last executing test programs: 2m5.529422859s ago: executing program 4 (id=12): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="038eee4500e4b7f71143aa7e6b988d00b81499e2dc4e81c08c21942c2a881267d5ca5394f7ea0cc88605dc67c28e7390a50e3687403eed170cb326331f188be172257e90f7d7612f02e882775a3339b6cf9b0cd41c1c941cef2e2bcbfba9dc26262d99b7a1b1d2a7b8f676c05f4e3b026c9a830cf8a70e0ab033e4ba658604fb0dfe50783fedf91380153436d2669f2c8daffbcb50e42b52d8bba8ff081b07fdbada8a24182e65aecb93b5767200cc1d55a352c8873dc48c5e64f13b"], 0x9) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r2 = open(0x0, 0x109042, 0x0) fcntl$addseals(r2, 0x409, 0x8e3652a1e0b94d91) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) sync() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80500}]}}) 2m3.216591139s ago: executing program 4 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, 0x0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 2m2.283252914s ago: executing program 4 (id=24): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000300)={{0xffffffffffffffff, &(0x7f0000000140)='nodelalloc', 0x200000, &(0x7f00000001c0)={@_ha_fsid={[0x7, 0x7]}, {0x8, 0x6, 0x7fffffff}}, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x1f}, {[0x9, 0x5, 0x1, 0x59d]}, 0x6, 0x41, &(0x7f0000000280)=""/65}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000780)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0x0) 2m1.557016508s ago: executing program 4 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) readv(r0, &(0x7f0000002740)=[{&(0x7f0000000440)=""/170, 0xaa}], 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[0x0]) 2m1.254418823s ago: executing program 4 (id=30): syz_usb_connect$uac3(0x0, 0x98, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000003c0)=[@ioring_restriction_sqe_flags_required={0x3, 0x19}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 2m0.606101594s ago: executing program 4 (id=33): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, 0x0) 1m59.823386521s ago: executing program 32 (id=33): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, 0x0) 1m24.117518965s ago: executing program 3 (id=166): mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x2000) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000300)='comm\x00') 1m22.75333673s ago: executing program 3 (id=176): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e65"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0xd) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x810, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r5, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0xf36, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r7, r8, 0x3f5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0x0, r6, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0x5, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0x2, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r7, 0x0, 0x1, 0xfffffdff}}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) 1m21.266438481s ago: executing program 3 (id=182): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d8bcd00005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766c1cb010052f436dd2a", 0x2a}, {&(0x7f0000000440)="aa1d484e0a4e130000008133d576983340cb31a5fc977c2e4891f7c08bfcd111fbdf23ea32db0e8f20d5", 0x2a}], 0x2) 1m20.750782016s ago: executing program 3 (id=184): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1m9.296547192s ago: executing program 3 (id=204): write(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./sys_mount\x00') syz_emit_ethernet(0x46, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@bsdgroups}, {@nobarrier}, {@noinit_itable}]}, 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfffe82) 1m7.314777058s ago: executing program 3 (id=213): unshare(0x6a060000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) symlink(0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220800"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 51.839024736s ago: executing program 33 (id=213): unshare(0x6a060000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) symlink(0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220800"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 36.402973573s ago: executing program 0 (id=317): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0x106, &(0x7f0000002700)=""/262}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000000000786"], 0x0, 0x1a, 0x0, 0x8}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 34.410101228s ago: executing program 0 (id=327): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x565d, 0x7, 0xffff0eb3, 0xa3}}]}]}}}]}, 0x68}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 34.133429002s ago: executing program 0 (id=328): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 33.077583782s ago: executing program 0 (id=331): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 32.635460113s ago: executing program 0 (id=346): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0xa, 0x7, 0x400000) sendmsg$AUDIT_GET_FEATURE(r0, 0x0, 0x20008044) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, 0x0) 31.620502151s ago: executing program 0 (id=348): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f00000006c0), 0x4000183, 0x142, 0x0) 16.430040026s ago: executing program 34 (id=348): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f00000006c0), 0x4000183, 0x142, 0x0) 8.757776662s ago: executing program 6 (id=419): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x109001) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r5, 0x0, 0x0}, 0x20) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) setrlimit(0xe, &(0x7f0000000140)={0x3ff, 0x2}) gettid() 7.617307137s ago: executing program 6 (id=421): select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x3}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000480)}], 0x1, 0x8) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000004000000e0000002000000000000000000000000ff02000000000000000000000000000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="6800000000090504000000000000000002000000090001007379003000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x4080) 7.614202497s ago: executing program 5 (id=422): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4050) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x26}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 7.582303078s ago: executing program 2 (id=423): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xffffffffffffff9e, 0x70411, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) 7.148818029s ago: executing program 1 (id=425): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000200)={0x11, 0x888e, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000780)={0xc0000000}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000005000000181100", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x3, 0x3f, &(0x7f0000000280)=""/63, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x5, 0x47eb3fe9, 0x3}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000400)=[{0x0, 0x5, 0x5, 0x3}, {0x1, 0x5, 0x2, 0x7}, {0x3, 0x2, 0xd, 0xc}, {0x2, 0x5, 0xd, 0x9}, {0x2, 0x4, 0x10, 0x3}, {0x0, 0x5, 0x9, 0x4}, {0x5, 0x2, 0x7, 0xc}, {0x1, 0x4, 0x6, 0x3}], 0x10, 0xfffffc00}, 0x94) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000580)=r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x0, 0x6, 0x0, 0x0, 0x41000, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0005", @ANYRESOCT], 0xfdef) close(0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000040300000000000000000000100c"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x20) 6.570927287s ago: executing program 5 (id=426): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000ac0)={0x40, 0x11, 0xc, "db919c0962bfd12e9e0fea45"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x19, 0x2, "be34"}, 0x0, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0x8}, 0x0, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x8}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20129, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010) write(r0, &(0x7f0000000700)="ffffffffffffc011223344554305000f32ffff90000100112233445500112233445500ff0000", 0xfdef) 6.570536007s ago: executing program 6 (id=427): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 6.412699944s ago: executing program 2 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peekuser(0x3, r0, 0x1) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x9) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r2, &(0x7f0000000b40)=[{&(0x7f0000000cc0)=""/154, 0xfdef}, {0x0}, {0x0}], 0x3) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 6.347470497s ago: executing program 1 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa08000600"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) 5.494141878s ago: executing program 2 (id=430): mkdirat(0xffffffffffffff9c, 0x0, 0x1df) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() epoll_create(0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 5.274930199s ago: executing program 1 (id=431): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = semget$private(0x0, 0x6, 0x3b1) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) geteuid() socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80002000, 0x0) semop(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init() r3 = socket(0x8, 0x6, 0x0) bind$vsock_stream(r3, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 5.274623589s ago: executing program 5 (id=432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000240)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) 3.767227141s ago: executing program 6 (id=433): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) r6 = getpgrp(0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x150003b0) r8 = gettid() rt_tgsigqueueinfo(r6, r8, 0xb, &(0x7f00000021c0)={0x17, 0xe, 0x4}) 3.698496934s ago: executing program 2 (id=434): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc8}]}}}, 0x8) io_setup(0xd4, 0x0) 3.433285827s ago: executing program 5 (id=435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82600, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x74bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0x5}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.346654431s ago: executing program 1 (id=436): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 2.248780613s ago: executing program 6 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) 2.246185813s ago: executing program 2 (id=446): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x121c42, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in=@loopback, 0x4e30, 0x401, 0x4e22, 0x0, 0xa, 0x0, 0x1a0, 0x88}, {0x4, 0x7, 0x100, 0x7, 0x8, 0xfa1, 0x4, 0x6}, {0xffff, 0x2, 0x9, 0x6}, 0x5, 0x6e6bb4, 0x2, 0x1, 0x1, 0x3}, {{@in=@local, 0x4d3, 0x33}, 0x2, @in=@loopback, 0x3500, 0x3, 0x3, 0xff, 0x2, 0x64, 0x91}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setns(0xc9, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0xfffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) mount$afs(&(0x7f0000000200)=@cell={0x23, '', 'syz1', '.readonly'}, &(0x7f0000000140)='./file0\x00', &(0x7f00000000e0), 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000001e00)={0x0, 0x6}, &(0x7f0000001e40)=0x8) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'mpc624\x00', [0x100, 0x5, 0x2, 0xc, 0x10, 0x5, 0x79, 0x0, 0xb, 0x4, 0x2, 0x1, 0x7, 0x8, 0x40, 0xfd, 0xfffffffb, 0xdd, 0x4000003, 0x7fff, 0xffffffff, 0xca9d, 0x7, 0x5, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x7, 0x0, 0xfffffff8]}) 2.125604119s ago: executing program 5 (id=438): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x240240, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) migrate_pages(r2, 0xfffffeff, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xe, {0x2, 0x4e22, @multicast1}, 'vlan0\x00'}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0xa0}, 0x1, 0x7}, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='functionfs\x00', 0xb) read(0xffffffffffffffff, &(0x7f0000000100), 0xb) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r6, 0x1, 0xc, 0x0, &(0x7f00000004c0)) 1.228942002s ago: executing program 1 (id=439): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) 297.417546ms ago: executing program 2 (id=440): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40c4) flock(0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) socket$inet6(0xa, 0x3, 0xff) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x4020800) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r5, r5, 0x0) 121.267575ms ago: executing program 6 (id=441): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240480c0}, 0x4044080) 14.49503ms ago: executing program 5 (id=442): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) 0s ago: executing program 1 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): ed promiscuous mode [ 69.277270][ T4199] device veth1_macvtap entered promiscuous mode [ 69.291767][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.303704][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.312456][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.332452][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.374111][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.393536][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.402121][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.410301][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.426780][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.446515][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.456951][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 69.463185][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 69.468428][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.470777][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 69.488501][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.498577][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 69.506580][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.518082][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 69.526119][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.538153][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.548509][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.561286][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.571194][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.581649][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.593734][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.604411][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.616381][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.624487][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.633702][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.641766][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.650778][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.659713][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.669357][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.707913][ T439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.715811][ T439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.754600][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.764826][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.781228][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.790549][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.814117][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.837214][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.875204][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.889099][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.910464][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.932249][ T4189] device veth0_vlan entered promiscuous mode [ 69.948744][ T4267] loop3: detected capacity change from 0 to 1024 [ 69.956488][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.969401][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.997296][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.028718][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.042539][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.125364][ T26] audit: type=1800 audit(1789803109.693:2): pid=4267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6" name="file1" dev="loop3" ino=27 res=0 errno=0 [ 70.183094][ T4189] device veth1_vlan entered promiscuous mode [ 70.223739][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.264651][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.333620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.364246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.416024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.455416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.484829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.522867][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.538356][ T4189] device veth0_macvtap entered promiscuous mode [ 70.545103][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.582510][ T4189] device veth1_macvtap entered promiscuous mode [ 70.609295][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.647191][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.662765][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.685623][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.717275][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.740568][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.761482][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.782060][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.815625][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.847150][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.888244][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.922074][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.953140][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.981363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.990404][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.990422][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.990431][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.990443][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.990453][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.990483][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.990493][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.990506][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.991856][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.991940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.000474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.011694][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.011759][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.011789][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.011818][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.088810][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.095325][ T4280] loop2: detected capacity change from 0 to 32768 [ 71.139358][ T4280] ======================================================= [ 71.139358][ T4280] WARNING: The mand mount option has been deprecated and [ 71.139358][ T4280] and is ignored by this kernel. Remove the mand [ 71.139358][ T4280] option from the mount to silence this warning. [ 71.139358][ T4280] ======================================================= [ 71.159765][ T4280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 71.195618][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.195769][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.205086][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.205106][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.205315][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.217184][ T26] audit: type=1326 audit(1789803110.783:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.5" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c731c1159 code=0x7ffc0000 [ 71.217327][ T26] audit: type=1326 audit(1789803110.783:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.5" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c731c1159 code=0x7ffc0000 [ 71.227482][ T26] audit: type=1326 audit(1789803110.793:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.5" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c731c1159 code=0x7ffc0000 [ 71.241039][ T26] audit: type=1326 audit(1789803110.813:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.5" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c731c1159 code=0x7ffc0000 [ 71.241286][ T26] audit: type=1326 audit(1789803110.813:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.5" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c731c1159 code=0x7ffc0000 [ 71.241327][ T26] audit: type=1326 audit(1789803110.813:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.5" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c731c1159 code=0x7ffc0000 [ 71.241363][ T26] audit: type=1326 audit(1789803110.793:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.5" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c731c1159 code=0x7ffc0000 [ 71.241770][ T26] audit: type=1326 audit(1789803110.813:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.5" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c731c1159 code=0x7ffc0000 [ 71.242879][ T26] audit: type=1326 audit(1789803110.813:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.5" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4c731c1159 code=0x7ffc0000 [ 71.252688][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.252707][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.252907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.328139][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 71.521408][ T4241] Bluetooth: hci0: command 0x0419 tx timeout [ 71.659622][ T7] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 71.918157][ T4310] loop2: detected capacity change from 0 to 2048 [ 71.927287][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.933696][ T4311] loop0: detected capacity change from 0 to 1024 [ 71.948080][ T7] usb 2-1: config 0 has no interface number 0 [ 71.965849][ T4241] Bluetooth: hci1: command 0x0419 tx timeout [ 71.972007][ T4241] Bluetooth: hci3: command 0x0419 tx timeout [ 71.978564][ T4241] Bluetooth: hci2: command 0x0419 tx timeout [ 71.986175][ T4241] Bluetooth: hci4: command 0x0419 tx timeout [ 72.019249][ T154] hfsplus: b-tree write err: -5, ino 25 [ 72.025760][ T154] hfsplus: b-tree write err: -5, ino 4 [ 72.088452][ T154] hfsplus: b-tree write err: -5, ino 2 [ 72.094240][ T154] hfsplus: b-tree write err: -5, ino 26 [ 72.108202][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 72.127704][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.128042][ T4310] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.135744][ T7] usb 2-1: Product: syz [ 72.135762][ T7] usb 2-1: Manufacturer: syz [ 72.135785][ T7] usb 2-1: SerialNumber: syz [ 72.192535][ T7] usb 2-1: config 0 descriptor?? [ 72.209692][ T154] hfsplus: b-tree write err: -5, ino 27 [ 72.220112][ T4310] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.254830][ T7] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 72.272429][ T7] usb 2-1: No valid video chain found. [ 72.524487][ T4310] CacheFiles: No cache directory specified [ 72.529724][ T3077] hfsplus: b-tree write err: -5, ino 25 [ 72.536925][ T3077] hfsplus: b-tree write err: -5, ino 4 [ 72.546172][ T4321] loop3: detected capacity change from 0 to 1024 [ 72.579129][ T4324] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.593605][ T3077] hfsplus: b-tree write err: -5, ino 2 [ 72.627945][ T3077] hfsplus: b-tree write err: -5, ino 26 [ 72.661175][ T3077] hfsplus: b-tree write err: -5, ino 27 [ 72.911716][ T4329] Zero length message leads to an empty skb [ 73.713094][ T4232] usb 2-1: USB disconnect, device number 2 [ 73.876898][ T1278] hfsplus: b-tree write err: -5, ino 25 [ 73.885616][ T1278] hfsplus: b-tree write err: -5, ino 4 [ 73.902105][ T1278] hfsplus: b-tree write err: -5, ino 2 [ 73.949889][ T1278] hfsplus: b-tree write err: -5, ino 26 [ 73.989764][ T1278] hfsplus: b-tree write err: -5, ino 27 [ 74.178769][ T4344] loop1: detected capacity change from 0 to 128 [ 74.240235][ T4344] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 74.260394][ T4344] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.308345][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.547810][ T4232] usb 3-1: Using ep0 maxpacket: 8 [ 74.715818][ T4232] usb 3-1: unable to get BOS descriptor or descriptor too short [ 74.727818][ T1325] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.817984][ T4232] usb 3-1: config 7 has an invalid interface number: 35 but max is 0 [ 74.826106][ T4232] usb 3-1: config 7 has no interface number 0 [ 74.868739][ T4232] usb 3-1: config 7 interface 35 has no altsetting 0 [ 75.027785][ T4232] usb 3-1: New USB device found, idVendor=4a04, idProduct=7ea4, bcdDevice=71.f9 [ 75.037311][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.045907][ T4232] usb 3-1: Product: ᮯቑ䞀巑䏣屷Ⓒ [ 75.052497][ T4232] usb 3-1: Manufacturer: ခ [ 75.057268][ T4232] usb 3-1: SerialNumber: Ч [ 75.097810][ T1325] usb 2-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 75.110263][ T1325] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 75.119757][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.140627][ T1325] usb 2-1: config 0 descriptor?? [ 75.192216][ T1325] usb 2-1: bad CDC descriptors [ 75.207109][ T1325] usb 2-1: bad CDC descriptors [ 75.388612][ T4232] usb 3-1: bad CDC descriptors [ 75.402297][ T4232] usb 3-1: USB disconnect, device number 2 [ 75.437772][ T13] usb 2-1: USB disconnect, device number 3 [ 75.707616][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 75.727619][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 75.737660][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.757655][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.767611][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.787619][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.877714][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.967614][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 75.987630][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 76.007988][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 76.366441][ T26] kauditd_printk_skb: 113 callbacks suppressed [ 76.366454][ T26] audit: type=1800 audit(1789803115.933:125): pid=4368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.25" name="zone_nr_conv" dev="configfs" ino=32613 res=0 errno=0 [ 76.468335][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.717740][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 76.837962][ T13] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 76.846955][ T13] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.927775][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.983358][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.013754][ T13] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.037184][ T13] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.056634][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.031329][ T155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.137888][ T13] usb 1-1: usb_control_msg returned -32 [ 78.157319][ T155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.178331][ T13] usbtmc 1-1:16.0: can't read capabilities [ 78.244177][ T4405] netlink: 40 bytes leftover after parsing attributes in process `syz.1.37'. [ 78.438516][ T155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.673875][ T4410] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.258937][ T4232] usb 1-1: USB disconnect, device number 2 [ 80.375707][ T4426] loop0: detected capacity change from 0 to 512 [ 80.550255][ T4434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 80.572261][ T4426] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 80.668347][ T4426] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.017763][ T4235] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.331349][ T4421] chnl_net:caif_netlink_parms(): no params data found [ 81.772459][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.806220][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.814693][ T4421] device bridge_slave_0 entered promiscuous mode [ 81.821740][ T4235] usb 2-1: Using ep0 maxpacket: 8 [ 81.845530][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.857892][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.870634][ T4421] device bridge_slave_1 entered promiscuous mode [ 81.898711][ T4421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.927560][ T4421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.950323][ T4235] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 81.962039][ T4235] usb 2-1: config 179 has no interface number 0 [ 81.979117][ T4235] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 81.994758][ T4235] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 82.009971][ T4235] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 82.026338][ T4235] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 82.045227][ T4235] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 82.065722][ T4235] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 82.077030][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.097670][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.108221][ T4438] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 82.141179][ T4421] team0: Port device team_slave_0 added [ 82.150653][ T4421] team0: Port device team_slave_1 added [ 82.228422][ T4421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.235817][ T4421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.269613][ T4421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.291605][ T4421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.313720][ T4421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.359763][ T4421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.377445][ T4235] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 82.417803][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 82.486755][ T4235] Bluetooth: hci4: command 0x0409 tx timeout [ 82.551413][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 82.561514][ T4421] device hsr_slave_0 entered promiscuous mode [ 82.586505][ T23] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 82.609366][ T4421] device hsr_slave_1 entered promiscuous mode [ 82.647779][ T4232] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 82.661387][ T4235] usb 2-1: USB disconnect, device number 4 [ 82.668491][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 82.668642][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 82.692812][ T4235] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 82.720100][ T4421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.740563][ T4421] Cannot create hsr debugfs directory [ 82.777999][ T23] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 82.789260][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.797443][ T23] usb 1-1: Product: syz [ 82.817691][ T23] usb 1-1: Manufacturer: syz [ 82.827838][ T23] usb 1-1: SerialNumber: syz [ 82.840346][ T23] usb 1-1: config 0 descriptor?? [ 82.865499][ T155] device hsr_slave_0 left promiscuous mode [ 82.878131][ T4467] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 82.900186][ T155] device hsr_slave_1 left promiscuous mode [ 82.914767][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.929780][ T23] powermate: probe of 1-1:0.0 failed with error -22 [ 82.936565][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.963247][ T4490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.54'. [ 82.984094][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.993874][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.007965][ T4232] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 83.015424][ T4232] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 83.027345][ T4232] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 83.038775][ T155] device bridge_slave_1 left promiscuous mode [ 83.059267][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.117722][ T4232] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 83.120844][ T155] device bridge_slave_0 left promiscuous mode [ 83.128814][ T4232] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 83.147146][ T4232] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 83.187049][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.268124][ T4232] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 83.289210][ T4232] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 83.398771][ T4232] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 83.438422][ T4499] loop1: detected capacity change from 0 to 764 [ 83.777963][ T4232] usb 4-1: string descriptor 0 read error: -22 [ 83.797382][ T4232] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 83.976359][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.094156][ T155] device veth1_macvtap left promiscuous mode [ 84.108627][ T155] device veth0_macvtap left promiscuous mode [ 84.129461][ T4232] adutux 4-1:168.0: interrupt endpoints not found [ 84.146203][ T155] device veth1_vlan left promiscuous mode [ 84.152308][ T155] device veth0_vlan left promiscuous mode [ 84.352212][ T4232] usb 4-1: USB disconnect, device number 2 [ 84.547756][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 84.734186][ T155] team0 (unregistering): Port device team_slave_1 removed [ 84.779858][ T155] team0 (unregistering): Port device team_slave_0 removed [ 84.795760][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.815242][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.855452][ T4232] usb 1-1: USB disconnect, device number 3 [ 86.412572][ T155] bond0 (unregistering): Released all slaves [ 86.827225][ T1109] cfg80211: failed to load regulatory.db [ 86.877875][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 87.384192][ T4532] loop3: detected capacity change from 0 to 512 [ 87.485267][ T4532] EXT4-fs (loop3): Ignoring removed nobh option [ 87.562654][ T4532] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 87.650588][ T4532] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.66: attempt to clear invalid blocks 1 len 1 [ 87.736832][ T4532] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 87.811636][ T4532] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.66: invalid indirect mapped block 1819239214 (level 0) [ 87.899752][ T4532] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.66: invalid indirect mapped block 1819239214 (level 1) [ 87.968174][ T4532] EXT4-fs (loop3): 1 truncate cleaned up [ 87.973885][ T4532] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback. [ 87.979381][ T4421] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.299995][ T4421] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.920123][ T4421] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.974448][ T4421] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.037789][ T4332] Bluetooth: hci4: command 0x0419 tx timeout [ 89.101319][ T4569] autofs4:pid:4569:autofs_fill_super: called with bogus options [ 90.041889][ T4421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.700273][ T4421] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.717268][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.790443][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.847791][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.283580][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.294635][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.301781][ T4335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.439437][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.452290][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.484107][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.491238][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.691375][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.813128][ T4600] vivid-000: kernel_thread() failed [ 91.848736][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.878925][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.914873][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.995056][ T4421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.104903][ T4421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.136170][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.167471][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.278258][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.451223][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.600502][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.635509][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.674974][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.718580][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.772754][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.426464][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.437909][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.514541][ T4421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.626015][ T4648] jffs2: notice: (4648) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.547567][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.572083][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.674366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.703138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.788771][ T4421] device veth0_vlan entered promiscuous mode [ 94.812216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.847065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.899482][ T4421] device veth1_vlan entered promiscuous mode [ 95.011965][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.029279][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.073423][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.127912][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.166838][ T4421] device veth0_macvtap entered promiscuous mode [ 95.207189][ T4421] device veth1_macvtap entered promiscuous mode [ 95.283746][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.344914][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.389557][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.405950][ T4662] loop0: detected capacity change from 0 to 32768 [ 95.445010][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.455894][ T4662] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.96 (4662) [ 95.484276][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.523648][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.561613][ T4662] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 95.574721][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.609555][ T4662] BTRFS info (device loop0): using free space tree [ 95.629731][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.639830][ T4662] BTRFS info (device loop0): has skinny extents [ 95.659309][ T4421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.693320][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.705822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.730466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.754803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.777429][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.796242][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.975899][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.066743][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 96.827717][ T4662] BTRFS info (device loop0): enabling ssd optimizations [ 96.877731][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.924819][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.977640][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.008128][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.052750][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.102166][ T4421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.136674][ T4421] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.145640][ T4421] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.181153][ T4421] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.217786][ T4421] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.254771][ T4714] loop3: detected capacity change from 0 to 1024 [ 97.262543][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.287152][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.576330][ T4714] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.797647][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.805684][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.289566][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.411531][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.428292][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.467751][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.671690][ T4740] loop5: detected capacity change from 0 to 64 [ 98.847771][ T1347] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.989270][ T4748] loop1: detected capacity change from 0 to 512 [ 99.043962][ T4751] device syzkaller1 entered promiscuous mode [ 99.151327][ T4748] EXT4-fs (loop1): Ignoring removed nobh option [ 99.226505][ T4748] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.745049][ T4763] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.962579][ T4748] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 100.077895][ T1347] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.130417][ T1347] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 100.136744][ T4748] EXT4-fs (loop1): Remounting filesystem read-only [ 100.175007][ T4748] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.112: invalid indirect mapped block 4278190080 (level 0) [ 100.187857][ T1347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.376275][ T4748] EXT4-fs (loop1): Remounting filesystem read-only [ 100.414002][ T4748] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.112: invalid indirect mapped block 1 (level 1) [ 100.527211][ T1347] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 100.557443][ T4788] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 100.607641][ T4748] EXT4-fs (loop1): Remounting filesystem read-only [ 100.704685][ T4791] bond1: (slave veth3): Enslaving as an active interface with a down link [ 100.727636][ T4748] EXT4-fs (loop1): 1 truncate cleaned up [ 100.733351][ T4748] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,jqfmt=vfsv1,resgid=0x0000000000000000,nolazytime,nobh,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none. [ 100.910466][ T4788] bond1: (slave veth0_to_bond): making interface the new active one [ 100.929450][ T4788] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 101.663697][ T4748] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.112: corrupted in-inode xattr [ 101.706133][ T1347] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 12:4a:09:e9:01:a9 [ 101.757411][ T4748] EXT4-fs (loop1): Remounting filesystem read-only [ 101.777785][ T1347] usb 4-1: USB disconnect, device number 3 [ 101.836418][ T1347] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 101.995599][ T4815] loop2: detected capacity change from 0 to 128 [ 102.886670][ T4825] sctp: failed to load transform for md5: -2 [ 103.100869][ T4839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.136'. [ 103.298195][ T154] attempt to access beyond end of device [ 103.298195][ T154] loop2: rw=1, want=161, limit=128 [ 103.463299][ T4847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 104.529392][ T4861] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 107.469183][ T4866] overlayfs: statfs failed on './file0' [ 108.744898][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.835506][ T4899] loop0: detected capacity change from 0 to 512 [ 110.224648][ T4899] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.377926][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.427765][ T23] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.427781][ T4899] EXT4-fs warning (device loop0): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 110.593673][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.603670][ T4916] loop5: detected capacity change from 0 to 1024 [ 110.631061][ T4915] syz.2.154 uses obsolete (PF_INET,SOCK_PACKET) [ 110.653569][ T23] usb 3-1: config 0 descriptor?? [ 110.688067][ T23] usb 3-1: can't set config #0, error -71 [ 110.727821][ T23] usb 3-1: USB disconnect, device number 3 [ 111.007021][ T4915] sctp: failed to load transform for md5: -2 [ 111.407762][ T1347] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 112.122953][ T1347] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.153714][ T1347] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.249755][ T1347] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 112.310788][ T1347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.688088][ T1347] rtsx_usb: probe of 6-1:1.0 failed with error -71 [ 112.723031][ T1347] usb 6-1: USB disconnect, device number 2 [ 113.697235][ T4970] netlink: 76 bytes leftover after parsing attributes in process `syz.3.163'. [ 113.821638][ T4979] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.866477][ T4981] FAULT_INJECTION: forcing a failure. [ 113.866477][ T4981] name failslab, interval 1, probability 0, space 0, times 1 [ 113.904123][ T4981] CPU: 1 PID: 4981 Comm: syz.3.166 Not tainted syzkaller #0 [ 113.911469][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.921562][ T4981] Call Trace: [ 113.924862][ T4981] [ 113.927806][ T4981] dump_stack_lvl+0x188/0x250 [ 113.932519][ T4981] ? show_regs_print_info+0x20/0x20 [ 113.937749][ T4981] ? load_image+0x410/0x410 [ 113.942291][ T4981] ? __lock_acquire+0x7b50/0x7b50 [ 113.947349][ T4981] should_fail+0x383/0x4b0 [ 113.951796][ T4981] ? comm_open+0x30/0x30 [ 113.956069][ T4981] should_failslab+0x5/0x20 [ 113.960597][ T4981] slab_pre_alloc_hook+0x51/0xc0 [ 113.965566][ T4981] ? comm_open+0x30/0x30 [ 113.969864][ T4981] kmem_cache_alloc_trace+0x47/0x290 [ 113.975181][ T4981] ? single_open+0x56/0x240 [ 113.979735][ T4981] ? comm_open+0x30/0x30 [ 113.984018][ T4981] single_open+0x56/0x240 [ 113.988371][ T4981] ? comm_open+0xe/0x30 [ 113.992555][ T4981] ? comm_write+0x290/0x290 [ 113.997086][ T4981] do_dentry_open+0x7f7/0xf90 [ 114.001812][ T4981] ? vfs_open+0x2b/0x80 [ 114.006003][ T4981] path_openat+0x2718/0x2fb0 [ 114.010652][ T4981] ? do_filp_open+0x400/0x400 [ 114.015370][ T4981] do_filp_open+0x1df/0x400 [ 114.019905][ T4981] ? vfs_tmpfile+0x300/0x300 [ 114.024530][ T4981] ? noop_direct_IO+0x10/0x10 [ 114.029243][ T4981] ? _raw_spin_unlock+0x24/0x40 [ 114.034137][ T4981] ? alloc_fd+0x59e/0x650 [ 114.038500][ T4981] do_sys_openat2+0x14b/0x500 [ 114.043204][ T4981] ? __lock_acquire+0x7b50/0x7b50 [ 114.048261][ T4981] ? do_sys_open+0xe0/0xe0 [ 114.052707][ T4981] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 114.058770][ T4981] ? lock_chain_count+0x20/0x20 [ 114.063661][ T4981] __x64_sys_openat+0x135/0x160 [ 114.068537][ T4981] do_syscall_64+0x4c/0xa0 [ 114.072972][ T4981] ? clear_bhb_loop+0x30/0x80 [ 114.077673][ T4981] ? clear_bhb_loop+0x30/0x80 [ 114.082396][ T4981] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.088324][ T4981] RIP: 0033:0x7f81c3d0a98e [ 114.092770][ T4981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.095217][ T4975] loop0: detected capacity change from 0 to 4096 [ 114.112399][ T4981] RSP: 002b:00007f81c1fa1ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.112426][ T4981] RAX: ffffffffffffffda RBX: 00007f81c1fa26c0 RCX: 00007f81c3d0a98e [ 114.112452][ T4981] RDX: 0000000000000002 RSI: 00007f81c1fa1f90 RDI: ffffffffffffff9c [ 114.143173][ T4981] RBP: 00007f81c3de106b R08: 0000000000000000 R09: 0000000000000000 [ 114.151168][ T4981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.159171][ T4981] R13: 00007f81c3fd2038 R14: 00007f81c3fd1fa0 R15: 00007ffd6c26f4b8 [ 114.167217][ T4981] [ 114.256035][ T4975] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 114.365517][ T4975] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 114.621185][ T4975] ntfs3: loop0: ino=5, "/" directory corrupted [ 115.135507][ T5004] process 'syz.1.173' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 115.163482][ T5002] netlink: 284 bytes leftover after parsing attributes in process `syz.5.172'. [ 115.460616][ T5012] Can't find ip_set type hash:ne [ 115.867094][ T5026] loop0: detected capacity change from 0 to 64 [ 116.772161][ T5031] FAULT_INJECTION: forcing a failure. [ 116.772161][ T5031] name failslab, interval 1, probability 0, space 0, times 0 [ 116.801501][ T5031] CPU: 1 PID: 5031 Comm: syz.2.181 Not tainted syzkaller #0 [ 116.808940][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.819032][ T5031] Call Trace: [ 116.822331][ T5031] [ 116.825280][ T5031] dump_stack_lvl+0x188/0x250 [ 116.829985][ T5031] ? show_regs_print_info+0x20/0x20 [ 116.835227][ T5031] ? load_image+0x410/0x410 [ 116.839768][ T5031] ? __lock_acquire+0x7b50/0x7b50 [ 116.844938][ T5031] should_fail+0x383/0x4b0 [ 116.849393][ T5031] should_failslab+0x5/0x20 [ 116.853925][ T5031] slab_pre_alloc_hook+0x51/0xc0 [ 116.858882][ T5031] ? __alloc_file+0x25/0x240 [ 116.863499][ T5031] kmem_cache_alloc+0x3d/0x280 [ 116.868304][ T5031] __alloc_file+0x25/0x240 [ 116.872757][ T5031] alloc_empty_file+0x90/0x180 [ 116.877563][ T5031] alloc_file+0x5c/0x510 [ 116.881827][ T5031] ? do_raw_spin_unlock+0x11d/0x230 [ 116.887047][ T5031] alloc_file_pseudo+0x180/0x200 [ 116.892008][ T5031] ? alloc_empty_file_noaccount+0x80/0x80 [ 116.897752][ T5031] ? _raw_spin_unlock+0x24/0x40 [ 116.902647][ T5031] __anon_inode_getfd+0x26b/0x3d0 [ 116.907703][ T5031] ? __local_bh_enable_ip+0x136/0x1c0 [ 116.913096][ T5031] ? anon_inode_getfd+0x40/0x40 [ 116.917975][ T5031] ? do_raw_spin_unlock+0x11d/0x230 [ 116.923205][ T5031] btf_new_fd+0x77b/0x910 [ 116.927567][ T5031] __sys_bpf+0x58c/0x6f0 [ 116.931839][ T5031] ? bpf_link_show_fdinfo+0x380/0x380 [ 116.937261][ T5031] __x64_sys_bpf+0x78/0x90 [ 116.941706][ T5031] do_syscall_64+0x4c/0xa0 [ 116.946138][ T5031] ? clear_bhb_loop+0x30/0x80 [ 116.950827][ T5031] ? clear_bhb_loop+0x30/0x80 [ 116.955544][ T5031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.958545][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 116.961463][ T5031] RIP: 0033:0x7fe87765c159 [ 116.973345][ T5031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.992975][ T5031] RSP: 002b:00007fe8758b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.001414][ T5031] RAX: ffffffffffffffda RBX: 00007fe8778e3fa0 RCX: 00007fe87765c159 [ 117.009415][ T5031] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 117.017417][ T5031] RBP: 00007fe8776f306b R08: 0000000000000000 R09: 0000000000000000 [ 117.025492][ T5031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.033487][ T5031] R13: 00007fe8778e4038 R14: 00007fe8778e3fa0 R15: 00007fffc8f1a958 [ 117.041509][ T5031] [ 117.247724][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 117.697691][ T1109] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.167894][ T1109] usb 1-1: unable to get BOS descriptor or descriptor too short [ 118.248033][ T1109] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 118.283961][ T1109] usb 1-1: can't read configurations, error -71 [ 118.483442][ T5023] loop1: detected capacity change from 0 to 40427 [ 118.617787][ T7] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 118.626091][ T7] usb 6-1: config 179 has no interface number 0 [ 118.693086][ T5023] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 118.841509][ T5023] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.212298][ T5023] F2FS-fs (loop1): invalid crc value [ 119.363508][ T5023] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 119.838071][ T7] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 119.849430][ T7] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 119.860862][ T7] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 119.874832][ T7] usb 6-1: config 179 interface 65 has no altsetting 0 [ 119.881822][ T7] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 119.891296][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.937758][ T7] usb 6-1: can't set config #179, error -71 [ 119.949933][ T7] usb 6-1: USB disconnect, device number 3 [ 120.133597][ T5054] netlink: 20 bytes leftover after parsing attributes in process `syz.5.187'. [ 120.414491][ T5038] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.422962][ T5038] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.777606][ C1] sched: RT throttling activated [ 124.112121][ T5072] ODEBUG: Out of memory. ODEBUG disabled [ 124.371230][ T5072] syz.5.191 (5072) used greatest stack depth: 19536 bytes left [ 124.611045][ T5084] loop1: detected capacity change from 0 to 256 [ 124.696252][ T26] audit: type=1326 audit(1789803164.263:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5079 comm="syz.5.194" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a2d5f6159 code=0x0 [ 125.367988][ T5084] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 125.567063][ T5089] loop5: detected capacity change from 0 to 512 [ 127.078853][ T4982] syz.5.164 (4982) used greatest stack depth: 18544 bytes left [ 127.497830][ T5038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.597047][ T5038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.321755][ T5038] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.330932][ T5038] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.340979][ T5038] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.350166][ T5038] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.490106][ T5098] tipc: Started in network mode [ 128.495333][ T5098] tipc: Node identity 868619c938e7, cluster identity 4711 [ 128.526079][ T5098] tipc: Enabled bearer , priority 0 [ 128.638795][ T5098] tipc: Disabling bearer [ 128.646306][ T5113] loop3: detected capacity change from 0 to 512 [ 128.728357][ T5113] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 128.742283][ T5113] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.759077][ T5113] EXT4-fs error (device loop3): ext4_get_first_dir_block:3607: inode #12: block 32: comm syz.3.204: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 128.806413][ T5113] EXT4-fs error (device loop3): ext4_get_first_dir_block:3610: inode #12: comm syz.3.204: directory missing '.' [ 130.359966][ T26] audit: type=1800 audit(1789803169.933:127): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.204" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 130.710259][ T5152] futex_wake_op: syz.0.212 tries to shift op by 144; fix this program [ 130.721460][ T5152] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 130.733521][ T5152] loop0: detected capacity change from 0 to 256 [ 132.427321][ T5152] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 132.630341][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.637501][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.662318][ T5165] loop2: detected capacity change from 0 to 1024 [ 133.571702][ T5190] ip_tables: iptables: counters copy to user failed while replacing table [ 133.737781][ T4332] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 134.137218][ T4332] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 134.144833][ T4332] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 134.205923][ T4332] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 134.398097][ T4332] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 134.405712][ T4332] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 134.506371][ T4332] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 134.657888][ T4332] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 134.665338][ T4332] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 134.771706][ T4332] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 135.238142][ T4332] usb 2-1: string descriptor 0 read error: -22 [ 135.251240][ T4332] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 135.410408][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.779295][ T4332] adutux 2-1:168.0: interrupt endpoints not found [ 135.994860][ T4332] usb 2-1: USB disconnect, device number 5 [ 136.214724][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 136.293433][ T5237] IPv6: Can't replace route, no match found [ 136.309217][ T5241] loop5: detected capacity change from 0 to 2048 [ 136.357762][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.381738][ T5241] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.177680][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 138.314401][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.240'. [ 138.324560][ T26] audit: type=1326 audit(1789803177.893:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5252 comm="syz.0.239" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b48ac6159 code=0x7fc00000 [ 138.464234][ T26] audit: type=1326 audit(1789803178.033:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5252 comm="syz.0.239" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9b48a674d9 code=0x7fc00000 [ 138.497532][ T5273] FAULT_INJECTION: forcing a failure. [ 138.497532][ T5273] name fail_futex, interval 1, probability 0, space 0, times 1 [ 138.527904][ T4232] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 138.536981][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.577647][ T7] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 138.578135][ T5273] CPU: 1 PID: 5273 Comm: syz.5.242 Not tainted syzkaller #0 [ 138.585347][ T4232] usb 3-1: Product: syz [ 138.592440][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.592454][ T5273] Call Trace: [ 138.592461][ T5273] [ 138.592470][ T5273] dump_stack_lvl+0x188/0x250 [ 138.592495][ T5273] ? unwind_get_return_address+0x49/0x80 [ 138.592519][ T5273] ? stack_trace_save+0xf0/0xf0 [ 138.592540][ T5273] ? show_regs_print_info+0x20/0x20 [ 138.592558][ T5273] ? load_image+0x410/0x410 [ 138.592579][ T5273] ? kmem_cache_free+0x8f/0x210 [ 138.592599][ T5273] ? stack_trace_save+0xa6/0xf0 [ 138.592618][ T5273] ? stack_trace_snprint+0xe0/0xe0 [ 138.592640][ T5273] should_fail+0x383/0x4b0 [ 138.592667][ T5273] get_futex_key+0x1a1/0x12d0 [ 138.592705][ T5273] ? futex_wait_restart+0x250/0x250 [ 138.592724][ T5273] ? __lock_acquire+0x13dc/0x7b50 [ 138.592755][ T5273] futex_wake+0x101/0x540 [ 138.592782][ T5273] ? futex_wait+0x680/0x680 [ 138.592802][ T5273] ? verify_lock_unused+0x140/0x140 [ 138.627712][ T4232] usb 3-1: Manufacturer: syz [ 138.628421][ T5273] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.640226][ T4232] usb 3-1: SerialNumber: syz [ 138.642983][ T5273] ? verify_lock_unused+0x140/0x140 [ 138.706612][ T5273] do_futex+0xd83/0x12b0 [ 138.710872][ T5273] ? kasan_quarantine_put+0xd4/0x210 [ 138.716176][ T5273] ? lockdep_hardirqs_on+0x94/0x140 [ 138.721491][ T5273] ? futex_exit_release+0x1c0/0x1c0 [ 138.726706][ T5273] ? __context_tracking_exit+0x4c/0x80 [ 138.732192][ T5273] __se_sys_futex+0x389/0x420 [ 138.736887][ T5273] ? __x64_sys_futex+0xf0/0xf0 [ 138.741665][ T5273] ? __x64_sys_futex+0x1d/0xf0 [ 138.746441][ T5273] do_syscall_64+0x4c/0xa0 [ 138.750873][ T5273] ? clear_bhb_loop+0x30/0x80 [ 138.755566][ T5273] ? clear_bhb_loop+0x30/0x80 [ 138.760254][ T5273] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.766171][ T5273] RIP: 0033:0x7f3a2d5f6159 [ 138.770614][ T5273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.790231][ T5273] RSP: 002b:00007f3a2b82d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.798666][ T5273] RAX: ffffffffffffffda RBX: 00007f3a2d87e098 RCX: 00007f3a2d5f6159 [ 138.806657][ T5273] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3a2d87e09c [ 138.814638][ T5273] RBP: 00007f3a2d87e090 R08: 0019f28c8f8e09f2 R09: 0000000000000000 [ 138.822618][ T5273] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 138.830598][ T5273] R13: 00007f3a2d87e128 R14: 00007fffd9887830 R15: 00007fffd9887918 [ 138.838589][ T5273] [ 139.099891][ T4232] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 139.148020][ T4232] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 139.176496][ T4232] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 139.211859][ T4232] usb 3-1: media controller created [ 139.227742][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.251596][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.304727][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.316150][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.351069][ T7] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 139.362455][ T5300] loop0: detected capacity change from 0 to 128 [ 139.387609][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.408025][ T4232] zl10353_read_register: readreg error (reg=127, ret==-71) [ 139.416536][ T7] usb 2-1: config 0 descriptor?? [ 139.469612][ T4232] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 139.517804][ T4232] usb 3-1: USB disconnect, device number 4 [ 139.675375][ T5310] loop2: detected capacity change from 0 to 2048 [ 140.342484][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.389359][ T5310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.449665][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.589651][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.597508][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.607902][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.615304][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.635227][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.728319][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.728467][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.728582][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.728697][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.728818][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.728911][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.729026][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.729140][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.729240][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.729353][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.729466][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.729579][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.729693][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.729794][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.729904][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.730017][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.730107][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.730198][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.730315][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.730407][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.730541][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.730633][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.730745][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.730866][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.730958][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.731070][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 140.731183][ T7] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0 [ 141.374701][ T7] hid-generic 0003:0457:07DA.0001: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 141.554899][ T7] usb 2-1: USB disconnect, device number 6 [ 141.927655][ T4722] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.297652][ T4232] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 142.727751][ T4722] usb 1-1: Using ep0 maxpacket: 16 [ 142.858588][ T4232] usb 6-1: device descriptor read/all, error -71 [ 142.875946][ T5328] fido_id[5328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 144.302728][ T5345] netlink: 44 bytes leftover after parsing attributes in process `syz.2.255'. [ 144.389252][ T4722] usb 1-1: unable to read config index 0 descriptor/all [ 144.403996][ T4722] usb 1-1: can't read configurations, error -71 [ 146.181252][ T5360] loop0: detected capacity change from 0 to 2048 [ 146.368882][ T5368] loop1: detected capacity change from 0 to 2048 [ 146.402618][ T5360] NILFS (loop0): invalid segment: Magic number mismatch [ 146.435168][ T5368] UDF-fs: bad mount option "gid=00000000000000060928" or missing value [ 146.443695][ T5360] NILFS (loop0): trying rollback from an earlier position [ 146.566817][ T5360] NILFS (loop0): recovery complete [ 146.664091][ T5374] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.973293][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.254'. [ 147.120342][ T5371] chnl_net:caif_netlink_parms(): no params data found [ 147.167766][ T4727] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.245845][ T5371] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.255154][ T5371] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.267461][ T5371] device bridge_slave_0 entered promiscuous mode [ 147.288927][ T5371] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.296079][ T5371] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.304807][ T5371] device bridge_slave_1 entered promiscuous mode [ 147.330378][ T5371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.342379][ T5371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.370645][ T5371] team0: Port device team_slave_0 added [ 147.379430][ T5371] team0: Port device team_slave_1 added [ 147.400393][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.407397][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.434016][ T5371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.456628][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.463711][ T4727] usb 2-1: Using ep0 maxpacket: 32 [ 147.469103][ T4722] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 147.486858][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.521500][ T5371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.579018][ T5371] device hsr_slave_0 entered promiscuous mode [ 147.595691][ T5371] device hsr_slave_1 entered promiscuous mode [ 147.606002][ T5371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.625834][ T5371] Cannot create hsr debugfs directory [ 147.631630][ T4727] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 147.667764][ T4727] usb 2-1: config 224 has too many interfaces: 101, using maximum allowed: 32 [ 147.677968][ T4727] usb 2-1: config 224 has an invalid descriptor of length 0, skipping remainder of the config [ 147.711318][ T4727] usb 2-1: config 224 has 0 interfaces, different from the descriptor's value: 101 [ 147.877949][ T4722] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 147.896367][ T4722] usb 6-1: config 0 has no interface number 0 [ 147.913027][ T4722] usb 6-1: config 0 interface 117 has no altsetting 0 [ 147.923227][ T4727] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 147.942944][ T4727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.967510][ T4727] usb 2-1: Product: syz [ 147.978344][ T4727] usb 2-1: Manufacturer: syz [ 147.987856][ T4727] usb 2-1: SerialNumber: syz [ 148.133241][ T5412] loop2: detected capacity change from 0 to 32768 [ 148.155439][ T4722] usb 6-1: New USB device found, idVendor=03f0, idProduct=1b1d, bcdDevice=91.6c [ 148.174982][ T4722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.196377][ T5371] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 148.223875][ T4722] usb 6-1: Product: syz [ 148.228551][ T4722] usb 6-1: Manufacturer: syz [ 148.233304][ T4722] usb 6-1: SerialNumber: syz [ 148.240471][ T4722] usb 6-1: config 0 descriptor?? [ 148.325653][ T5412] XFS (loop2): Mounting V5 Filesystem [ 148.430496][ T5412] XFS (loop2): Ending clean mount [ 148.537971][ T5371] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 148.548215][ T5412] XFS (loop2): Quotacheck needed: Please wait. [ 148.558752][ T5371] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 148.578848][ T4722] sierra 6-1:0.117: Sierra USB modem converter detected [ 148.586910][ T5371] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 148.612729][ T4722] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 148.668582][ T4722] usb 6-1: USB disconnect, device number 6 [ 148.695755][ T4722] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 148.739453][ T4722] sierra 6-1:0.117: device disconnected [ 148.768076][ T5412] XFS (loop2): Quotacheck: Done. [ 148.806742][ T5371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.831192][ T4720] Bluetooth: hci1: command 0x0409 tx timeout [ 148.968635][ T21] usb 2-1: USB disconnect, device number 7 [ 149.010081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.115834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.520525][ T5371] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.531118][ T4187] XFS (loop2): Unmounting Filesystem [ 149.612175][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.631801][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.688959][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.696103][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.734652][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.876306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.898144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.906514][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.913632][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.927720][ T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 150.167830][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 150.260414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.288455][ T21] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.318212][ T5447] FAULT_INJECTION: forcing a failure. [ 150.318212][ T5447] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 150.363707][ T21] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.382236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.427033][ T5447] CPU: 1 PID: 5447 Comm: syz.0.274 Not tainted syzkaller #0 [ 150.434435][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.444504][ T5447] Call Trace: [ 150.447794][ T5447] [ 150.450743][ T5447] dump_stack_lvl+0x188/0x250 [ 150.455439][ T5447] ? show_regs_print_info+0x20/0x20 [ 150.460655][ T5447] ? load_image+0x410/0x410 [ 150.465178][ T5447] ? __lock_acquire+0x7b50/0x7b50 [ 150.470320][ T5447] should_fail+0x383/0x4b0 [ 150.474787][ T5447] prepare_alloc_pages+0x1e3/0x5b0 [ 150.479927][ T5447] __alloc_pages+0x11b/0x480 [ 150.484561][ T5447] ? zone_statistics+0x170/0x170 [ 150.489519][ T5447] ? finish_lock_switch+0x12d/0x290 [ 150.494750][ T5447] ? lockdep_hardirqs_on+0x94/0x140 [ 150.499977][ T5447] ? finish_lock_switch+0x12d/0x290 [ 150.505200][ T5447] alloc_pages_vma+0x2bc/0x790 [ 150.509978][ T5447] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 150.515811][ T5447] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 150.521466][ T5447] ? shmem_swapin_page+0x22f0/0x22f0 [ 150.526782][ T5447] ? mark_lock+0x94/0x320 [ 150.531122][ T5447] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 150.537121][ T5447] ? lock_chain_count+0x20/0x20 [ 150.541990][ T5447] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 150.547631][ T5447] ? lockdep_hardirqs_on+0x94/0x140 [ 150.552839][ T5447] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 150.558502][ T5447] ? shmem_getpage_gfp+0xc04/0x2c10 [ 150.563733][ T5447] shmem_getpage_gfp+0x14be/0x2c10 [ 150.568883][ T5447] shmem_fault+0x1ac/0x550 [ 150.573332][ T5447] ? shmem_fallocate+0xec0/0xec0 [ 150.578282][ T5447] ? lockdep_hardirqs_on+0x94/0x140 [ 150.583504][ T5447] ? filemap_read_page+0x4b0/0x4b0 [ 150.588636][ T5447] __do_fault+0x141/0x330 [ 150.592982][ T5447] handle_mm_fault+0x2982/0x4440 [ 150.597947][ T5447] ? get_page+0xe0/0xe0 [ 150.602121][ T5447] ? follow_page_mask+0xa51/0x12b0 [ 150.607257][ T5447] __get_user_pages+0x952/0x11e0 [ 150.612226][ T5447] ? populate_vma_page_range+0x290/0x290 [ 150.617907][ T5447] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 150.623822][ T5447] ? read_lock_is_recursive+0x10/0x10 [ 150.629253][ T5447] populate_vma_page_range+0x213/0x290 [ 150.634741][ T5447] __mm_populate+0x275/0x3b0 [ 150.639358][ T5447] ? wake_up_q+0x8c/0xc0 [ 150.643628][ T5447] ? check_vma_flags+0x470/0x470 [ 150.648591][ T5447] ? up_write+0x1b6/0x410 [ 150.652940][ T5447] vm_mmap_pgoff+0x212/0x2d0 [ 150.657554][ T5447] ? account_locked_vm+0xe0/0xe0 [ 150.662513][ T5447] ? lock_chain_count+0x20/0x20 [ 150.667402][ T5447] ksys_mmap_pgoff+0x140/0x790 [ 150.672185][ T5447] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 150.677844][ T5447] ? mmap_region+0x1730/0x1730 [ 150.682638][ T5447] ? syscall_enter_from_user_mode+0x2a/0x70 [ 150.688566][ T5447] do_syscall_64+0x4c/0xa0 [ 150.692998][ T5447] ? clear_bhb_loop+0x30/0x80 [ 150.697711][ T5447] ? clear_bhb_loop+0x30/0x80 [ 150.702430][ T5447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.708356][ T5447] RIP: 0033:0x7f9b48ac6159 [ 150.712795][ T5447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.732445][ T5447] RSP: 002b:00007f9b46d1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 150.740884][ T5447] RAX: ffffffffffffffda RBX: 00007f9b48d4dfa0 RCX: 00007f9b48ac6159 [ 150.748865][ T5447] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 150.756831][ T5447] RBP: 00007f9b48b5d06b R08: ffffffffffffffff R09: 0000000028f43000 [ 150.764793][ T5447] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 150.772753][ T5447] R13: 00007f9b48d4e038 R14: 00007f9b48d4dfa0 R15: 00007ffe3bc39978 [ 150.780739][ T5447] [ 150.795505][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.877696][ T4722] Bluetooth: hci1: command 0x041b tx timeout [ 150.890253][ T21] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 150.904100][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.912803][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.928480][ T21] usb 2-1: config 0 descriptor?? [ 150.938610][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.007079][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.026420][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.045569][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.055466][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.068074][ T5452] FAULT_INJECTION: forcing a failure. [ 151.068074][ T5452] name failslab, interval 1, probability 0, space 0, times 0 [ 151.072921][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.096322][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.126589][ T5452] CPU: 1 PID: 5452 Comm: syz.5.275 Not tainted syzkaller #0 [ 151.134038][ T5452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.144116][ T5452] Call Trace: [ 151.147427][ T5452] [ 151.150383][ T5452] dump_stack_lvl+0x188/0x250 [ 151.155098][ T5452] ? show_regs_print_info+0x20/0x20 [ 151.160333][ T5452] ? load_image+0x410/0x410 [ 151.164890][ T5452] ? __might_sleep+0xf0/0xf0 [ 151.166036][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.169502][ T5452] ? __lock_acquire+0x7b50/0x7b50 [ 151.169580][ T5452] should_fail+0x383/0x4b0 [ 151.169613][ T5452] should_failslab+0x5/0x20 [ 151.169633][ T5452] slab_pre_alloc_hook+0x51/0xc0 [ 151.169658][ T5452] kmem_cache_alloc_trace+0x47/0x290 [ 151.169679][ T5452] ? __list_lru_init+0x535/0xac0 [ 151.169707][ T5452] __list_lru_init+0x535/0xac0 [ 151.169744][ T5452] alloc_super+0x787/0x970 [ 151.169771][ T5452] sget+0x1ce/0x450 [ 151.218982][ T5452] ? free_anon_bdev+0x20/0x20 [ 151.223695][ T5452] ? ovl_mount+0x30/0x30 [ 151.227959][ T5452] mount_nodev+0x2c/0xe0 [ 151.232456][ T5452] legacy_get_tree+0xe6/0x180 [ 151.237258][ T5452] ? virtio_fs_zero_page_range+0x120/0x120 [ 151.243089][ T5452] vfs_get_tree+0x88/0x270 [ 151.247537][ T5452] do_new_mount+0x247/0xa40 [ 151.252075][ T5452] __se_sys_mount+0x2e3/0x3d0 [ 151.256783][ T5452] ? __x64_sys_mount+0xc0/0xc0 [ 151.261570][ T5452] ? lockdep_hardirqs_on+0x94/0x140 [ 151.266786][ T5452] ? __x64_sys_mount+0x1c/0xc0 [ 151.271566][ T5452] do_syscall_64+0x4c/0xa0 [ 151.276002][ T5452] ? clear_bhb_loop+0x30/0x80 [ 151.280701][ T5452] ? clear_bhb_loop+0x30/0x80 [ 151.285400][ T5452] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.291311][ T5452] RIP: 0033:0x7f3a2d5f6159 [ 151.295830][ T5452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.315451][ T5452] RSP: 002b:00007f3a2b82d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.323900][ T5452] RAX: ffffffffffffffda RBX: 00007f3a2d87e090 RCX: 00007f3a2d5f6159 [ 151.331895][ T5452] RDX: 00002000000003c0 RSI: 0000200000000340 RDI: 0000000000000000 [ 151.339907][ T5452] RBP: 00007f3a2d68d06b R08: 0000200000000680 R09: 0000000000000000 [ 151.347905][ T5452] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 151.355913][ T5452] R13: 00007f3a2d87e128 R14: 00007f3a2d87e090 R15: 00007fffd9887918 [ 151.363914][ T5452] [ 151.378428][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.578703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.586193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.602960][ T21] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 151.615093][ T5371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.628978][ T21] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 151.740264][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.280'. [ 151.784049][ T21] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 151.791647][ T21] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 151.798804][ T21] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 151.806385][ T21] mcp2221 0003:04D8:00DD.0002: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 152.541362][ T21] usb 2-1: USB disconnect, device number 8 [ 152.585609][ T5479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 152.607846][ T5479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.702644][ T5479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.958302][ T4722] Bluetooth: hci1: command 0x040f tx timeout [ 153.089310][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.101659][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.145536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.170478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.216670][ T5371] device veth0_vlan entered promiscuous mode [ 153.230611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.267061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.311042][ T5371] device veth1_vlan entered promiscuous mode [ 153.401216][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.420450][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.444756][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.454152][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.466536][ T5371] device veth0_macvtap entered promiscuous mode [ 153.506310][ T5371] device veth1_macvtap entered promiscuous mode [ 153.594713][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.615439][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.636818][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.658013][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.669122][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.679967][ T21] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 153.687717][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.698060][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.726299][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.758110][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.779920][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.808330][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.820630][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.848788][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.872494][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.892379][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.903566][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.914797][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.934349][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.017321][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.068062][ T21] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 154.100007][ T21] usb 2-1: config 0 has no interface number 0 [ 154.122561][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.159916][ T21] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.215940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.258595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.382138][ T5371] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.457962][ T21] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 154.588808][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.601694][ T5508] loop5: detected capacity change from 0 to 164 [ 154.781904][ T5371] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.792392][ T5371] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.801709][ T5371] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.815688][ T21] usb 2-1: Product: syz [ 154.854418][ T21] usb 2-1: Manufacturer: syz [ 154.864995][ T21] usb 2-1: SerialNumber: syz [ 154.898218][ T21] usb 2-1: config 0 descriptor?? [ 154.952475][ T21] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 155.037790][ T4722] Bluetooth: hci1: command 0x0419 tx timeout [ 155.787193][ T5512] rock: directory entry would overflow storage [ 155.794021][ T5512] rock: sig=0x4f50, size=4, remaining=3 [ 155.799652][ T5512] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 155.940871][ T4722] usb 2-1: USB disconnect, device number 9 [ 156.054152][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 156.114889][ T4722] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 156.471565][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.529039][ T4366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.034705][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.057844][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.060186][ T4366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.102052][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.138113][ T5522] device syzkaller1 entered promiscuous mode [ 158.098523][ T5535] netlink: 'syz.1.300': attribute type 1 has an invalid length. [ 158.165547][ T5535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.435632][ T5535] bond1: (slave gretap1): making interface the new active one [ 158.555320][ T5535] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 158.587854][ T13] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 158.653600][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 159.198207][ T13] usb 7-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 0.00 [ 159.245719][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.277817][ T13] usb 7-1: Product: syz [ 159.307674][ T13] usb 7-1: Manufacturer: syz [ 159.312301][ T13] usb 7-1: SerialNumber: syz [ 159.318323][ T5558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 159.484009][ T5566] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 161.299386][ T13] kalmia 7-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71 [ 161.309801][ T13] kalmia: probe of 7-1:1.0 failed with error -71 [ 161.319655][ T13] usb 7-1: USB disconnect, device number 2 [ 161.482532][ T5581] netlink: 284 bytes leftover after parsing attributes in process `syz.2.315'. [ 161.520669][ T5583] loop0: detected capacity change from 0 to 256 [ 161.662679][ T5583] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 161.924768][ T5602] loop1: detected capacity change from 0 to 512 [ 161.966923][ T5602] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 162.027690][ T13] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 162.029307][ T5602] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.439126][ T5602] EXT4-fs error (device loop1): ext4_get_first_dir_block:3607: inode #12: block 32: comm syz.1.324: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 163.478007][ T5602] EXT4-fs error (device loop1): ext4_get_first_dir_block:3610: inode #12: comm syz.1.324: directory missing '.' [ 163.588283][ T5611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.327'. [ 163.602850][ T26] audit: type=1800 audit(1789803203.173:130): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.324" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 163.623668][ T13] usb 7-1: Using ep0 maxpacket: 8 [ 163.758182][ T13] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 163.776779][ T13] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 163.787007][ T13] usb 7-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 163.804464][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.865861][ T13] kobil_sct 7-1:1.0: KOBIL USB smart card terminal converter detected [ 163.887061][ T13] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 164.106595][ T5618] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.795135][ T5624] netlink: 284 bytes leftover after parsing attributes in process `syz.1.330'. [ 164.857683][ T4235] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 164.889025][ T7] usb 7-1: USB disconnect, device number 3 [ 164.910064][ T7] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 164.953735][ T7] kobil_sct 7-1:1.0: device disconnected [ 165.049891][ T5632] device syzkaller0 entered promiscuous mode [ 165.107706][ T4235] usb 6-1: Using ep0 maxpacket: 32 [ 165.135879][ T5636] loop1: detected capacity change from 0 to 128 [ 165.227839][ T4235] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 165.317025][ T5639] FAULT_INJECTION: forcing a failure. [ 165.317025][ T5639] name failslab, interval 1, probability 0, space 0, times 0 [ 165.339640][ T5640] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 165.353454][ T5639] CPU: 1 PID: 5639 Comm: syz.0.346 Not tainted syzkaller #0 [ 165.360778][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.370847][ T5639] Call Trace: [ 165.374144][ T5639] [ 165.377106][ T5639] dump_stack_lvl+0x188/0x250 [ 165.381804][ T5639] ? show_regs_print_info+0x20/0x20 [ 165.387017][ T5639] ? load_image+0x410/0x410 [ 165.391547][ T5639] ? __might_sleep+0xf0/0xf0 [ 165.396161][ T5639] ? __lock_acquire+0x7b50/0x7b50 [ 165.401219][ T5639] should_fail+0x383/0x4b0 [ 165.405676][ T5639] should_failslab+0x5/0x20 [ 165.410205][ T5639] slab_pre_alloc_hook+0x51/0xc0 [ 165.415261][ T5639] __kmalloc_node+0x6d/0x3a0 [ 165.419879][ T5639] ? kvmalloc_node+0x84/0x130 [ 165.424608][ T5639] kvmalloc_node+0x84/0x130 [ 165.429137][ T5639] __list_lru_init+0x4cb/0xac0 [ 165.433970][ T5639] alloc_super+0x787/0x970 [ 165.438399][ T5639] sget+0x1ce/0x450 [ 165.442219][ T5639] ? free_anon_bdev+0x20/0x20 [ 165.446914][ T5639] ? devpts_kill_sb+0x60/0x60 [ 165.451604][ T5639] mount_nodev+0x2c/0xe0 [ 165.455867][ T5639] legacy_get_tree+0xe6/0x180 [ 165.460555][ T5639] ? devpts_pty_kill+0x280/0x280 [ 165.465533][ T5639] vfs_get_tree+0x88/0x270 [ 165.469965][ T5639] do_new_mount+0x247/0xa40 [ 165.474487][ T5639] __se_sys_mount+0x2e3/0x3d0 [ 165.479218][ T5639] ? __x64_sys_mount+0xc0/0xc0 [ 165.484009][ T5639] ? lockdep_hardirqs_on+0x94/0x140 [ 165.489244][ T5639] ? __x64_sys_mount+0x1c/0xc0 [ 165.494028][ T5639] do_syscall_64+0x4c/0xa0 [ 165.498448][ T5639] ? clear_bhb_loop+0x30/0x80 [ 165.503149][ T5639] ? clear_bhb_loop+0x30/0x80 [ 165.507853][ T5639] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.513757][ T5639] RIP: 0033:0x7f9b48ac6159 [ 165.518184][ T5639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.537809][ T5639] RSP: 002b:00007f9b46d1e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 165.546237][ T5639] RAX: ffffffffffffffda RBX: 00007f9b48d4dfa0 RCX: 00007f9b48ac6159 [ 165.554216][ T5639] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000000 [ 165.562213][ T5639] RBP: 00007f9b48b5d06b R08: 0000000000000000 R09: 0000000000000000 [ 165.570200][ T5639] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 165.578195][ T5639] R13: 00007f9b48d4e038 R14: 00007f9b48d4dfa0 R15: 00007ffe3bc39978 [ 165.586187][ T5639] [ 165.663734][ T5643] bond1: (slave veth3): Enslaving as an active interface with a down link [ 165.688222][ T4235] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 165.697423][ T4235] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 165.820411][ T4235] usb 6-1: Product: syz [ 165.888343][ T4235] usb 6-1: Manufacturer: syz [ 165.965105][ T4235] usb 6-1: SerialNumber: syz [ 166.097221][ T5645] loop6: detected capacity change from 0 to 4096 [ 166.137392][ T5645] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 166.227139][ T4235] usb 6-1: config 0 descriptor?? [ 166.247976][ T5614] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 166.353642][ T5645] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 166.450937][ T5651] zram0: detected capacity change from 0 to 65536 [ 166.642617][ T5653] netlink: 76 bytes leftover after parsing attributes in process `syz.1.338'. [ 167.166899][ T5645] ntfs3: loop6: ino=5, "/" directory corrupted [ 167.318772][ T5656] netlink: 'syz.1.341': attribute type 10 has an invalid length. [ 167.417834][ T5659] loop2: detected capacity change from 0 to 512 [ 167.481285][ T4235] usb 6-1: USB disconnect, device number 7 [ 168.746190][ T5659] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 168.947925][ T5659] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.997861][ T5659] EXT4-fs error (device loop2): ext4_get_first_dir_block:3607: inode #12: block 32: comm syz.2.340: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 169.068374][ T5680] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 169.153828][ T5659] EXT4-fs error (device loop2): ext4_get_first_dir_block:3610: inode #12: comm syz.2.340: directory missing '.' [ 169.283252][ T26] audit: type=1800 audit(1789803208.833:131): pid=5682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.340" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 169.521893][ T5687] netlink: 'syz.5.352': attribute type 1 has an invalid length. [ 169.716948][ T5690] bond1: (slave veth3): Enslaving as an active interface with a down link [ 170.509858][ T5687] bond1: (slave veth0_to_bond): making interface the new active one [ 170.519092][ T5687] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 170.613383][ T5697] loop1: detected capacity change from 0 to 4096 [ 170.676287][ T5697] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 171.781275][ T5697] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 171.891016][ T5712] loop6: detected capacity change from 0 to 128 [ 171.952620][ T5697] ntfs3: loop1: ino=5, "/" directory corrupted [ 174.875307][ T5709] crypto_alloc_aead failed rc=-4 [ 174.889680][ T4720] Bluetooth: hci1: command 0x0407 tx timeout [ 176.488366][ T5739] jffs2: notice: (5739) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 177.214829][ T5753] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 178.295686][ T5763] loop5: detected capacity change from 0 to 764 [ 178.486687][ T5755] overlayfs: statfs failed on './file0' [ 178.860977][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 178.928830][ T5773] FAULT_INJECTION: forcing a failure. [ 178.928830][ T5773] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 178.957420][ T5773] CPU: 1 PID: 5773 Comm: syz.6.377 Not tainted syzkaller #0 [ 178.964783][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.974875][ T5773] Call Trace: [ 178.978177][ T5773] [ 178.981130][ T5773] dump_stack_lvl+0x188/0x250 [ 178.985871][ T5773] ? show_regs_print_info+0x20/0x20 [ 178.991094][ T5773] ? load_image+0x410/0x410 [ 178.995616][ T5773] ? __lock_acquire+0x7b50/0x7b50 [ 179.000696][ T5773] ? mark_lock+0x94/0x320 [ 179.005065][ T5773] should_fail+0x383/0x4b0 [ 179.009528][ T5773] prepare_alloc_pages+0x1e3/0x5b0 [ 179.014677][ T5773] __alloc_pages+0x11b/0x480 [ 179.019303][ T5773] ? zone_statistics+0x170/0x170 [ 179.024269][ T5773] ? mark_lock+0x94/0x320 [ 179.028644][ T5773] alloc_pages_vma+0x2bc/0x790 [ 179.033443][ T5773] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 179.039299][ T5773] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 179.044973][ T5773] ? shmem_swapin_page+0x22f0/0x22f0 [ 179.050304][ T5773] ? __lock_acquire+0x7b50/0x7b50 [ 179.055367][ T5773] ? xas_descend+0x210/0x3b0 [ 179.059992][ T5773] ? xas_load+0x127/0x140 [ 179.064358][ T5773] ? pagecache_get_page+0xc32/0xf20 [ 179.069586][ T5773] ? page_cache_prev_miss+0x380/0x380 [ 179.075034][ T5773] ? verify_lock_unused+0x140/0x140 [ 179.080262][ T5773] ? mark_lock+0x94/0x320 [ 179.084626][ T5773] shmem_getpage_gfp+0x14be/0x2c10 [ 179.089801][ T5773] shmem_fault+0x1ac/0x550 [ 179.094284][ T5773] ? shmem_fallocate+0xec0/0xec0 [ 179.099270][ T5773] ? filemap_read_page+0x4b0/0x4b0 [ 179.104406][ T5773] ? count_memcg_event_mm+0x324/0x370 [ 179.109813][ T5773] __do_fault+0x141/0x330 [ 179.114181][ T5773] handle_mm_fault+0x2982/0x4440 [ 179.119194][ T5773] ? get_page+0xe0/0xe0 [ 179.123413][ T5773] ? follow_page_mask+0xa51/0x12b0 [ 179.128558][ T5773] __get_user_pages+0x952/0x11e0 [ 179.133550][ T5773] ? populate_vma_page_range+0x290/0x290 [ 179.139247][ T5773] ? read_lock_is_recursive+0x10/0x10 [ 179.144663][ T5773] populate_vma_page_range+0x213/0x290 [ 179.150166][ T5773] __mm_populate+0x275/0x3b0 [ 179.154792][ T5773] ? check_vma_flags+0x470/0x470 [ 179.159765][ T5773] ? up_write+0x1b6/0x410 [ 179.164128][ T5773] vm_mmap_pgoff+0x212/0x2d0 [ 179.168755][ T5773] ? account_locked_vm+0xe0/0xe0 [ 179.173720][ T5773] ? __context_tracking_exit+0x4c/0x80 [ 179.179212][ T5773] ? __lock_acquire+0x7b50/0x7b50 [ 179.184288][ T5773] ksys_mmap_pgoff+0x140/0x790 [ 179.189084][ T5773] ? mmap_region+0x1730/0x1730 [ 179.193891][ T5773] ? lockdep_hardirqs_on+0x94/0x140 [ 179.199112][ T5773] do_syscall_64+0x4c/0xa0 [ 179.203575][ T5773] ? clear_bhb_loop+0x30/0x80 [ 179.208274][ T5773] ? clear_bhb_loop+0x30/0x80 [ 179.212986][ T5773] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.218904][ T5773] RIP: 0033:0x7f11daaa6159 [ 179.223337][ T5773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.242966][ T5773] RSP: 002b:00007f11d8cfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 179.247917][ T4720] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 179.251409][ T5773] RAX: ffffffffffffffda RBX: 00007f11dad2dfa0 RCX: 00007f11daaa6159 [ 179.266923][ T5773] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 179.274912][ T5773] RBP: 00007f11dab3d06b R08: ffffffffffffffff R09: 0000000028f43000 [ 179.282944][ T5773] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 179.290935][ T5773] R13: 00007f11dad2e038 R14: 00007f11dad2dfa0 R15: 00007ffc28323d28 [ 179.298941][ T5773] [ 179.476589][ T5781] loop1: detected capacity change from 0 to 512 [ 179.531039][ T5781] EXT4-fs (loop1): Ignoring removed oldalloc option [ 179.588267][ T5781] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 179.649260][ T4720] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 179.660188][ T4720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.687659][ T4720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.697487][ T4720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 179.823956][ T4720] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 179.853457][ T4720] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 179.882419][ T5785] loop1: detected capacity change from 0 to 164 [ 179.883982][ T4720] usb 3-1: Manufacturer: syz [ 179.906352][ T4720] usb 3-1: config 0 descriptor?? [ 179.993537][ T5785] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 180.023274][ T5785] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 180.063697][ T5785] Symlink component flag not implemented [ 180.073390][ T5785] Symlink component flag not implemented (7) [ 180.106844][ T5790] Symlink component flag not implemented (7) [ 180.211603][ T5793] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.415987][ T4720] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 180.433835][ T4720] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 180.478505][ T4720] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 180.507983][ T4722] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 180.672211][ T5798] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 180.733473][ T21] usb 3-1: USB disconnect, device number 5 [ 181.433269][ T5799] fido_id[5799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 181.765410][ T4722] usb 2-1: Using ep0 maxpacket: 16 [ 181.897851][ T4190] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 182.115119][ T5813] loop6: detected capacity change from 0 to 32768 [ 182.121939][ T4722] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.132475][ T4722] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 182.138269][ T4190] usb 6-1: Using ep0 maxpacket: 32 [ 182.141693][ T4722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.158109][ T4722] usb 2-1: config 0 descriptor?? [ 182.228630][ T5813] XFS (loop6): Mounting V5 Filesystem [ 182.287782][ T4190] usb 6-1: config index 0 descriptor too short (expected 19, got 18) [ 182.309772][ T4190] usb 6-1: config 224 has too many interfaces: 101, using maximum allowed: 32 [ 182.338318][ T4190] usb 6-1: config 224 has an invalid descriptor of length 0, skipping remainder of the config [ 182.357820][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 182.383303][ T4190] usb 6-1: config 224 has 0 interfaces, different from the descriptor's value: 101 [ 182.397748][ T4332] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 182.438814][ T5813] XFS (loop6): Ending clean mount [ 182.447687][ T5813] XFS (loop6): Quotacheck needed: Please wait. [ 182.521676][ T5813] XFS (loop6): Quotacheck: Done. [ 182.587791][ T4190] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 182.613524][ T4190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.636725][ T4190] usb 6-1: Product: syz [ 182.644933][ T4190] usb 6-1: Manufacturer: syz [ 182.656835][ T4190] usb 6-1: SerialNumber: syz [ 182.701157][ T4722] input: HID 258a:6a88 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:258A:6A88.0004/input/input6 [ 182.748225][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.755475][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.767781][ T4332] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 182.777536][ T5809] device bridge_slave_0 entered promiscuous mode [ 182.787700][ T4332] usb 3-1: config 0 has no interface number 0 [ 182.793943][ T4332] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.982207][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.015057][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.032782][ T5809] device bridge_slave_1 entered promiscuous mode [ 183.072947][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.085403][ T4332] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 183.101963][ T4332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.116260][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.133012][ T4332] usb 3-1: Product: syz [ 183.137354][ T4332] usb 3-1: Manufacturer: syz [ 183.155274][ T4332] usb 3-1: SerialNumber: syz [ 183.182921][ T4332] usb 3-1: config 0 descriptor?? [ 183.206448][ T5809] team0: Port device team_slave_0 added [ 183.222482][ T5809] team0: Port device team_slave_1 added [ 183.246268][ T4332] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 183.313109][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.325994][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.357273][ T5371] XFS (loop6): Unmounting Filesystem [ 183.366323][ T4722] itetech 0003:258A:6A88.0004: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.1-1/input0 [ 183.388622][ T4722] usb 2-1: USB disconnect, device number 10 [ 183.417190][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.470575][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.498358][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.543603][ T4332] usb 6-1: USB disconnect, device number 8 [ 183.887843][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.101884][ T4332] Bluetooth: hci5: command 0x0409 tx timeout [ 184.328834][ T4366] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.346176][ T5837] netlink: 44 bytes leftover after parsing attributes in process `syz.5.394'. [ 184.405361][ T5834] fido_id[5834]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 184.641138][ T4366] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.750794][ T5809] device hsr_slave_0 entered promiscuous mode [ 184.784710][ T5809] device hsr_slave_1 entered promiscuous mode [ 184.812734][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.843683][ T5809] Cannot create hsr debugfs directory [ 184.857827][ T4366] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.920026][ T5846] loop6: detected capacity change from 0 to 2048 [ 184.976109][ T5846] NILFS (loop6): invalid segment: Magic number mismatch [ 184.983309][ T5846] NILFS (loop6): trying rollback from an earlier position [ 185.022944][ T5846] NILFS (loop6): recovery complete [ 185.061256][ T4366] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.072164][ T5851] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.097977][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 185.116915][ T4720] usb 3-1: USB disconnect, device number 6 [ 185.188311][ T4720] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 185.207615][ T4235] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 185.245663][ T5844] loop1: detected capacity change from 0 to 1024 [ 185.439998][ T5809] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 185.515550][ T5809] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 185.654543][ T5809] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 185.687724][ T4235] usb 6-1: unable to get BOS descriptor or descriptor too short [ 185.724048][ T5859] loop1: detected capacity change from 0 to 4096 [ 185.737913][ T5809] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 185.858001][ T4235] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 185.868123][ T4235] usb 6-1: can't read configurations, error -71 [ 185.908030][ T4332] Bluetooth: hci0: command 0x0406 tx timeout [ 185.915927][ T4332] Bluetooth: hci3: command 0x0406 tx timeout [ 186.078119][ T5859] ntfs3: Unknown parameter 'nocase' [ 186.555321][ T4332] Bluetooth: hci5: command 0x041b tx timeout [ 187.102251][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.236327][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.258887][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.287060][ T5882] loop2: detected capacity change from 0 to 4096 [ 187.360422][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.398727][ T5882] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 187.418503][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.449817][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.493245][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.495249][ T5882] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 187.500391][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.549605][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.574715][ T5882] ntfs3: loop2: Failed to load $Extend. [ 187.588212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.627911][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.642432][ T5882] ntfs3: loop2: MftZone: unavailable [ 187.667840][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.674936][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.744013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.778541][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.878771][ T5901] FAULT_INJECTION: forcing a failure. [ 187.878771][ T5901] name failslab, interval 1, probability 0, space 0, times 0 [ 187.924826][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.948140][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.978033][ T5901] CPU: 0 PID: 5901 Comm: syz.2.411 Not tainted syzkaller #0 [ 187.985374][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.988558][ T4241] Bluetooth: hci0: command 0x1407 tx timeout [ 187.995445][ T5901] Call Trace: [ 187.995455][ T5901] [ 188.007642][ T5901] dump_stack_lvl+0x188/0x250 [ 188.012122][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.012355][ T5901] ? show_regs_print_info+0x20/0x20 [ 188.025446][ T5901] ? load_image+0x410/0x410 [ 188.029976][ T5901] ? __might_sleep+0xf0/0xf0 [ 188.034600][ T5901] ? __lock_acquire+0x7b50/0x7b50 [ 188.039663][ T5901] should_fail+0x383/0x4b0 [ 188.044147][ T5901] should_failslab+0x5/0x20 [ 188.048680][ T5901] slab_pre_alloc_hook+0x51/0xc0 [ 188.053652][ T5901] ? security_file_alloc+0x30/0x110 [ 188.053995][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.058877][ T5901] kmem_cache_alloc+0x3d/0x280 [ 188.058899][ T5901] ? rcu_is_watching+0x11/0xa0 [ 188.058921][ T5901] security_file_alloc+0x30/0x110 [ 188.058945][ T5901] __alloc_file+0xc2/0x240 [ 188.058969][ T5901] alloc_empty_file+0x90/0x180 [ 188.058991][ T5901] alloc_file+0x5c/0x510 [ 188.094725][ T5901] ? do_raw_spin_unlock+0x11d/0x230 [ 188.099966][ T5901] alloc_file_pseudo+0x180/0x200 [ 188.104939][ T5901] ? alloc_empty_file_noaccount+0x80/0x80 [ 188.110687][ T5901] ? do_raw_spin_unlock+0x11d/0x230 [ 188.111688][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.115904][ T5901] ? put_pid+0xc3/0x120 [ 188.115937][ T5901] sock_alloc_file+0xb3/0x240 [ 188.132606][ T5901] __sys_socketpair+0x2cc/0x540 [ 188.137489][ T5901] __x64_sys_socketpair+0x97/0xb0 [ 188.142550][ T5901] do_syscall_64+0x4c/0xa0 [ 188.146996][ T5901] ? clear_bhb_loop+0x30/0x80 [ 188.151702][ T5901] ? clear_bhb_loop+0x30/0x80 [ 188.156403][ T5901] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.162331][ T5901] RIP: 0033:0x7fe87765c159 [ 188.162803][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.166764][ T5901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.166785][ T5901] RSP: 002b:00007fe8758b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 188.166810][ T5901] RAX: ffffffffffffffda RBX: 00007fe8778e3fa0 RCX: 00007fe87765c159 [ 188.166827][ T5901] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 188.218521][ T5901] RBP: 00007fe8776f306b R08: 0000000000000000 R09: 0000000000000000 [ 188.226509][ T5901] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 188.228551][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.234495][ T5901] R13: 00007fe8778e4038 R14: 00007fe8778e3fa0 R15: 00007fffc8f1a958 [ 188.234529][ T5901] [ 188.318972][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.370465][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.385402][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.511646][ T4366] device hsr_slave_0 left promiscuous mode [ 188.545680][ T4366] device hsr_slave_1 left promiscuous mode [ 188.568308][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.589421][ T4366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.618384][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.625829][ T4366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.634870][ T4366] device bridge_slave_1 left promiscuous mode [ 188.641989][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.653532][ T4366] device bridge_slave_0 left promiscuous mode [ 188.670774][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.699895][ T4366] device veth1_macvtap left promiscuous mode [ 188.705950][ T4366] device veth0_macvtap left promiscuous mode [ 188.708101][ T4236] Bluetooth: hci5: command 0x040f tx timeout [ 188.723722][ T4366] device veth1_vlan left promiscuous mode [ 188.743812][ T4366] device veth0_vlan left promiscuous mode [ 188.829369][ T5922] FAULT_INJECTION: forcing a failure. [ 188.829369][ T5922] name failslab, interval 1, probability 0, space 0, times 0 [ 188.854933][ T5924] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 188.857948][ T5922] CPU: 0 PID: 5922 Comm: syz.2.418 Not tainted syzkaller #0 [ 188.888326][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.898413][ T5922] Call Trace: [ 188.901719][ T5922] [ 188.904676][ T5922] dump_stack_lvl+0x188/0x250 [ 188.909405][ T5922] ? show_regs_print_info+0x20/0x20 [ 188.914637][ T5922] ? load_image+0x410/0x410 [ 188.919182][ T5922] ? __might_sleep+0xf0/0xf0 [ 188.923806][ T5922] ? __lock_acquire+0x7b50/0x7b50 [ 188.928867][ T5922] ? __lock_acquire+0x7b50/0x7b50 [ 188.933931][ T5922] should_fail+0x383/0x4b0 [ 188.938385][ T5922] should_failslab+0x5/0x20 [ 188.942924][ T5922] slab_pre_alloc_hook+0x51/0xc0 [ 188.946239][ T5924] CIFS: Attempting to mount \\127.0.0.1\share [ 188.947895][ T5922] ? __sys_setsockopt+0x2bf/0x3d0 [ 188.947925][ T5922] __kmalloc_track_caller+0x69/0x330 [ 188.947947][ T5922] ? __sys_setsockopt+0x2bf/0x3d0 [ 188.947975][ T5922] sctp_setsockopt+0x7d/0xf80 [ 188.947999][ T5922] ? sock_common_recvmsg+0x1c0/0x1c0 [ 188.948023][ T5922] __sys_setsockopt+0x2bf/0x3d0 [ 188.948051][ T5922] __x64_sys_setsockopt+0xb1/0xc0 [ 188.948077][ T5922] do_syscall_64+0x4c/0xa0 [ 188.948097][ T5922] ? clear_bhb_loop+0x30/0x80 [ 188.948118][ T5922] ? clear_bhb_loop+0x30/0x80 [ 188.948141][ T5922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.948164][ T5922] RIP: 0033:0x7fe87765c159 [ 188.948185][ T5922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.948203][ T5922] RSP: 002b:00007fe8758b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 188.948227][ T5922] RAX: ffffffffffffffda RBX: 00007fe8778e3fa0 RCX: 00007fe87765c159 [ 188.948244][ T5922] RDX: 0000000000000022 RSI: 0000000000000084 RDI: 0000000000000006 [ 188.948257][ T5922] RBP: 00007fe8776f306b R08: 0000000000000010 R09: 0000000000000000 [ 188.948272][ T5922] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 188.948287][ T5922] R13: 00007fe8778e4038 R14: 00007fe8778e3fa0 R15: 00007fffc8f1a958 [ 188.948317][ T5922] [ 189.097062][ T5924] CIFS: VFS: No username specified [ 189.517483][ T4366] bond1 (unregistering): (slave veth3): Releasing active interface [ 189.549963][ T4366] bond1 (unregistering): (slave veth3): the permanent HWaddr of slave - d6:96:98:fd:c7:8c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 189.684788][ T4366] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 189.727355][ T4366] bond1 (unregistering): Released all slaves [ 190.071521][ T4366] team0 (unregistering): Port device team_slave_1 removed [ 190.090270][ T4366] team0 (unregistering): Port device team_slave_0 removed [ 190.104071][ T4366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.123520][ T4366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.188281][ T4366] bond0 (unregistering): Released all slaves [ 190.412827][ T5942] netlink: 104 bytes leftover after parsing attributes in process `syz.6.421'. [ 190.787929][ T4332] Bluetooth: hci5: command 0x0419 tx timeout [ 191.048508][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.096916][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.230595][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.388417][ T5949] __sock_release: fasync list not empty! [ 191.440557][ T5953] loop6: detected capacity change from 0 to 2048 [ 191.743733][ T5953] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.578806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.588855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.933197][ T5987] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.170221][ T5809] device veth0_vlan entered promiscuous mode [ 194.080489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.100229][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.106567][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.168700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.218080][ T26] audit: type=1326 audit(1789803233.793:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.431" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4135bab159 code=0x7ffc0000 [ 194.278539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.286357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.341856][ T5999] loop6: detected capacity change from 0 to 2048 [ 194.361476][ T26] audit: type=1326 audit(1789803233.803:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.431" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4135b6b98e code=0x7ffc0000 [ 194.387913][ T5809] device veth1_vlan entered promiscuous mode [ 194.461114][ T5809] device veth0_macvtap entered promiscuous mode [ 194.503617][ T5999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.514514][ T26] audit: type=1326 audit(1789803233.803:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.431" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4135bab159 code=0x7ffc0000 [ 194.607173][ T26] audit: type=1326 audit(1789803233.823:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.431" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4135b6b98e code=0x7ffc0000 [ 194.631375][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.734204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.743391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.752067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.760930][ T26] audit: type=1326 audit(1789803233.833:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.431" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4135b6b98e code=0x7ffc0000 [ 194.800897][ T5809] device veth1_macvtap entered promiscuous mode [ 194.877856][ T6010] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 195.528435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.580053][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.638958][ T26] audit: type=1326 audit(1789803233.843:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.431" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4135b6b98e code=0x7ffc0000 [ 195.675144][ T26] audit: type=1326 audit(1789803233.843:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.431" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4135b6b98e code=0x7ffc0000 [ 195.717589][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.728162][ T26] audit: type=1326 audit(1789803233.853:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.431" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4135b6b98e code=0x7ffc0000 [ 195.787659][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.798318][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.808399][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.818971][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.829061][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.839828][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.852191][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.870567][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.881413][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.891277][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.901807][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.911686][ T5809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.922126][ T5809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.963041][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.976221][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.187024][ T6018] file system registered [ 196.361173][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.370637][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.379500][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.380824][ T6013] kAFS: No cell specified [ 196.390939][ T26] audit: type=1326 audit(1789803233.853:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.431" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4135b6b98e code=0x7ffc0000 [ 196.418754][ T26] audit: type=1326 audit(1789803233.873:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.431" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4135b6b98e code=0x7ffc0000 [ 196.470769][ T5809] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.495928][ T5809] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.535552][ T5809] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.554639][ T5809] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.696552][ T6024] zram: Cannot change disksize for initialized device [ 197.899605][ T6028] loop2: detected capacity change from 0 to 2048 [ 197.971765][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.006387][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.008869][ T6038] ------------[ cut here ]------------ [ 198.019843][ T6038] WARNING: CPU: 1 PID: 6038 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xac0/0xcd0 [ 198.030137][ T6038] Modules linked in: [ 198.034061][ T6038] CPU: 1 PID: 6038 Comm: syz.5.442 Not tainted syzkaller #0 [ 198.041377][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.051473][ T6038] RIP: 0010:rb_get_reader_page+0xac0/0xcd0 [ 198.057323][ T6038] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 97 56 42 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 25 58 42 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 198.076951][ T6038] RSP: 0018:ffffc9000324f7c0 EFLAGS: 00010002 [ 198.083053][ T6038] RAX: 1ffff11002db9f01 RBX: 1ffff11027fcf7d6 RCX: ffffffff817bf1db [ 198.091049][ T6038] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888016c70408 [ 198.099042][ T6038] RBP: ffffc9000324f960 R08: ffff888016c7040b R09: 1ffff11002d8e081 [ 198.106029][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.107033][ T6038] R10: dffffc0000000000 R11: ffffed1002d8e082 R12: ffff888016dcf810 [ 198.107052][ T6038] R13: 0000000000000044 R14: 1ffff11027fcf7d3 R15: ffff888016c70400 [ 198.107067][ T6038] FS: 00007f3a2b82d6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 198.139159][ T6038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.145805][ T6038] CR2: 0000000000000000 CR3: 00000000404d1000 CR4: 00000000003506e0 [ 198.153804][ T6038] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 198.161825][ T6038] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 198.169818][ T6038] Call Trace: [ 198.171444][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.173124][ T6038] [ 198.173157][ T6038] ? ring_buffer_read_page+0x12c0/0x12c0 [ 198.189541][ T6038] ? do_raw_spin_lock+0x128/0x2f0 [ 198.189964][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.194608][ T6038] ? __rwlock_init+0x140/0x140 [ 198.194635][ T6038] rb_buffer_peek+0x5c/0x780 [ 198.194662][ T6038] ring_buffer_peek+0x1de/0x400 [ 198.216186][ T6038] ? ring_buffer_iter_empty+0x340/0x340 [ 198.221757][ T6038] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 198.227760][ T6038] ? __lock_acquire+0x7b50/0x7b50 [ 198.232965][ T6038] ? lock_chain_count+0x20/0x20 [ 198.237858][ T6038] ? __rwlock_init+0x140/0x140 [ 198.242653][ T6038] __find_next_entry+0x350/0x6b0 [ 198.247620][ T6038] ? lockdep_hardirqs_on+0x94/0x140 [ 198.252292][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.252856][ T6038] ? trace_find_next_entry+0x3a0/0x3a0 [ 198.265549][ T6038] tracing_read_pipe+0x3b1/0xae0 [ 198.270532][ T6038] ? s_show+0x300/0x300 [ 198.274724][ T6038] vfs_read+0x2ff/0xd50 [ 198.278901][ T6038] ? __lock_acquire+0x7b50/0x7b50 [ 198.283950][ T6038] ? kernel_read+0x1e0/0x1e0 [ 198.288577][ T6038] ? rcu_lock_acquire+0x9/0x30 [ 198.293365][ T6038] ? mutex_lock_nested+0x17/0x20 [ 198.298303][ T6038] ? __fdget_pos+0x2bf/0x370 [ 198.302893][ T6038] ? ksys_read+0x70/0x260 [ 198.307251][ T6038] ksys_read+0x153/0x260 [ 198.311530][ T6038] ? vfs_write+0xd70/0xd70 [ 198.315975][ T6038] ? lockdep_hardirqs_on+0x94/0x140 [ 198.321199][ T6038] do_syscall_64+0x4c/0xa0 [ 198.325656][ T6038] ? clear_bhb_loop+0x30/0x80 [ 198.330333][ T6038] ? clear_bhb_loop+0x30/0x80 [ 198.335022][ T6038] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.340955][ T6038] RIP: 0033:0x7f3a2d5f6159 [ 198.345388][ T6038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.365006][ T6038] RSP: 002b:00007f3a2b82d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.373417][ T6038] RAX: ffffffffffffffda RBX: 00007f3a2d87e090 RCX: 00007f3a2d5f6159 [ 198.381382][ T6038] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 198.389348][ T6038] RBP: 00007f3a2d68d06b R08: 0000000000000000 R09: 0000000000000000 [ 198.397319][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.405286][ T6038] R13: 00007f3a2d87e128 R14: 00007f3a2d87e090 R15: 00007fffd9887918 [ 198.413300][ T6038] [ 198.416330][ T6038] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 198.423600][ T6038] CPU: 1 PID: 6038 Comm: syz.5.442 Not tainted syzkaller #0 [ 198.430869][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.440915][ T6038] Call Trace: [ 198.444222][ T6038] [ 198.447147][ T6038] dump_stack_lvl+0x188/0x250 [ 198.451838][ T6038] ? show_regs_print_info+0x20/0x20 [ 198.457036][ T6038] ? load_image+0x410/0x410 [ 198.461562][ T6038] panic+0x2f8/0x850 [ 198.465470][ T6038] ? bpf_jit_dump+0xd0/0xd0 [ 198.469982][ T6038] ? rb_get_reader_page+0xac0/0xcd0 [ 198.475186][ T6038] __warn+0x248/0x2b0 [ 198.479183][ T6038] ? rb_get_reader_page+0xac0/0xcd0 [ 198.484407][ T6038] report_bug+0x1b9/0x2e0 [ 198.488735][ T6038] handle_bug+0x3a/0x70 [ 198.492896][ T6038] exc_invalid_op+0x16/0x40 [ 198.497421][ T6038] asm_exc_invalid_op+0x16/0x20 [ 198.502295][ T6038] RIP: 0010:rb_get_reader_page+0xac0/0xcd0 [ 198.508105][ T6038] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 97 56 42 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 25 58 42 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 198.527730][ T6038] RSP: 0018:ffffc9000324f7c0 EFLAGS: 00010002 [ 198.533805][ T6038] RAX: 1ffff11002db9f01 RBX: 1ffff11027fcf7d6 RCX: ffffffff817bf1db [ 198.541775][ T6038] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888016c70408 [ 198.549756][ T6038] RBP: ffffc9000324f960 R08: ffff888016c7040b R09: 1ffff11002d8e081 [ 198.557733][ T6038] R10: dffffc0000000000 R11: ffffed1002d8e082 R12: ffff888016dcf810 [ 198.565728][ T6038] R13: 0000000000000044 R14: 1ffff11027fcf7d3 R15: ffff888016c70400 [ 198.573697][ T6038] ? rb_get_reader_page+0xabb/0xcd0 [ 198.578908][ T6038] ? ring_buffer_read_page+0x12c0/0x12c0 [ 198.584559][ T6038] ? do_raw_spin_lock+0x128/0x2f0 [ 198.589593][ T6038] ? __rwlock_init+0x140/0x140 [ 198.594382][ T6038] rb_buffer_peek+0x5c/0x780 [ 198.598981][ T6038] ring_buffer_peek+0x1de/0x400 [ 198.603830][ T6038] ? ring_buffer_iter_empty+0x340/0x340 [ 198.609370][ T6038] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 198.615358][ T6038] ? __lock_acquire+0x7b50/0x7b50 [ 198.620449][ T6038] ? lock_chain_count+0x20/0x20 [ 198.625299][ T6038] ? __rwlock_init+0x140/0x140 [ 198.630065][ T6038] __find_next_entry+0x350/0x6b0 [ 198.635010][ T6038] ? lockdep_hardirqs_on+0x94/0x140 [ 198.640229][ T6038] ? trace_find_next_entry+0x3a0/0x3a0 [ 198.645700][ T6038] tracing_read_pipe+0x3b1/0xae0 [ 198.650645][ T6038] ? s_show+0x300/0x300 [ 198.654797][ T6038] vfs_read+0x2ff/0xd50 [ 198.658962][ T6038] ? __lock_acquire+0x7b50/0x7b50 [ 198.664009][ T6038] ? kernel_read+0x1e0/0x1e0 [ 198.668623][ T6038] ? rcu_lock_acquire+0x9/0x30 [ 198.673419][ T6038] ? mutex_lock_nested+0x17/0x20 [ 198.678368][ T6038] ? __fdget_pos+0x2bf/0x370 [ 198.682953][ T6038] ? ksys_read+0x70/0x260 [ 198.687295][ T6038] ksys_read+0x153/0x260 [ 198.691536][ T6038] ? vfs_write+0xd70/0xd70 [ 198.695973][ T6038] ? lockdep_hardirqs_on+0x94/0x140 [ 198.701175][ T6038] do_syscall_64+0x4c/0xa0 [ 198.705599][ T6038] ? clear_bhb_loop+0x30/0x80 [ 198.710282][ T6038] ? clear_bhb_loop+0x30/0x80 [ 198.714979][ T6038] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.720870][ T6038] RIP: 0033:0x7f3a2d5f6159 [ 198.725276][ T6038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.744901][ T6038] RSP: 002b:00007f3a2b82d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.753336][ T6038] RAX: ffffffffffffffda RBX: 00007f3a2d87e090 RCX: 00007f3a2d5f6159 [ 198.761326][ T6038] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000006 [ 198.769334][ T6038] RBP: 00007f3a2d68d06b R08: 0000000000000000 R09: 0000000000000000 [ 198.777321][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.785298][ T6038] R13: 00007f3a2d87e128 R14: 00007f3a2d87e090 R15: 00007fffd9887918 [ 198.793274][ T6038] [ 198.796602][ T6038] Kernel Offset: disabled [ 198.801271][ T6038] Rebooting in 86400 seconds..