last executing test programs: 1m43.072310936s ago: executing program 1 (id=96): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x2eb, 0x0, 0x0, 0x40, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0xcff, 0x380, 0x8003, {0x1000000002, 0xfffffffffffffffe, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x88, 0xfd52, 0x8000, 0x8, r2, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) 1m42.903584463s ago: executing program 1 (id=97): r0 = socket$pppl2tp(0x18, 0x1, 0x1) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xfffffffffffffffe, 0xf0ffffff) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/mtrr\x00', 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x4, 0x0, {0xa, 0x4e20, 0x6, @mcast2, 0x80000000}}}, 0x3a) 1m42.822934262s ago: executing program 1 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000180)=0x1, 0x4) sendmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000200)=[{&(0x7f0000000240)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000340)=[{0x1, 0x3, {0x0, 0x62da12a15307ded4, 0x1}, {0x1, 0x1}, 0xfe, 0x2}, {0x3, 0x3, {0x2, 0xf0, 0x3}, {0x2, 0x1}, 0xfe, 0x2}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x2, 0xe}, {0xf, 0xa}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x0) 1m42.534878961s ago: executing program 1 (id=102): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 1m42.336435531s ago: executing program 1 (id=104): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_io_uring_setup(0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, &(0x7f0000000200), 0x40, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.922337182s ago: executing program 1 (id=108): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000003cc0)={0x20080522}, &(0x7f0000003d00)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000003d40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003d80)='./file0\x00', &(0x7f0000003dc0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000003e00)='./file0\x00', &(0x7f0000003e40), 0x0, &(0x7f0000003e80)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000003ec0)='./file0\x00', &(0x7f0000003f00), 0x0, &(0x7f0000003f40)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000003f80)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f0000003fc0)='cpu.stat\x00', 0x0, 0x0) 1m41.25508222s ago: executing program 32 (id=108): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000003cc0)={0x20080522}, &(0x7f0000003d00)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000003d40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003d80)='./file0\x00', &(0x7f0000003dc0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000003e00)='./file0\x00', &(0x7f0000003e40), 0x0, &(0x7f0000003e80)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000003ec0)='./file0\x00', &(0x7f0000003f00), 0x0, &(0x7f0000003f40)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000003f80)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f0000003fc0)='cpu.stat\x00', 0x0, 0x0) 1m4.058019718s ago: executing program 2 (id=329): setns(0xc9, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000440), &(0x7f0000000480)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)='t', 0x1}], 0x1}}], 0x2, 0x20008851) 1m3.754877249s ago: executing program 2 (id=332): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x11c0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x880, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)='n', 0x1) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x4}]) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x20) splice(r0, 0x0, r3, 0x0, 0x8000, 0x0) 1m3.529700041s ago: executing program 2 (id=335): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf25ac1e0001000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000001000000000aa0000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet(0x2, 0x3, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001e40)='veth1\x00', 0x10) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001e80)=[{{&(0x7f0000001ec0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x489c) 1m3.378136567s ago: executing program 2 (id=338): syz_mount_image$ext4(&(0x7f0000005d40)='ext4\x00', &(0x7f0000005d80)='./file1\x00', 0x8004, &(0x7f0000005dc0)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@norecovery}]}, 0x1, 0x7b9, &(0x7f0000005e00)="$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") openat(0xffffffffffffff9c, &(0x7f00000065c0)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000006600)='./bus\x00', 0x0) mount(&(0x7f0000006640)=@loop={'/dev/loop', 0x0}, &(0x7f0000006680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f00000066c0)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000006700)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c603000000966d61fd922952769d9bffbcc2542ded71038259ca571c0000000000000000000000000000000000000700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x3]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000011500)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000011540)='2', 0xfdef, 0xe7c) 1m2.543754881s ago: executing program 2 (id=344): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000801) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00222200000096231b26e53f07030000002a90068374b7821dab8b9236592b000400009374d103e43689d0477dd15183a60f6305ab1e8d06134652db92fd1feab463101682e6e635efda4b43cb84cc573121e643e97d7be0027f90efa95575304fb2650e1dcc4807ae1afd7fa72cb10d1a7bc2f6e1d5a1b5baee2a71fcec4724b4ce610eb2281b9799c7a828b2b825c2cc0efb9797397833c1a58ee63c3d028068dde3008a17677a96ec580c9dcc014c030000004347615fa4e36f4796ac151655028440684d78fd493ab645462bca98d52e5d80f9ef37bf8569451cb74b679bef"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000005c0), 0x4, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000600)=[0xfffffffe, 0x20008]) 1m2.043827041s ago: executing program 2 (id=347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r1, &(0x7f0000000300)='%z', 0x2, 0x8b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "ee3fa66fbf0f9e55", "a5656c2128eda9fbb14b7442bc5fc5e4", "1d8faf68", "edf7bd5bfadea811"}, 0x28) 1m1.540286012s ago: executing program 33 (id=347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r1, &(0x7f0000000300)='%z', 0x2, 0x8b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x303}, "ee3fa66fbf0f9e55", "a5656c2128eda9fbb14b7442bc5fc5e4", "1d8faf68", "edf7bd5bfadea811"}, 0x28) 51.058212841s ago: executing program 3 (id=391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x130, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x84, 0x0, 0x10}, 0x2e8, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x16}, @local, 0xffffff00, 0xff000000, 'pim6reg0\x00', 'netpci0\x00', {}, {0xff}, 0x1, 0x3, 0x1c}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r3, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r3, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 50.807462937s ago: executing program 3 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/console\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5452, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x109082, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x218888, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 48.89005946s ago: executing program 3 (id=397): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000007980), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000079c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) syz_open_dev$hidraw(&(0x7f0000007b00), 0x0, 0xbb42) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001300)={0x1, &(0x7f0000001340)=[{0x6, 0x1, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 47.657584025s ago: executing program 3 (id=404): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f0000000180)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x3, 0x572, &(0x7f00000003c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") open(&(0x7f0000000980)='./bus\x00', 0x400141042, 0x22) setxattr$trusted_overlay_upper(&(0x7f00000016c0)='./file1\x00', &(0x7f0000001700), &(0x7f0000001740)=ANY=[], 0x835, 0x0) mount(&(0x7f00000009c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a00)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000a40)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) setxattr$trusted_overlay_upper(&(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0), &(0x7f0000000c00)=ANY=[], 0x841, 0x0) 46.938237388s ago: executing program 3 (id=406): socket$pppoe(0x18, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x95a4, 0x8, 0x2000, 0x1000000c, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x21c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x3e7, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20, 0x2, 0x3ad}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffb, 0x1, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 45.710166192s ago: executing program 3 (id=411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000027c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000028c0)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8010) 45.369628206s ago: executing program 34 (id=411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000027c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000028c0)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8010) 25.089487405s ago: executing program 6 (id=492): syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x0, 0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x8401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000780)={0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24.776778407s ago: executing program 6 (id=496): openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 24.305612475s ago: executing program 6 (id=498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x802, 0x0, 0x0, 0x7}, 0x10) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x200000000000000}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.516450904s ago: executing program 6 (id=504): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000900)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}]}}, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c80)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003180)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 22.551825281s ago: executing program 6 (id=511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1002}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000000240)="ffffffffffff0011223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) 21.67529388s ago: executing program 6 (id=520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17bb9221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @empty}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 20.916265727s ago: executing program 35 (id=520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17bb9221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @empty}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 6.880635795s ago: executing program 0 (id=580): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20842, 0x0) r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x800, 0x8) read$FUSE(r0, &(0x7f0000002880)={0x2020}, 0x2020) 6.768520186s ago: executing program 5 (id=581): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 6.603968672s ago: executing program 5 (id=583): mkdirat(0xffffffffffffff9c, &(0x7f0000002600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000002640)='./dev\x00', &(0x7f0000002680)='devtmpfs\x00', 0x402, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002700)='./mnt\x00', 0x1ff) mount(&(0x7f0000002740)=@filename='./dev/sda1\x00', &(0x7f0000002780)='./mnt\x00', &(0x7f00000027c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000002800)='./mnt\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000002880), 0x4) close(0x3) 6.375209116s ago: executing program 5 (id=584): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f00000001c0)='./file1\x00', 0x2000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000006c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@userxattr}]}) setxattr$trusted_overlay_origin(&(0x7f0000000800)='./file0/file1\x00', &(0x7f0000000840), 0x0, 0x0, 0x3) umount2(&(0x7f0000000880)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x4008, &(0x7f0000000940)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5.796073204s ago: executing program 5 (id=587): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x60400) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 5.588766535s ago: executing program 5 (id=590): openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0xaa201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000100) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) io_uring_enter(r0, 0x106175, 0x8859, 0x1f, 0x0, 0xffffffffffffffe1) 5.34502294s ago: executing program 0 (id=591): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x40, 0x83) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000003c0)={0x90, 0x200, 0x0, 0x5, 0xf34}) 5.208583284s ago: executing program 0 (id=593): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000001240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001280)={0x2c, &(0x7f00000012c0)={0x40, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f0000001340)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) 5.198420855s ago: executing program 5 (id=594): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x476c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000480), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f00000004c0)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000500)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000540), 0x291962b, 0x45833af92e4b39ff, 0x0) 4.734731512s ago: executing program 36 (id=594): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x476c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000480), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f00000004c0)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000500)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000540), 0x291962b, 0x45833af92e4b39ff, 0x0) 4.55316081s ago: executing program 4 (id=597): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x4bc, &(0x7f0000000cc0)="$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") creat(&(0x7f0000001180)='./bus\x00', 0x182) mount(&(0x7f00000011c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000001200)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f00000012c0)="d4", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000001300)=@loop={'/dev/loop', 0x0}, 0x0, 0xffffffffffffffff) 3.86115773s ago: executing program 7 (id=599): syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f00000003c0)="$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") setrlimit(0x1, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000001100)="fd", 0x1, 0x404043004) r1 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./file1\x00', 0x42, 0x0) fdatasync(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1d8) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) 3.299968566s ago: executing program 4 (id=600): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) open(&(0x7f0000000080)='./bus\x00', 0x62842, 0xab) open(&(0x7f0000000180)='./file0\x00', 0x60142, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x109480, 0x18a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.06991423s ago: executing program 7 (id=601): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x7dd, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000240)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) 2.924557334s ago: executing program 4 (id=602): socket$kcm(0x21, 0x2, 0xa) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) keyctl$restrict_keyring(0x10, 0xfffffffffffffff8, 0x0, 0x0) 2.726011285s ago: executing program 7 (id=603): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="307ddfb90fb58ea26e7519ece1faecb59bf6246bb080d7543699ad6e25f0049775959f73da3df93437fea1341d5222b70ef28f3ae42b1399cddfe4fd55493029141662", 0x43}], 0x1}}], 0x3, 0x2000c8c0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)=ANY=[@ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmmsg$inet6(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="93", 0x1}], 0x1}}], 0x1, 0x40) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000004c0)=""/225, 0xe1}], 0x2}, 0x1003}], 0x1, 0x100, 0x0) 2.439132203s ago: executing program 4 (id=604): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x842, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x100, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x46, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x100}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 2.414135716s ago: executing program 7 (id=605): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@rootdir={'rootdir', 0x3d, 0x1}}, {@gid_ignore}, {@session={'session', 0x3d, 0x10001}}]}, 0x1, 0xc5a, &(0x7f00000002c0)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000fc0)='./proc\x00', &(0x7f0000001000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000001080)='7', 0x1) mmap$IORING_OFF_CQ_RING(0x0, 0x4, 0x2000008, 0x50, r0, 0x8000000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 2.166620461s ago: executing program 0 (id=606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001f80)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000002040)={{0x6000, 0x8080000, 0x0, 0x0, 0x8, 0x17, 0x0, 0x2, 0x0, 0x5, 0x9, 0x66}, {0x1, 0x200000, 0xa, 0xd, 0x9, 0x0, 0x80, 0x0, 0x4, 0x6}, {0x4, 0xeeef0000, 0x0, 0xfb, 0x4, 0x4, 0x3d, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x60000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3, 0x8, 0x40, 0x6, 0xfc}, {0x6000, 0x7000, 0xa, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x83, 0xfc}, {0x8080000, 0x100000, 0x0, 0x35, 0x3, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x7}, {0x4, 0xb000, 0x8, 0xfe, 0x0, 0x3, 0x43, 0x0, 0xe, 0x0, 0x9}, {0x30000, 0x2000, 0xf, 0x0, 0x0, 0x1, 0x0, 0xcb, 0x0, 0x0, 0xfd}, {0x80a0000, 0x807}, {0x7000}, 0x0, 0x0, 0x10000, 0x50, 0xfffbfffffffffffc, 0x0, 0x0, [0x8, 0x5, 0x1, 0x40]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.596362309s ago: executing program 0 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 1.38399766s ago: executing program 7 (id=608): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000240)={0x40000000, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x8, 0x32}, 0x0, @in=@private=0xa0100ee, 0x0, 0x0, 0x0, 0xb7, 0x7fffffff, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f00000005c0), 0x800001d, 0x1c) 1.38210271s ago: executing program 4 (id=609): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 1.312668367s ago: executing program 0 (id=610): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='noflush_merge,mode=adaptive,mode=fragment:block,alloc_mode=reuse,inline_xattr,disable_roll_forward,discard,nouser_xattr,jqfmt=vfsv1,background_gc=sync,fsync_mode=strict,age_extent_cache,nocheckpoint_merge,resuid=', @ANYRESHEX=0x0, @ANYBLOB="ccdcc641eb1fb8"], 0x1, 0x552b, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000005a80)='./sys\x00', 0x161) openat(0xffffffffffffff9c, &(0x7f0000005ac0)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005b00)='./mysys\x00', 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000006bc0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000006c00)='./file3\x00', 0x4) creat(&(0x7f0000005b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) r0 = openat(0xffffffffffffff9c, &(0x7f0000006380)='.\x00', 0x0, 0x41) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000063c0)={@desc={0x1, 0x0, @desc4}}) 656.291744ms ago: executing program 7 (id=611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) r1 = fsopen(&(0x7f0000000fc0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r3, &(0x7f0000001040)=""/1024, 0x400) 8.199009ms ago: executing program 37 (id=611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) r1 = fsopen(&(0x7f0000000fc0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r3, &(0x7f0000001040)=""/1024, 0x400) 0s ago: executing program 4 (id=613): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r0, &(0x7f00000000c0)={'md', @num=0x0}, 0x3) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)={'/dev/md', @num=0x0}, 0x2, 0x0) ioctl$SET_ARRAY_INFO(r1, 0x40480923, &(0x7f0000000140)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) ioctl$ADD_NEW_DISK(r1, 0x40140921, &(0x7f0000000200)={0x1, {0x1, 0x1}, 0x1, 0x6}) ioctl$RUN_ARRAY(r1, 0x400c0930, 0x0) pwrite64(r1, 0x0, 0x0, 0x1000) ioctl$STOP_ARRAY(r1, 0x932, 0x0) kernel console output (not intermixed with test programs): : batadv0: Removing interface: batadv_slave_1 [ 112.439782][ T4787] bridge_slave_1: left allmulticast mode [ 112.459493][ T4787] bridge_slave_1: left promiscuous mode [ 112.472649][ T4787] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.504651][ T4787] bridge_slave_0: left allmulticast mode [ 112.510371][ T4787] bridge_slave_0: left promiscuous mode [ 112.522407][ T4787] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.593606][ T4787] veth1_macvtap: left promiscuous mode [ 112.599743][ T4787] veth0_macvtap: left promiscuous mode [ 112.610324][ T4787] veth1_vlan: left promiscuous mode [ 112.617134][ T4787] veth0_vlan: left promiscuous mode [ 112.813803][ T6305] loop3: detected capacity change from 0 to 128 [ 113.125224][ T6307] loop3: detected capacity change from 0 to 512 [ 113.217243][ T6307] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 113.291066][ T6307] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 113.333139][ T6307] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.370724][ T6307] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #13: comm syz.3.126: iget: bad i_size value: 12154761577498 [ 113.430337][ T6307] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.126: couldn't read orphan inode 13 (err -117) [ 113.481501][ T6307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 113.529358][ T6307] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.126: dx entry: limit 65535 != root limit 120 [ 113.568766][ T6307] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.126: Corrupt directory, running e2fsck is recommended [ 113.603769][ T6307] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.126: dx entry: limit 65535 != root limit 120 [ 113.617410][ T6307] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.126: Corrupt directory, running e2fsck is recommended [ 113.650878][ T6307] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.126: dx entry: limit 65535 != root limit 120 [ 113.673412][ T6307] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.126: Corrupt directory, running e2fsck is recommended [ 113.695219][ T6307] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.126: dx entry: limit 65535 != root limit 120 [ 113.715313][ T6307] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.126: Corrupt directory, running e2fsck is recommended [ 113.762851][ T6309] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.126: dx entry: limit 65535 != root limit 120 [ 113.806049][ T6307] EXT4-fs warning (device loop3): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 113.926161][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.958059][ T4787] team0 (unregistering): Port device team_slave_1 removed [ 114.069397][ T4787] team0 (unregistering): Port device team_slave_0 removed [ 114.123922][ T4787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.198911][ T4787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.286408][ T52] Bluetooth: hci1: command tx timeout [ 114.573854][ T6317] loop0: detected capacity change from 0 to 512 [ 114.685953][ T6317] capability: warning: `syz.0.130' uses deprecated v2 capabilities in a way that may be insecure [ 114.894290][ T4787] bond0 (unregistering): Released all slaves [ 115.258546][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.311680][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.318973][ T6240] bridge_slave_0: entered allmulticast mode [ 115.375494][ T6240] bridge_slave_0: entered promiscuous mode [ 115.423968][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.431187][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.483925][ T6240] bridge_slave_1: entered allmulticast mode [ 115.529656][ T6240] bridge_slave_1: entered promiscuous mode [ 115.694823][ T6240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.765464][ T6240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.981518][ T6240] team0: Port device team_slave_0 added [ 116.045003][ T6240] team0: Port device team_slave_1 added [ 116.227790][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.265980][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.321553][ T6240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.363863][ T52] Bluetooth: hci1: command tx timeout [ 116.374910][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.382329][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.408728][ T6240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.521881][ T5110] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.558853][ T6240] hsr_slave_0: entered promiscuous mode [ 116.623408][ T6240] hsr_slave_1: entered promiscuous mode [ 116.721508][ T5110] usb 1-1: Using ep0 maxpacket: 32 [ 116.760537][ T6363] block device autoloading is deprecated and will be removed. [ 116.769976][ T5110] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 116.791361][ T5110] usb 1-1: config 0 has no interface number 0 [ 116.797577][ T5110] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.870399][ T5110] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.904651][ T5110] usb 1-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 116.944721][ T5110] usb 1-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 116.961454][ T5110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.987465][ T5110] usb 1-1: config 0 descriptor?? [ 117.422070][ T6240] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.465590][ T6240] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.481037][ T5110] logitech-djreceiver 0003:046D:C537.0002: unknown main item tag 0x0 [ 117.490191][ T6240] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.511768][ T5110] logitech-djreceiver 0003:046D:C537.0002: unknown main item tag 0x0 [ 117.519948][ T5110] logitech-djreceiver 0003:046D:C537.0002: unknown main item tag 0x0 [ 117.576210][ T6240] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.581722][ T5110] logitech-djreceiver 0003:046D:C537.0002: unknown main item tag 0x0 [ 117.591110][ T5110] logitech-djreceiver 0003:046D:C537.0002: unknown main item tag 0x0 [ 117.645353][ T5110] logitech-djreceiver 0003:046D:C537.0002: unknown main item tag 0x0 [ 117.676819][ T5110] logitech-djreceiver 0003:046D:C537.0002: unknown main item tag 0x0 [ 117.742003][ T5110] logitech-djreceiver 0003:046D:C537.0002: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.0-1/input4 [ 118.022473][ T5873] usb 1-1: USB disconnect, device number 5 [ 118.069891][ T6240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.116118][ T6386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.141'. [ 118.235453][ T6389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.141'. [ 118.322495][ T6240] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.366490][ T4437] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.373757][ T4437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.387115][ T4437] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.394346][ T4437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.450751][ T52] Bluetooth: hci1: command tx timeout [ 118.590156][ T6240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.822762][ T6395] loop2: detected capacity change from 0 to 2048 [ 118.931535][ T6395] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.025690][ T6395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 119.135372][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 119.192497][ T6240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.330798][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 120.137521][ T6240] veth0_vlan: entered promiscuous mode [ 120.186923][ T6240] veth1_vlan: entered promiscuous mode [ 120.303850][ T6240] veth0_macvtap: entered promiscuous mode [ 120.350387][ T6240] veth1_macvtap: entered promiscuous mode [ 120.432272][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.461384][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.491358][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.513281][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.559232][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.580192][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.613378][ T6240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.658735][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.699182][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.721731][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.767008][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.786411][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.821385][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.864663][ T6240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.897838][ T6240] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.936825][ T6240] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.971896][ T6240] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.001591][ T6240] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.210960][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 121.461807][ T6458] netlink: 'syz.0.152': attribute type 1 has an invalid length. [ 121.528037][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.555605][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.634906][ T4787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.663539][ T4787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.891811][ T6470] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 122.032180][ T6474] Illegal XDP return value 4292198352 on prog (id 12) dev syz_tun, expect packet loss! [ 122.318825][ T6482] Zero length message leads to an empty skb [ 124.547568][ T6550] loop2: detected capacity change from 0 to 1024 [ 124.576816][ T6550] EXT4-fs: Ignoring removed oldalloc option [ 124.663521][ T6550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 124.675983][ T6550] ext4 filesystem being mounted at /51/bus/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.691221][ T6550] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 124.817989][ T5801] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.417455][ T6584] loop3: detected capacity change from 0 to 512 [ 125.443978][ T6584] ext4: Unknown parameter 'context' [ 127.251568][ T789] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.459142][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.487974][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.510270][ T789] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.541418][ T789] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.571562][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.598370][ T789] usb 1-1: config 0 descriptor?? [ 128.011379][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.069248][ T789] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 128.114249][ T789] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 128.206166][ T8] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 128.228674][ T8] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 128.262882][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 128.292889][ T8] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 128.311375][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.329733][ T8] usb 4-1: Product: syz [ 128.351726][ T8] usb 4-1: Manufacturer: syz [ 128.364497][ T8] usb 4-1: SerialNumber: syz [ 128.459124][ T5873] usb 1-1: USB disconnect, device number 6 [ 128.613209][ T6666] netlink: 36 bytes leftover after parsing attributes in process `syz.2.206'. [ 129.085080][ T8] usbhid 4-1:1.0: can't add hid device: -71 [ 129.101509][ T8] usbhid: probe of 4-1:1.0 failed with error -71 [ 129.116973][ T8] usb 4-1: USB disconnect, device number 5 [ 130.055982][ T6701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.218'. [ 130.153193][ T6703] batman_adv: batadv0: Adding interface: syzkaller0 [ 130.159872][ T6703] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.210306][ T6703] batman_adv: batadv0: Interface activated: syzkaller0 [ 130.228090][ T6702] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 130.315854][ T6702] batman_adv: batadv0: Removing interface: syzkaller0 [ 130.531576][ T5110] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.733765][ T5110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.758213][ T5110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.771817][ T5110] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 130.783313][ T5110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.796820][ T5110] usb 3-1: config 0 descriptor?? [ 131.255136][ T5110] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 131.272956][ T5110] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 131.291526][ T5110] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 131.298573][ T5110] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 131.315703][ T5110] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 131.330847][ T5110] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 131.344940][ T5110] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 131.375123][ T5110] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 131.478719][ T5110] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 131.771560][ T5877] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 131.944354][ T6734] EXT4-fs (sda1): resizing filesystem from 262144 to 64 blocks [ 131.955885][ T6734] EXT4-fs warning (device sda1): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 131.967948][ T5877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.995576][ T5877] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 132.006838][ T5877] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 132.015313][ T5877] usb 4-1: Product: syz [ 132.019539][ T5877] usb 4-1: Manufacturer: syz [ 132.024238][ T5877] usb 4-1: SerialNumber: syz [ 132.032063][ T5877] usb 4-1: config 0 descriptor?? [ 132.049139][ T5877] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 132.057145][ T5877] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 132.068257][ T5877] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 88 [ 132.087756][ T5877] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 132.098305][ T5110] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 132.121203][ T5877] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 132.135520][ T5110] usb 3-1: USB disconnect, device number 3 [ 132.161342][ T5877] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 132.188656][ T5877] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 132.208291][ T5877] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 132.220145][ T5877] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 132.234976][ T5877] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 132.278756][ T5877] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 132.927210][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.941641][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.014715][ T5877] usb 4-1: USB disconnect, device number 6 [ 133.060549][ T5877] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 133.135908][ T5877] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 133.163407][ T5877] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 133.205051][ T5877] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 133.236708][ T5877] keyspan 4-1:0.0: device disconnected [ 133.647952][ T6762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.237'. [ 134.224125][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 134.224142][ T27] audit: type=1326 audit(1794333640.273:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6781 comm="syz.2.246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f3ed75a2c97 code=0x0 [ 136.052099][ T6826] loop0: detected capacity change from 0 to 32768 [ 136.160525][ T6826] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 136.198889][ T6826] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 136.370602][ T6846] lo: entered promiscuous mode [ 136.408612][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 136.419812][ T6831] loop3: detected capacity change from 0 to 32768 [ 136.441662][ T6826] XFS (loop0): Ending clean mount [ 136.447979][ T6831] (syz.3.264,6831,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear [ 136.447979][ T6831] " or missing value [ 136.478455][ T6831] (syz.3.264,6831,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 136.522189][ T6826] XFS (loop0): Quotacheck needed: Please wait. [ 136.619409][ T6831] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 136.792023][ T6826] XFS (loop0): Quotacheck: Done. [ 136.992392][ T6826] loop0: detected capacity change from 32768 to 49 [ 137.042760][ T6846] lo: left promiscuous mode [ 137.129677][ T6826] XFS (loop0): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 137.160279][ T6826] syz.0.262: attempt to access beyond end of device [ 137.160279][ T6826] loop0: rw=2049, sector=15012, nr_sectors = 4 limit=49 [ 137.195113][ T789] loop0: writeback error on inode 7434, offset 0, sector 15012 [ 137.206668][ T6826] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x18 [ 137.243517][ T6826] XFS (loop0): Unmount and run xfs_repair [ 137.259607][ T6826] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 137.271388][ T6826] 00000000: 33 46 43 00 00 00 00 ff ff ff ff ff ff ff ff 00 3FC............. [ 137.289332][ T6826] 00000010: 00 00 00 00 00 00 18 00 00 00 00 00 00 00 00 9f ................ [ 137.332777][ T6826] 00000020: 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 00 ..*;yE..m...5... [ 137.355574][ T6826] 00000030: 00 00 00 7c b9 cd 1a 00 00 00 00 00 00 00 00 00 ...|............ [ 137.388077][ T6826] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 137.414802][ T6826] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 137.441403][ T6826] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 137.459620][ T6826] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 137.475165][ T6826] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x18 len 4 error 74 [ 137.578634][ T5787] syz-executor: attempt to access beyond end of device [ 137.578634][ T5787] loop0: rw=432129, sector=448, nr_sectors = 64 limit=49 [ 137.608202][ T1267] XFS (loop0): log I/O error -5 [ 137.613846][ T1267] XFS (loop0): Filesystem has been shut down due to log error (0x2). [ 137.623752][ T1267] XFS (loop0): Please unmount the filesystem and rectify the problem(s). [ 137.635750][ T5787] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 137.683741][ T6872] tipc: Started in network mode [ 137.689249][ T6872] tipc: Node identity 6a2aa3a7a442, cluster identity 4711 [ 137.699799][ T6872] tipc: Enabled bearer , priority 0 [ 137.712148][ T6872] syzkaller0: MTU too low for tipc bearer [ 137.717961][ T6872] tipc: Disabling bearer [ 137.775971][ T6868] loop4: detected capacity change from 0 to 4096 [ 137.823463][ T6868] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 137.933275][ T6868] ntfs3: loop4: $UpCase is corrupted. [ 138.341528][ T27] audit: type=1326 audit(1794333644.383:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.2.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed75a8f19 code=0x7fc00000 [ 138.417035][ T27] audit: type=1326 audit(1794333644.383:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.2.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f3ed75a8f19 code=0x7fc00000 [ 138.501343][ T27] audit: type=1326 audit(1794333644.383:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.2.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed75a8f19 code=0x7fc00000 [ 138.534150][ T27] audit: type=1326 audit(1794333644.383:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.2.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed75a8f19 code=0x7fc00000 [ 138.589841][ T27] audit: type=1326 audit(1794333644.383:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.2.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed75a8f19 code=0x7fc00000 [ 138.672414][ T27] audit: type=1326 audit(1794333644.383:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.2.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed75a8f19 code=0x7fc00000 [ 138.761510][ T27] audit: type=1326 audit(1794333644.383:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.2.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed75a8f19 code=0x7fc00000 [ 138.811441][ T27] audit: type=1326 audit(1794333644.383:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.2.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed75a8f19 code=0x7fc00000 [ 138.876974][ T27] audit: type=1326 audit(1794333644.383:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.2.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ed75a8f19 code=0x7fc00000 [ 139.019926][ T6911] loop2: detected capacity change from 0 to 128 [ 139.112010][ T6911] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.204713][ T6911] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.448935][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.621495][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 139.834002][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.858912][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.883873][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.931626][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.951002][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.000628][ T8] usb 4-1: config 0 descriptor?? [ 140.106562][ T6950] FAULT_INJECTION: forcing a failure. [ 140.106562][ T6950] name failslab, interval 1, probability 0, space 0, times 0 [ 140.120573][ T6950] CPU: 0 PID: 6950 Comm: syz.0.297 Not tainted syzkaller #0 [ 140.127946][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 140.138048][ T6950] Call Trace: [ 140.141377][ T6950] [ 140.144359][ T6950] dump_stack_lvl+0x18c/0x250 [ 140.149112][ T6950] ? show_regs_print_info+0x20/0x20 [ 140.154383][ T6950] ? load_image+0x420/0x420 [ 140.158958][ T6950] ? __might_sleep+0xe0/0xe0 [ 140.163625][ T6950] ? __lock_acquire+0x7eb0/0x7eb0 [ 140.168722][ T6950] should_fail_ex+0x394/0x4c0 [ 140.173471][ T6950] should_failslab+0x9/0x20 [ 140.178043][ T6950] slab_pre_alloc_hook+0x59/0x300 [ 140.183114][ T6950] ? key_alloc+0x34a/0x1030 [ 140.187651][ T6950] ? key_alloc+0x34a/0x1030 [ 140.192190][ T6950] __kmem_cache_alloc_node+0x53/0x260 [ 140.197601][ T6950] ? slab_post_alloc_hook+0x86/0x4d0 [ 140.202967][ T6950] ? key_alloc+0x34a/0x1030 [ 140.207506][ T6950] __kmalloc_node_track_caller+0xa4/0x230 [ 140.213273][ T6950] kmemdup+0x2b/0x70 [ 140.217208][ T6950] key_alloc+0x34a/0x1030 [ 140.221584][ T6950] request_key_auth_new+0x7c5/0x9f0 [ 140.226858][ T6950] ? request_key_auth_rcu_disposal+0x20/0x20 [ 140.232877][ T6950] ? key_user_put+0x52/0x60 [ 140.237425][ T6950] request_key_and_link+0xdd1/0x1460 [ 140.242764][ T6950] ? request_key_and_link+0x2cd/0x1460 [ 140.248260][ T6950] ? complete_request_key+0xa0/0xa0 [ 140.253498][ T6950] ? asymmetric_key_cmp+0x240/0x240 [ 140.258737][ T6950] ? keyring_search_rcu+0x280/0x280 [ 140.263982][ T6950] ? down_read+0x1ac/0x2e0 [ 140.268429][ T6950] __se_sys_request_key+0x297/0x350 [ 140.273666][ T6950] ? __x64_sys_request_key+0xb0/0xb0 [ 140.278996][ T6950] ? lockdep_hardirqs_on+0x98/0x150 [ 140.284235][ T6950] do_syscall_64+0x55/0xb0 [ 140.288700][ T6950] ? clear_bhb_loop+0x40/0x90 [ 140.293473][ T6950] ? clear_bhb_loop+0x40/0x90 [ 140.298190][ T6950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.304118][ T6950] RIP: 0033:0x7f3f941a8f19 [ 140.308573][ T6950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.328214][ T6950] RSP: 002b:00007f3f94fc9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 140.336665][ T6950] RAX: ffffffffffffffda RBX: 00007f3f94425fa0 RCX: 00007f3f941a8f19 [ 140.344669][ T6950] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 140.352700][ T6950] RBP: 00007f3f94237f6d R08: 0000000000000000 R09: 0000000000000000 [ 140.360694][ T6950] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 140.368691][ T6950] R13: 00007f3f94426038 R14: 00007f3f94425fa0 R15: 00007fff91ff1058 [ 140.376706][ T6950] [ 140.565062][ T5877] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.629988][ T8] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 140.664163][ T8] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 140.704208][ T8] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 140.734640][ T6938] loop4: detected capacity change from 0 to 32768 [ 140.767944][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 140.806987][ T5877] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 140.861872][ T5877] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 140.876700][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 140.910749][ T5877] usb 3-1: Product: syz [ 140.929909][ T5877] usb 3-1: Manufacturer: syz [ 140.946480][ T5877] usb 3-1: SerialNumber: syz [ 140.974194][ T5877] usb 3-1: config 0 descriptor?? [ 141.006828][ T6948] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 141.015615][ T8] usb 4-1: USB disconnect, device number 7 [ 141.038557][ T5877] hub 3-1:0.0: bad descriptor, ignoring hub [ 141.073130][ T5877] hub: probe of 3-1:0.0 failed with error -5 [ 141.736058][ T6979] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.929472][ T6984] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 141.993631][ T6984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.069842][ T8] kernel write not supported for file bpf-prog (pid: 8 comm: kworker/0:0) [ 142.172018][ T6988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.179165][ T6988] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 142.191566][ T6988] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 142.322397][ T6984] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 142.377855][ T6984] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 142.923327][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.308'. [ 143.198683][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 143.217938][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 143.888106][ T7055] rxe_eth0 speed is unknown, defaulting to 1000 [ 144.311561][ T5110] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 144.532627][ T5110] usb 1-1: Using ep0 maxpacket: 32 [ 144.553346][ T5110] usb 1-1: config 2 has too many interfaces: 98, using maximum allowed: 32 [ 144.567315][ T5110] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 144.597222][ T5110] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 98 [ 144.618335][ T5110] usb 1-1: config 2 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.640649][ T5110] usb 1-1: config 2 interface 1 has no altsetting 0 [ 144.679674][ T5110] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 144.704831][ T5110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.743880][ T5110] usb 1-1: Product: syz [ 144.748129][ T5110] usb 1-1: Manufacturer: syz [ 144.766794][ T5110] usb 1-1: SerialNumber: syz [ 144.818053][ T5110] usb 1-1: selecting invalid altsetting 0 [ 145.033228][ T5110] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 145.243843][ T5110] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 145.343748][ T5110] usb 1-1: USB disconnect, device number 7 [ 145.460823][ T6060] udevd[6060]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.431732][ T5873] usb 3-1: USB disconnect, device number 4 [ 146.578846][ T7122] loop0: detected capacity change from 0 to 128 [ 146.637584][ T7122] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.703886][ T7122] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 146.882504][ T5787] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.999983][ T7143] netlink: 'syz.3.334': attribute type 39 has an invalid length. [ 147.133940][ T7145] fuse: root generation should be zero [ 147.345052][ T7157] FAULT_INJECTION: forcing a failure. [ 147.345052][ T7157] name failslab, interval 1, probability 0, space 0, times 0 [ 147.356022][ T7155] loop2: detected capacity change from 0 to 2048 [ 147.366793][ T7157] CPU: 1 PID: 7157 Comm: syz.3.339 Not tainted syzkaller #0 [ 147.374140][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 147.384229][ T7157] Call Trace: [ 147.387543][ T7157] [ 147.390515][ T7157] dump_stack_lvl+0x18c/0x250 [ 147.395235][ T7157] ? show_regs_print_info+0x20/0x20 [ 147.400464][ T7157] ? load_image+0x420/0x420 [ 147.405019][ T7157] ? __might_sleep+0xe0/0xe0 [ 147.409642][ T7157] ? __lock_acquire+0x7eb0/0x7eb0 [ 147.414697][ T7157] should_fail_ex+0x394/0x4c0 [ 147.419424][ T7157] should_failslab+0x9/0x20 [ 147.423963][ T7157] slab_pre_alloc_hook+0x59/0x300 [ 147.429020][ T7157] ? fsnotify_alloc_group+0x74/0x3b0 [ 147.434335][ T7157] __kmem_cache_alloc_node+0x53/0x260 [ 147.439736][ T7157] ? fsnotify_alloc_group+0x74/0x3b0 [ 147.445073][ T7157] kmalloc_trace+0x2a/0xe0 [ 147.449531][ T7157] fsnotify_alloc_group+0x74/0x3b0 [ 147.454683][ T7157] do_inotify_init+0x51/0x450 [ 147.459406][ T7157] __x64_sys_inotify_init1+0x37/0x40 [ 147.464738][ T7157] do_syscall_64+0x55/0xb0 [ 147.469190][ T7157] ? clear_bhb_loop+0x40/0x90 [ 147.473910][ T7157] ? clear_bhb_loop+0x40/0x90 [ 147.478625][ T7157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.484554][ T7157] RIP: 0033:0x7f0a105a8f19 [ 147.488996][ T7157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.508656][ T7157] RSP: 002b:00007f0a1139c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 147.517102][ T7157] RAX: ffffffffffffffda RBX: 00007f0a10825fa0 RCX: 00007f0a105a8f19 [ 147.525104][ T7157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 147.533100][ T7157] RBP: 00007f0a10637f6d R08: 0000000000000000 R09: 0000000000000000 [ 147.541123][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.549129][ T7157] R13: 00007f0a10826038 R14: 00007f0a10825fa0 R15: 00007fffe0ae3f48 [ 147.557142][ T7157] [ 147.614645][ T7155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.756857][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 147.756872][ T27] audit: type=1800 audit(1794333653.803:46): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.340" name="file1" dev="sda1" ino=2045 res=0 errno=0 [ 147.803377][ T7155] loop2: detected capacity change from 2048 to 64 [ 147.817119][ T7165] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.338: corrupted xattr entries [ 147.871555][ T7165] EXT4-fs error (device loop2): get_max_inline_xattr_value_size:69: inode #15: comm syz.2.338: corrupt xattr in inline inode [ 147.911862][ T7165] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.338: corrupted xattr entries [ 147.950410][ T7165] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 1803188595: comm syz.2.338: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 147.978884][ T7165] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 147.991815][ T7165] EXT4-fs (loop2): This should not happen!! Data will be lost [ 147.991815][ T7165] [ 148.092518][ T4437] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm kworker/u4:8: corrupted xattr entries [ 148.117981][ T5786] EXT4-fs (loop2): Inode 15 (ffff88805db16e00): i_reserved_data_blocks (1) not cleared! [ 148.144885][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.182416][ T7158] kmmpd-loop2: attempt to access beyond end of device [ 148.182416][ T7158] loop2: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 148.203079][ T7158] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 148.211881][ T5875] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 148.262434][ T5786] batman_adv: batadv0: Interface deactivated: syz_tun [ 148.355870][ T5786] batman_adv: batadv0: Removing interface: syz_tun [ 148.401719][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 148.432582][ T5875] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.457906][ T5875] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.488502][ T5875] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 148.526118][ T5875] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 148.551934][ T5875] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 148.578608][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.619353][ T5875] hub 4-1:1.0: bad descriptor, ignoring hub [ 148.650446][ T5875] hub: probe of 4-1:1.0 failed with error -5 [ 148.667887][ T5875] cdc_wdm 4-1:1.0: skipping garbage [ 148.677440][ T5875] cdc_wdm 4-1:1.0: skipping garbage [ 148.698125][ T1094] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.702080][ T5875] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 148.741393][ T5875] cdc_wdm 4-1:1.0: Unknown control protocol [ 148.909394][ T1094] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.020651][ T1094] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.128912][ T1094] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.284265][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 149.291206][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 149.299059][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 149.305753][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 149.312103][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 149.318750][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 149.325821][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 149.332491][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 149.338681][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 149.350986][ T23] usb 4-1: Failed to suspend device, error -71 [ 149.360248][ T5875] usb 4-1: USB disconnect, device number 8 [ 149.659939][ T7191] netlink: 'syz.4.352': attribute type 4 has an invalid length. [ 149.758178][ T1094] tipc: Left network mode [ 149.763357][ T7191] netlink: 'syz.4.352': attribute type 4 has an invalid length. [ 150.033486][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.045809][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.067147][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.087421][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.097503][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.111804][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.120768][ T7198] IPVS: persistence engine module ip_vs_pe_À not found [ 150.407590][ T7201] rxe_eth0 speed is unknown, defaulting to 1000 [ 150.593879][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 150.812550][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.864148][ T23] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 150.902236][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.950658][ T23] usb 4-1: config 0 descriptor?? [ 150.992971][ T7199] loop4: detected capacity change from 0 to 40427 [ 151.064530][ T7199] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 151.083100][ T7199] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 151.130220][ T7199] F2FS-fs (loop4): invalid crc value [ 151.208408][ T7199] F2FS-fs (loop4): Found nat_bits in checkpoint [ 151.242469][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 151.254944][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 151.293152][ T23] usb 4-1: USB disconnect, device number 9 [ 151.381400][ T7199] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 151.397598][ T7199] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 151.838171][ T7201] chnl_net:caif_netlink_parms(): no params data found [ 151.851420][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 152.038597][ T1094] hsr_slave_0: left promiscuous mode [ 152.052570][ T1094] hsr_slave_1: left promiscuous mode [ 152.063573][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.075502][ T23] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 152.106462][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.124241][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.139851][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.149890][ T23] usb 4-1: config 0 descriptor?? [ 152.168441][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.185138][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.201415][ T5795] Bluetooth: hci2: command tx timeout [ 152.217706][ T1094] bridge_slave_1: left allmulticast mode [ 152.228245][ T1094] bridge_slave_1: left promiscuous mode [ 152.241789][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.253714][ T1094] bridge_slave_0: left allmulticast mode [ 152.259460][ T1094] bridge_slave_0: left promiscuous mode [ 152.292541][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.356607][ T7251] loop4: detected capacity change from 0 to 16 [ 152.405158][ T7251] erofs: (device loop4): mounted with root inode @ nid 36. [ 152.446659][ T1094] veth1_macvtap: left promiscuous mode [ 152.455567][ T1094] veth0_macvtap: left promiscuous mode [ 152.471612][ T1094] veth1_vlan: left promiscuous mode [ 152.477056][ T1094] veth0_vlan: left promiscuous mode [ 153.042938][ T23] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 153.062079][ T23] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 153.517840][ T5875] usb 4-1: USB disconnect, device number 10 [ 153.521435][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 153.879964][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 153.932421][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 153.986005][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.060597][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.150996][ T7273] loop3: detected capacity change from 0 to 1024 [ 154.200054][ T7273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 154.237180][ T7273] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.289955][ T5795] Bluetooth: hci2: command tx timeout [ 154.363393][ T7273] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.368: lblock 3 mapped to illegal pblock 3 (length 3) [ 154.388409][ T7273] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 154.400911][ T7273] EXT4-fs (loop3): This should not happen!! Data will be lost [ 154.400911][ T7273] [ 154.439385][ T7277] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: block 3: comm syz.3.368: lblock 3 mapped to illegal pblock 3 (length 1) [ 154.477621][ T7272] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: block 3: comm syz.3.368: lblock 3 mapped to illegal pblock 3 (length 1) [ 154.502210][ T7277] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: block 3: comm syz.3.368: lblock 3 mapped to illegal pblock 3 (length 1) [ 154.517945][ T7272] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: block 3: comm syz.3.368: lblock 3 mapped to illegal pblock 3 (length 1) [ 154.548706][ T7277] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: block 3: comm syz.3.368: lblock 3 mapped to illegal pblock 3 (length 1) [ 154.570507][ T7277] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: block 3: comm syz.3.368: lblock 3 mapped to illegal pblock 3 (length 1) [ 154.598880][ T7277] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: block 3: comm syz.3.368: lblock 3 mapped to illegal pblock 3 (length 1) [ 154.623732][ T7272] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: block 3: comm syz.3.368: lblock 3 mapped to illegal pblock 3 (length 1) [ 154.644828][ T7277] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: block 3: comm syz.3.368: lblock 3 mapped to illegal pblock 3 (length 1) [ 154.815958][ T1094] bond0 (unregistering): Released all slaves [ 154.912558][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 155.257185][ T7201] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.267964][ T7201] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.278732][ T7201] bridge_slave_0: entered allmulticast mode [ 155.286297][ T7201] bridge_slave_0: entered promiscuous mode [ 155.300144][ T7201] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.307645][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.315173][ T7201] bridge_slave_1: entered allmulticast mode [ 155.334302][ T7201] bridge_slave_1: entered promiscuous mode [ 155.409243][ T7201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.466398][ T7201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.569838][ T7201] team0: Port device team_slave_0 added [ 155.585420][ T7201] team0: Port device team_slave_1 added [ 155.668040][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.675380][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.702283][ T7201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.720800][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.732393][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.758986][ T7201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.871801][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.901223][ T7201] hsr_slave_0: entered promiscuous mode [ 155.921863][ T7201] hsr_slave_1: entered promiscuous mode [ 155.930481][ T7201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.941578][ T7201] Cannot create hsr debugfs directory [ 156.073352][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 156.093827][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.122047][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.151420][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 156.185695][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.219330][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.243042][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.368500][ T5795] Bluetooth: hci2: command tx timeout [ 156.476657][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 156.505079][ T8] usbtmc 1-1:16.0: can't read capabilities [ 156.609364][ T7201] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 156.625812][ T7201] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 156.640844][ T7201] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 156.661194][ T7201] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.719921][ T8] usb 1-1: USB disconnect, device number 8 [ 156.854607][ T7201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.903566][ T7201] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.926350][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.933555][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.959326][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.966758][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.486224][ T7201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.641750][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 157.854697][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 157.873657][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.901500][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.931989][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 157.972271][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 158.000208][ T23] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 158.051366][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.070452][ T23] hub 5-1:1.0: bad descriptor, ignoring hub [ 158.105165][ T23] hub: probe of 5-1:1.0 failed with error -5 [ 158.132998][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 158.138296][ T23] cdc_wdm 5-1:1.0: skipping garbage [ 158.175650][ T23] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 158.211634][ T23] cdc_wdm 5-1:1.0: Unknown control protocol [ 158.348214][ T7201] veth0_vlan: entered promiscuous mode [ 158.380108][ T7201] veth1_vlan: entered promiscuous mode [ 158.441504][ T5795] Bluetooth: hci2: command tx timeout [ 158.518093][ T7201] veth0_macvtap: entered promiscuous mode [ 158.578697][ T7201] veth1_macvtap: entered promiscuous mode [ 158.593856][ T7372] IPVS: persistence engine module ip_vs_pe_À not found [ 158.658925][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.686417][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.709787][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.727353][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.738245][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.757675][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 158.764359][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 158.771744][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 158.778429][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 158.791427][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 158.798140][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 158.804939][ T5875] usb 5-1: USB disconnect, device number 2 [ 158.811515][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 158.818174][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 158.824295][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 158.837987][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.865326][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.876800][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.906118][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.929222][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.947971][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.958642][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.981457][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.000138][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.042089][ T7201] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.061124][ T7201] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.096077][ T7201] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.121428][ T7201] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.359552][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.383105][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.466874][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.487375][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.001360][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 160.174532][ T5873] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 160.213675][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.241350][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.263106][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.277573][ T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.287324][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.308476][ T8] usb 6-1: config 0 descriptor?? [ 160.365317][ T5873] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 160.382953][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.398121][ T5873] usb 1-1: config 0 descriptor?? [ 160.415655][ T5873] cp210x 1-1:0.0: cp210x converter detected [ 160.781032][ T8] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 160.840642][ T8] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 161.047393][ T5873] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 161.076436][ T5873] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 161.106319][ T5873] usb 1-1: cp210x converter now attached to ttyUSB0 [ 161.116939][ T8] usb 6-1: USB disconnect, device number 2 [ 161.158996][ T5873] usb 1-1: USB disconnect, device number 9 [ 161.220179][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 161.242215][ T5873] cp210x 1-1:0.0: device disconnected syzkaller syzkaller login: [ 161.854166][ T8] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 161.903104][ T8] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.593398][ T5894] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 162.724352][ T7467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.403'. [ 162.811329][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 162.833780][ T5894] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.861691][ T5894] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.892160][ T5894] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 162.903794][ T7467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.403'. [ 162.932040][ T5894] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 162.971400][ T5894] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 162.990859][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.022176][ T5894] hub 6-1:1.0: bad descriptor, ignoring hub [ 163.028162][ T5894] hub: probe of 6-1:1.0 failed with error -5 [ 163.073166][ T5894] cdc_wdm 6-1:1.0: skipping garbage [ 163.093144][ T5894] cdc_wdm 6-1:1.0: skipping garbage [ 163.102070][ T7471] loop3: detected capacity change from 0 to 1024 [ 163.123441][ T5894] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 163.129461][ T5894] cdc_wdm 6-1:1.0: Unknown control protocol [ 163.139070][ T7471] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.195842][ T7471] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 163.270635][ T7471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.491482][ T7471] loop3: detected capacity change from 1024 to 64 [ 163.645255][ T5784] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 163.681113][ T5784] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 163.720469][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 163.723420][ T5894] usb 6-1: USB disconnect, device number 3 [ 163.727130][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 163.727150][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 163.757993][ T7481] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 163.765723][ T5784] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 163.786083][ T5784] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 163.806900][ T5784] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 163.852901][ T5784] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 163.896112][ T5784] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 163.938072][ T5784] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 163.977222][ T5784] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 163.999134][ T5784] EXT4-fs warning (device loop3): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 164.302761][ T7047] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.350367][ T7477] kmmpd-loop3: attempt to access beyond end of device [ 164.350367][ T7477] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 164.391673][ T7477] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 164.649080][ T7501] overlayfs: failed to get inode (-116) [ 164.667114][ T7501] overlayfs: failed to get inode (-116) [ 164.919841][ T145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.981467][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 165.125952][ T145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.203917][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 165.221496][ T8] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 165.263073][ T8] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 165.296899][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.297959][ T145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.342998][ T8] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 165.380516][ T8] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 165.526103][ T145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.777286][ T7505] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 165.819325][ T7505] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 165.837457][ T5774] usb 6-1: USB disconnect, device number 4 [ 165.882054][ T5774] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 165.908410][ T5774] spcp8x5 6-1:1.0: device disconnected [ 166.108060][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.125181][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.140728][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.154107][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.168338][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 166.187863][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.525829][ T7526] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.091739][ T5875] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 167.298375][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 167.340052][ T5875] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 167.449856][ T5875] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 167.479940][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 167.513905][ T5875] usb 5-1: Product: syz [ 167.518158][ T5875] usb 5-1: Manufacturer: syz [ 167.569885][ T5875] usb 5-1: SerialNumber: syz [ 167.585323][ T5875] usb 5-1: config 0 descriptor?? [ 167.598088][ T7541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 167.725981][ T5875] hub 5-1:0.0: bad descriptor, ignoring hub [ 167.748671][ T5875] hub: probe of 5-1:0.0 failed with error -5 [ 168.283308][ T5795] Bluetooth: hci0: command tx timeout [ 168.376412][ T7526] chnl_net:caif_netlink_parms(): no params data found [ 168.824441][ T5894] usb 5-1: USB disconnect, device number 3 [ 169.008858][ T145] hsr_slave_0: left promiscuous mode [ 169.072540][ T145] hsr_slave_1: left promiscuous mode [ 169.096670][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.121329][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.163353][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.180065][ T7570] loop5: detected capacity change from 0 to 32768 [ 169.186765][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.212287][ T145] bridge_slave_1: left allmulticast mode [ 169.218244][ T145] bridge_slave_1: left promiscuous mode [ 169.265357][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.303570][ T145] bridge_slave_0: left allmulticast mode [ 169.337798][ T7570] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 169.351154][ T7570] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 169.355680][ T145] bridge_slave_0: left promiscuous mode [ 169.431606][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.480782][ T7570] XFS (loop5): Ending clean mount [ 169.531922][ T7570] XFS (loop5): Quotacheck needed: Please wait. [ 169.645049][ T145] veth1_macvtap: left promiscuous mode [ 169.661354][ T145] veth0_macvtap: left promiscuous mode [ 169.697311][ T7570] XFS (loop5): Quotacheck: Done. [ 169.702646][ T145] veth1_vlan: left promiscuous mode [ 169.721482][ T145] veth0_vlan: left promiscuous mode [ 169.871951][ T7570] loop5: detected capacity change from 32768 to 49 [ 169.891906][ T7596] XFS (loop5): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 169.924967][ T7596] syz.5.421: attempt to access beyond end of device [ 169.924967][ T7596] loop5: rw=2049, sector=15012, nr_sectors = 4 limit=49 [ 169.981145][ T5873] loop5: writeback error on inode 7434, offset 0, sector 15012 [ 170.028101][ T9] XFS (loop5): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x18 [ 170.119293][ T9] XFS (loop5): Unmount and run xfs_repair [ 170.161803][ T9] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 170.169412][ T9] 00000000: 33 46 43 00 00 00 00 ff ff ff ff ff ff ff ff 00 3FC............. [ 170.211963][ T9] 00000010: 00 00 00 00 00 00 18 00 00 00 00 00 00 00 00 9f ................ [ 170.227504][ T9] 00000020: 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 00 ..*;yE..m...5... [ 170.246738][ T9] 00000030: 00 00 00 7c b9 cd 1a 00 00 00 00 00 00 00 00 00 ...|............ [ 170.261355][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 170.269145][ T9] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 170.304484][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 170.341556][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 170.350500][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 170.369027][ T5795] Bluetooth: hci0: command tx timeout [ 170.389225][ T7596] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x18 len 4 error 74 [ 170.512108][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.541409][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.571798][ T8] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 170.591391][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.623868][ T8] usb 5-1: config 0 descriptor?? [ 170.626376][ T7201] syz-executor: attempt to access beyond end of device [ 170.626376][ T7201] loop5: rw=432129, sector=448, nr_sectors = 64 limit=49 [ 170.680735][ T1267] XFS (loop5): log I/O error -5 [ 170.691388][ T1267] XFS (loop5): Filesystem has been shut down due to log error (0x2). [ 170.701622][ T1267] XFS (loop5): Please unmount the filesystem and rectify the problem(s). [ 170.718168][ T7201] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 171.150242][ T8] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 171.163716][ T145] bond1 (unregistering): Released all slaves [ 171.181729][ T8] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 171.188786][ T8] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 171.241495][ T8] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 171.248658][ T8] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 171.284965][ T8] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 171.307995][ T8] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 171.356047][ T8] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 171.475189][ T8] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x00 [ 172.121125][ T7599] cp2112 0003:10C4:EA90.0008: Error starting transaction: -38 [ 172.191512][ T8] cp2112 0003:10C4:EA90.0008: error reading lock byte: -71 [ 172.231016][ T8] usb 5-1: USB disconnect, device number 4 [ 172.442280][ T5795] Bluetooth: hci0: command tx timeout [ 172.941014][ T145] team0 (unregistering): Port device team_slave_1 removed [ 173.064377][ T145] team0 (unregistering): Port device team_slave_0 removed [ 173.165054][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.264335][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.797256][ T145] bond0 (unregistering): Released all slaves [ 173.922362][ T7526] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.929693][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.937882][ T7526] bridge_slave_0: entered allmulticast mode [ 173.945791][ T7526] bridge_slave_0: entered promiscuous mode [ 174.049702][ T7526] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.082295][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.089606][ T7526] bridge_slave_1: entered allmulticast mode [ 174.144418][ T7526] bridge_slave_1: entered promiscuous mode [ 174.238898][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 174.330882][ T7604] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.340358][ T7604] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.349204][ T7604] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.357990][ T7604] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.454498][ T7526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.486897][ T7526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.522496][ T5795] Bluetooth: hci0: command tx timeout [ 174.536216][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 174.675345][ T7526] team0: Port device team_slave_0 added [ 174.719467][ T7526] team0: Port device team_slave_1 added [ 174.799904][ T7632] db_root: cannot be changed because it's in use [ 174.814368][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.831362][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.890736][ T7526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.930467][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.962076][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.022488][ T7526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.218139][ T7526] hsr_slave_0: entered promiscuous mode [ 175.325615][ T7526] hsr_slave_1: entered promiscuous mode [ 175.372124][ T7526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.379768][ T7526] Cannot create hsr debugfs directory [ 176.187437][ T7668] netlink: 'syz.5.436': attribute type 4 has an invalid length. [ 176.281872][ T7670] netlink: 'syz.5.436': attribute type 4 has an invalid length. [ 176.325438][ T7526] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 176.382705][ T7526] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 176.415359][ T7526] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 176.465046][ T7526] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 176.701114][ T7682] FAULT_INJECTION: forcing a failure. [ 176.701114][ T7682] name failslab, interval 1, probability 0, space 0, times 0 [ 176.733121][ T7526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.752220][ T7682] CPU: 1 PID: 7682 Comm: syz.5.439 Not tainted syzkaller #0 [ 176.759603][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 176.769711][ T7682] Call Trace: [ 176.773042][ T7682] [ 176.776012][ T7682] dump_stack_lvl+0x18c/0x250 [ 176.780767][ T7682] ? show_regs_print_info+0x20/0x20 [ 176.786022][ T7682] ? load_image+0x420/0x420 [ 176.790585][ T7682] ? __might_sleep+0xe0/0xe0 [ 176.795234][ T7682] ? __lock_acquire+0x7eb0/0x7eb0 [ 176.800318][ T7682] should_fail_ex+0x394/0x4c0 [ 176.805048][ T7682] should_failslab+0x9/0x20 [ 176.809600][ T7682] slab_pre_alloc_hook+0x59/0x300 [ 176.814706][ T7682] ? snd_seq_prioq_new+0x47/0x90 [ 176.819698][ T7682] __kmem_cache_alloc_node+0x53/0x260 [ 176.825127][ T7682] ? snd_seq_prioq_new+0x47/0x90 [ 176.830118][ T7682] kmalloc_trace+0x2a/0xe0 [ 176.834600][ T7682] snd_seq_prioq_new+0x47/0x90 [ 176.839415][ T7682] snd_seq_queue_alloc+0x13b/0x740 [ 176.844575][ T7682] ? snd_seq_ioctl_set_client_info+0x610/0x610 [ 176.850786][ T7682] snd_seq_ioctl_create_queue+0x7f/0x3b0 [ 176.856474][ T7682] ? snd_seq_ioctl_unsubscribe_port+0x6e0/0x6e0 [ 176.862778][ T7682] snd_seq_oss_open+0x658/0xf10 [ 176.867697][ T7682] ? snd_seq_oss_delete_client+0x50/0x50 [ 176.873428][ T7682] ? trace_raw_output_contention_end+0xd0/0xd0 [ 176.879626][ T7682] ? trace_contention_end+0x39/0xe0 [ 176.884921][ T7682] ? soundcore_open+0x274/0x4c0 [ 176.889837][ T7682] ? odev_open+0x5c/0xa0 [ 176.894133][ T7682] ? __lock_acquire+0x7eb0/0x7eb0 [ 176.899220][ T7682] ? snd_seq_oss_process_event+0x29b0/0x29b0 [ 176.905272][ T7682] ? async_call_lookup_ports+0x20/0x20 [ 176.910796][ T7682] ? do_raw_spin_unlock+0x121/0x230 [ 176.916061][ T7682] ? soundcore_open+0x310/0x4c0 [ 176.920961][ T7682] odev_open+0x67/0xa0 [ 176.925087][ T7682] chrdev_open+0x58c/0x600 [ 176.926299][ T7526] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.929543][ T7682] ? cd_forget+0x160/0x160 [ 176.940618][ T7682] ? fsnotify_perm+0x3ed/0x5e0 [ 176.945446][ T7682] do_dentry_open+0x880/0x14b0 [ 176.950281][ T7682] ? cd_forget+0x160/0x160 [ 176.954757][ T7682] path_openat+0x284f/0x3270 [ 176.959423][ T7682] ? do_sys_openat2+0xda/0x1d0 [ 176.964255][ T7682] ? __x64_sys_openat+0x139/0x160 [ 176.969335][ T7682] ? verify_lock_unused+0x140/0x140 [ 176.974584][ T7682] ? do_filp_open+0x430/0x430 [ 176.979341][ T7682] do_filp_open+0x1f2/0x430 [ 176.983911][ T7682] ? vfs_tmpfile+0x620/0x620 [ 176.988584][ T7682] ? _raw_spin_unlock+0x28/0x40 [ 176.993510][ T7682] ? alloc_fd+0x590/0x640 [ 176.997930][ T7682] do_sys_openat2+0x134/0x1d0 [ 177.002674][ T7682] ? do_sys_open+0xe0/0xe0 [ 177.007160][ T7682] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 177.013208][ T7682] ? lock_chain_count+0x20/0x20 [ 177.018239][ T7682] __x64_sys_openat+0x139/0x160 [ 177.023171][ T7682] do_syscall_64+0x55/0xb0 [ 177.026203][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.027622][ T7682] ? clear_bhb_loop+0x40/0x90 [ 177.027658][ T7682] ? clear_bhb_loop+0x40/0x90 [ 177.037465][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.039398][ T7682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.057271][ T7682] RIP: 0033:0x7fdcb31a8f19 [ 177.061823][ T7682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.081477][ T7682] RSP: 002b:00007fdcb4039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 177.089944][ T7682] RAX: ffffffffffffffda RBX: 00007fdcb3425fa0 RCX: 00007fdcb31a8f19 [ 177.097966][ T7682] RDX: 0000000000009200 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 177.105991][ T7682] RBP: 00007fdcb3237f6d R08: 0000000000000000 R09: 0000000000000000 [ 177.114012][ T7682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.122038][ T7682] R13: 00007fdcb3426038 R14: 00007fdcb3425fa0 R15: 00007ffc560873e8 [ 177.130076][ T7682] [ 177.163518][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.170757][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.211559][ T5894] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 177.409043][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 177.441794][ T5894] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 177.450929][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.885184][ T7526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.973080][ T5894] lg-g15 0003:046D:C222.0009: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 178.144649][ T5894] lg-g15 0003:046D:C222.0009: Error getting LED brightness: -71 [ 178.182869][ T5894] lg-g15: probe of 0003:046D:C222.0009 failed with error -71 [ 178.226261][ T5894] usb 1-1: USB disconnect, device number 10 [ 178.390452][ T7721] loop4: detected capacity change from 0 to 64 [ 178.810116][ T7526] veth0_vlan: entered promiscuous mode [ 178.860035][ T7526] veth1_vlan: entered promiscuous mode [ 178.976398][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 179.021864][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.451'. [ 179.063843][ T7526] veth0_macvtap: entered promiscuous mode [ 179.087474][ T7526] veth1_macvtap: entered promiscuous mode [ 179.162575][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.174062][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.184537][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.196535][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.222275][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.244960][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.263926][ T7526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.299947][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.330888][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.371378][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.391106][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.407278][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.418922][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.444774][ T7526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.477480][ T7526] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.493099][ T7526] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.511926][ T7526] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.532151][ T7526] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.788716][ T7754] Bluetooth: MGMT ver 1.22 [ 179.814909][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.848279][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.976867][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.010307][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.063820][ T7760] loop0: detected capacity change from 0 to 128 [ 180.142580][ T7760] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.197412][ T7760] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.331669][ T7760] syz.0.460 (pid 7760) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 180.459234][ T5787] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.844940][ T789] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 180.985799][ T7796] loop0: detected capacity change from 0 to 512 [ 181.025208][ T7796] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.047125][ T789] usb 5-1: Using ep0 maxpacket: 8 [ 181.068972][ T789] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.092721][ T789] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.108027][ T789] usb 5-1: config 0 interface 0 has no altsetting 0 [ 181.122290][ T789] usb 5-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 181.133747][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.144406][ T7796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.146609][ T789] usb 5-1: config 0 descriptor?? [ 181.251546][ T7796] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 181.579248][ T789] sony 0003:054C:0002.000A: unknown main item tag 0x3 [ 181.637438][ T789] sony 0003:054C:0002.000A: No inputs registered, leaving [ 181.678272][ T789] sony 0003:054C:0002.000A: hidraw0: USB HID v0.00 Joystick [HID 054c:0002] on usb-dummy_hcd.4-1/input0 [ 181.703213][ T789] sony 0003:054C:0002.000A: failed to claim input [ 181.913770][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.933641][ T789] usb 5-1: USB disconnect, device number 5 [ 182.129662][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 182.167032][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'. [ 182.306192][ T7825] batman_adv: batadv0: Adding interface: syzkaller0 [ 182.327794][ T7825] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.387217][ T7825] batman_adv: batadv0: Interface activated: syzkaller0 [ 182.428968][ T7824] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 182.522857][ T7824] batman_adv: batadv0: Removing interface: syzkaller0 [ 182.777955][ T7830] kvm: pic: level sensitive irq not supported [ 182.778277][ T7830] kvm: pic: non byte read [ 182.811571][ T7830] kvm: pic: level sensitive irq not supported [ 182.811651][ T7830] kvm: pic: non byte read [ 183.802417][ T7854] netlink: 'syz.0.477': attribute type 12 has an invalid length. [ 183.851846][ T7854] netlink: 'syz.0.477': attribute type 29 has an invalid length. [ 183.872866][ T7854] netlink: 148 bytes leftover after parsing attributes in process `syz.0.477'. [ 183.939422][ T7854] netlink: 'syz.0.477': attribute type 1 has an invalid length. [ 183.994917][ T7854] netlink: 'syz.0.477': attribute type 2 has an invalid length. [ 184.052330][ T7854] netlink: 11 bytes leftover after parsing attributes in process `syz.0.477'. [ 184.352688][ T7873] loop0: detected capacity change from 0 to 64 [ 184.924511][ T27] audit: type=1326 audit(1794333690.973:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.489" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 184.990845][ T27] audit: type=1326 audit(1794333690.973:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.489" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 185.052398][ T27] audit: type=1326 audit(1794333690.973:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.489" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 185.117138][ T27] audit: type=1326 audit(1794333690.973:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.489" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 185.167358][ T27] audit: type=1326 audit(1794333690.973:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.489" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 185.221848][ T27] audit: type=1326 audit(1794333690.973:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.489" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 185.281358][ T27] audit: type=1326 audit(1794333690.973:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.489" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 185.346194][ T27] audit: type=1326 audit(1794333690.993:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.489" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 185.400582][ T27] audit: type=1326 audit(1794333690.993:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.489" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 185.444779][ T27] audit: type=1326 audit(1794333690.993:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.0.489" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 185.703978][ T7910] loop4: detected capacity change from 0 to 512 [ 185.753626][ T7910] EXT4-fs (loop4): invalid journal inode [ 185.773757][ T7910] EXT4-fs (loop4): can't get journal size [ 185.835816][ T7910] EXT4-fs (loop4): 1 truncate cleaned up [ 185.892588][ T7910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.945811][ T7917] loop5: detected capacity change from 0 to 128 [ 186.009240][ T7917] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.033536][ T7917] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.335972][ T6240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.535263][ T7201] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.582790][ T7940] netlink: 'syz.4.507': attribute type 4 has an invalid length. [ 186.682410][ T7940] netlink: 'syz.4.507': attribute type 4 has an invalid length. [ 187.197712][ T7959] loop6: detected capacity change from 0 to 512 [ 187.287684][ T7959] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 187.315609][ T7959] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.504: invalid indirect mapped block 256 (level 1) [ 187.371554][ T7959] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.504: invalid indirect mapped block 2683928664 (level 1) [ 187.404257][ T7959] EXT4-fs (loop6): 1 truncate cleaned up [ 187.416463][ T7965] FAULT_INJECTION: forcing a failure. [ 187.416463][ T7965] name failslab, interval 1, probability 0, space 0, times 0 [ 187.429527][ T7959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.442911][ T7965] CPU: 0 PID: 7965 Comm: syz.5.505 Not tainted syzkaller #0 [ 187.450247][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 187.460367][ T7965] Call Trace: [ 187.463692][ T7965] [ 187.466670][ T7965] dump_stack_lvl+0x18c/0x250 [ 187.471407][ T7965] ? show_regs_print_info+0x20/0x20 [ 187.476661][ T7965] ? load_image+0x420/0x420 [ 187.481238][ T7965] ? __lock_acquire+0x7eb0/0x7eb0 [ 187.486316][ T7965] should_fail_ex+0x394/0x4c0 [ 187.491053][ T7965] should_failslab+0x9/0x20 [ 187.495600][ T7965] slab_pre_alloc_hook+0x59/0x300 [ 187.500684][ T7965] ? alloc_ucounts+0x159/0x4c0 [ 187.505508][ T7965] __kmem_cache_alloc_node+0x53/0x260 [ 187.510924][ T7965] ? alloc_ucounts+0x159/0x4c0 [ 187.515712][ T7965] kmalloc_trace+0x2a/0xe0 [ 187.520176][ T7965] alloc_ucounts+0x159/0x4c0 [ 187.524823][ T7965] ? safesetid_task_fix_setuid+0xc6/0x9e0 [ 187.530574][ T7965] set_cred_ucounts+0x10d/0x1b0 [ 187.535494][ T7965] __sys_setuid+0x2bc/0x580 [ 187.540039][ T7965] do_syscall_64+0x55/0xb0 [ 187.544479][ T7965] ? clear_bhb_loop+0x40/0x90 [ 187.549185][ T7965] ? clear_bhb_loop+0x40/0x90 [ 187.553901][ T7965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.559829][ T7965] RIP: 0033:0x7fdcb31a8f19 [ 187.564269][ T7965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.583908][ T7965] RSP: 002b:00007fdcb4039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 187.592359][ T7965] RAX: ffffffffffffffda RBX: 00007fdcb3425fa0 RCX: 00007fdcb31a8f19 [ 187.600366][ T7965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 187.608366][ T7965] RBP: 00007fdcb3237f6d R08: 0000000000000000 R09: 0000000000000000 [ 187.616367][ T7965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.624359][ T7965] R13: 00007fdcb3426038 R14: 00007fdcb3425fa0 R15: 00007ffc560873e8 [ 187.632377][ T7965] [ 188.038463][ T7526] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 188.109032][ T7526] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:478: comm syz-executor: Invalid block bitmap block 3 in block_group 0 [ 188.146281][ T7526] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6660: Corrupt filesystem [ 188.218465][ T7526] EXT4-fs error (device loop6): ext4_lookup:1852: inode #2: comm syz-executor: bad inode number: 6 [ 188.251682][ T7526] EXT4-fs error (device loop6): ext4_lookup:1852: inode #2: comm syz-executor: bad inode number: 6 [ 188.783748][ T7526] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.830862][ T1132] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.961721][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 189.097036][ T1132] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.163488][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.195381][ T23] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 189.232654][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.283209][ T23] usb 6-1: config 0 descriptor?? [ 189.392688][ T1132] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.513725][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 189.519895][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 189.572670][ T23] usb 6-1: USB disconnect, device number 5 [ 189.603941][ T1132] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.152348][ T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 190.380568][ T8040] loop4: detected capacity change from 0 to 128 [ 190.397497][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.431617][ T23] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 190.440730][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.460762][ T8040] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.493862][ T23] usb 6-1: config 0 descriptor?? [ 190.566561][ T8040] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.651148][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.671392][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.681054][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.691291][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.715076][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 190.745732][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.801824][ T6240] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.908858][ T8045] rxe_eth0 speed is unknown, defaulting to 1000 [ 191.343289][ T23] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 191.376077][ T23] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input13 [ 191.396660][ T8065] netlink: 209216 bytes leftover after parsing attributes in process `syz.4.528'. [ 191.445461][ T8065] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.804019][ T5873] usb 6-1: USB disconnect, device number 6 [ 191.804059][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 192.238397][ T8060] loop0: detected capacity change from 0 to 32768 [ 192.270890][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 192.342173][ T8060] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 192.595968][ T8060] XFS (loop0): Ending clean mount [ 192.647656][ T8060] XFS (loop0): Quotacheck needed: Please wait. [ 192.825035][ T1132] hsr_slave_0: left promiscuous mode [ 192.833350][ T1132] hsr_slave_1: left promiscuous mode [ 192.841880][ T5795] Bluetooth: hci0: command tx timeout [ 192.920760][ T8060] XFS (loop0): Quotacheck: Done. [ 192.929870][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.953746][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.977021][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.991368][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.002500][ T1132] bridge_slave_1: left allmulticast mode [ 193.008271][ T1132] bridge_slave_1: left promiscuous mode [ 193.030413][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.051439][ T1132] bridge_slave_0: left allmulticast mode [ 193.057177][ T1132] bridge_slave_0: left promiscuous mode [ 193.080534][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.187095][ T1132] veth1_macvtap: left promiscuous mode [ 193.197301][ T1132] veth0_macvtap: left promiscuous mode [ 193.217674][ T1132] veth1_vlan: left promiscuous mode [ 193.237937][ T1132] veth0_vlan: left promiscuous mode [ 193.274287][ T8115] XFS (loop0): User initiated shutdown received. [ 193.288100][ T8115] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 193.319334][ T8115] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 193.479829][ T5787] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.983144][ T8113] syz.5.533: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 194.005862][ T8113] CPU: 1 PID: 8113 Comm: syz.5.533 Not tainted syzkaller #0 [ 194.013222][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 194.023321][ T8113] Call Trace: [ 194.027417][ T8113] [ 194.030383][ T8113] dump_stack_lvl+0x18c/0x250 [ 194.035109][ T8113] ? show_regs_print_info+0x20/0x20 [ 194.040353][ T8113] ? load_image+0x420/0x420 [ 194.044883][ T8113] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 194.051348][ T8113] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 194.057883][ T8113] warn_alloc+0x246/0x340 [ 194.062249][ T8113] ? zone_watermark_ok_safe+0x230/0x230 [ 194.067834][ T8113] ? _raw_spin_unlock+0x28/0x40 [ 194.072725][ T8113] __vmalloc_node_range+0x661/0x1320 [ 194.078065][ T8113] ? __alloc_pages+0xae/0x460 [ 194.082768][ T8113] ? free_vm_area+0x50/0x50 [ 194.087349][ T8113] ? packet_set_ring+0x7a3/0x2db0 [ 194.092402][ T8113] vzalloc+0x79/0x90 [ 194.096338][ T8113] ? packet_set_ring+0x7a3/0x2db0 [ 194.101394][ T8113] packet_set_ring+0x7a3/0x2db0 [ 194.106287][ T8113] ? packet_mmap+0x510/0x510 [ 194.110908][ T8113] ? __lock_acquire+0x7eb0/0x7eb0 [ 194.115962][ T8113] ? __local_bh_enable_ip+0x13a/0x1c0 [ 194.121369][ T8113] ? lockdep_hardirqs_on+0x98/0x150 [ 194.126604][ T8113] ? __might_fault+0xaa/0x120 [ 194.131311][ T8113] ? __might_fault+0xc6/0x120 [ 194.136023][ T8113] ? __might_fault+0xaa/0x120 [ 194.140735][ T8113] ? _copy_from_user+0xa5/0xe0 [ 194.145528][ T8113] packet_setsockopt+0xdb0/0x1500 [ 194.150581][ T8113] ? packet_ioctl+0x350/0x350 [ 194.155291][ T8113] ? aa_sk_perm+0x7bb/0x8e0 [ 194.159836][ T8113] ? aa_af_perm+0x330/0x330 [ 194.164371][ T8113] ? __fget_files+0x28/0x460 [ 194.169002][ T8113] ? aa_sock_opt_perm+0x74/0x100 [ 194.173967][ T8113] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 194.179545][ T8113] ? security_socket_setsockopt+0x7e/0xa0 [ 194.185294][ T8113] ? packet_ioctl+0x350/0x350 [ 194.190038][ T8113] do_sock_setsockopt+0x175/0x1a0 [ 194.195121][ T8113] ? __fdget+0x180/0x210 [ 194.199439][ T8113] __x64_sys_setsockopt+0x182/0x200 [ 194.204676][ T8113] do_syscall_64+0x55/0xb0 [ 194.209135][ T8113] ? clear_bhb_loop+0x40/0x90 [ 194.213846][ T8113] ? clear_bhb_loop+0x40/0x90 [ 194.218615][ T8113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.224555][ T8113] RIP: 0033:0x7fdcb31a8f19 [ 194.229001][ T8113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.248655][ T8113] RSP: 002b:00007fdcb4039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 194.257105][ T8113] RAX: ffffffffffffffda RBX: 00007fdcb3425fa0 RCX: 00007fdcb31a8f19 [ 194.265113][ T8113] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000003 [ 194.273137][ T8113] RBP: 00007fdcb3237f6d R08: 0000000000000010 R09: 0000000000000000 [ 194.281159][ T8113] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 194.289154][ T8113] R13: 00007fdcb3426038 R14: 00007fdcb3425fa0 R15: 00007ffc560873e8 [ 194.297183][ T8113] [ 194.304717][ T8113] Mem-Info: [ 194.307960][ T8113] active_anon:7150 inactive_anon:0 isolated_anon:0 [ 194.307960][ T8113] active_file:16130 inactive_file:40046 isolated_file:0 [ 194.307960][ T8113] unevictable:768 dirty:296 writeback:0 [ 194.307960][ T8113] slab_reclaimable:11236 slab_unreclaimable:95921 [ 194.307960][ T8113] mapped:24983 shmem:1407 pagetables:755 [ 194.307960][ T8113] sec_pagetables:0 bounce:0 [ 194.307960][ T8113] kernel_misc_reclaimable:0 [ 194.307960][ T8113] free:1320510 free_pcp:9723 free_cma:0 [ 194.365693][ T8113] Node 0 active_anon:28600kB inactive_anon:0kB active_file:64520kB inactive_file:159984kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99932kB dirty:1184kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11716kB pagetables:3020kB sec_pagetables:0kB all_unreclaimable? no [ 194.407020][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.412878][ T8113] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 194.422966][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.461423][ T8113] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 194.494418][ T8113] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 194.502939][ T8113] Node 0 DMA32 free:1360696kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:28556kB inactive_anon:0kB active_file:64520kB inactive_file:159164kB unevictable:1536kB writepending:1184kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:21916kB local_pcp:20820kB free_cma:0kB [ 194.544082][ T8113] lowmem_reserve[]: 0 0 0 0 0 [ 194.548910][ T8113] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 194.588194][ T8113] lowmem_reserve[]: 0 0 0 0 0 [ 194.594328][ T8113] Node 1 Normal free:3905736kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16800kB local_pcp:9568kB free_cma:0kB [ 194.627891][ T8113] lowmem_reserve[]: 0 0 0 0 0 [ 194.633101][ T8113] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 194.645978][ T8113] Node 0 DMA32: 1204*4kB (UME) 543*8kB (UME) 609*16kB (UME) 635*32kB (UME) 286*64kB (ME) 169*128kB (UME) 92*256kB (UME) 47*512kB (UM) 19*1024kB (ME) 3*2048kB (ME) 295*4096kB (M) = 1360696kB [ 194.666961][ T8113] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 194.679013][ T8113] Node 1 Normal: 180*4kB (UME) 45*8kB (UME) 33*16kB (UME) 72*32kB (UME) 32*64kB (UME) 9*128kB (UME) 1*256kB (M) 0*512kB 1*1024kB (E) 1*2048kB (E) 951*4096kB (M) = 3905736kB [ 194.702914][ T8113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.715025][ T8113] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 194.727587][ T8113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.763490][ T8113] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 194.774215][ T8113] 57583 total pagecache pages [ 194.778964][ T8113] 0 pages in swap cache [ 194.783704][ T8113] Free swap = 124500kB [ 194.804791][ T8113] Total swap = 124996kB [ 194.818253][ T8113] 2097051 pages RAM [ 194.837942][ T8113] 0 pages HighMem/MovableOnly [ 194.854784][ T8113] 421729 pages reserved [ 194.859026][ T8113] 0 pages cma reserved [ 194.926727][ T5795] Bluetooth: hci0: command tx timeout [ 195.205659][ T8135] loop0: detected capacity change from 0 to 512 [ 195.237830][ T8135] EXT4-fs (loop0): invalid journal inode [ 195.247763][ T8135] EXT4-fs (loop0): can't get journal size [ 195.291132][ T8135] EXT4-fs (loop0): 1 truncate cleaned up [ 195.323467][ T8135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.474698][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.730965][ T27] kauditd_printk_skb: 168 callbacks suppressed [ 195.730982][ T27] audit: type=1326 audit(1794333701.773:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.0.541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 195.790393][ T27] audit: type=1326 audit(1794333701.813:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.0.541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 195.837998][ T27] audit: type=1326 audit(1794333701.823:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.0.541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 195.890174][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 195.897826][ T27] audit: type=1326 audit(1794333701.823:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.0.541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 195.897880][ T27] audit: type=1326 audit(1794333701.823:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.0.541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 195.897927][ T27] audit: type=1326 audit(1794333701.823:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.0.541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 195.897973][ T27] audit: type=1326 audit(1794333701.823:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.0.541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 195.898019][ T27] audit: type=1326 audit(1794333701.833:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.0.541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 195.898072][ T27] audit: type=1326 audit(1794333701.833:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.0.541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 195.898119][ T27] audit: type=1326 audit(1794333701.833:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.0.541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3f941a8f19 code=0x7ffc0000 [ 196.149944][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 196.239526][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.330096][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.872995][ T1132] bond0 (unregistering): Released all slaves [ 196.988041][ T8110] netlink: 144 bytes leftover after parsing attributes in process `syz.4.532'. [ 197.011629][ T5795] Bluetooth: hci0: command tx timeout [ 197.092269][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.099532][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.142600][ T8045] bridge_slave_0: entered allmulticast mode [ 197.150187][ T8045] bridge_slave_0: entered promiscuous mode [ 197.208215][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.233026][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.251985][ T8045] bridge_slave_1: entered allmulticast mode [ 197.263034][ T8045] bridge_slave_1: entered promiscuous mode [ 197.383839][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.435181][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.545562][ T8045] team0: Port device team_slave_0 added [ 197.558435][ T8045] team0: Port device team_slave_1 added [ 197.664765][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.676628][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.703249][ T8045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.726008][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.735970][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.766046][ T8045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.864820][ T8045] hsr_slave_0: entered promiscuous mode [ 197.875714][ T8045] hsr_slave_1: entered promiscuous mode [ 197.886417][ T8045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.894645][ T8045] Cannot create hsr debugfs directory [ 198.242380][ T5795] Bluetooth: hci1: unexpected cc 0x204b length: 34 > 3 [ 198.375360][ T8184] loop5: detected capacity change from 0 to 128 [ 198.488394][ T8045] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 198.551360][ T8045] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 198.572507][ T8045] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 198.625159][ T8045] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 198.957708][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.039347][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.081125][ T4787] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.083990][ T5795] Bluetooth: hci0: command tx timeout [ 199.088670][ T4787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.167777][ T7310] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.175054][ T7310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.189437][ T8194] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 199.506412][ T8204] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_32 policy on filesystem 'sda1' because it doesn't have stable inode numbers [ 199.964894][ T8045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.893372][ T8045] veth0_vlan: entered promiscuous mode [ 200.930608][ T8045] veth1_vlan: entered promiscuous mode [ 201.034598][ T8045] veth0_macvtap: entered promiscuous mode [ 201.085932][ T8045] veth1_macvtap: entered promiscuous mode [ 201.175600][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.186493][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.197067][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.210694][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.225475][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.236758][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.258968][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.286893][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.313812][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.341783][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.371461][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.398357][ T8045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.421283][ T8045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.442384][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.486899][ T8045] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.511193][ T8045] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.533819][ T8045] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.561564][ T8045] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.588439][ T8249] capability: warning: `syz.5.565' uses 32-bit capabilities (legacy support in use) [ 201.842343][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.866205][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.942360][ T7551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.950266][ T7551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.284550][ T5795] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 202.294840][ T5795] Bluetooth: hci1: Injecting HCI hardware error event [ 202.305648][ T5795] Bluetooth: hci1: hardware error 0x00 [ 202.462096][ T8274] EXT4-fs (sda1): resizing filesystem from 262144 to 5 blocks [ 202.481842][ T8274] EXT4-fs warning (device sda1): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 202.594777][ T8282] overlayfs: failed to verify index (index/00fb210001a9a64bcb7a93470a81787a495728e99a90b09065d803000000000000, ftype=2000, err=-61) [ 202.627672][ T8282] overlayfs: failed index dir cleanup (-61) [ 202.644753][ T8282] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 202.728415][ T8288] overlayfs: invalid redirect (./file2) [ 202.801024][ T8291] loop7: detected capacity change from 0 to 256 [ 203.005805][ T8298] loop5: detected capacity change from 0 to 512 [ 203.020449][ T8298] EXT4-fs: Ignoring removed oldalloc option [ 203.026877][ T8295] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 203.072486][ T8298] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 203.128277][ T8298] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 203.184820][ T8298] EXT4-fs (loop5): 1 truncate cleaned up [ 203.192690][ T8298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.284293][ T8298] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 203.369683][ T8295] team0 (unregistering): Port device team_slave_0 removed [ 203.453861][ T8295] team0 (unregistering): Port device team_slave_1 removed [ 203.552286][ T7201] EXT4-fs error (device loop5): mb_free_blocks:1970: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 203.598583][ T7201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.135534][ T8304] loop7: detected capacity change from 0 to 32768 [ 204.170348][ T8304] jfs: Unrecognized mount option ":Šrquota" or missing value [ 204.435823][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 204.435841][ T27] audit: type=1326 audit(1794333710.473:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8326 comm="syz.7.585" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7f11a8f19 code=0x0 [ 204.451839][ T5795] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 204.539648][ T8327] overlayfs: failed to verify index (index/00fb210001dc1311a7a7da4faeac74bb6bb9b07ec3d609f5213d01000000000000, ftype=2000, err=-61) [ 204.630675][ T8327] overlayfs: failed index dir cleanup (-61) [ 204.641609][ T8327] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 205.545550][ T7551] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.693767][ T7551] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.771442][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 205.829570][ T7551] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.972376][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 205.999593][ T7551] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.010556][ T8] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 206.039208][ T8] usb 1-1: config 0 has no interface number 0 [ 206.049043][ T8] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 206.068576][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.091582][ T8] usb 1-1: Product: syz [ 206.095818][ T8] usb 1-1: Manufacturer: syz [ 206.120864][ T8] usb 1-1: SerialNumber: syz [ 206.142746][ T8] usb 1-1: config 0 descriptor?? [ 206.172591][ T8] smsc95xx v2.0.0 [ 206.185021][ T8365] loop4: detected capacity change from 0 to 512 [ 206.277979][ T8365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.394799][ T8365] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.646887][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 206.670689][ T27] audit: type=1804 audit(1794333712.713:264): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.597" name="/newroot/120/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 206.708347][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 206.756087][ T27] audit: type=1804 audit(1794333712.753:265): pid=8379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.597" name="/newroot/120/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 206.958913][ T8384] loop7: detected capacity change from 0 to 2048 [ 207.066853][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.078323][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.091663][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.100118][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.105252][ T8384] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.120691][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.128314][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.320500][ T6240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.570186][ T8385] rxe_eth0 speed is unknown, defaulting to 1000 [ 207.766014][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 207.822315][ T8] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 207.887079][ T8] usb 1-1: USB disconnect, device number 11 [ 208.280015][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.604'. [ 208.289459][ T8403] netlink: 'syz.4.604': attribute type 7 has an invalid length. [ 208.297699][ T8403] netlink: 'syz.4.604': attribute type 8 has an invalid length. [ 208.318348][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 208.320204][ T8406] loop7: detected capacity change from 0 to 2048 [ 208.356335][ T8406] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=27743, location=27743 [ 208.389589][ T8403] erspan0: entered promiscuous mode [ 208.404697][ T8406] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=27999, location=27999 [ 208.432393][ T8403] gretap0: entered promiscuous mode [ 208.450802][ T8403] erspan0: left promiscuous mode [ 208.457798][ T8406] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 208.467624][ T8406] UDF-fs: Scanning with blocksize 512 failed [ 208.484941][ T8406] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=27743, location=27743 [ 208.495316][ T8403] gretap0: left promiscuous mode [ 208.537993][ T8406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.611025][ T8409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.604'. [ 208.621737][ T8409] netlink: 'syz.4.604': attribute type 7 has an invalid length. [ 208.629439][ T8409] netlink: 'syz.4.604': attribute type 8 has an invalid length. [ 208.671615][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 208.702161][ T8409] erspan0: entered promiscuous mode [ 208.708803][ T8409] gretap0: entered promiscuous mode [ 208.729798][ T8406] FAULT_INJECTION: forcing a failure. [ 208.729798][ T8406] name failslab, interval 1, probability 0, space 0, times 0 [ 208.743900][ T8409] erspan0: left promiscuous mode [ 208.754981][ T8406] CPU: 0 PID: 8406 Comm: syz.7.605 Not tainted syzkaller #0 [ 208.762364][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 208.772464][ T8406] Call Trace: [ 208.775787][ T8406] [ 208.778807][ T8406] dump_stack_lvl+0x18c/0x250 [ 208.783562][ T8406] ? show_regs_print_info+0x20/0x20 [ 208.788836][ T8406] ? load_image+0x420/0x420 [ 208.793399][ T8406] ? __might_sleep+0xe0/0xe0 [ 208.798075][ T8406] ? __lock_acquire+0x7eb0/0x7eb0 [ 208.803166][ T8406] ? tomoyo_init_log+0x1c45/0x1f50 [ 208.808339][ T8406] should_fail_ex+0x394/0x4c0 [ 208.813092][ T8406] should_failslab+0x9/0x20 [ 208.817651][ T8406] slab_pre_alloc_hook+0x59/0x300 [ 208.822728][ T8406] ? tomoyo_supervisor+0xbce/0x1100 [ 208.827989][ T8406] ? tomoyo_supervisor+0xbce/0x1100 [ 208.833233][ T8406] __kmem_cache_alloc_node+0x53/0x260 [ 208.838665][ T8406] ? tomoyo_supervisor+0xbce/0x1100 [ 208.843920][ T8406] __kmalloc+0xa7/0x240 [ 208.848144][ T8406] tomoyo_supervisor+0xbce/0x1100 [ 208.853244][ T8406] ? tomoyo_profile+0x50/0x50 [ 208.857991][ T8406] ? snprintf+0xe9/0x140 [ 208.862292][ T8406] ? vscnprintf+0x80/0x80 [ 208.866662][ T8406] ? tomoyo_check_acl+0x37c/0x3f0 [ 208.871744][ T8406] tomoyo_path_number_perm+0x460/0x5e0 [ 208.877235][ T8406] ? tomoyo_path_number_perm+0x217/0x5e0 [ 208.882902][ T8406] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 208.888431][ T8406] ? __fget_files+0x28/0x460 [ 208.893098][ T8406] security_file_ioctl+0x70/0xa0 [ 208.898086][ T8406] __se_sys_ioctl+0x48/0x170 [ 208.902715][ T8406] do_syscall_64+0x55/0xb0 [ 208.907175][ T8406] ? clear_bhb_loop+0x40/0x90 [ 208.911898][ T8406] ? clear_bhb_loop+0x40/0x90 [ 208.916617][ T8406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.922545][ T8406] RIP: 0033:0x7fc7f11a8f19 [ 208.926989][ T8406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.946623][ T8406] RSP: 002b:00007fc7f2018028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.955066][ T8406] RAX: ffffffffffffffda RBX: 00007fc7f1425fa0 RCX: 00007fc7f11a8f19 [ 208.963067][ T8406] RDX: 0000000000000000 RSI: 0000000040086602 RDI: 0000000000000004 [ 208.971082][ T8406] RBP: 00007fc7f1237f6d R08: 0000000000000000 R09: 0000000000000000 [ 208.979094][ T8406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.987117][ T8406] R13: 00007fc7f1426038 R14: 00007fc7f1425fa0 R15: 00007ffed80a08e8 [ 208.995130][ T8406] [ 209.046362][ T8409] gretap0: left promiscuous mode [ 209.161663][ T52] Bluetooth: hci2: command tx timeout [ 209.233079][ T8045] UDF-fs: error (device loop7): udf_read_inode: (ino 817) failed !bh [ 209.263275][ T8045] UDF-fs: error (device loop7): udf_read_inode: (ino 817) failed !bh [ 209.771583][ T8385] chnl_net:caif_netlink_parms(): no params data found [ 209.961758][ T7551] hsr_slave_0: left promiscuous mode [ 210.024454][ T7551] hsr_slave_1: left promiscuous mode [ 210.083757][ T7551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.101332][ T7551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.142255][ T7551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.152137][ T7551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.212279][ T7551] bridge_slave_1: left allmulticast mode [ 210.218086][ T7551] bridge_slave_1: left promiscuous mode [ 210.241640][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.297804][ T7551] bridge_slave_0: left allmulticast mode [ 210.303723][ T7551] bridge_slave_0: left promiscuous mode [ 210.309526][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.498261][ T7551] veth1_macvtap: left promiscuous mode [ 210.511358][ T7551] veth0_macvtap: left promiscuous mode [ 210.517102][ T7551] veth1_vlan: left promiscuous mode [ 210.524327][ T8425] loop0: detected capacity change from 0 to 40427 [ 210.546913][ T7551] veth0_vlan: left promiscuous mode [ 210.554995][ T8425] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 210.572285][ T8425] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 210.601832][ T8425] F2FS-fs (loop0): invalid crc value [ 210.636826][ T8425] F2FS-fs (loop0): Found nat_bits in checkpoint [ 210.840858][ T8435] ------------[ cut here ]------------ [ 210.846934][ T8435] kobject: '(null)' (ffff88805f5200f0): is not initialized, yet kobject_get() is being called. [ 210.906761][ T8425] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 210.914019][ T8435] WARNING: CPU: 0 PID: 8435 at lib/kobject.c:642 kobject_add_internal+0x115/0xc90 [ 210.914112][ T8435] Modules linked in: [ 210.927444][ T8435] CPU: 0 PID: 8435 Comm: syz.4.613 Not tainted syzkaller #0 [ 210.934822][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 210.945356][ T8435] RIP: 0010:kobject_add_internal+0x115/0xc90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 210.951578][ T8435] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5e 4e 5d f7 49 8b 34 24 48 c7 c7 00 4f 0b 8c 4c 89 e2 e8 4b ea cd f6 <0f> 0b e9 e5 00 00 00 e8 8f 45 04 f7 b8 fe ff ff ff e9 f0 06 00 00 [ 210.971555][ T8435] RSP: 0018:ffffc900031b78c8 EFLAGS: 00010246 [ 210.978008][ T8435] RAX: ce60ccfca9964b00 RBX: ffff888032d8e878 RCX: 0000000000080000 [ 210.986268][ T8435] RDX: ffffc90014ee4000 RSI: 000000000000ba56 RDI: 000000000000ba57 [ 210.994589][ T8435] RBP: 0000000000000000 R08: ffffc900031b74c7 R09: 1ffff92000636e98 [ 211.002801][ T8435] R10: dffffc0000000000 R11: fffff52000636e99 R12: ffff88805f5200f0 [ 211.010839][ T8435] R13: dffffc0000000000 R14: ffff88805f52012c R15: dffffc0000000000 [ 211.018941][ T8435] FS: 00007f735d2b26c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 211.021737][ T8425] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 211.028300][ T8435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.042653][ T8435] CR2: 00007f221f088000 CR3: 0000000062db8000 CR4: 00000000003506f0 [ 211.050699][ T8435] Call Trace: [ 211.054202][ T8435] [ 211.057203][ T8435] ? kfree+0x31/0x1a0 [ 211.061450][ T8435] kobject_add+0x164/0x240 [ 211.065930][ T8435] ? kobject_init+0x1d0/0x1d0 [ 211.070663][ T8435] ? mddev_create_serial_pool+0x1f3/0x4d0 [ 211.076558][ T8435] bind_rdev_to_array+0xb51/0x1270 [ 211.081873][ T8435] ? bind_rdev_to_array+0x5fb/0x1270 [ 211.087214][ T8435] ? md_import_device+0x7b0/0x7b0 [ 211.092384][ T8435] md_add_new_disk+0xe31/0x17b0 [ 211.097298][ T8435] md_ioctl+0x2152/0x24e0 [ 211.101755][ T8435] ? blkdev_common_ioctl+0x10ee/0x2580 [ 211.107274][ T8435] ? md_release+0x1e0/0x1e0 [ 211.111875][ T8435] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 211.117568][ T8435] ? blkdev_bszset+0x1f0/0x1f0 [ 211.122539][ T8435] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 211.128091][ T8435] ? md_release+0x1e0/0x1e0 [ 211.132722][ T8435] blkdev_ioctl+0x5b2/0x730 [ 211.137277][ T8435] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 211.142923][ T8435] ? bpf_lsm_file_ioctl+0x9/0x10 [ 211.148187][ T8435] ? security_file_ioctl+0x80/0xa0 [ 211.153527][ T8435] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 211.159036][ T8435] __se_sys_ioctl+0xfd/0x170 [ 211.163861][ T8435] do_syscall_64+0x55/0xb0 [ 211.168344][ T8435] ? clear_bhb_loop+0x40/0x90 [ 211.173152][ T8435] ? clear_bhb_loop+0x40/0x90 [ 211.177887][ T8435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.183939][ T8435] RIP: 0033:0x7f735c3a8f19 [ 211.188407][ T8435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.208178][ T8435] RSP: 002b:00007f735d2b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.216697][ T8435] RAX: ffffffffffffffda RBX: 00007f735c626090 RCX: 00007f735c3a8f19 [ 211.224786][ T8435] RDX: 0000200000000200 RSI: 0000000040140921 RDI: 0000000000000004 [ 211.232892][ T8435] RBP: 00007f735c437f6d R08: 0000000000000000 R09: 0000000000000000 [ 211.240908][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.249491][ T8435] R13: 00007f735c626128 R14: 00007f735c626090 R15: 00007ffe4758ea58 [ 211.249755][ T52] Bluetooth: hci2: command tx timeout [ 211.257681][ T8435] [ 211.266152][ T8435] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 211.273466][ T8435] CPU: 0 PID: 8435 Comm: syz.4.613 Not tainted syzkaller #0 [ 211.280778][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 211.290865][ T8435] Call Trace: [ 211.294170][ T8435] [ 211.297156][ T8435] dump_stack_lvl+0x18c/0x250 [ 211.301873][ T8435] ? show_regs_print_info+0x20/0x20 [ 211.307101][ T8435] ? load_image+0x420/0x420 [ 211.311644][ T8435] panic+0x2ca/0x720 [ 211.315581][ T8435] ? bpf_jit_dump+0xd0/0xd0 [ 211.320121][ T8435] __warn+0x2e0/0x470 [ 211.324148][ T8435] ? kobject_add_internal+0x115/0xc90 [ 211.329562][ T8435] ? kobject_add_internal+0x115/0xc90 [ 211.334961][ T8435] report_bug+0x2be/0x4f0 [ 211.339320][ T8435] ? kobject_add_internal+0x115/0xc90 [ 211.344719][ T8435] ? kobject_add_internal+0x115/0xc90 [ 211.350114][ T8435] ? kobject_add_internal+0x117/0xc90 [ 211.355518][ T8435] handle_bug+0xcf/0x120 [ 211.359806][ T8435] exc_invalid_op+0x1a/0x50 [ 211.364340][ T8435] asm_exc_invalid_op+0x1a/0x20 [ 211.369227][ T8435] RIP: 0010:kobject_add_internal+0x115/0xc90 [ 211.375251][ T8435] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 5e 4e 5d f7 49 8b 34 24 48 c7 c7 00 4f 0b 8c 4c 89 e2 e8 4b ea cd f6 <0f> 0b e9 e5 00 00 00 e8 8f 45 04 f7 b8 fe ff ff ff e9 f0 06 00 00 [ 211.394892][ T8435] RSP: 0018:ffffc900031b78c8 EFLAGS: 00010246 [ 211.400984][ T8435] RAX: ce60ccfca9964b00 RBX: ffff888032d8e878 RCX: 0000000000080000 [ 211.408981][ T8435] RDX: ffffc90014ee4000 RSI: 000000000000ba56 RDI: 000000000000ba57 [ 211.416977][ T8435] RBP: 0000000000000000 R08: ffffc900031b74c7 R09: 1ffff92000636e98 [ 211.424976][ T8435] R10: dffffc0000000000 R11: fffff52000636e99 R12: ffff88805f5200f0 [ 211.432973][ T8435] R13: dffffc0000000000 R14: ffff88805f52012c R15: dffffc0000000000 [ 211.440993][ T8435] ? kobject_add_internal+0x115/0xc90 [ 211.446389][ T8435] ? kfree+0x31/0x1a0 [ 211.450411][ T8435] kobject_add+0x164/0x240 [ 211.454882][ T8435] ? kobject_init+0x1d0/0x1d0 [ 211.459601][ T8435] ? mddev_create_serial_pool+0x1f3/0x4d0 [ 211.465357][ T8435] bind_rdev_to_array+0xb51/0x1270 [ 211.470524][ T8435] ? bind_rdev_to_array+0x5fb/0x1270 [ 211.475853][ T8435] ? md_import_device+0x7b0/0x7b0 [ 211.480951][ T8435] md_add_new_disk+0xe31/0x17b0 [ 211.485860][ T8435] md_ioctl+0x2152/0x24e0 [ 211.490226][ T8435] ? blkdev_common_ioctl+0x10ee/0x2580 [ 211.495714][ T8435] ? md_release+0x1e0/0x1e0 [ 211.500239][ T8435] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 211.505907][ T8435] ? blkdev_bszset+0x1f0/0x1f0 [ 211.510712][ T8435] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 211.516222][ T8435] ? md_release+0x1e0/0x1e0 [ 211.520756][ T8435] blkdev_ioctl+0x5b2/0x730 [ 211.525288][ T8435] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 211.530778][ T8435] ? bpf_lsm_file_ioctl+0x9/0x10 [ 211.535744][ T8435] ? security_file_ioctl+0x80/0xa0 [ 211.540885][ T8435] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 211.546370][ T8435] __se_sys_ioctl+0xfd/0x170 [ 211.550994][ T8435] do_syscall_64+0x55/0xb0 [ 211.555462][ T8435] ? clear_bhb_loop+0x40/0x90 [ 211.560177][ T8435] ? clear_bhb_loop+0x40/0x90 [ 211.564897][ T8435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.570873][ T8435] RIP: 0033:0x7f735c3a8f19 [ 211.575342][ T8435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.595001][ T8435] RSP: 002b:00007f735d2b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.603538][ T8435] RAX: ffffffffffffffda RBX: 00007f735c626090 RCX: 00007f735c3a8f19 [ 211.611544][ T8435] RDX: 0000200000000200 RSI: 0000000040140921 RDI: 0000000000000004 [ 211.619541][ T8435] RBP: 00007f735c437f6d R08: 0000000000000000 R09: 0000000000000000 [ 211.627538][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.635529][ T8435] R13: 00007f735c626128 R14: 00007f735c626090 R15: 00007ffe4758ea58 [ 211.643559][ T8435] [ 211.646755][ T8435] Kernel Offset: disabled [ 211.651182][ T8435] Rebooting in 86400 seconds..