607389][ T9584] ceph: No mds server is up or the cluster is laggy [ 578.196452][ T5814] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 578.428390][ T5814] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 578.478010][ T5814] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 578.511562][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.541961][ T5814] usb 4-1: Product: syz [ 578.558530][ T5814] usb 4-1: Manufacturer: syz [ 578.578677][ T5814] usb 4-1: SerialNumber: syz [ 581.993426][ T5814] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 582.593778][ T5814] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 583.571335][ T5814] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 583.581477][ T5814] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 583.614292][ T5814] usb 4-1: USB disconnect, device number 24 [ 584.621505][ T28] audit: type=1326 audit(1791502520.375:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9666 comm="syz.3.922" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcc8d9e159 code=0x0 [ 584.708013][ T9662] udevd[9662]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.055405][ T9679] sd 0:0:1:0: PR command failed: 1026 [ 585.060919][ T9679] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 585.067803][ T9679] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 586.441823][ T5815] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 586.864474][ T9696] loop3: detected capacity change from 0 to 512 [ 586.927083][ T9696] EXT4-fs (loop3): Test dummy encryption mode enabled [ 586.934820][ T9696] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 587.038579][ T9696] EXT4-fs (loop3): 1 truncate cleaned up [ 587.046447][ T9696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.084914][ T5815] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 587.108349][ T5815] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 587.175492][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.315290][ T5815] usb 2-1: Product: syz [ 587.322944][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.834925][ T9708] wlan0 speed is unknown, defaulting to 1000 [ 588.210129][ T5815] usb 2-1: Manufacturer: syz [ 588.232676][ T5815] usb 2-1: SerialNumber: syz [ 590.293283][ T5815] usb 2-1: can't set config #1, error -71 [ 590.317467][ T5815] usb 2-1: USB disconnect, device number 19 [ 591.504120][ T9729] tipc: Enabling of bearer rejected, failed to enable media [ 596.621536][ T9765] loop3: detected capacity change from 0 to 512 [ 597.213789][ T9765] EXT4-fs (loop3): Test dummy encryption mode enabled [ 597.220660][ T9765] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 597.250415][ T9765] EXT4-fs (loop3): 1 truncate cleaned up [ 597.257364][ T9765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.696824][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.864901][ T9775] loop3: detected capacity change from 0 to 2048 [ 597.946633][ T9775] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 599.060940][ T9789] loop3: detected capacity change from 0 to 512 [ 599.232790][ T9789] EXT4-fs: Ignoring removed orlov option [ 599.608626][ T9789] EXT4-fs (loop3): 1 truncate cleaned up [ 599.616892][ T9789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.721773][ T9789] EXT4-fs error (device loop3): ext4_lookup:1864: inode #2: comm syz.3.948: deleted inode referenced: 15 [ 599.801566][ T9789] EXT4-fs (loop3): Remounting filesystem read-only [ 600.103646][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.068660][ T9813] loop3: detected capacity change from 0 to 512 [ 602.078945][ T9813] EXT4-fs (loop3): Test dummy encryption mode enabled [ 602.086645][ T9813] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 602.645579][ T9813] EXT4-fs (loop3): 1 truncate cleaned up [ 602.652617][ T9813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.017365][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.390710][ T5815] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 604.723275][ T5815] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 604.793861][ T5815] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 604.818839][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.978266][ T5815] usb 4-1: Product: syz [ 604.982551][ T5815] usb 4-1: Manufacturer: syz [ 604.990510][ T5815] usb 4-1: SerialNumber: syz [ 608.656637][ T5815] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 608.677269][ T5815] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 608.687632][ T5815] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 608.708368][ T5815] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 608.789078][ T5815] usb 4-1: USB disconnect, device number 25 [ 608.876321][ T9831] udevd[9831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 609.017309][ T5814] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 609.892264][ T5814] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 610.505300][ T5814] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 610.624460][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.767304][ T5814] usb 2-1: Product: syz [ 610.784265][ T5814] usb 2-1: Manufacturer: syz [ 610.799009][ T5814] usb 2-1: SerialNumber: syz [ 613.301247][ T9903] loop3: detected capacity change from 0 to 1024 [ 615.909820][ T5814] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 615.918356][ T5814] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 615.925674][ T5814] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 615.942694][ T5814] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 616.289255][ T9915] loop3: detected capacity change from 0 to 512 [ 616.350780][ T788] usb 2-1: USB disconnect, device number 20 [ 616.389848][ T9915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.700037][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.696357][ T9936] loop1: detected capacity change from 0 to 512 [ 619.128161][ T9936] EXT4-fs (loop1): Test dummy encryption mode enabled [ 619.135142][ T9936] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 619.155483][ T9936] EXT4-fs (loop1): 1 truncate cleaned up [ 619.161973][ T9936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.759351][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.203367][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.210161][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.364359][ T5780] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 624.740581][ T5780] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 624.854199][ T5780] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 624.863523][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.873503][ T5780] usb 4-1: Product: syz [ 625.365583][ T5780] usb 4-1: Manufacturer: syz [ 625.370245][ T5780] usb 4-1: SerialNumber: syz [ 625.448201][ T5780] usb 4-1: can't set config #1, error -71 [ 625.473143][ T5780] usb 4-1: USB disconnect, device number 26 [ 627.298909][T10005] FAULT_INJECTION: forcing a failure. [ 627.298909][T10005] name failslab, interval 1, probability 0, space 0, times 0 [ 627.312474][T10005] CPU: 1 PID: 10005 Comm: syz.3.1007 Not tainted syzkaller #0 [ 627.319969][T10005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 627.330028][T10005] Call Trace: [ 627.333332][T10005] [ 627.336283][T10005] dump_stack_lvl+0x18c/0x250 [ 627.340971][T10005] ? show_regs_print_info+0x20/0x20 [ 627.346196][T10005] ? load_image+0x420/0x420 [ 627.350721][T10005] ? __might_sleep+0xe0/0xe0 [ 627.355313][T10005] ? __lock_acquire+0x7d80/0x7d80 [ 627.360345][T10005] should_fail_ex+0x394/0x4c0 [ 627.365029][T10005] should_failslab+0x9/0x20 [ 627.369536][T10005] slab_pre_alloc_hook+0x59/0x300 [ 627.374575][T10005] kmem_cache_alloc+0x5a/0x2c0 [ 627.379370][T10005] ? ceph_msg_new2+0x3a/0x490 [ 627.384063][T10005] ceph_msg_new2+0x3a/0x490 [ 627.388565][T10005] ? mempool_init_node+0x12f/0x480 [ 627.393678][T10005] msgpool_alloc+0x80/0x1b0 [ 627.398181][T10005] ? ceph_msgpool_init+0x180/0x180 [ 627.403305][T10005] mempool_init_node+0x1e9/0x480 [ 627.408249][T10005] ? msgpool_alloc+0x1b0/0x1b0 [ 627.413007][T10005] ? ceph_msgpool_init+0x180/0x180 [ 627.418116][T10005] mempool_create+0x81/0xc0 [ 627.422619][T10005] ceph_msgpool_init+0xa7/0x180 [ 627.427469][T10005] ceph_osdc_init+0x54f/0x8c0 [ 627.432163][T10005] ceph_create_client+0x246/0x300 [ 627.437194][T10005] ceph_get_tree+0x1ca/0x1800 [ 627.441874][T10005] ? bpf_lsm_capable+0x9/0x10 [ 627.446547][T10005] ? security_capable+0x89/0xb0 [ 627.451398][T10005] vfs_get_tree+0x8c/0x280 [ 627.455821][T10005] vfs_cmd_create+0xe3/0x230 [ 627.460443][T10005] __se_sys_fsconfig+0x70a/0x850 [ 627.465403][T10005] ? __x64_sys_fsconfig+0xc0/0xc0 [ 627.470452][T10005] ? lockdep_hardirqs_on+0x98/0x150 [ 627.475652][T10005] ? __x64_sys_fsconfig+0x20/0xc0 [ 627.480679][T10005] do_syscall_64+0x55/0xb0 [ 627.485095][T10005] ? clear_bhb_loop+0x40/0x90 [ 627.489772][T10005] ? clear_bhb_loop+0x40/0x90 [ 627.494454][T10005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 627.500350][T10005] RIP: 0033:0x7fdcc8d9e159 [ 627.504761][T10005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.524363][T10005] RSP: 002b:00007fdcc6ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 627.532803][T10005] RAX: ffffffffffffffda RBX: 00007fdcc9026090 RCX: 00007fdcc8d9e159 [ 627.540770][T10005] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 627.548735][T10005] RBP: 00007fdcc8e3506b R08: 0000000000000000 R09: 0000000000000000 [ 627.556700][T10005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.564665][T10005] R13: 00007fdcc9026128 R14: 00007fdcc9026090 R15: 00007fff78be04b8 [ 627.572646][T10005] [ 629.144020][ T5780] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 629.844690][ T5780] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 629.868728][ T5780] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 631.303065][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.344918][ T5780] usb 2-1: Product: syz [ 631.349125][ T5780] usb 2-1: Manufacturer: syz [ 631.364289][ T5780] usb 2-1: SerialNumber: syz [ 631.375107][T10030] netlink: 'syz.0.1014': attribute type 1 has an invalid length. [ 631.490072][T10030] netlink: 'syz.0.1014': attribute type 2 has an invalid length. [ 631.511999][T10030] tipc: New replicast peer: 255.255.255.255 [ 631.554294][T10030] tipc: Enabled bearer , priority 10 [ 631.616606][ T5780] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 631.643090][ T5780] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 631.660634][ T5780] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 631.672217][ T5780] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 631.727406][ T5780] usb 2-1: USB disconnect, device number 21 [ 635.633153][T10064] loop1: detected capacity change from 0 to 512 [ 635.853899][T10064] EXT4-fs (loop1): Test dummy encryption mode enabled [ 635.860849][T10064] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 635.914916][T10064] EXT4-fs (loop1): 1 truncate cleaned up [ 635.922005][T10064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.384996][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.152548][ T5815] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 637.685223][ T5815] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 637.703616][ T5815] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 637.717589][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.726145][ T5815] usb 2-1: Product: syz [ 637.730334][ T5815] usb 2-1: Manufacturer: syz [ 637.739505][ T5815] usb 2-1: SerialNumber: syz [ 637.942342][ T5814] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 637.970756][ T5815] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 637.979378][ T5815] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 637.987076][ T5815] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 637.995507][ T5815] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 638.013535][ T5815] usb 2-1: USB disconnect, device number 22 [ 638.044917][T10075] udevd[10075]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.134035][ T5814] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 638.149244][ T5814] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 638.158711][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.166847][ T5814] usb 4-1: Product: syz [ 638.171076][ T5814] usb 4-1: Manufacturer: syz [ 638.175995][ T5814] usb 4-1: SerialNumber: syz [ 639.235293][ T5814] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 639.243839][ T5814] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 639.251606][ T5814] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 639.259067][ T5814] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 639.279646][ T5814] usb 4-1: USB disconnect, device number 27 [ 640.292340][T10075] udevd[10075]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.548241][T10114] loop3: detected capacity change from 0 to 512 [ 641.589778][T10114] EXT4-fs (loop3): Test dummy encryption mode enabled [ 641.597908][T10114] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 641.876878][T10114] EXT4-fs (loop3): 1 truncate cleaned up [ 641.884596][T10114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.091589][ T2202] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 642.274610][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.309140][ T2202] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 643.042165][ T2202] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 643.051980][ T2202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.060086][ T2202] usb 2-1: Product: syz [ 643.064364][ T2202] usb 2-1: Manufacturer: syz [ 643.069030][ T2202] usb 2-1: SerialNumber: syz [ 643.239056][T10132] loop3: detected capacity change from 0 to 1024 [ 643.652919][T10132] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 643.685209][ T2202] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 643.710017][T10132] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.1041: lblock 2 mapped to illegal pblock 2 (length 1) [ 643.714771][ T2202] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 643.733736][T10132] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 643.735827][ T2202] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 643.743019][T10132] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.1041: lblock 0 mapped to illegal pblock 48 (length 1) [ 643.765132][T10132] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 643.774590][T10132] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1041: Failed to acquire dquot type 0 [ 643.789957][T10132] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 643.804671][T10132] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1041: mark_inode_dirty error [ 643.817466][T10132] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 643.827919][T10132] EXT4-fs (loop3): 1 orphan inode deleted [ 643.836134][T10132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.848981][ T3470] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 643.899878][ T2202] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 643.969675][ T2202] usb 2-1: USB disconnect, device number 23 [ 644.022280][ T3470] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 644.131733][T10075] udevd[10075]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.149586][ T3470] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:13: Failed to release dquot type 0 [ 644.262872][T10141] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 644.272379][T10141] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 644.343504][ T3459] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 644.361619][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.888420][ T3459] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 644.931398][ T3459] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:12: Failed to release dquot type 0 [ 645.016319][ T5774] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 645.104815][ T5774] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 645.132992][ T5774] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 645.294342][T10154] loop1: detected capacity change from 0 to 128 [ 645.337519][T10154] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 645.379785][T10075] udevd[10075]: incorrect ext4 checksum on /dev/loop1 [ 646.896294][ T5784] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 650.622954][T10202] FAULT_INJECTION: forcing a failure. [ 650.622954][T10202] name failslab, interval 1, probability 0, space 0, times 0 [ 650.880000][T10202] CPU: 1 PID: 10202 Comm: syz.3.1060 Not tainted syzkaller #0 [ 650.887525][T10202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 650.897604][T10202] Call Trace: [ 650.900906][T10202] [ 650.903857][T10202] dump_stack_lvl+0x18c/0x250 [ 650.908573][T10202] ? show_regs_print_info+0x20/0x20 [ 650.913804][T10202] ? load_image+0x420/0x420 [ 650.918339][T10202] ? __might_sleep+0xe0/0xe0 [ 650.922959][T10202] ? __lock_acquire+0x7d80/0x7d80 [ 650.928018][T10202] should_fail_ex+0x394/0x4c0 [ 650.932731][T10202] should_failslab+0x9/0x20 [ 650.937271][T10202] slab_pre_alloc_hook+0x59/0x300 [ 650.942334][T10202] kmem_cache_alloc+0x5a/0x2c0 [ 650.947130][T10202] ? ceph_msg_new2+0x3a/0x490 [ 650.951806][T10202] ceph_msg_new2+0x3a/0x490 [ 650.956322][T10202] ? mempool_init_node+0x12f/0x480 [ 650.961429][T10202] msgpool_alloc+0x80/0x1b0 [ 650.965922][T10202] ? ceph_msgpool_init+0x180/0x180 [ 650.971051][T10202] mempool_init_node+0x1e9/0x480 [ 650.975995][T10202] ? msgpool_alloc+0x1b0/0x1b0 [ 650.980760][T10202] ? ceph_msgpool_init+0x180/0x180 [ 650.985888][T10202] mempool_create+0x81/0xc0 [ 650.990406][T10202] ceph_msgpool_init+0xa7/0x180 [ 650.995278][T10202] ceph_osdc_init+0x54f/0x8c0 [ 650.999963][T10202] ceph_create_client+0x246/0x300 [ 651.004991][T10202] ceph_get_tree+0x1ca/0x1800 [ 651.009669][T10202] ? bpf_lsm_capable+0x9/0x10 [ 651.014338][T10202] ? security_capable+0x89/0xb0 [ 651.019189][T10202] vfs_get_tree+0x8c/0x280 [ 651.023613][T10202] vfs_cmd_create+0xe3/0x230 [ 651.028209][T10202] __se_sys_fsconfig+0x70a/0x850 [ 651.033159][T10202] ? __x64_sys_fsconfig+0xc0/0xc0 [ 651.038196][T10202] ? lockdep_hardirqs_on+0x98/0x150 [ 651.043394][T10202] ? __x64_sys_fsconfig+0x20/0xc0 [ 651.048422][T10202] do_syscall_64+0x55/0xb0 [ 651.052835][T10202] ? clear_bhb_loop+0x40/0x90 [ 651.057510][T10202] ? clear_bhb_loop+0x40/0x90 [ 651.062185][T10202] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 651.068081][T10202] RIP: 0033:0x7fdcc8d9e159 [ 651.072493][T10202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.092095][T10202] RSP: 002b:00007fdcc9b97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 651.100505][T10202] RAX: ffffffffffffffda RBX: 00007fdcc9025fa0 RCX: 00007fdcc8d9e159 [ 651.108470][T10202] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 651.116437][T10202] RBP: 00007fdcc8e3506b R08: 0000000000000000 R09: 0000000000000000 [ 651.124403][T10202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.132371][T10202] R13: 00007fdcc9026038 R14: 00007fdcc9025fa0 R15: 00007fff78be04b8 [ 651.140349][T10202] [ 659.512811][ T23] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 659.732162][ T23] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 659.759068][ T23] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 659.780254][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.796704][ T23] usb 2-1: Product: syz [ 659.805353][ T23] usb 2-1: Manufacturer: syz [ 659.810424][ T23] usb 2-1: SerialNumber: syz [ 661.721682][ T23] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 661.744177][ T23] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 661.783055][ T23] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 661.803687][ T23] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 662.446753][ T23] usb 2-1: USB disconnect, device number 24 [ 662.770278][T10296] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 662.798762][T10296] CIFS: Attempting to mount //127.0.0.1/share [ 663.329858][T10296] CIFS: VFS: Error connecting to socket. Aborting operation. [ 663.337713][T10296] CIFS: VFS: cifs_mount failed w/return code = -4 [ 664.972900][ T23] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 668.175960][T10330] sd 0:0:1:0: PR command failed: 1026 [ 668.181755][T10330] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 668.188483][T10330] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 669.277885][ T23] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 669.480391][ T23] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 669.503531][ T23] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 669.528655][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.545221][ T23] usb 4-1: Product: syz [ 669.568612][ T23] usb 4-1: Manufacturer: syz [ 669.573374][ T23] usb 4-1: SerialNumber: syz [ 670.369057][ T788] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 672.167293][ T23] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 672.177517][ T788] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 672.228490][ T23] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 672.235833][ T23] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 672.271965][ T788] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 672.589474][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.597849][ T788] usb 2-1: Product: syz [ 672.602542][ T23] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 672.609354][ T788] usb 2-1: Manufacturer: syz [ 672.614181][ T788] usb 2-1: SerialNumber: syz [ 672.632310][ T788] usb 2-1: can't set config #1, error -71 [ 672.642404][ T23] usb 4-1: USB disconnect, device number 28 [ 672.651976][ T788] usb 2-1: USB disconnect, device number 26 [ 672.885119][T10284] udevd[10284]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 674.225967][T10386] sd 0:0:1:0: PR command failed: 1026 [ 674.231637][T10386] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 674.238409][T10386] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 685.390737][T10476] FAULT_INJECTION: forcing a failure. [ 685.390737][T10476] name failslab, interval 1, probability 0, space 0, times 0 [ 685.403785][T10476] CPU: 0 PID: 10476 Comm: syz.1.1131 Not tainted syzkaller #0 [ 685.411275][T10476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 685.421353][T10476] Call Trace: [ 685.424649][T10476] [ 685.427597][T10476] dump_stack_lvl+0x18c/0x250 [ 685.432305][T10476] ? show_regs_print_info+0x20/0x20 [ 685.437533][T10476] ? load_image+0x420/0x420 [ 685.442070][T10476] ? __lock_acquire+0x7d80/0x7d80 [ 685.447127][T10476] ? pointer+0x9ed/0x1150 [ 685.451484][T10476] should_fail_ex+0x394/0x4c0 [ 685.456196][T10476] should_failslab+0x9/0x20 [ 685.460731][T10476] slab_pre_alloc_hook+0x59/0x300 [ 685.465787][T10476] ? kasprintf+0xe3/0x140 [ 685.470143][T10476] ? kasprintf+0xe3/0x140 [ 685.474497][T10476] __kmem_cache_alloc_node+0x53/0x250 [ 685.479911][T10476] ? kasprintf+0xe3/0x140 [ 685.484265][T10476] __kmalloc_node_track_caller+0xa4/0x230 [ 685.490017][T10476] kvasprintf+0xec/0x1a0 [ 685.494292][T10476] ? bust_spinlocks+0xd0/0xd0 [ 685.499003][T10476] kasprintf+0xe3/0x140 [ 685.503180][T10476] ? schedule+0xc7/0x170 [ 685.507451][T10476] ? kvasprintf_const+0x240/0x240 [ 685.512509][T10476] logfc+0x156/0x4f0 [ 685.516425][T10476] ? trace_raw_output_contention_end+0xd0/0xd0 [ 685.522600][T10476] ? vfs_parse_fs_param_source+0x190/0x190 [ 685.528427][T10476] ? aa_get_newest_label+0xfd/0x5c0 [ 685.533647][T10476] ? trace_contention_end+0x39/0xe0 [ 685.538864][T10476] ? end_current_label_crit_section+0x170/0x170 [ 685.545128][T10476] ? __mutex_lock+0x30d/0xc80 [ 685.549824][T10476] ? file_end_write+0x159/0x250 [ 685.554701][T10476] ceph_get_tree+0x385/0x1800 [ 685.559403][T10476] ? bpf_lsm_capable+0x9/0x10 [ 685.564093][T10476] ? security_capable+0x89/0xb0 [ 685.568968][T10476] vfs_get_tree+0x8c/0x280 [ 685.573405][T10476] vfs_cmd_create+0xe3/0x230 [ 685.578022][T10476] __se_sys_fsconfig+0x70a/0x850 [ 685.582989][T10476] ? __x64_sys_fsconfig+0xc0/0xc0 [ 685.588049][T10476] ? lockdep_hardirqs_on+0x98/0x150 [ 685.593271][T10476] ? __x64_sys_fsconfig+0x20/0xc0 [ 685.598328][T10476] do_syscall_64+0x55/0xb0 [ 685.602767][T10476] ? clear_bhb_loop+0x40/0x90 [ 685.607470][T10476] ? clear_bhb_loop+0x40/0x90 [ 685.612172][T10476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 685.618086][T10476] RIP: 0033:0x7f146e79e159 [ 685.622516][T10476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.642137][T10476] RSP: 002b:00007f146f6a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 685.650572][T10476] RAX: ffffffffffffffda RBX: 00007f146ea26090 RCX: 00007f146e79e159 [ 685.658560][T10476] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 685.666545][T10476] RBP: 00007f146e83506b R08: 0000000000000000 R09: 0000000000000000 [ 685.674533][T10476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.682519][T10476] R13: 00007f146ea26128 R14: 00007f146ea26090 R15: 00007ffecaf64558 [ 685.690526][T10476] [ 686.208322][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.214898][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.645975][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'. [ 688.002995][T10497] loop1: detected capacity change from 0 to 512 [ 688.089487][T10497] EXT4-fs (loop1): Test dummy encryption mode enabled [ 688.096298][T10497] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 688.204280][T10497] EXT4-fs (loop1): 1 truncate cleaned up [ 688.211321][T10497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.436421][T10505] netlink: 'syz.2.1137': attribute type 10 has an invalid length. [ 689.139818][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.292126][T10505] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 689.434161][T10510] netlink: 'syz.2.1137': attribute type 10 has an invalid length. [ 689.497463][T10510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.504894][T10510] team0: Device bond0 is of different type [ 693.999974][T10559] netlink: 'syz.1.1154': attribute type 10 has an invalid length. [ 694.906600][T10559] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 694.954006][T10564] netlink: 'syz.1.1154': attribute type 10 has an invalid length. [ 695.077670][T10564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.139720][T10564] team0: Port device bond0 added [ 696.249321][T10583] loop1: detected capacity change from 0 to 512 [ 696.262612][T10583] EXT4-fs: Ignoring removed orlov option [ 696.376380][T10583] EXT4-fs (loop1): 1 truncate cleaned up [ 696.388667][T10583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 696.468530][T10579] EXT4-fs error (device loop1): ext4_lookup:1864: inode #2: comm syz.1.1168: deleted inode referenced: 15 [ 696.483992][T10579] EXT4-fs (loop1): Remounting filesystem read-only [ 696.741603][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.120080][T10598] FAULT_INJECTION: forcing a failure. [ 697.120080][T10598] name failslab, interval 1, probability 0, space 0, times 0 [ 697.173849][T10598] CPU: 1 PID: 10598 Comm: syz.1.1164 Not tainted syzkaller #0 [ 697.181364][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 697.191439][T10598] Call Trace: [ 697.194731][T10598] [ 697.197675][T10598] dump_stack_lvl+0x18c/0x250 [ 697.202389][T10598] ? show_regs_print_info+0x20/0x20 [ 697.207616][T10598] ? load_image+0x420/0x420 [ 697.212143][T10598] ? __might_sleep+0xe0/0xe0 [ 697.216758][T10598] ? __lock_acquire+0x7d80/0x7d80 [ 697.221804][T10598] should_fail_ex+0x394/0x4c0 [ 697.226474][T10598] should_failslab+0x9/0x20 [ 697.230980][T10598] slab_pre_alloc_hook+0x59/0x300 [ 697.236026][T10598] kmem_cache_alloc+0x5a/0x2c0 [ 697.240805][T10598] ? ceph_msg_new2+0x3a/0x490 [ 697.245494][T10598] ceph_msg_new2+0x3a/0x490 [ 697.250002][T10598] ? mempool_init_node+0x12f/0x480 [ 697.255120][T10598] msgpool_alloc+0x80/0x1b0 [ 697.259620][T10598] ? ceph_msgpool_init+0x180/0x180 [ 697.264730][T10598] mempool_init_node+0x1e9/0x480 [ 697.269675][T10598] ? msgpool_alloc+0x1b0/0x1b0 [ 697.274440][T10598] ? ceph_msgpool_init+0x180/0x180 [ 697.279553][T10598] mempool_create+0x81/0xc0 [ 697.284062][T10598] ceph_msgpool_init+0xa7/0x180 [ 697.288922][T10598] ceph_osdc_init+0x54f/0x8c0 [ 697.293611][T10598] ceph_create_client+0x246/0x300 [ 697.298642][T10598] ceph_get_tree+0x1ca/0x1800 [ 697.303332][T10598] ? bpf_lsm_capable+0x9/0x10 [ 697.308009][T10598] ? security_capable+0x89/0xb0 [ 697.312864][T10598] vfs_get_tree+0x8c/0x280 [ 697.317288][T10598] vfs_cmd_create+0xe3/0x230 [ 697.321886][T10598] __se_sys_fsconfig+0x70a/0x850 [ 697.326841][T10598] ? __x64_sys_fsconfig+0xc0/0xc0 [ 697.331876][T10598] ? lockdep_hardirqs_on+0x98/0x150 [ 697.337075][T10598] ? __x64_sys_fsconfig+0x20/0xc0 [ 697.342101][T10598] do_syscall_64+0x55/0xb0 [ 697.346518][T10598] ? clear_bhb_loop+0x40/0x90 [ 697.351197][T10598] ? clear_bhb_loop+0x40/0x90 [ 697.355876][T10598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 697.361776][T10598] RIP: 0033:0x7f146e79e159 [ 697.366191][T10598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.385801][T10598] RSP: 002b:00007f146f6c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 697.394219][T10598] RAX: ffffffffffffffda RBX: 00007f146ea25fa0 RCX: 00007f146e79e159 [ 697.402189][T10598] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 697.410161][T10598] RBP: 00007f146e83506b R08: 0000000000000000 R09: 0000000000000000 [ 697.418133][T10598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.426099][T10598] R13: 00007f146ea26038 R14: 00007f146ea25fa0 R15: 00007ffecaf64558 [ 697.434083][T10598] [ 698.301776][T10616] sd 0:0:1:0: PR command failed: 1026 [ 698.307378][T10616] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 698.314097][T10616] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 698.576026][T10617] netlink: 'syz.0.1169': attribute type 10 has an invalid length. [ 699.148675][T10617] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 701.025426][T10637] sd 0:0:1:0: PR command failed: 1026 [ 701.031012][T10637] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 701.037794][T10637] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 703.136759][T10654] FAULT_INJECTION: forcing a failure. [ 703.136759][T10654] name failslab, interval 1, probability 0, space 0, times 0 [ 703.829623][T10654] CPU: 0 PID: 10654 Comm: syz.3.1179 Not tainted syzkaller #0 [ 703.837130][T10654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 703.847177][T10654] Call Trace: [ 703.850444][T10654] [ 703.853358][T10654] dump_stack_lvl+0x18c/0x250 [ 703.858037][T10654] ? show_regs_print_info+0x20/0x20 [ 703.863227][T10654] ? load_image+0x420/0x420 [ 703.867718][T10654] ? __might_sleep+0xe0/0xe0 [ 703.872295][T10654] ? __lock_acquire+0x7d80/0x7d80 [ 703.877315][T10654] should_fail_ex+0x394/0x4c0 [ 703.882008][T10654] should_failslab+0x9/0x20 [ 703.886503][T10654] slab_pre_alloc_hook+0x59/0x300 [ 703.891522][T10654] kmem_cache_alloc+0x5a/0x2c0 [ 703.896271][T10654] ? ceph_msg_new2+0x3a/0x490 [ 703.900938][T10654] ceph_msg_new2+0x3a/0x490 [ 703.905428][T10654] ? mempool_init_node+0x12f/0x480 [ 703.910531][T10654] msgpool_alloc+0x80/0x1b0 [ 703.915017][T10654] ? ceph_msgpool_init+0x180/0x180 [ 703.920112][T10654] mempool_init_node+0x1e9/0x480 [ 703.925042][T10654] ? msgpool_alloc+0x1b0/0x1b0 [ 703.929794][T10654] ? ceph_msgpool_init+0x180/0x180 [ 703.934902][T10654] mempool_create+0x81/0xc0 [ 703.939419][T10654] ceph_msgpool_init+0xa7/0x180 [ 703.944264][T10654] ceph_osdc_init+0x54f/0x8c0 [ 703.948948][T10654] ceph_create_client+0x246/0x300 [ 703.953980][T10654] ceph_get_tree+0x1ca/0x1800 [ 703.958666][T10654] ? bpf_lsm_capable+0x9/0x10 [ 703.963372][T10654] ? security_capable+0x89/0xb0 [ 703.968218][T10654] vfs_get_tree+0x8c/0x280 [ 703.972626][T10654] vfs_cmd_create+0xe3/0x230 [ 703.977231][T10654] __se_sys_fsconfig+0x70a/0x850 [ 703.982169][T10654] ? __x64_sys_fsconfig+0xc0/0xc0 [ 703.987191][T10654] ? lockdep_hardirqs_on+0x98/0x150 [ 703.992377][T10654] ? __x64_sys_fsconfig+0x20/0xc0 [ 703.997393][T10654] do_syscall_64+0x55/0xb0 [ 704.001807][T10654] ? clear_bhb_loop+0x40/0x90 [ 704.006487][T10654] ? clear_bhb_loop+0x40/0x90 [ 704.011178][T10654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.017084][T10654] RIP: 0033:0x7fdcc8d9e159 [ 704.021489][T10654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.041110][T10654] RSP: 002b:00007fdcc9b97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 704.049513][T10654] RAX: ffffffffffffffda RBX: 00007fdcc9025fa0 RCX: 00007fdcc8d9e159 [ 704.057474][T10654] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 704.065435][T10654] RBP: 00007fdcc8e3506b R08: 0000000000000000 R09: 0000000000000000 [ 704.073394][T10654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.081348][T10654] R13: 00007fdcc9026038 R14: 00007fdcc9025fa0 R15: 00007fff78be04b8 [ 704.089336][T10654] [ 705.109074][T10668] loop3: detected capacity change from 0 to 512 [ 705.124946][T10668] EXT4-fs (loop3): Test dummy encryption mode enabled [ 705.131830][T10668] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 705.162204][T10668] EXT4-fs (loop3): 1 truncate cleaned up [ 705.169317][T10668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.200370][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.329874][T10680] netlink: 'syz.0.1187': attribute type 10 has an invalid length. [ 707.731177][T10698] netlink: 'syz.1.1192': attribute type 10 has an invalid length. [ 707.775805][T10698] netlink: 'syz.1.1192': attribute type 10 has an invalid length. [ 707.832248][ T8113] tipc: Resetting bearer [ 708.706643][T10709] loop1: detected capacity change from 0 to 512 [ 708.744502][T10709] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.1196: corrupted in-inode xattr: invalid ea_ino [ 709.101349][T10709] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1196: couldn't read orphan inode 15 (err -117) [ 709.190494][T10709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.215473][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.238513][ T5784] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 714.754887][T10763] loop1: detected capacity change from 0 to 512 [ 714.786114][T10763] EXT4-fs (loop1): Test dummy encryption mode enabled [ 714.793024][T10763] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 715.311799][T10763] EXT4-fs (loop1): 1 truncate cleaned up [ 715.318941][T10763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.829884][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.946042][ T5764] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 716.233815][ T5764] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 716.378986][ T5764] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 716.489243][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.499946][ T5764] usb 4-1: Product: syz [ 716.504143][ T5764] usb 4-1: Manufacturer: syz [ 716.515188][ T5764] usb 4-1: SerialNumber: syz [ 718.448064][ T5764] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 718.469344][ T5764] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 718.502680][ T5764] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 718.563084][ T5764] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 718.636942][ T5764] usb 4-1: USB disconnect, device number 29 [ 718.753645][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.425949][ T2202] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 720.485134][T10809] loop3: detected capacity change from 0 to 512 [ 720.525621][ T2202] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 720.542978][T10809] EXT4-fs (loop3): Test dummy encryption mode enabled [ 720.550447][T10809] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 720.624116][ T2202] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 720.647761][T10809] EXT4-fs (loop3): 1 truncate cleaned up [ 720.655171][T10809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 720.713753][ T2202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.770262][ T2202] usb 2-1: Product: syz [ 720.799073][ T2202] usb 2-1: Manufacturer: syz [ 720.820446][ T2202] usb 2-1: SerialNumber: syz [ 721.693225][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.191170][ T2202] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 722.199707][ T2202] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 722.207418][ T2202] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 722.214261][ T2202] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 722.700567][ T2202] usb 2-1: USB disconnect, device number 27 [ 723.065183][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 723.183061][T10829] CIFS: Attempting to mount //127.0.0.1/share [ 723.510170][T10831] xt_TCPMSS: Only works on TCP SYN packets [ 724.379541][T10829] CIFS: VFS: Error connecting to socket. Aborting operation. [ 724.535753][T10829] CIFS: VFS: cifs_mount failed w/return code = -4 [ 726.717132][ T5764] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 726.869740][T10851] loop3: detected capacity change from 0 to 512 [ 726.886813][T10851] EXT4-fs (loop3): Test dummy encryption mode enabled [ 726.893633][T10851] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 726.970865][T10851] EXT4-fs (loop3): 1 truncate cleaned up [ 726.977880][T10851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.116236][ T5764] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 727.170070][ T5764] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 727.204058][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.238262][ T5764] usb 2-1: Product: syz [ 727.242461][ T5764] usb 2-1: Manufacturer: syz [ 727.277236][ T5764] usb 2-1: SerialNumber: syz [ 728.595386][ T5764] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 728.641233][ T5764] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 728.661559][ T5764] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 728.681383][ T5764] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 728.792436][ T5764] usb 2-1: USB disconnect, device number 28 [ 728.901026][T10864] loop1: detected capacity change from 0 to 1024 [ 728.929800][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.931920][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 729.031788][T10864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.490938][ T28] audit: type=1800 audit(1791502665.884:10): pid=10874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1236" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 729.733726][T10875] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 729.773144][ T28] audit: type=1800 audit(1791502665.894:11): pid=10874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1236" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 729.903272][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.190368][T10887] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 732.157850][T10896] af_packet: tpacket_rcv: packet too big, clamped from 324 to 4294967272. macoff=96 [ 732.196739][ T5784] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 733.505389][ T5815] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 733.759108][ T5815] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 733.788422][ T5815] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 733.808570][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.837609][ T5815] usb 4-1: Product: syz [ 733.841833][ T5815] usb 4-1: Manufacturer: syz [ 733.861924][ T5815] usb 4-1: SerialNumber: syz [ 734.683999][T10920] loop1: detected capacity change from 0 to 512 [ 734.693152][T10920] EXT4-fs (loop1): Test dummy encryption mode enabled [ 734.700203][T10920] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 734.728511][T10920] EXT4-fs (loop1): 1 truncate cleaned up [ 734.736631][T10920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.975130][ T5815] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 735.988227][ T5815] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 735.996585][ T5815] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 736.003529][ T5815] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 736.068711][ T5815] usb 4-1: USB disconnect, device number 30 [ 736.269257][ T5764] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 736.582852][ T5764] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 737.052594][T10931] ceph: No mds server is up or the cluster is laggy [ 737.106252][ T5764] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 737.189678][T10941] netlink: 'syz.2.1254': attribute type 10 has an invalid length. [ 737.301639][T10940] netlink: 'syz.2.1254': attribute type 10 has an invalid length. [ 737.370167][T10940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.404893][T10940] team0: Device bond0 is of different type [ 737.567045][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.636313][T10945] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 737.663404][T10945] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 737.906399][T10949] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 737.952035][T10949] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 738.262141][T10952] loop3: detected capacity change from 0 to 32768 [ 738.319363][T10952] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 738.388000][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.483880][T10952] XFS (loop3): Ending clean mount [ 738.493354][T10952] XFS (loop3): Quotacheck needed: Please wait. [ 738.839154][T10952] XFS (loop3): Quotacheck: Done. [ 740.130738][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 740.827241][ T5764] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 740.835841][ T5780] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 741.023666][ T5780] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 741.066199][ T5780] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 741.088852][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.098160][ T5764] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 741.115028][ T5780] usb 2-1: Product: syz [ 741.119493][ T5780] usb 2-1: Manufacturer: syz [ 741.124110][ T5780] usb 2-1: SerialNumber: syz [ 741.355864][ T5780] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 741.364353][ T5780] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 741.387655][ T5780] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 741.394505][ T5780] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 741.425292][ T5780] usb 2-1: USB disconnect, device number 29 [ 741.492166][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 741.604270][T10977] ceph: No mds server is up or the cluster is laggy [ 741.626339][ T23] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 742.503848][T10992] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 742.523390][T10992] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 742.595023][ T5815] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 743.627329][ T5815] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 743.666804][ T5815] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 743.705658][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.734579][ T5815] usb 4-1: Product: syz [ 743.747442][ T5815] usb 4-1: Manufacturer: syz [ 743.761177][ T5815] usb 4-1: SerialNumber: syz [ 745.356446][ T5815] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 745.369562][ T5815] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 745.377017][ T5815] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 745.383872][ T5815] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 745.420577][ T5815] usb 4-1: USB disconnect, device number 31 [ 745.448540][T11011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1272'. [ 745.508957][T10760] udevd[10760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 746.008523][T11020] sd 0:0:1:0: PR command failed: 1026 [ 746.014031][T11020] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 746.020899][T11020] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 746.467301][ T5815] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 746.767677][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 747.029333][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.035872][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.257434][T11022] ceph: No mds server is up or the cluster is laggy [ 747.875519][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 750.287067][T11049] binder: 11048:11049 ioctl c0306201 2000000004c0 returned -22 [ 750.811063][T11056] futex_wake_op: syz.3.1283 tries to shift op by 144; fix this program [ 750.871331][T11056] loop3: detected capacity change from 0 to 256 [ 750.933039][T11056] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 751.037916][ T28] audit: type=1800 audit(1791502687.474:12): pid=11056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1283" name="file1" dev="loop3" ino=1048663 res=0 errno=0 [ 752.267459][T11069] FAULT_INJECTION: forcing a failure. [ 752.267459][T11069] name failslab, interval 1, probability 0, space 0, times 0 [ 752.283460][T11069] CPU: 1 PID: 11069 Comm: syz.3.1287 Not tainted syzkaller #0 [ 752.290956][T11069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 752.301037][T11069] Call Trace: [ 752.304329][T11069] [ 752.307273][T11069] dump_stack_lvl+0x18c/0x250 [ 752.311988][T11069] ? show_regs_print_info+0x20/0x20 [ 752.317211][T11069] ? load_image+0x420/0x420 [ 752.321743][T11069] ? __might_sleep+0xe0/0xe0 [ 752.326356][T11069] ? __lock_acquire+0x7d80/0x7d80 [ 752.331407][T11069] should_fail_ex+0x394/0x4c0 [ 752.336117][T11069] should_failslab+0x9/0x20 [ 752.340646][T11069] slab_pre_alloc_hook+0x59/0x300 [ 752.345698][T11069] kmem_cache_alloc+0x5a/0x2c0 [ 752.350482][T11069] ? ceph_msg_new2+0x3a/0x490 [ 752.355178][T11069] ceph_msg_new2+0x3a/0x490 [ 752.359694][T11069] ? mempool_init_node+0x12f/0x480 [ 752.364825][T11069] msgpool_alloc+0x80/0x1b0 [ 752.369342][T11069] ? ceph_msgpool_init+0x180/0x180 [ 752.374471][T11069] mempool_init_node+0x1e9/0x480 [ 752.379440][T11069] ? msgpool_alloc+0x1b0/0x1b0 [ 752.384220][T11069] ? ceph_msgpool_init+0x180/0x180 [ 752.389350][T11069] mempool_create+0x81/0xc0 [ 752.393885][T11069] ceph_msgpool_init+0xa7/0x180 [ 752.398762][T11069] ceph_osdc_init+0x54f/0x8c0 [ 752.403465][T11069] ceph_create_client+0x246/0x300 [ 752.408516][T11069] ceph_get_tree+0x1ca/0x1800 [ 752.413212][T11069] ? bpf_lsm_capable+0x9/0x10 [ 752.417899][T11069] ? security_capable+0x89/0xb0 [ 752.422770][T11069] vfs_get_tree+0x8c/0x280 [ 752.427205][T11069] vfs_cmd_create+0xe3/0x230 [ 752.431818][T11069] __se_sys_fsconfig+0x70a/0x850 [ 752.436785][T11069] ? __x64_sys_fsconfig+0xc0/0xc0 [ 752.441840][T11069] ? lockdep_hardirqs_on+0x98/0x150 [ 752.447050][T11069] ? __x64_sys_fsconfig+0x20/0xc0 [ 752.452097][T11069] do_syscall_64+0x55/0xb0 [ 752.456532][T11069] ? clear_bhb_loop+0x40/0x90 [ 752.461229][T11069] ? clear_bhb_loop+0x40/0x90 [ 752.465928][T11069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 752.471844][T11069] RIP: 0033:0x7fdcc8d9e159 [ 752.476269][T11069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.495901][T11069] RSP: 002b:00007fdcc9b97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 752.504348][T11069] RAX: ffffffffffffffda RBX: 00007fdcc9025fa0 RCX: 00007fdcc8d9e159 [ 752.512334][T11069] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 752.520320][T11069] RBP: 00007fdcc8e3506b R08: 0000000000000000 R09: 0000000000000000 [ 752.528302][T11069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.536286][T11069] R13: 00007fdcc9026038 R14: 00007fdcc9025fa0 R15: 00007fff78be04b8 [ 752.544301][T11069] [ 754.633231][T11102] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 756.604909][ T5815] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 756.946710][ T5815] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 756.960978][ T5815] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 756.984916][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.992983][ T5815] usb 4-1: Product: syz [ 756.997265][ T5815] usb 4-1: Manufacturer: syz [ 757.003554][ T5815] usb 4-1: SerialNumber: syz [ 757.353289][T11120] sd 0:0:1:0: PR command failed: 1026 [ 757.370538][T11120] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 757.400993][T11120] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 759.534935][ T5815] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 759.543412][ T5815] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 759.585345][ T5815] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 759.611899][ T5815] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 759.842756][ T5815] usb 4-1: USB disconnect, device number 32 [ 759.923336][T11116] udevd[11116]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.019233][T11140] loop3: detected capacity change from 0 to 512 [ 760.028320][T11140] EXT4-fs (loop3): Test dummy encryption mode enabled [ 760.035295][T11140] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 760.059778][T11140] EXT4-fs (loop3): 1 truncate cleaned up [ 760.067154][T11140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.485745][T11153] loop1: detected capacity change from 0 to 128 [ 761.493723][T11153] EXT4-fs (loop1): Test dummy encryption mode enabled [ 761.526068][T11153] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 761.615056][T11153] ext4 filesystem being mounted at /309/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 762.697020][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 763.512903][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.681952][T11170] loop1: detected capacity change from 0 to 32768 [ 763.709309][T11170] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 763.775811][T11170] XFS (loop1): Ending clean mount [ 763.788634][T11170] XFS (loop1): Quotacheck needed: Please wait. [ 763.850495][T11170] XFS (loop1): Quotacheck: Done. [ 764.688190][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 766.127374][T11201] loop1: detected capacity change from 0 to 1024 [ 766.256432][T11201] EXT4-fs (loop1): filesystem is read-only [ 766.262371][T11201] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 1280 [ 769.107422][T11220] loop1: detected capacity change from 0 to 512 [ 769.118233][T11220] EXT4-fs (loop1): Test dummy encryption mode enabled [ 769.125142][T11220] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 769.222651][T11220] EXT4-fs (loop1): 1 truncate cleaned up [ 769.229834][T11220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.525350][T11230] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 770.555636][T11230] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 771.864719][ T5764] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 772.130365][ T5764] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 772.174808][ T5764] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 772.195549][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.215487][ T5764] usb 4-1: Product: syz [ 772.226525][ T5764] usb 4-1: Manufacturer: syz [ 772.231260][ T5764] usb 4-1: SerialNumber: syz [ 772.413446][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.534128][T11243] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 772.543517][T11243] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 774.938483][ T5764] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 774.954369][ T5764] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 774.961717][ T5764] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 775.109600][ T5764] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 775.174749][T11264] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 775.183789][T11264] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 775.228526][T11266] loop3: detected capacity change from 0 to 512 [ 775.248656][T11266] EXT4-fs (loop3): Test dummy encryption mode enabled [ 775.255557][T11266] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 775.301425][T11266] EXT4-fs (loop3): 1 truncate cleaned up [ 775.308537][T11266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.489400][ T5764] usb 4-1: USB disconnect, device number 33 [ 776.488610][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.303729][ T2202] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 779.594999][T11310] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 779.603929][T11310] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 779.896143][ T2202] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 779.924942][ T2202] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 779.948913][ T2202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.968698][ T2202] usb 2-1: Product: syz [ 780.116837][ T2202] usb 2-1: Manufacturer: syz [ 780.134522][ T2202] usb 2-1: SerialNumber: syz [ 780.160168][T11314] netlink: 'syz.0.1344': attribute type 49 has an invalid length. [ 780.413574][T11321] loop3: detected capacity change from 0 to 512 [ 780.432120][T11321] EXT4-fs (loop3): Test dummy encryption mode enabled [ 780.439162][T11321] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 780.576883][T11321] EXT4-fs (loop3): 1 truncate cleaned up [ 780.584379][T11321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.410218][ T2202] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 781.427439][ T2202] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 781.461975][ T2202] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 781.512157][ T2202] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 781.577313][ T2202] usb 2-1: USB disconnect, device number 30 [ 781.610042][T11335] loop1: detected capacity change from 0 to 1024 [ 781.659553][T11116] udevd[11116]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 781.689597][T11335] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 781.714529][T11335] JBD2: no valid journal superblock found [ 781.760419][T11335] EXT4-fs (loop1): Could not load journal inode [ 784.719987][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.003479][ T5814] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 785.314325][T11381] futex_wake_op: syz.0.1354 tries to shift op by 144; fix this program [ 786.959606][ T5814] usb 2-1: device descriptor read/all, error -71 [ 789.105710][ T5764] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 789.356068][ T5764] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 789.386070][ T5764] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 789.399142][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.407405][ T5764] usb 4-1: Product: syz [ 789.411588][ T5764] usb 4-1: Manufacturer: syz [ 789.419494][ T5764] usb 4-1: SerialNumber: syz [ 791.751301][ T5764] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 791.759829][ T5764] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 791.767464][ T5764] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 791.774484][ T5764] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 791.793747][ T5764] usb 4-1: USB disconnect, device number 34 [ 792.542380][T11339] udevd[11339]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 792.634101][ T2202] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 792.912099][ T2202] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 793.017308][ T2202] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 793.883362][ T2202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.894067][ T2202] usb 2-1: Product: syz [ 793.898262][ T2202] usb 2-1: Manufacturer: syz [ 793.902948][ T2202] usb 2-1: SerialNumber: syz [ 795.292476][ T2202] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 795.302448][ T2202] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 795.333966][ T2202] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 795.340795][ T2202] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 795.386862][ T2202] usb 2-1: USB disconnect, device number 33 [ 796.034912][T11453] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 796.043907][T11453] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 796.482702][T11339] udevd[11339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 799.096319][ T5815] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 799.353059][ T5815] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 799.437258][ T5815] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 799.503869][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.566489][ T5815] usb 4-1: Product: syz [ 799.602118][ T5815] usb 4-1: Manufacturer: syz [ 799.640661][ T5815] usb 4-1: SerialNumber: syz [ 801.302853][ T5815] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 801.367957][ T5815] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 801.405868][ T5815] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 801.425811][ T5815] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 802.592277][ T5815] usb 4-1: USB disconnect, device number 35 [ 803.200845][T11339] udevd[11339]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.459223][T11520] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 808.499029][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.505640][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.545689][ T5814] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 809.949009][ T5814] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 809.983165][ T5814] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 810.005991][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.023607][ T5814] usb 4-1: Product: syz [ 810.027972][ T5814] usb 4-1: Manufacturer: syz [ 810.032688][ T5814] usb 4-1: SerialNumber: syz [ 812.079403][ T5814] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 812.247688][ T5814] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 812.267226][ T5814] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 812.283480][ T5814] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 812.885418][ T5814] usb 4-1: USB disconnect, device number 36 [ 813.096781][T11558] udevd[11558]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 813.171878][T11616] sd 0:0:1:0: PR command failed: 1026 [ 813.177592][T11616] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 813.184598][T11616] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 817.414027][ T5764] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 817.806702][ T5764] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 817.848717][ T5764] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 817.998644][ T28] audit: type=1326 audit(1791502754.465:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11654 comm="syz.3.1413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcc8d9e159 code=0x0 [ 818.026762][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.013768][ T5764] usb 2-1: Product: syz [ 819.017991][ T5764] usb 2-1: Manufacturer: syz [ 819.022597][ T5764] usb 2-1: SerialNumber: syz [ 820.354823][ T5764] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 820.375884][ T5764] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 820.400746][ T5764] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 820.435949][ T5764] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 820.504104][ T5764] usb 2-1: USB disconnect, device number 34 [ 821.746302][T11615] udevd[11615]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 824.274032][T11696] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:1": -EINTR [ 826.755421][T11730] netlink: 'syz.0.1435': attribute type 10 has an invalid length. [ 826.774435][ T5764] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 826.977876][ T5764] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 827.127484][ T5764] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 827.250756][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.366369][ T5764] usb 2-1: Product: syz [ 827.420245][ T5764] usb 2-1: Manufacturer: syz [ 827.469910][ T5764] usb 2-1: SerialNumber: syz [ 829.708666][ T5764] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 829.718092][ T5764] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 830.336747][ T5764] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 830.439937][ T5764] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 830.463222][ T5764] usb 2-1: USB disconnect, device number 35 [ 831.926881][T11758] udevd[11758]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 832.831068][T11783] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 832.840254][T11783] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 833.741599][T11787] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 833.750769][T11787] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 836.897660][ T27] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 837.837645][ T27] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 837.850218][ T27] usb 4-1: can't read configurations, error -71 [ 838.915493][T11830] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 838.925420][T11830] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 838.937057][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 839.829752][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 839.841648][T11838] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1454'. [ 839.850767][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1454'. [ 839.860291][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 840.286707][ T23] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 840.922225][T11848] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 841.337855][T11840] ceph: No mds server is up or the cluster is laggy [ 841.347287][T11848] comedi comedi0: Buffer allocation failed [ 841.576630][ T27] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 842.802802][T11875] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 842.812545][T11875] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 842.827663][T11565] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 843.343720][T11565] usb 4-1: Using ep0 maxpacket: 16 [ 843.356352][T11565] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.366671][T11565] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 843.378449][T11565] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 843.414000][T11565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.422090][T11565] usb 4-1: Product: syz [ 843.427988][T11565] usb 4-1: Manufacturer: syz [ 843.432674][T11565] usb 4-1: SerialNumber: syz [ 843.770510][T11565] usb 4-1: 0:2 : does not exist [ 843.778307][T11565] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 844.164119][T11881] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 844.173058][T11881] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 844.195730][T11565] usb 4-1: USB disconnect, device number 39 [ 844.221968][T11758] udevd[11758]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 844.433585][ T2202] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 845.269227][ T2202] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 845.296225][ T2202] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 845.314971][ T2202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.339939][ T2202] usb 2-1: Product: syz [ 845.350346][ T2202] usb 2-1: Manufacturer: syz [ 845.459486][ T2202] usb 2-1: SerialNumber: syz [ 845.642866][T11894] sd 0:0:1:0: PR command failed: 1026 [ 845.648516][T11894] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 845.655423][T11894] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 847.304257][ T2202] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 847.368173][ T2202] usb 2-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 847.403609][ T2202] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 847.467015][ T2202] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 847.596457][ T2202] usb 2-1: USB disconnect, device number 36 [ 848.828208][T11758] udevd[11758]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 849.683857][ T2202] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 850.217932][T11943] sd 0:0:1:0: PR command failed: 1026 [ 850.223686][T11943] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 850.230566][T11943] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 850.968004][ T2202] usb 2-1: device descriptor read/all, error -71 [ 851.124131][ T28] audit: type=1800 audit(1791502787.586:14): pid=11946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1481" name="UDC" dev="configfs" ino=24725 res=0 errno=0 [ 854.704153][ T28] audit: type=1326 audit(1791502791.166:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.0.1490" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f174ef9e159 code=0x0 [ 855.437094][T11980] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 855.446074][T11980] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 855.692121][ T2202] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 857.141232][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1484'. [ 857.342976][ T2202] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 857.466955][ T2202] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 858.466064][ T2202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.488063][ T2202] usb 2-1: Product: syz [ 858.492723][ T2202] usb 2-1: Manufacturer: syz [ 858.497674][ T2202] usb 2-1: SerialNumber: syz [ 858.506886][ T2202] usb 2-1: can't set config #1, error -71 [ 858.545685][ T2202] usb 2-1: USB disconnect, device number 39 [ 858.837019][T12008] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 858.867600][T12008] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 861.355492][T12037] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 861.364671][T12037] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 862.503861][ T23] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 863.122140][ T23] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 863.192828][ T23] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 863.202143][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.213060][ T23] usb 4-1: Product: syz [ 863.217670][ T23] usb 4-1: Manufacturer: syz [ 863.222346][ T23] usb 4-1: SerialNumber: syz [ 864.792987][T12060] loop1: detected capacity change from 0 to 512 [ 864.826504][T12060] EXT4-fs (loop1): Test dummy encryption mode enabled [ 864.840804][T12060] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 864.867875][T12060] EXT4-fs (loop1): 1 truncate cleaned up [ 864.883303][T12060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 864.962733][ T23] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 865.000891][ T23] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 865.032501][ T23] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 865.060672][ T23] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 865.314366][ T23] usb 4-1: USB disconnect, device number 40 [ 865.754838][T12072] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 865.931104][T12045] udevd[12045]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 866.398269][T12080] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 866.407697][T12080] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 867.406631][T12090] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 867.416136][T12090] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 867.508930][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.251181][T12096] bridge0: port 1(syz_tun) entered blocking state [ 868.259400][T12096] bridge0: port 1(syz_tun) entered disabled state [ 868.274133][T12096] syz_tun: entered allmulticast mode [ 868.287640][T12096] syz_tun: entered promiscuous mode [ 869.917663][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.925199][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.272627][T12117] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 870.281975][T12117] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 872.818844][T12133] loop3: detected capacity change from 0 to 512 [ 873.088270][T12133] EXT4-fs (loop3): Test dummy encryption mode enabled [ 873.095264][T12133] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 873.183998][T12133] EXT4-fs (loop3): 1 truncate cleaned up [ 873.191032][T12133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 873.558114][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.690540][T12151] futex_wake_op: syz.2.1531 tries to shift op by 144; fix this program [ 875.928763][ T28] audit: type=1804 audit(1791502812.376:16): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/360/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 876.183011][T12160] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 876.192439][T12160] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 876.484455][ T5145] udevd[5145]: could not touch /run/udev/queue: No such file or directory [ 876.663678][ T23] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 876.715467][ T5145] udevd[5145]: could not touch /run/udev/queue: No such file or directory [ 876.754488][ T5145] udevd[5145]: could not touch /run/udev/queue: No such file or directory [ 877.117244][ T23] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 877.163864][ T23] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 877.195878][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.250333][ T23] usb 4-1: Product: syz [ 877.274126][ T23] usb 4-1: Manufacturer: syz [ 877.302264][ T23] usb 4-1: SerialNumber: syz [ 877.417197][ T5145] udevd[5145]: could not touch /run/udev/queue: No such file or directory [ 877.513718][ T5145] udevd[5145]: could not touch /run/udev/queue: No such file or directory [ 879.487067][ T23] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 879.498565][ T23] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 879.506436][ T23] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 879.547015][ T23] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 879.555298][ T5145] udevd[5145]: could not touch /run/udev/queue: No such file or directory [ 879.627517][ T5145] udevd[5145]: could not touch /run/udev/queue: No such file or directory [ 879.654461][ T23] usb 4-1: USB disconnect, device number 41 [ 879.675073][ T5145] udevd[5145]: could not touch /run/udev/queue: No such file or directory [ 879.685820][ T5145] udevd[5145]: could not touch /run/udev/queue: No such file or directory [ 879.694790][ T5145] udevd[5145]: could not touch /run/udev/queue: No such file or directory [ 880.953743][ T23] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 881.188620][ T23] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 881.236791][ T23] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 881.267238][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.292745][ T23] usb 4-1: Product: syz [ 881.306197][ T23] usb 4-1: Manufacturer: syz [ 881.316173][ T23] usb 4-1: SerialNumber: syz [ 882.817229][ T23] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 882.881376][ T23] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 882.932611][ T23] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 882.971963][ T23] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 884.420393][ T23] usb 4-1: USB disconnect, device number 42 [ 884.534342][T12196] udevd[12196]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 888.633961][ T23] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 888.653124][ T8131] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.767948][ T8131] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.841911][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 888.861409][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 888.863753][ T23] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 888.954683][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 888.967459][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 888.976663][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 888.984436][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 889.001220][ T8131] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.026103][ T23] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 889.071353][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.121366][ T23] usb 4-1: Product: syz [ 889.321027][ T23] usb 4-1: Manufacturer: syz [ 889.339994][ T23] usb 4-1: SerialNumber: syz [ 889.794199][ T8131] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.065275][ T8131] tipc: Disabling bearer [ 890.079985][ T8131] tipc: Left network mode [ 891.304969][ T23] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 891.328988][ T23] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 891.370091][ T23] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 891.397731][ T23] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 891.514581][ T23] usb 4-1: USB disconnect, device number 43 [ 892.260101][T12232] udevd[12232]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.381131][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 892.391778][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 892.400072][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 892.408394][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 892.439811][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 892.447273][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 892.613864][ T23] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 892.847543][ T23] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 893.222996][ T8131] hsr_slave_0: left promiscuous mode [ 893.250428][ T23] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 893.259851][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.268140][ T23] usb 4-1: Product: syz [ 893.272382][ T23] usb 4-1: Manufacturer: syz [ 893.277246][ T23] usb 4-1: SerialNumber: syz [ 893.301129][ T8131] hsr_slave_1: left promiscuous mode [ 893.378188][ T8131] veth1_macvtap: left promiscuous mode [ 893.401854][ T8131] veth0_macvtap: left promiscuous mode [ 893.430059][ T8131] veth1_vlan: left promiscuous mode [ 893.448664][ T8131] veth0_vlan: left promiscuous mode [ 894.312122][T12305] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 894.321476][T12305] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 894.941646][ T23] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 894.964055][ T23] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 894.971394][ T23] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 894.999572][T11818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 895.010619][T11818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 895.021223][T11818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 895.029657][T11818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 895.060565][ T23] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 895.067596][T11818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 895.083699][T11818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 895.100220][ T23] usb 4-1: USB disconnect, device number 44 [ 895.139633][T12232] udevd[12232]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 895.696933][T12316] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 895.706088][T12316] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 897.503294][ T23] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 897.549688][ T8131] bond2 (unregistering): Released all slaves [ 897.685459][ T23] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 897.736575][ T23] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 897.775621][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.792957][ T23] usb 4-1: Product: syz [ 897.802000][ T23] usb 4-1: Manufacturer: syz [ 897.813471][ T23] usb 4-1: SerialNumber: syz [ 898.002577][ T8131] bond1 (unregistering): Released all slaves [ 898.352295][T11818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 898.387770][T11818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 898.483718][T11818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 898.492128][T11818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 898.501696][T11818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 898.509343][T11818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 899.322726][ T23] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 899.348412][ T23] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 899.376432][ T23] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 899.419587][ T23] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 899.485500][ T23] usb 4-1: USB disconnect, device number 45 [ 899.581704][T12232] udevd[12232]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.003917][T12357] loop3: detected capacity change from 0 to 512 [ 901.024700][T12357] EXT4-fs (loop3): Test dummy encryption mode enabled [ 901.031544][T12357] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 901.593945][T12357] EXT4-fs (loop3): 1 truncate cleaned up [ 901.601132][T12357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 901.672846][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 901.693540][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 901.704609][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 901.714988][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 901.722702][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 901.730383][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 902.028607][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.177743][ T8131] team0 (unregistering): Port device bond0 removed [ 902.232939][ T8131] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 902.249560][ T8131] bond0 (unregistering): Released all slaves [ 902.644703][ T8131] IPVS: stop unused estimator thread 0... [ 903.205719][T12385] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 903.214728][T12385] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 903.446244][T12387] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 903.455573][T12387] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 903.936235][T11818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 903.946342][T11818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 903.956986][T11818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 905.408808][T11818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 905.416551][T11818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 905.424054][T11818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 908.129045][T11818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 908.140283][T11818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 908.209130][T11818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 908.229121][T11818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 908.239542][T11818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 908.254963][T11818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 910.888766][T12450] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 910.898283][T12450] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 911.288870][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 911.301405][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 911.311078][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 911.327230][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 911.343708][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 911.351204][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 913.210166][T11818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 913.220590][T11818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 913.229756][T11818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 913.239125][T11818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 913.786088][T11818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 913.796336][T11818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 914.923452][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1600'. [ 915.976842][T12492] FAULT_INJECTION: forcing a failure. [ 915.976842][T12492] name failslab, interval 1, probability 0, space 0, times 0 [ 915.990286][T12492] CPU: 1 PID: 12492 Comm: syz.3.1603 Not tainted syzkaller #0 [ 915.997791][T12492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 916.007874][T12492] Call Trace: [ 916.011174][T12492] [ 916.014120][T12492] dump_stack_lvl+0x18c/0x250 [ 916.018832][T12492] ? show_regs_print_info+0x20/0x20 [ 916.024059][T12492] ? load_image+0x420/0x420 [ 916.028594][T12492] ? __might_sleep+0xe0/0xe0 [ 916.033214][T12492] ? __lock_acquire+0x7d80/0x7d80 [ 916.038264][T12492] should_fail_ex+0x394/0x4c0 [ 916.042971][T12492] should_failslab+0x9/0x20 [ 916.047504][T12492] slab_pre_alloc_hook+0x59/0x300 [ 916.052565][T12492] kmem_cache_alloc+0x5a/0x2c0 [ 916.057354][T12492] ? ceph_msg_new2+0x3a/0x490 [ 916.062057][T12492] ceph_msg_new2+0x3a/0x490 [ 916.066585][T12492] ? mempool_init_node+0x12f/0x480 [ 916.071726][T12492] msgpool_alloc+0x80/0x1b0 [ 916.076250][T12492] ? ceph_msgpool_init+0x180/0x180 [ 916.081387][T12492] mempool_init_node+0x1e9/0x480 [ 916.086354][T12492] ? msgpool_alloc+0x1b0/0x1b0 [ 916.091134][T12492] ? ceph_msgpool_init+0x180/0x180 [ 916.096263][T12492] mempool_create+0x81/0xc0 [ 916.100796][T12492] ceph_msgpool_init+0xa7/0x180 [ 916.105672][T12492] ceph_osdc_init+0x54f/0x8c0 [ 916.110382][T12492] ceph_create_client+0x246/0x300 [ 916.115439][T12492] ceph_get_tree+0x1ca/0x1800 [ 916.120143][T12492] ? bpf_lsm_capable+0x9/0x10 [ 916.124840][T12492] ? security_capable+0x89/0xb0 [ 916.129715][T12492] vfs_get_tree+0x8c/0x280 [ 916.134159][T12492] vfs_cmd_create+0xe3/0x230 [ 916.138776][T12492] __se_sys_fsconfig+0x70a/0x850 [ 916.143756][T12492] ? __x64_sys_fsconfig+0xc0/0xc0 [ 916.148817][T12492] ? lockdep_hardirqs_on+0x98/0x150 [ 916.154036][T12492] ? __x64_sys_fsconfig+0x20/0xc0 [ 916.159088][T12492] do_syscall_64+0x55/0xb0 [ 916.163528][T12492] ? clear_bhb_loop+0x40/0x90 [ 916.168229][T12492] ? clear_bhb_loop+0x40/0x90 [ 916.172929][T12492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 916.178852][T12492] RIP: 0033:0x7fdcc8d9e159 [ 916.183287][T12492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.203176][T12492] RSP: 002b:00007fdcc9b97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 916.211611][T12492] RAX: ffffffffffffffda RBX: 00007fdcc9025fa0 RCX: 00007fdcc8d9e159 [ 916.219605][T12492] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 916.227594][T12492] RBP: 00007fdcc8e3506b R08: 0000000000000000 R09: 0000000000000000 [ 916.235584][T12492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.243575][T12492] R13: 00007fdcc9026038 R14: 00007fdcc9025fa0 R15: 00007fff78be04b8 [ 916.251586][T12492] [ 918.543560][T12524] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 918.552509][T12524] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 918.981411][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 918.994020][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 919.002733][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 919.012418][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 919.025329][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 920.012224][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 920.085955][T12532] netlink: 'syz.0.1609': attribute type 1 has an invalid length. [ 920.253378][T12532] 8021q: adding VLAN 0 to HW filter on device bond4 [ 920.398257][T12535] 8021q: adding VLAN 0 to HW filter on device bond4 [ 920.419739][T12535] bond4: (slave gre2): The slave device specified does not support setting the MAC address [ 920.431250][T12535] bond4: (slave gre2): Error -95 calling set_mac_address [ 920.461641][T12536] gretap1: entered promiscuous mode [ 920.471809][T12536] bond4: (slave gretap1): making interface the new active one [ 920.480478][T12536] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 920.520142][T12532] macvlan2: entered promiscuous mode [ 920.527736][T12532] macvlan2: entered allmulticast mode [ 920.546328][T12532] bond4: entered promiscuous mode [ 920.567494][T12532] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 920.587351][T12532] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 920.600591][T12532] bond4: left promiscuous mode [ 922.303228][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 922.317502][T12545] loop3: detected capacity change from 0 to 512 [ 922.518515][T12545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 922.540681][T12545] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 922.626491][T12552] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 922.635658][T12552] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 923.394228][T11818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 923.405561][T11818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 923.413816][T11818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 923.421718][T11818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 923.429703][T11818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 923.437279][T11818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 923.637067][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.933460][ T5814] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 926.195699][ T5814] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 926.705994][ T5814] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 926.749746][T12567] ceph: No mds server is up or the cluster is laggy [ 927.565368][T12578] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 927.571585][T12579] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 927.574408][T12578] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 927.583222][T12579] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 928.353573][ T23] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 928.750900][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 928.762274][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 928.894737][T12596] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 928.903880][T12596] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 929.172694][ T23] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 929.232299][ T23] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 929.801212][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.809604][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 929.826455][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 929.837094][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 929.844516][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 929.876948][ T23] usb 4-1: Product: syz [ 929.881155][ T23] usb 4-1: Manufacturer: syz [ 929.893413][ T23] usb 4-1: SerialNumber: syz [ 930.196013][T12608] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 930.205305][T12608] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 930.729492][T12603] ceph: No mds server is up or the cluster is laggy [ 931.169682][ T23] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 931.185708][ T23] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 931.193125][ T23] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 931.201502][ T23] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 931.229750][ T23] usb 4-1: USB disconnect, device number 46 [ 931.267035][T12588] udevd[12588]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 931.345588][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.351910][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.499756][T11818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 934.510522][T11818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 934.518710][T11818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 934.528425][T11818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 934.537211][T11818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 934.546548][T11818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 935.138847][T12644] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 935.148043][T12644] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 937.993454][T12661] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 938.002400][T12661] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 938.438118][T12664] netlink: 'syz.3.1638': attribute type 3 has an invalid length. [ 939.380824][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 939.395582][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 939.404639][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 939.422801][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 939.439200][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 939.447733][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 940.414596][ T28] audit: type=1326 audit(1791502876.856:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.2.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33699e159 code=0x7ffc0000 [ 940.780768][ T28] audit: type=1326 audit(1791502876.866:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.2.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff33699e159 code=0x7ffc0000 [ 940.889327][ T28] audit: type=1326 audit(1791502876.866:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.2.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33699e159 code=0x7ffc0000 [ 941.039300][ T28] audit: type=1326 audit(1791502876.866:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.2.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff33695e98e code=0x7ffc0000 [ 941.084525][ T28] audit: type=1326 audit(1791502876.866:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.2.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33699e159 code=0x7ffc0000 [ 941.129799][ T28] audit: type=1326 audit(1791502876.866:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.2.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff33699e159 code=0x7ffc0000 [ 941.155029][ T28] audit: type=1326 audit(1791502876.866:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.2.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33699e159 code=0x7ffc0000 [ 941.189411][ T28] audit: type=1326 audit(1791502876.866:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.2.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff33699e159 code=0x7ffc0000 [ 941.218049][ T28] audit: type=1326 audit(1791502876.866:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.2.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33699e159 code=0x7ffc0000 [ 941.242631][ T28] audit: type=1326 audit(1791502876.876:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12682 comm="syz.2.1642" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7ff33699e159 code=0x7ffc0000 [ 943.407932][T12703] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 943.416921][T12703] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 943.860477][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 943.871934][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 944.248112][T12716] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 944.257126][T12716] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 944.308424][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 944.342646][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 944.353757][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 944.362211][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 944.503431][ T27] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 944.755565][ T27] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 944.768533][ T27] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 944.777639][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.785681][ T27] usb 4-1: Product: syz [ 944.789842][ T27] usb 4-1: Manufacturer: syz [ 944.794519][ T27] usb 4-1: SerialNumber: syz [ 947.085809][ T27] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 947.143025][ T27] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 947.150471][ T27] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 947.499277][ T27] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 947.567904][T11818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 947.575833][ T27] usb 4-1: USB disconnect, device number 47 [ 947.655985][T12742] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 947.665535][T12742] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 947.741168][T11818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 947.752057][T11818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 947.766789][T11818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 947.780123][T11818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 947.800823][T11818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 948.142861][T12717] udevd[12717]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 951.490726][T12762] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 951.500357][T12762] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 951.977717][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 951.988851][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 952.005936][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 952.020029][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 952.027814][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 952.035295][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 952.943368][T11565] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 953.101876][T12778] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 953.110903][T12778] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 953.215954][T11565] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 953.335313][T11565] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 953.489435][T11565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.627275][T11565] usb 4-1: Product: syz [ 953.631490][T11565] usb 4-1: Manufacturer: syz [ 953.665857][T11565] usb 4-1: SerialNumber: syz [ 955.017629][T11565] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 955.026223][T11565] usb 4-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 955.034097][T11565] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 955.041100][T11565] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 955.063468][T11565] usb 4-1: USB disconnect, device number 48 [ 955.093402][T12774] udevd[12774]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 957.912666][T12805] xt_hashlimit: size too large, truncated to 1048576 [ 957.919769][T12805] xt_hashlimit: max too large, truncated to 1048576 [ 957.926744][T12805] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 957.936624][T11818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 957.946408][T11818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 957.961203][T11818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 957.970796][T11818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 957.978560][T11818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 957.985935][T11818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 960.440599][T12809] tipc: Enabling of bearer rejected, failed to enable media [ 960.823937][T12823] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 960.832871][T12823] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 961.307102][T12833] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 961.316520][T12833] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 961.455395][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 961.471106][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 961.486186][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 961.507764][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 961.521243][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 961.534292][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 964.098369][T12851] loop3: detected capacity change from 0 to 128 [ 964.446875][T12854] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 964.455860][T12854] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 964.550999][T12851] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 966.315343][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 966.507500][T11818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 966.528664][T11818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 966.536933][T11818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 966.546040][T11818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 966.556541][T11818] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 966.563938][T11818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 968.109060][T12879] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 968.118123][T12879] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 970.601807][T12891] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 970.611669][T12891] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 971.300239][T12893] overlayfs: missing 'lowerdir' [ 971.702940][T12897] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 971.713038][T12897] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 972.388011][ T5784] Bluetooth: hci0: unexpected event for opcode 0x2087 [ 972.395025][ T5784] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 972.429772][T11818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 972.443575][T11818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 972.471972][T11818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 972.490115][T12529] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 972.505023][T12529] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 972.512534][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 972.515661][ T8131] Bluetooth: hci4: Frame reassembly failed (-84) SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=1552 state=3 status=67 (errno 9: Bad file descriptor) [ 973.288279][ T8131] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.314335][ T8131] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 973.539345][ T8131] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.551146][ T8131] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 973.619180][ T8131] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.629664][ T8131] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 973.719173][ T8131] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.729505][ T8131] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 973.916672][ T8131] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 973.927405][ T8131] netdevsim netdevsim10 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 974.076596][ T8131] tipc: Disabling bearer [ 974.089480][ T8131] tipc: Left network mode [ 974.488796][ T8131] team0: Port device xfrm0 removed [ 974.543336][ T5782] Bluetooth: hci4: command 0x1003 tx timeout [ 974.543685][T11818] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 975.112983][T12901] syz_tun (unregistering): left allmulticast mode [ 975.120163][T12901] syz_tun (unregistering): left promiscuous mode [ 975.126807][T12901] bridge0: port 1(syz_tun) entered disabled state [ 975.313947][ T788] wlan0 speed is unknown, defaulting to 1000 [ 975.374823][ T8131] hsr_slave_0: left promiscuous mode [ 975.381753][ T8131] hsr_slave_1: left promiscuous mode [ 975.417145][ T8131] veth1_macvtap: left promiscuous mode [ 975.430075][ T8131] veth0_macvtap: left promiscuous mode [ 975.442459][ T8131] veth1_vlan: left promiscuous mode [ 975.451241][ T8131] veth0_vlan: left promiscuous mode [ 975.596212][ T8131] bond1 (unregistering): (slave geneve2): Releasing active interface [ 975.724584][ T8131] bond1 (unregistering): Released all slaves [ 976.607054][ T8131] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 976.616144][ T8131] bond0 (unregistering): Released all slaves [ 976.960522][ T8131] IPVS: stop unused estimator thread 0... [ 977.098691][ T8131] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.180879][ T8131] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.271191][ T8131] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.370165][ T8131] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.515486][ T8131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.526133][ T8131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 977.624886][ T8131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.636509][ T8131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 977.702008][ T8131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.712750][ T8131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 977.793736][ T8131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.804780][ T8131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 978.039011][ T8131] tipc: Left network mode [ 978.049717][ T8131] tipc: Disabling bearer [ 978.065134][ T8131] tipc: Disabling bearer [ 978.070813][ T8131] tipc: Left network mode [ 978.257737][ T8131] bond2: (slave ip6gretap1): Removing an active aggregator [ 978.266038][ T8131] bond2: (slave ip6gretap1): Releasing backup interface [ 978.272973][ T8131] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 76:65:20:63:2d:d4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 979.904545][ T8131] team0: Port device xfrm0 removed [ 980.199820][ T8131] bond4: (slave gretap1): Releasing active interface [ 980.525282][ T8131] IPVS: stopping master sync thread 7138 ... [ 980.942624][ T8131] hsr_slave_0: left promiscuous mode [ 980.949179][ T8131] hsr_slave_1: left promiscuous mode [ 980.961799][ T8131] hsr_slave_0: left promiscuous mode [ 980.969700][ T8131] hsr_slave_1: left promiscuous mode [ 981.002527][ T8131] veth1_macvtap: left promiscuous mode [ 981.008101][ T8131] veth0_macvtap: left promiscuous mode [ 981.014617][ T8131] veth1_vlan: left promiscuous mode [ 981.019967][ T8131] veth0_vlan: left promiscuous mode [ 981.029654][ T8131] veth1_macvtap: left promiscuous mode [ 981.035253][ T8131] veth0_macvtap: left promiscuous mode [ 981.040804][ T8131] veth1_vlan: left promiscuous mode [ 981.046163][ T8131] veth0_vlan: left promiscuous mode [ 981.345651][ T8131] bond1 (unregistering): Released all slaves [ 982.219866][ T8131] team0 (unregistering): Port device bond0 removed [ 982.252855][ T8131] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 982.261461][ T8131] bond0 (unregistering): Released all slaves [ 982.461545][ T8131] bond4 (unregistering): Released all slaves [ 982.479881][ T8131] bond3 (unregistering): (slave geneve3): Releasing active interface [ 982.488025][ T8131] geneve3 (unregistering): left promiscuous mode [ 982.494671][ T8131] geneve3 (unregistering): left allmulticast mode [ 982.630415][ T8131] bond3 (unregistering): Released all slaves [ 982.658122][ T8131] bond2 (unregistering): (slave veth3): Releasing backup interface [ 982.794878][ T8131] bond2 (unregistering): Released all slaves