last executing test programs: 1m34.971406932s ago: executing program 1 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 1m34.913897684s ago: executing program 1 (id=1015): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xd1, 0x4, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x81, 0x1c, 0x1a, 0xa8}, {0x10000, 0x26000, 0x0, 0x4, 0x0, 0x8f, 0x0, 0x0, 0xff, 0xfc, 0x86, 0xde}, {0xeeee8000, 0x30000, 0x3, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x30000, 0xfffe}, 0x10039, 0x0, 0x70000, 0x10, 0x1, 0x0, 0x900, [0x0, 0x4, 0x10000, 0x1f0]}) 1m34.784403907s ago: executing program 1 (id=1016): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x2000000000000018, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000ff0100005c00", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/27], 0x48) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r1, 0x0) epoll_create1(0x80000) 1m33.874862889s ago: executing program 1 (id=1020): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000000000000e30000000000"], 0x50) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000d80)={0x0, 0x7fffffff}, &(0x7f0000000dc0)=0x8) open(0x0, 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', 0x0, 0x0, 0x0) r1 = inotify_init1(0x800) inotify_rm_watch(r1, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') timer_create(0x7, &(0x7f0000000180)={0x0, 0x21, 0x1}, 0x0) 1m32.804496516s ago: executing program 1 (id=1021): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001dc0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open(&(0x7f0000000140)='./file2\x00', 0x66842, 0x1) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1e200}], 0x1, 0x1a00, 0x0, 0x3) r2 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x4208, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x111, 0x5}}, 0x20) 1m32.338974807s ago: executing program 1 (id=1026): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = open(&(0x7f0000000140)='./file2\x00', 0x66842, 0x1) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 1m16.429883167s ago: executing program 32 (id=1026): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = open(&(0x7f0000000140)='./file2\x00', 0x66842, 0x1) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) 20.115001287s ago: executing program 4 (id=1070): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e4403021002d1193d49138d7cdd07468b8972dd0e894a3ea4ad03e297e368a68ba8810dece110e805c49a151c3d9cabd1e56f3b"], 0x47) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) fstat(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="080c000080000000180012800e0001", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='w', 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=r3, r1, 0x1e, 0x201c, 0x0, @value=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="070000000100", 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x20890) sendmsg$nl_xfrm(r4, 0x0, 0x24004011) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 18.115262846s ago: executing program 2 (id=1148): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) listen(r0, 0x3) accept4$bt_l2cap(r0, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(0x0, 0x16) 13.945332948s ago: executing program 2 (id=1150): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x1}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) rmdir(&(0x7f0000000200)='./file0/file1\x00') syz_usb_connect(0x0, 0x0, 0x0, 0x0) 13.943981378s ago: executing program 0 (id=1151): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 13.909896449s ago: executing program 4 (id=1070): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e4403021002d1193d49138d7cdd07468b8972dd0e894a3ea4ad03e297e368a68ba8810dece110e805c49a151c3d9cabd1e56f3b"], 0x47) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) fstat(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="080c000080000000180012800e0001", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='w', 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=r3, r1, 0x1e, 0x201c, 0x0, @value=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="070000000100", 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x20890) sendmsg$nl_xfrm(r4, 0x0, 0x24004011) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 11.898427448s ago: executing program 0 (id=1153): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0xffff, 0x4, 0x9, 0x433c6, 0xffffffffffffffff, 0x1}, 0x50) socket$igmp(0x2, 0x3, 0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x126}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e", 0xc0}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbc", 0x88}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413", 0x45}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e512d82086", 0x4d}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d9c8a463041e206ecb01a51b07ab9ae015b316e56b9ba420baf", 0x4f}, {&(0x7f0000000640)="1cc96615eecaacfe", 0x8}], 0x6) write(r3, &(0x7f0000001e00)="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", 0x3a6) 11.891732599s ago: executing program 3 (id=1154): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) setuid(0xee01) ioctl$BLKPG(r0, 0x1269, 0x0) 11.556521077s ago: executing program 3 (id=1155): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0xc, &(0x7f00000003c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usbip_server_init(0x4) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet(0x2, 0x80000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) socket(0x1e, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b00010062726964676500001400028008000200060000000800030017"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 11.169895876s ago: executing program 4 (id=1070): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e4403021002d1193d49138d7cdd07468b8972dd0e894a3ea4ad03e297e368a68ba8810dece110e805c49a151c3d9cabd1e56f3b"], 0x47) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) fstat(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="080c000080000000180012800e0001", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='w', 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=r3, r1, 0x1e, 0x201c, 0x0, @value=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="070000000100", 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x20890) sendmsg$nl_xfrm(r4, 0x0, 0x24004011) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 7.713573241s ago: executing program 0 (id=1156): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x10c, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x8000000000, 0x800, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20, 0x800000, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x0, @in=@broadcast, 0x4, 0x3, 0x0, 0x0, 0xfffffc01, 0x5001, 0x6}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 7.231572442s ago: executing program 3 (id=1157): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) inotify_init() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r7, 0x407, 0x100004) 7.133590375s ago: executing program 0 (id=1158): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x42, 0xa}, {0x80, 0x40, 0x100, 0x100, 0xa}}}}, 0x17) accept4(r0, 0x0, 0x0, 0x0) 6.549461179s ago: executing program 4 (id=1070): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e4403021002d1193d49138d7cdd07468b8972dd0e894a3ea4ad03e297e368a68ba8810dece110e805c49a151c3d9cabd1e56f3b"], 0x47) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) fstat(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="080c000080000000180012800e0001", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='w', 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=r3, r1, 0x1e, 0x201c, 0x0, @value=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="070000000100", 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x20890) sendmsg$nl_xfrm(r4, 0x0, 0x24004011) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 6.485978511s ago: executing program 2 (id=1159): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000e80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000002", @ANYRES16, @ANYBLOB="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"], 0x5a8}, 0x1, 0x0, 0x0, 0x880}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000"], 0x48) sendmsg$nl_netfilter(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000ec0)={0x154, 0x3, 0x7, 0x500, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x6}, [@nested={0xfe, 0x27, 0x0, 0x1, [@typed={0xa, 0x9e, 0x0, 0x0, @str='^!+{#\x00'}, @generic="5c56e77e18b816791d172adff2c16117d668e353303f7bb3d336ddd4c15b29c713fa9f7d0df5b975b5b30732eae9becd9904407b89", @generic="11f659180d8153295976fd7a0542ea8abcb4b48872a00df7baa7242aa30ccc2b0f66e65c951699ba9075a2c1e1d0563fb764850810d157d95d18347970e893f6ded14937fd4ebe0d6522589a4e8d2e90fe4722397d7d37803eb0580cec817bd715a3b7d2b3e149bde5e80ccb10496c3cb2a309e8504fa6f87455504e50a692810932a376ac01ac728028f22e84afb941c1ce8b2d9c19559a40313dd67e56e4f5e6c6a1ff27711d3a1c5915cb2c", @typed={0x8, 0x1d, 0x0, 0x0, @pid}, @nested={0x4, 0x9c}]}, @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x2}, @typed={0x5, 0xf6, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x51, 0x0, 0x0, @u32=0xff}, @typed={0x14, 0x127, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2c}}, @typed={0x9, 0xfa, 0x0, 0x0, @str='&+/&\x00'}, @generic="0ffe3c7a", @generic]}, 0x154}, 0x1, 0x0, 0x0, 0x41}, 0x8900) openat$sysctl(0xffffffffffffff9c, &(0x7f0000001ac0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendfile(r3, r3, 0x0, 0x200000) 4.162934738s ago: executing program 0 (id=1160): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e0000000400000008000000087e8a298525f490e57969"], 0x48) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x5, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000880)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '{\x90&\xab\x1b\x81\xd7\xdc\xe8p\xe7\xb59\xb2\xa9\x9a}\t\xd1\b\xc5\xe7i\xe4^1\t\xfdd\x0f\x95\xf1\x1f\xe9\tq*\x82\xdae\xeeo<\xe5b\xa6V\xff\x9bQ\x156\xa3a\xd67Ef\x9b2:\xf6U\x9b\x96e\xf0\x1c\xc3\xfe\xf5\x86e\xf8\xb5\xd0\xab\xf5V\x93\xc6\xa2`w\xc6]\xbcK\a\x87\x8e\xc3\xecD\xa0\xd3?\xf3^\x1fQ\a3\xb6\x92Q]\x1a8P^\xc12nU\x84qF\xce\x80\xe5\xcc\x1a\xc1\x9e\xdc\xc4\xc9\x1d \xbcCy\nT\xf7\xf5\x0e\x85\\\xe7\x89-\x02\x98\x96\xfc\x96\xa7m\x9b.\xe1L\xccu\x93\x95\xe6J:\xf7\xae\xe8Rz\xe5\x8a7<\x80\x06\xe4\xb2\x84\xfdcL\xf7\xc1\xd5\xd9\x85*\x9a{\xc1\vB\xa3\xa8\xf2\xd9f\\$\x9cvd\xdepug\xa8>P&\xd2\a2kw&C\x96MJ\xd4we\x1d\xb8#\x13\x87f\xa2%\x81\x0f\x11Y\xe1\n\xe6\xd1\xc2CB'}, 0x107, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000006c0)={0x0, @reserved}) 4.161796568s ago: executing program 2 (id=1161): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffe}}}}}}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='cubic\x00', 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000ac0)='fuseblk\x00M\x13k\x92#\x05z)\xe0c\\35\xdf%\xa3\xac!zoO\xf8\xcex\xb3\f\xad@\x853o\x0f0\x1a\xc0\"\xf7\x11Z\x01\xc1\xd9\x9fbJ7\xd1\xad\xe1\xed\x87\xae\x11-s\xb4\xbd\x1e\x9a\xd7\xc1crt\x88%\x92\x8fL\x8d\xb3-\xb60O \xc5\xd1q\xcc\x97\xe0\xe8\xb0\n\v\xa9V\xfa\xeb\x1e|M\x98W\x81\xa2@{_\xba^\xa2\x82k\x10G\xfc\xd4\x99Pl\xfa\xe8\x7f\xc9 h\xd0\xfd\x04\x95\x8c\xb1\xe7', 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), 0x0) write$P9_RSTATu(r4, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x14000000, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 4.136982478s ago: executing program 3 (id=1162): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000a40)='^', 0x1}], 0x1) 3.410642536s ago: executing program 4 (id=1070): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e4403021002d1193d49138d7cdd07468b8972dd0e894a3ea4ad03e297e368a68ba8810dece110e805c49a151c3d9cabd1e56f3b"], 0x47) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) fstat(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="080c000080000000180012800e0001", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='w', 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=r3, r1, 0x1e, 0x201c, 0x0, @value=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="070000000100", 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x20890) sendmsg$nl_xfrm(r4, 0x0, 0x24004011) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.093392933s ago: executing program 0 (id=1163): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.092664143s ago: executing program 2 (id=1164): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0xffff, 0x4, 0x9, 0x433c6, 0xffffffffffffffff, 0x1}, 0x50) socket$igmp(0x2, 0x3, 0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6", 0x126}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e", 0xc0}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbc", 0x88}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c", 0x50}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e512d82086", 0x4d}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d9c8a463041e206ecb01a51b07ab9ae015b316e56b9ba420baf", 0x4f}, {&(0x7f0000000640)="1cc96615eecaacfe", 0x8}], 0x6) write(r3, &(0x7f0000001e00)="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", 0x3a6) 1.092287563s ago: executing program 3 (id=1165): r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0xd8, 0x15, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xb7, 0x8, "1bc7b4565bb4ba46eb81ee3efad830b9862c9a76642b9c0d5636c500fc57bb3edf6e81ee95485f4435f2ddfc21b97657e3262259b8e035cb51ba9e024c7aa8538de540a8b5f64c72ac970c909f9fa4933b97277bea1d7f5a179e31e59abeb9f173b9d46cfbd47d9235ebde49aa62b2dd1a9cd71660762b617779038b382ff61732ecf36404a2ad3ee28b3dde196e600d78037dd8a482f3a4f72056b169b876bf0338965ac149fab6c32ca6686ac30bc79f1d03"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008040}, 0x800) r2 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x1, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xa, 0x0) close(r2) mq_unlink(&(0x7f0000000000)='eth0\x00') 67.361378ms ago: executing program 2 (id=1166): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0xc, &(0x7f00000003c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usbip_server_init(0x4) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet(0x2, 0x80000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) socket(0x1e, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b00010062726964676500001400028008000200060000000800030017"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 28.037149ms ago: executing program 3 (id=1167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x10c, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x8000000000, 0x800, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20, 0x800000, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x0, @in=@broadcast, 0x4, 0x3, 0x0, 0x0, 0xfffffc01, 0x5001, 0x6}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 0s ago: executing program 4 (id=1070): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e4403021002d1193d49138d7cdd07468b8972dd0e894a3ea4ad03e297e368a68ba8810dece110e805c49a151c3d9cabd1e56f3b"], 0x47) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) fstat(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="080c000080000000180012800e0001", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='w', 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=r3, r1, 0x1e, 0x201c, 0x0, @value=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="070000000100", 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x20890) sendmsg$nl_xfrm(r4, 0x0, 0x24004011) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): sconnect, device number 2 [ 164.742727][ T6607] loop1: detected capacity change from 0 to 128 [ 164.784777][ T6607] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 164.851775][ T6609] loop1: detected capacity change from 0 to 8 [ 164.876948][ T6609] SQUASHFS error: Unable to read inode 0x11f [ 165.379128][ T6609] loop1: detected capacity change from 0 to 32768 [ 165.410247][ T6609] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.201 (6609) [ 165.448590][ T6609] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.462231][ T6609] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 165.474093][ T6609] BTRFS info (device loop1): turning on sync discard [ 165.482363][ T6609] BTRFS info (device loop1): force zlib compression, level 3 [ 165.493268][ T6609] BTRFS info (device loop1): enabling all of the rescue options [ 165.501977][ T6609] BTRFS info (device loop1): ignoring data csums [ 165.510580][ T6609] BTRFS info (device loop1): ignoring bad roots [ 165.519128][ T6609] BTRFS info (device loop1): disabling log replay at mount time [ 165.529258][ T6609] BTRFS info (device loop1): trying to use backup root at mount time [ 165.553393][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f567400: rx timeout, send abort [ 165.561972][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f567400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 165.593959][ T6609] BTRFS info (device loop1): turning off discard [ 165.603850][ T5885] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 165.622873][ T6609] BTRFS info (device loop1): using free space tree [ 165.688781][ T1091] BTRFS warning (device loop1): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0 [ 165.729964][ T6609] BTRFS error (device loop1): failed to read chunk root [ 165.807634][ T6609] BTRFS error (device loop1): open_ctree failed: -5 [ 165.829143][ T5885] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 165.860774][ T5885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.882753][ T5885] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.903023][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 165.914433][ T5885] usb 4-1: Product: syz [ 165.926612][ T5885] usb 4-1: Manufacturer: syz [ 165.941180][ T5885] usb 4-1: SerialNumber: syz [ 165.962671][ T5885] usb 4-1: config 0 descriptor?? [ 166.036613][ T5885] usb 4-1: selecting invalid altsetting 0 [ 166.116826][ T6629] jffs2: notice: (6629) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 167.422483][ T6647] usb 4-1: BOGUS urb xfer, pipe 0 != type 1 [ 167.431048][ T6645] loop0: detected capacity change from 0 to 1 [ 167.576824][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 167.590164][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 167.600814][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 167.612254][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 168.874078][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 169.006705][ T5885] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 169.065540][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 169.178918][ T9] usb 1-1: config 0 has no interfaces? [ 169.194106][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.209712][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.228310][ T5885] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.253930][ T5885] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 169.274011][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.287157][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 169.308947][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 169.327735][ T5885] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.365710][ T9] usb 1-1: config 0 descriptor?? [ 169.410060][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.419537][ T5885] usb 2-1: Product: syz [ 169.427899][ T5885] usb 2-1: Manufacturer: syz [ 169.453268][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 169.460261][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 169.472930][ T5885] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 169.481020][ T5885] cdc_wdm 2-1:1.0: Unknown control protocol [ 169.497383][ T9] usb 4-1: USB disconnect, device number 3 [ 169.584505][ T5815] usb 1-1: USB disconnect, device number 3 [ 169.592364][ T6663] loop3: detected capacity change from 0 to 128 [ 169.681787][ T6663] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 169.781807][ T6668] loop3: detected capacity change from 0 to 8 [ 169.815726][ T6668] SQUASHFS error: Unable to read inode 0x11f [ 170.406570][ T6668] loop3: detected capacity change from 0 to 32768 [ 170.444496][ T6668] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.215 (6668) [ 170.467536][ T6668] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.482537][ T6668] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 170.492726][ T6668] BTRFS info (device loop3): turning on sync discard [ 170.502460][ T6668] BTRFS info (device loop3): force zlib compression, level 3 [ 170.511852][ T6668] BTRFS info (device loop3): enabling all of the rescue options [ 170.544067][ T6668] BTRFS info (device loop3): ignoring data csums [ 170.552311][ T6668] BTRFS info (device loop3): ignoring bad roots [ 170.575149][ T6668] BTRFS info (device loop3): disabling log replay at mount time [ 170.588888][ T6668] BTRFS info (device loop3): trying to use backup root at mount time [ 170.618757][ T6668] BTRFS info (device loop3): turning off discard [ 170.627241][ T6668] BTRFS info (device loop3): using free space tree [ 170.671085][ T12] BTRFS warning (device loop3): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0 [ 170.718877][ T6668] BTRFS error (device loop3): failed to read chunk root [ 170.808229][ T6668] BTRFS error (device loop3): open_ctree failed: -5 [ 170.824107][ T6686] block device autoloading is deprecated and will be removed. [ 171.197636][ T6691] netlink: 25 bytes leftover after parsing attributes in process `syz.0.219'. [ 171.224854][ T6691] eql: entered promiscuous mode [ 171.307247][ T6691] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.219'. [ 171.334868][ T6691] 0XD: renamed from eql [ 171.367898][ T6691] 0XD: remember to turn off Van-Jacobson compression on your slave devices [ 171.398405][ T6691] 0XD: left promiscuous mode [ 171.416563][ T6691] 0XD: entered allmulticast mode [ 171.604794][ T5815] usb 2-1: USB disconnect, device number 3 [ 172.002289][ T6710] tmpfs: Bad value for 'mpol' [ 173.364093][ T6710] FAULT_INJECTION: forcing a failure. [ 173.364093][ T6710] name failslab, interval 1, probability 0, space 0, times 0 [ 173.403901][ T6710] CPU: 0 PID: 6710 Comm: syz.0.226 Not tainted syzkaller #0 [ 173.411314][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 173.421422][ T6710] Call Trace: [ 173.424744][ T6710] [ 173.427719][ T6710] dump_stack_lvl+0x18c/0x250 [ 173.432480][ T6710] ? show_regs_print_info+0x20/0x20 [ 173.438343][ T6710] ? load_image+0x420/0x420 [ 173.443100][ T6710] ? __might_sleep+0xe0/0xe0 [ 173.447772][ T6710] ? __lock_acquire+0x7eb0/0x7eb0 [ 173.452872][ T6710] should_fail_ex+0x394/0x4c0 [ 173.457625][ T6710] should_failslab+0x9/0x20 [ 173.462287][ T6710] slab_pre_alloc_hook+0x59/0x300 [ 173.467376][ T6710] ? stack_trace_save+0xaa/0x100 [ 173.472378][ T6710] kmem_cache_alloc+0x5a/0x2c0 [ 173.477188][ T6710] ? __proc_create+0x373/0x8b0 [ 173.482000][ T6710] __proc_create+0x373/0x8b0 [ 173.486622][ T6710] ? proc_symlink+0x260/0x260 [ 173.491412][ T6710] ? copy_net_ns+0x361/0x530 [ 173.496053][ T6710] ? ksys_unshare+0x4fa/0x8f0 [ 173.500850][ T6710] ? __x64_sys_unshare+0x38/0x40 [ 173.505813][ T6710] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.511906][ T6710] proc_create_reg+0x8b/0x110 [ 173.516606][ T6710] proc_create_net_data+0x99/0x1b0 [ 173.521839][ T6710] ? bpf_iter_fini_seq_net+0xc0/0xc0 [ 173.527243][ T6710] ? xt_proto_init+0x22b/0x930 [ 173.532043][ T6710] xt_proto_init+0x283/0x930 [ 173.536661][ T6710] ? xt_unregister_template+0x220/0x220 [ 173.542242][ T6710] ? __kasan_kmalloc+0x8f/0xa0 [ 173.547111][ T6710] ? ipv4_sysctl_init_net+0x25b/0x2d0 [ 173.552516][ T6710] ops_init+0x391/0x640 [ 173.556701][ T6710] setup_net+0x3b6/0xa20 [ 173.561051][ T6710] ? copy_net_ns+0x530/0x530 [ 173.565687][ T6710] ? copy_net_ns+0x347/0x530 [ 173.570305][ T6710] ? down_read_killable+0x1d0/0x340 [ 173.575633][ T6710] copy_net_ns+0x361/0x530 [ 173.580100][ T6710] create_new_namespaces+0x3ce/0x700 [ 173.585422][ T6710] unshare_nsproxy_namespaces+0x11a/0x160 [ 173.591170][ T6710] ksys_unshare+0x4fa/0x8f0 [ 173.595976][ T6710] ? sighand_ctor+0x50/0x50 [ 173.600510][ T6710] ? lock_chain_count+0x20/0x20 [ 173.605562][ T6710] ? syscall_enter_from_user_mode+0x25/0x80 [ 173.611529][ T6710] __x64_sys_unshare+0x38/0x40 [ 173.616336][ T6710] do_syscall_64+0x55/0xb0 [ 173.620877][ T6710] ? clear_bhb_loop+0x40/0x90 [ 173.625688][ T6710] ? clear_bhb_loop+0x40/0x90 [ 173.630399][ T6710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.636327][ T6710] RIP: 0033:0x7f63c979e159 [ 173.640759][ T6710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.660743][ T6710] RSP: 002b:00007f63ca5dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 173.669282][ T6710] RAX: ffffffffffffffda RBX: 00007f63c9a25fa0 RCX: 00007f63c979e159 [ 173.677364][ T6710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 173.685441][ T6710] RBP: 00007f63c983506b R08: 0000000000000000 R09: 0000000000000000 [ 173.693440][ T6710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.701425][ T6710] R13: 00007f63c9a26038 R14: 00007f63c9a25fa0 R15: 00007ffe69064a48 [ 173.709452][ T6710] [ 174.080208][ T6727] loop0: detected capacity change from 0 to 128 [ 174.134838][ T6727] omfs: sysblock size (-58445445) is out of range [ 174.290242][ T6729] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 174.361663][ T6734] loop1: detected capacity change from 0 to 8 [ 174.432661][ T6734] SQUASHFS error: Unable to read inode 0x11f [ 174.526061][ T6582] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.491239][ T6749] loop0: detected capacity change from 0 to 128 [ 175.500056][ T6749] omfs: sysblock size (-58445445) is out of range [ 175.549118][ T6471] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.675138][ T6734] loop1: detected capacity change from 0 to 32768 [ 175.709872][ T6734] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.228 (6734) [ 175.794976][ T6734] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.837136][ T6734] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 175.875183][ T6734] BTRFS info (device loop1): turning on sync discard [ 175.875213][ T6734] BTRFS info (device loop1): force zlib compression, level 3 [ 175.875274][ T6734] BTRFS info (device loop1): enabling all of the rescue options [ 175.875293][ T6734] BTRFS info (device loop1): ignoring data csums [ 175.875309][ T6734] BTRFS info (device loop1): ignoring bad roots [ 175.875324][ T6734] BTRFS info (device loop1): disabling log replay at mount time [ 175.875387][ T6734] BTRFS info (device loop1): trying to use backup root at mount time [ 175.875426][ T6734] BTRFS info (device loop1): turning off discard [ 175.875443][ T6734] BTRFS info (device loop1): using free space tree [ 176.078104][ T6771] loop0: detected capacity change from 0 to 128 [ 176.113857][ T6771] omfs: sysblock size (-58445445) is out of range [ 176.216265][ T1091] BTRFS warning (device loop1): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0 [ 176.334444][ T6734] BTRFS error (device loop1): failed to read chunk root [ 176.717269][ T6734] BTRFS error (device loop1): open_ctree failed: -5 [ 179.190449][ T6805] loop0: detected capacity change from 0 to 128 [ 179.306057][ T6805] omfs: sysblock size (-58445445) is out of range [ 179.378838][ T6807] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 179.400452][ T5815] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 179.526304][ T6809] loop1: detected capacity change from 0 to 8 [ 179.586116][ T6809] SQUASHFS error: Unable to read inode 0x11f [ 179.607963][ T5815] usb 4-1: config index 0 descriptor too short (expected 12647, got 36) [ 179.625453][ T5815] usb 4-1: config 99 has too many interfaces: 47, using maximum allowed: 32 [ 179.644066][ T5815] usb 4-1: config 99 has an invalid descriptor of length 105, skipping remainder of the config [ 179.663820][ T5815] usb 4-1: config 99 has 0 interfaces, different from the descriptor's value: 47 [ 179.675677][ T5815] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.685273][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.908863][ T5815] usb 4-1: string descriptor 0 read error: -71 [ 179.934243][ T5815] usb 4-1: USB disconnect, device number 4 [ 180.326163][ T6809] loop1: detected capacity change from 0 to 32768 [ 180.353149][ T6809] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.250 (6809) [ 180.445129][ T6809] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.483931][ T6809] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 180.509128][ T6809] BTRFS info (device loop1): turning on sync discard [ 180.529705][ T6809] BTRFS info (device loop1): force zlib compression, level 3 [ 180.559333][ T6809] BTRFS info (device loop1): enabling all of the rescue options [ 180.583838][ T6809] BTRFS info (device loop1): ignoring data csums [ 180.603825][ T6809] BTRFS info (device loop1): ignoring bad roots [ 180.633821][ T6809] BTRFS info (device loop1): disabling log replay at mount time [ 180.644328][ T6809] BTRFS info (device loop1): trying to use backup root at mount time [ 180.652493][ T6809] BTRFS info (device loop1): turning off discard [ 180.688518][ T6809] BTRFS info (device loop1): using free space tree [ 180.769892][ T49] BTRFS warning (device loop1): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0 [ 180.797363][ T6809] BTRFS error (device loop1): failed to read chunk root [ 180.890333][ T6809] BTRFS error (device loop1): open_ctree failed: -5 [ 181.173074][ T6471] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (6471) [ 181.767528][ T6854] jffs2: notice: (6854) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 182.577526][ T6854] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 182.667406][ T6858] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 183.082290][ T6875] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 183.148998][ T6878] loop3: detected capacity change from 0 to 8 [ 183.196994][ T6878] SQUASHFS error: Unable to read inode 0x11f [ 183.727822][ T6884] loop1: detected capacity change from 0 to 128 [ 183.740587][ T6884] omfs: sysblock size (-58445445) is out of range [ 184.056061][ T6878] loop3: detected capacity change from 0 to 32768 [ 184.133536][ T6878] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.239623][ T6878] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 184.347441][ T6878] BTRFS info (device loop3): turning on sync discard [ 184.419008][ T6878] BTRFS info (device loop3): force zlib compression, level 3 [ 184.485324][ T6878] BTRFS info (device loop3): enabling all of the rescue options [ 184.576558][ T6878] BTRFS info (device loop3): ignoring data csums [ 184.646621][ T6878] BTRFS info (device loop3): ignoring bad roots [ 184.705682][ T6878] BTRFS info (device loop3): disabling log replay at mount time [ 184.757404][ T6878] BTRFS info (device loop3): trying to use backup root at mount time [ 184.834002][ T6878] BTRFS info (device loop3): turning off discard [ 184.872792][ T6878] BTRFS info (device loop3): using free space tree [ 185.994674][ T6863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.342314][ T6878] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 186.586230][ T6878] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 186.760698][ T6878] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 186.868693][ T6878] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 186.935058][ T6878] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 187.000171][ T6878] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 187.061740][ T6878] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 187.126241][ T6878] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 187.217412][ T6878] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 187.364629][ T6878] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 188.242508][ T6878] BTRFS error (device loop3): open_ctree failed: -12 [ 188.500097][ T6471] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (6471) [ 188.880379][ T6924] autofs4:pid:6924:autofs_fill_super: called with bogus options [ 188.956873][ T6921] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 189.023000][ T6921] udc dummy_udc.0: failed to start g1: -19 [ 189.050727][ T6921] UDC core: g1: couldn't find an available UDC or it's busy [ 189.191959][ T6933] netlink: 'syz.0.279': attribute type 2 has an invalid length. [ 189.409833][ T6939] loop1: detected capacity change from 0 to 128 [ 189.466456][ T6939] omfs: sysblock size (-58445445) is out of range [ 190.024100][ T6950] loop1: detected capacity change from 0 to 128 [ 190.064180][ T6950] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 190.166212][ T6953] loop1: detected capacity change from 0 to 8 [ 190.206040][ T6953] SQUASHFS error: Unable to read inode 0x11f [ 190.277205][ T6471] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.585370][ T6961] jffs2: notice: (6961) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 191.372052][ T6961] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 192.004674][ T5885] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 192.162310][ T6953] loop1: detected capacity change from 0 to 32768 [ 192.251135][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.268506][ T6953] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.311343][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.334410][ T6953] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 192.350793][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.356982][ T6953] BTRFS info (device loop1): turning on sync discard [ 192.387440][ T6953] BTRFS info (device loop1): force zlib compression, level 3 [ 192.405606][ T5885] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.408649][ T6953] BTRFS info (device loop1): enabling all of the rescue options [ 192.423873][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.444962][ T6953] BTRFS info (device loop1): ignoring data csums [ 192.456021][ T5885] usb 3-1: config 0 descriptor?? [ 192.477284][ T6953] BTRFS info (device loop1): ignoring bad roots [ 192.487301][ T6953] BTRFS info (device loop1): disabling log replay at mount time [ 192.498408][ T6953] BTRFS info (device loop1): trying to use backup root at mount time [ 192.511194][ T6953] BTRFS info (device loop1): turning off discard [ 192.523672][ T6953] BTRFS info (device loop1): using free space tree [ 192.565188][ T11] BTRFS warning (device loop1): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0 [ 192.595168][ T6953] BTRFS error (device loop1): failed to read chunk root [ 192.750946][ T6953] BTRFS error (device loop1): open_ctree failed: -5 [ 192.910263][ T5885] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 192.965460][ T5885] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 194.464568][ T6535] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 194.645253][ T6535] usb 3-1: device descriptor read/64, error -32 [ 194.798306][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.814064][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.216046][ T7043] syzkaller0: entered promiscuous mode [ 195.221601][ T7043] syzkaller0: entered allmulticast mode [ 195.300751][ T7043] syzkaller0: left promiscuous mode [ 195.306865][ T7043] syzkaller0: left allmulticast mode [ 195.543485][ T7050] loop2: detected capacity change from 0 to 128 [ 195.551468][ T7050] omfs: sysblock size (-58445445) is out of range [ 195.619602][ T6471] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 195.638466][ T5885] usb 3-1: USB disconnect, device number 4 [ 195.855118][ T5817] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 195.883701][ T5784] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 196.046103][ T5817] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.057479][ T5817] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 196.075964][ T5817] usb 1-1: string descriptor 0 read error: -22 [ 196.086457][ T5817] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 196.098047][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.112241][ T5817] etas_es58x 1-1:1.0: Starting (null) (null) (Serial Number (null)) [ 196.130502][ T5817] etas_es58x 1-1:1.0: could not retrieve the product info string [ 196.393901][ T7049] etas_es58x 1-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 196.412822][ C0] etas_es58x 1-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 196.422466][ C0] etas_es58x 1-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 196.434123][ C0] etas_es58x 1-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 196.450355][ C0] etas_es58x 1-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 196.460825][ C0] etas_es58x 1-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 196.474774][ T7049] etas_es58x 1-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 196.503950][ T5815] usb 1-1: USB disconnect, device number 4 [ 196.516576][ T5815] etas_es58x 1-1:1.0: Disconnecting (null) (null) [ 197.965499][ T7111] loop2: detected capacity change from 0 to 128 [ 197.973336][ T7111] omfs: sysblock size (-58445445) is out of range [ 198.038184][ T6471] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.442446][ T7136] loop3: detected capacity change from 0 to 128 [ 199.450597][ T7136] omfs: sysblock size (-58445445) is out of range [ 199.501342][ T6471] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.434691][ T7164] loop1: detected capacity change from 0 to 128 [ 200.465684][ T7164] omfs: sysblock size (-58445445) is out of range [ 201.823946][ T5784] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.083936][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 206.272308][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.284475][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 206.323510][ T9] usb 3-1: string descriptor 0 read error: -22 [ 206.330268][ T9] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 206.340586][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.378392][ T7242] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 206.420362][ T7242] udc dummy_udc.0: failed to start g1: -19 [ 206.474864][ T7242] UDC core: g1: couldn't find an available UDC or it's busy [ 206.497784][ T9] etas_es58x 3-1:1.0: Starting (null) (null) (Serial Number (null)) [ 206.539193][ T9] etas_es58x 3-1:1.0: could not retrieve the product info string [ 206.919689][ T7229] etas_es58x 3-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 206.959437][ C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 206.971953][ C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 206.980215][ C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 206.997293][ C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 207.023292][ C0] etas_es58x 3-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 207.050054][ T7229] etas_es58x 3-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 207.093698][ T5885] usb 3-1: USB disconnect, device number 5 [ 207.121420][ T5885] etas_es58x 3-1:1.0: Disconnecting (null) (null) [ 208.457075][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 208.457091][ T28] audit: type=1326 audit(1791134165.909:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 208.536269][ T28] audit: type=1326 audit(1791134165.909:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 208.591236][ T28] audit: type=1326 audit(1791134165.909:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 208.708752][ T28] audit: type=1326 audit(1791134165.909:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 208.814477][ T28] audit: type=1326 audit(1791134165.909:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 208.965921][ T28] audit: type=1326 audit(1791134165.909:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 209.073862][ T28] audit: type=1326 audit(1791134165.909:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 209.193288][ T28] audit: type=1326 audit(1791134165.909:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 209.525217][ T28] audit: type=1326 audit(1791134165.909:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 209.559380][ T28] audit: type=1326 audit(1791134165.909:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 211.263904][ T5815] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 211.398928][ T7340] FAULT_INJECTION: forcing a failure. [ 211.398928][ T7340] name failslab, interval 1, probability 0, space 0, times 0 [ 211.428853][ T7340] CPU: 1 PID: 7340 Comm: syz.1.391 Not tainted syzkaller #0 [ 211.436468][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 211.446921][ T7340] Call Trace: [ 211.450343][ T7340] [ 211.453324][ T7340] dump_stack_lvl+0x18c/0x250 [ 211.458125][ T7340] ? show_regs_print_info+0x20/0x20 [ 211.463392][ T7340] ? load_image+0x420/0x420 [ 211.467959][ T7340] ? __might_sleep+0xe0/0xe0 [ 211.472602][ T7340] ? __lock_acquire+0x7eb0/0x7eb0 [ 211.477742][ T7340] should_fail_ex+0x394/0x4c0 [ 211.482575][ T7340] should_failslab+0x9/0x20 [ 211.487195][ T7340] slab_pre_alloc_hook+0x59/0x300 [ 211.487758][ T5815] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.492347][ T7340] ? d_instantiate+0x6f/0x90 [ 211.492379][ T7340] kmem_cache_alloc+0x5a/0x2c0 [ 211.504116][ T5815] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 211.507304][ T7340] ? alloc_empty_file+0x9e/0x1d0 [ 211.507340][ T7340] alloc_empty_file+0x9e/0x1d0 [ 211.515826][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.521311][ T7340] alloc_file+0x5b/0x600 [ 211.521352][ T7340] alloc_file_pseudo+0x184/0x210 [ 211.521379][ T7340] ? fput+0x1a0/0x1a0 [ 211.552536][ T7340] ? do_raw_spin_unlock+0x121/0x230 [ 211.555371][ T5815] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 211.557959][ T7340] anon_inode_getfile+0xc5/0x1a0 [ 211.558005][ T7340] do_epoll_create+0x27f/0x340 [ 211.570264][ T5815] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 211.570341][ T7340] __x64_sys_epoll_create1+0x37/0x40 [ 211.580650][ T5815] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 211.582953][ T7340] do_syscall_64+0x55/0xb0 [ 211.582992][ T7340] ? clear_bhb_loop+0x40/0x90 [ 211.602546][ T5815] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 211.604968][ T7340] ? clear_bhb_loop+0x40/0x90 [ 211.605003][ T7340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.605034][ T7340] RIP: 0033:0x7f441339e159 [ 211.605055][ T7340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.622119][ T5815] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 211.623823][ T7340] RSP: 002b:00007f4414207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 211.623855][ T7340] RAX: ffffffffffffffda RBX: 00007f4413625fa0 RCX: 00007f441339e159 [ 211.623872][ T7340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.623885][ T7340] RBP: 00007f441343506b R08: 0000000000000000 R09: 0000000000000000 [ 211.623898][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.623911][ T7340] R13: 00007f4413626038 R14: 00007f4413625fa0 R15: 00007fff258daea8 [ 211.623943][ T7340] [ 211.646780][ T5815] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 211.836032][ T5815] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 211.853058][ T5815] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 211.929850][ T5815] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 212.662768][ T5885] IPVS: starting estimator thread 0... [ 212.815489][ T7354] IPVS: using max 14 ests per chain, 33600 per kthread [ 214.125828][ T7366] loop3: detected capacity change from 0 to 128 [ 214.140562][ T7366] omfs: sysblock size (-58445445) is out of range [ 215.371471][ T5817] usb 3-1: USB disconnect, device number 6 [ 215.381697][ T5817] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 215.419152][ T5817] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 215.454518][ T5817] keyspan 3-1:1.0: device disconnected [ 217.007027][ T7406] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 217.014172][ T7406] udc dummy_udc.0: failed to start g1: -19 [ 217.025772][ T7406] UDC core: g1: couldn't find an available UDC or it's busy [ 217.101652][ T7418] loop3: detected capacity change from 0 to 512 [ 217.121190][ T7418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 217.138748][ T7418] System zones: 1-12 [ 217.186716][ T7418] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.415: missing EA_INODE flag [ 217.218346][ T7418] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.415: error while reading EA inode 12 err=-117 [ 217.233995][ T5885] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 217.263207][ T7418] EXT4-fs (loop3): 1 orphan inode deleted [ 217.285040][ T7418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.435902][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.473139][ T5885] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 217.520626][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.566893][ T5885] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 217.598582][ T5885] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 217.633510][ T5885] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 217.657166][ T5885] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 217.673343][ T5885] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 217.696401][ T5885] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 217.720019][ T5885] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 217.739809][ T5885] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 217.757470][ T5885] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 218.441166][ T5885] IPVS: starting estimator thread 0... [ 218.554166][ T7444] IPVS: using max 17 ests per chain, 40800 per kthread [ 219.661569][ T7481] loop2: detected capacity change from 0 to 128 [ 219.690287][ T7481] omfs: sysblock size (-58445445) is out of range [ 220.459524][ T6538] usb 2-1: USB disconnect, device number 4 [ 220.496352][ T6538] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 220.524712][ T6538] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 220.545977][ T6538] keyspan 2-1:1.0: device disconnected [ 220.578011][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.426696][ T7506] syz.3.441 (7506): drop_caches: 1 [ 221.732736][ T7506] syz.3.441 (7506): drop_caches: 1 [ 221.889504][ T7511] loop1: detected capacity change from 0 to 512 [ 221.929945][ T7511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 221.975426][ T7511] System zones: 1-12 [ 222.028615][ T7511] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.444: missing EA_INODE flag [ 222.091330][ T7519] loop3: detected capacity change from 0 to 128 [ 222.125660][ T7519] omfs: sysblock size (-58445445) is out of range [ 222.181564][ T7511] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.444: error while reading EA inode 12 err=-117 [ 222.422714][ T7511] EXT4-fs (loop1): 1 orphan inode deleted [ 222.667772][ T7511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.053456][ T7537] futex_wake_op: syz.3.450 tries to shift op by 144; fix this program [ 224.152447][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'. [ 225.522383][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.552523][ T5158] IPVS: starting estimator thread 0... [ 225.694075][ T7547] IPVS: using max 17 ests per chain, 40800 per kthread [ 225.913859][ T5885] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 226.154956][ T5885] usb 1-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x7C, skipping [ 226.473837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 227.131095][ T5885] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 227.173885][ T5885] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 227.182578][ T5885] usb 1-1: Manufacturer: syz [ 227.203781][ T5885] usb 1-1: SerialNumber: syz [ 227.511757][ T5885] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 227.529465][ T5885] usb 1-1: USB disconnect, device number 5 [ 229.085525][ T9] IPVS: starting estimator thread 0... [ 229.194350][ T7589] IPVS: using max 17 ests per chain, 40800 per kthread [ 229.367153][ T7594] futex_wake_op: syz.3.466 tries to shift op by 144; fix this program [ 230.306364][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout [ 230.899527][ T7615] jffs2: notice: (7615) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 232.655579][ T7649] loop1: detected capacity change from 0 to 512 [ 232.693981][ T7649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 232.702446][ T7649] System zones: 1-12 [ 232.761711][ T7649] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.487: missing EA_INODE flag [ 232.804240][ T7649] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.487: error while reading EA inode 12 err=-117 [ 232.858059][ T7649] EXT4-fs (loop1): 1 orphan inode deleted [ 232.866856][ T7649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.319625][ T7666] FAULT_INJECTION: forcing a failure. [ 233.319625][ T7666] name failslab, interval 1, probability 0, space 0, times 0 [ 233.337918][ T7666] CPU: 0 PID: 7666 Comm: syz.0.493 Not tainted syzkaller #0 [ 233.345474][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 233.355673][ T7666] Call Trace: [ 233.359297][ T7666] [ 233.362290][ T7666] dump_stack_lvl+0x18c/0x250 [ 233.367224][ T7666] ? show_regs_print_info+0x20/0x20 [ 233.372677][ T7666] ? load_image+0x420/0x420 [ 233.377514][ T7666] ? __might_sleep+0xe0/0xe0 [ 233.383138][ T7666] ? __lock_acquire+0x7eb0/0x7eb0 [ 233.390123][ T7666] should_fail_ex+0x394/0x4c0 [ 233.395063][ T7666] should_failslab+0x9/0x20 [ 233.399907][ T7666] slab_pre_alloc_hook+0x59/0x300 [ 233.406938][ T7666] kmem_cache_alloc+0x5a/0x2c0 [ 233.412150][ T7666] ? getname_flags+0xbb/0x500 [ 233.417171][ T7666] getname_flags+0xbb/0x500 [ 233.422289][ T7666] __x64_sys_statx+0x158/0x2b0 [ 233.427140][ T7666] ? cp_statx+0x6d0/0x6d0 [ 233.431652][ T7666] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 233.437947][ T7666] ? lock_chain_count+0x20/0x20 [ 233.442969][ T7666] ? lockdep_hardirqs_on+0x98/0x150 [ 233.448424][ T7666] do_syscall_64+0x55/0xb0 [ 233.453352][ T7666] ? clear_bhb_loop+0x40/0x90 [ 233.458199][ T7666] ? clear_bhb_loop+0x40/0x90 [ 233.463048][ T7666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.469026][ T7666] RIP: 0033:0x7f63c979e159 [ 233.473585][ T7666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.495257][ T7666] RSP: 002b:00007f63ca5dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 233.504187][ T7666] RAX: ffffffffffffffda RBX: 00007f63c9a25fa0 RCX: 00007f63c979e159 [ 233.512473][ T7666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 233.520497][ T7666] RBP: 00007f63c983506b R08: 0000000000000000 R09: 0000000000000000 [ 233.528690][ T7666] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 233.536890][ T7666] R13: 00007f63c9a26038 R14: 00007f63c9a25fa0 R15: 00007ffe69064a48 [ 233.544938][ T7666] [ 235.986515][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.268409][ T7695] FAULT_INJECTION: forcing a failure. [ 236.268409][ T7695] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 236.311635][ T7695] CPU: 1 PID: 7695 Comm: syz.3.503 Not tainted syzkaller #0 [ 236.319014][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 236.329395][ T7695] Call Trace: [ 236.333064][ T7695] [ 236.336048][ T7695] dump_stack_lvl+0x18c/0x250 [ 236.340783][ T7695] ? show_regs_print_info+0x20/0x20 [ 236.346180][ T7695] ? load_image+0x420/0x420 [ 236.350802][ T7695] ? __might_fault+0xaa/0x120 [ 236.355610][ T7695] ? __lock_acquire+0x7eb0/0x7eb0 [ 236.360706][ T7695] should_fail_ex+0x394/0x4c0 [ 236.365683][ T7695] strncpy_from_user+0x36/0x2f0 [ 236.371086][ T7695] getname_flags+0xf6/0x500 [ 236.375617][ T7695] __x64_sys_statx+0x158/0x2b0 [ 236.380493][ T7695] ? cp_statx+0x6d0/0x6d0 [ 236.385052][ T7695] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 236.391589][ T7695] ? lock_chain_count+0x20/0x20 [ 236.396556][ T7695] ? lockdep_hardirqs_on+0x98/0x150 [ 236.402184][ T7695] do_syscall_64+0x55/0xb0 [ 236.406823][ T7695] ? clear_bhb_loop+0x40/0x90 [ 236.412055][ T7695] ? clear_bhb_loop+0x40/0x90 [ 236.416868][ T7695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.423088][ T7695] RIP: 0033:0x7f17b939e159 [ 236.427804][ T7695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.448701][ T7695] RSP: 002b:00007f17ba21b028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 236.457253][ T7695] RAX: ffffffffffffffda RBX: 00007f17b9625fa0 RCX: 00007f17b939e159 [ 236.465274][ T7695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 236.474378][ T7695] RBP: 00007f17b943506b R08: 0000000000000000 R09: 0000000000000000 [ 236.482654][ T7695] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 236.491185][ T7695] R13: 00007f17b9626038 R14: 00007f17b9625fa0 R15: 00007ffd010f1168 [ 236.499732][ T7695] [ 237.903812][ T7721] loop2: detected capacity change from 0 to 512 [ 237.963413][ T7721] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 238.106844][ T7721] System zones: 1-12 [ 238.174195][ T7721] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.509: missing EA_INODE flag [ 238.196042][ T7721] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.509: error while reading EA inode 12 err=-117 [ 238.230259][ T7721] EXT4-fs (loop2): 1 orphan inode deleted [ 238.238201][ T7721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.578691][ T7739] FAULT_INJECTION: forcing a failure. [ 239.578691][ T7739] name failslab, interval 1, probability 0, space 0, times 0 [ 239.595757][ T7739] CPU: 0 PID: 7739 Comm: syz.3.515 Not tainted syzkaller #0 [ 239.605242][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 239.618567][ T7739] Call Trace: [ 239.622115][ T7739] [ 239.625267][ T7739] dump_stack_lvl+0x18c/0x250 [ 239.630670][ T7739] ? show_regs_print_info+0x20/0x20 [ 239.636455][ T7739] ? load_image+0x420/0x420 [ 239.641302][ T7739] ? __might_sleep+0xe0/0xe0 [ 239.646128][ T7739] ? __lock_acquire+0x7eb0/0x7eb0 [ 239.652046][ T7739] should_fail_ex+0x394/0x4c0 [ 239.656945][ T7739] should_failslab+0x9/0x20 [ 239.661753][ T7739] slab_pre_alloc_hook+0x59/0x300 [ 239.666833][ T7739] kmem_cache_alloc+0x5a/0x2c0 [ 239.672421][ T7739] ? getname_flags+0xbb/0x500 [ 239.677198][ T7739] getname_flags+0xbb/0x500 [ 239.681840][ T7739] __x64_sys_statx+0x158/0x2b0 [ 239.686697][ T7739] ? cp_statx+0x6d0/0x6d0 [ 239.691125][ T7739] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 239.697247][ T7739] ? lock_chain_count+0x20/0x20 [ 239.702215][ T7739] ? lockdep_hardirqs_on+0x98/0x150 [ 239.707468][ T7739] do_syscall_64+0x55/0xb0 [ 239.711907][ T7739] ? clear_bhb_loop+0x40/0x90 [ 239.716634][ T7739] ? clear_bhb_loop+0x40/0x90 [ 239.721616][ T7739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.727720][ T7739] RIP: 0033:0x7f17b939e159 [ 239.732277][ T7739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.752694][ T7739] RSP: 002b:00007f17ba21b028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 239.761133][ T7739] RAX: ffffffffffffffda RBX: 00007f17b9625fa0 RCX: 00007f17b939e159 [ 239.769206][ T7739] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 239.777385][ T7739] RBP: 00007f17b943506b R08: 0000000000000000 R09: 0000000000000000 [ 239.785400][ T7739] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 239.793600][ T7739] R13: 00007f17b9626038 R14: 00007f17b9625fa0 R15: 00007ffd010f1168 [ 239.802172][ T7739] [ 241.269938][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.756032][ T7776] loop1: detected capacity change from 0 to 128 [ 242.774246][ T7776] omfs: sysblock size (-58445445) is out of range [ 243.641565][ T7787] loop2: detected capacity change from 0 to 512 [ 243.684766][ T7787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 243.711405][ T7787] System zones: 1-12 [ 243.738544][ T7787] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.530: missing EA_INODE flag [ 243.760881][ T7787] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.530: error while reading EA inode 12 err=-117 [ 243.780884][ T7787] EXT4-fs (loop2): 1 orphan inode deleted [ 243.789748][ T7787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.556752][ T7818] loop3: detected capacity change from 0 to 128 [ 245.586883][ T7818] omfs: sysblock size (-58445445) is out of range [ 247.513907][ T7768] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 247.777987][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.867738][ T7859] loop2: detected capacity change from 0 to 512 [ 249.915521][ T7859] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 249.934535][ T7859] System zones: 1-12 [ 249.952883][ T7859] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.550: missing EA_INODE flag [ 249.965918][ T7859] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.550: error while reading EA inode 12 err=-117 [ 249.997322][ T7859] EXT4-fs (loop2): 1 orphan inode deleted [ 250.009377][ T7859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.842381][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 250.842397][ T28] audit: type=1326 audit(1791134208.289:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.0.556" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 250.882658][ T28] audit: type=1326 audit(1791134208.289:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.0.556" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 250.908254][ T28] audit: type=1326 audit(1791134208.289:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.0.556" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 250.938227][ T28] audit: type=1326 audit(1791134208.289:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.0.556" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 250.984068][ T28] audit: type=1326 audit(1791134208.289:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.0.556" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 251.009392][ T28] audit: type=1326 audit(1791134208.309:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.0.556" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 251.036329][ T28] audit: type=1326 audit(1791134208.309:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.0.556" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 251.160994][ T28] audit: type=1326 audit(1791134208.309:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.0.556" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63c975e98e code=0x7ffc0000 [ 251.189020][ T28] audit: type=1326 audit(1791134208.309:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.0.556" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63c979ddeb code=0x7ffc0000 [ 251.241291][ T28] audit: type=1326 audit(1791134208.309:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7876 comm="syz.0.556" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63c979ddeb code=0x7ffc0000 [ 251.242770][ T6535] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 251.530251][ T6535] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 251.552200][ T6535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.563830][ T5885] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 251.584865][ T6535] usb 1-1: Product: syz [ 251.589162][ T6535] usb 1-1: Manufacturer: syz [ 251.607343][ T6535] usb 1-1: SerialNumber: syz [ 251.637692][ T6535] usb 1-1: USB2VGA dongle found at address 6 [ 251.653204][ T6535] usb 1-1: Allocated 8 output buffers [ 251.777516][ T5885] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 251.799535][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.823388][ T5885] usb 4-1: Product: syz [ 251.838539][ T5885] usb 4-1: Manufacturer: syz [ 251.843406][ T5885] usb 4-1: SerialNumber: syz [ 251.901655][ T5885] usb 4-1: USB2VGA dongle found at address 5 [ 251.931899][ T5885] usb 4-1: Allocated 8 output buffers [ 251.960684][ T6535] usb 1-1: Failed to early initialize device [ 252.020741][ T6535] usb 1-1: USB disconnect, device number 6 [ 252.869149][ T5885] usb 4-1: Failed to early initialize device [ 252.869844][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.894348][ T5885] usb 4-1: USB disconnect, device number 5 [ 253.559132][ T7915] loop3: detected capacity change from 0 to 512 [ 253.648282][ T7915] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 253.681633][ T7915] System zones: 1-12 [ 253.708067][ T7915] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.567: missing EA_INODE flag [ 253.725328][ T7915] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.567: error while reading EA inode 12 err=-117 [ 253.778418][ T7915] EXT4-fs (loop3): 1 orphan inode deleted [ 253.797897][ T7915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.094878][ T7927] jffs2: notice: (7927) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 254.734903][ T5885] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 254.781989][ T5885] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 254.798407][ T9] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 255.003909][ T5158] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 255.049070][ T5885] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 255.075952][ T176] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 255.202698][ T5158] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 255.221538][ T5158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.243012][ T5158] usb 2-1: Product: syz [ 255.256212][ T5158] usb 2-1: Manufacturer: syz [ 255.261225][ T5158] usb 2-1: SerialNumber: syz [ 255.291771][ T5158] usb 2-1: USB2VGA dongle found at address 5 [ 255.304866][ T5158] usb 2-1: Allocated 8 output buffers [ 255.517249][ T7939] ceph: No mds server is up or the cluster is laggy [ 255.522839][ T7945] ceph: No mds server is up or the cluster is laggy [ 255.592543][ T176] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 255.614312][ T5158] usb 2-1: Failed to early initialize device [ 255.679789][ T5158] usb 2-1: USB disconnect, device number 5 [ 256.227319][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.344907][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.780444][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.261901][ T7960] syz.0.578 (7960): drop_caches: 1 [ 257.921639][ T7992] jffs2: notice: (7992) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 259.274038][ T8010] netlink: 64 bytes leftover after parsing attributes in process `syz.3.597'. [ 259.285085][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 260.319389][ T8039] netlink: 64 bytes leftover after parsing attributes in process `syz.0.607'. [ 260.380067][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 261.958284][ T8063] loop1: detected capacity change from 0 to 128 [ 262.177486][ T8063] omfs: sysblock size (-58445445) is out of range [ 262.746089][ T8065] netlink: 64 bytes leftover after parsing attributes in process `syz.2.617'. [ 265.208446][ T8098] netlink: 64 bytes leftover after parsing attributes in process `syz.2.628'. [ 265.609767][ T8108] FAULT_INJECTION: forcing a failure. [ 265.609767][ T8108] name failslab, interval 1, probability 0, space 0, times 0 [ 265.629931][ T8108] CPU: 0 PID: 8108 Comm: syz.2.632 Not tainted syzkaller #0 [ 265.637548][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 265.647743][ T8108] Call Trace: [ 265.651258][ T8108] [ 265.654294][ T8108] dump_stack_lvl+0x18c/0x250 [ 265.659010][ T8108] ? show_regs_print_info+0x20/0x20 [ 265.664323][ T8108] ? load_image+0x420/0x420 [ 265.669113][ T8108] ? __lock_acquire+0x7eb0/0x7eb0 [ 265.674243][ T8108] ? ida_alloc_range+0x7d0/0x860 [ 265.679221][ T8108] should_fail_ex+0x394/0x4c0 [ 265.684200][ T8108] should_failslab+0x9/0x20 [ 265.688725][ T8108] slab_pre_alloc_hook+0x59/0x300 [ 265.693786][ T8108] ? alloc_vfsmnt+0x9d/0x450 [ 265.698404][ T8108] ? alloc_vfsmnt+0x9d/0x450 [ 265.703005][ T8108] __kmem_cache_alloc_node+0x53/0x250 [ 265.708410][ T8108] ? alloc_vfsmnt+0x9d/0x450 [ 265.713008][ T8108] __kmalloc_node_track_caller+0xa4/0x230 [ 265.718779][ T8108] kstrdup+0x3b/0x80 [ 265.722737][ T8108] alloc_vfsmnt+0x9d/0x450 [ 265.727431][ T8108] clone_mnt+0x65/0xc60 [ 265.731840][ T8108] ? do_raw_spin_unlock+0x121/0x230 [ 265.737081][ T8108] copy_tree+0x3d2/0x7e0 [ 265.741347][ T8108] ? copy_mnt_ns+0x16a/0x8f0 [ 265.746259][ T8108] copy_mnt_ns+0x16a/0x8f0 [ 265.751055][ T8108] ? create_new_namespaces+0x34/0x700 [ 265.756886][ T8108] create_new_namespaces+0xd3/0x700 [ 265.762312][ T8108] ? bpf_lsm_capable+0x9/0x10 [ 265.767135][ T8108] ? security_capable+0x89/0xb0 [ 265.772032][ T8108] unshare_nsproxy_namespaces+0x11a/0x160 [ 265.778080][ T8108] ksys_unshare+0x4fa/0x8f0 [ 265.782701][ T8108] ? sighand_ctor+0x50/0x50 [ 265.787448][ T8108] ? lock_chain_count+0x20/0x20 [ 265.792687][ T8108] ? syscall_enter_from_user_mode+0x25/0x80 [ 265.798611][ T8108] __x64_sys_unshare+0x38/0x40 [ 265.803395][ T8108] do_syscall_64+0x55/0xb0 [ 265.808122][ T8108] ? clear_bhb_loop+0x40/0x90 [ 265.813132][ T8108] ? clear_bhb_loop+0x40/0x90 [ 265.817907][ T8108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.824010][ T8108] RIP: 0033:0x7f11ac39e159 [ 265.828717][ T8108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.850382][ T8108] RSP: 002b:00007f11ad2fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 265.860044][ T8108] RAX: ffffffffffffffda RBX: 00007f11ac625fa0 RCX: 00007f11ac39e159 [ 265.868142][ T8108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 265.876758][ T8108] RBP: 00007f11ac43506b R08: 0000000000000000 R09: 0000000000000000 [ 265.885177][ T8108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.893352][ T8108] R13: 00007f11ac626038 R14: 00007f11ac625fa0 R15: 00007fffdb1226c8 [ 265.901540][ T8108] [ 270.351092][ T8125] loop1: detected capacity change from 0 to 128 [ 270.375614][ T8125] omfs: sysblock size (-58445445) is out of range [ 270.595352][ T8127] netlink: 64 bytes leftover after parsing attributes in process `syz.0.640'. [ 272.136702][ T8152] loop1: detected capacity change from 0 to 128 [ 274.066272][ T8152] omfs: sysblock size (-58445445) is out of range [ 274.734499][ T8161] netlink: 64 bytes leftover after parsing attributes in process `syz.0.652'. [ 280.244543][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e3d0c00: rx timeout, send abort [ 280.253352][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804e3d0c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 281.869258][ T8217] loop1: detected capacity change from 0 to 128 [ 281.971377][ T8217] omfs: sysblock size (-58445445) is out of range [ 285.481949][ T8260] loop3: detected capacity change from 0 to 512 [ 285.603554][ T8260] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 285.657490][ T8260] System zones: 1-12 [ 285.689408][ T8260] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.684: missing EA_INODE flag [ 285.721923][ T8260] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.684: error while reading EA inode 12 err=-117 [ 285.780120][ T8260] EXT4-fs (loop3): 1 orphan inode deleted [ 285.805532][ T8260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.913001][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.000315][ T5784] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 288.007913][ T5158] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 288.105192][ T8305] loop1: detected capacity change from 0 to 512 [ 288.136813][ T8305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 288.167212][ T8305] System zones: 1-12 [ 288.172578][ T8305] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.699: missing EA_INODE flag [ 288.196155][ T8305] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.699: error while reading EA inode 12 err=-117 [ 288.215168][ T8305] EXT4-fs (loop1): 1 orphan inode deleted [ 288.222424][ T8305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.274801][ T5158] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 288.729917][ T8292] ceph: No mds server is up or the cluster is laggy [ 291.008698][ T5158] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 291.151646][ T28] kauditd_printk_skb: 230 callbacks suppressed [ 291.151665][ T28] audit: type=1326 audit(1791134248.599:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.2.708" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11ac39e159 code=0x0 [ 291.306092][ T5158] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 291.489244][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.777033][ T8345] ceph: No mds server is up or the cluster is laggy [ 291.857996][ T176] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 292.364245][ T8371] sctp_transport_update_pmtu: 49 callbacks suppressed [ 292.364276][ T8371] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 292.383240][ T8371] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 292.396821][ T8371] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 292.407511][ T8371] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 292.455397][ T8374] )fl: renamed from lo (while UP) [ 292.474206][ T8371] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 292.491625][ T8371] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 292.504174][ T8371] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 292.514393][ T8371] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 292.559121][ T8371] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 292.571541][ T8371] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 293.583641][ T176] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 293.845027][ T5158] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 294.405960][ T8395] ceph: No mds server is up or the cluster is laggy [ 294.819572][ T8417] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 294.866050][ T8417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.881555][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'. [ 294.940403][ T8417] bond1: (slave bridge1): making interface the new active one [ 294.956438][ T8417] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 295.288454][ T5817] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 295.570511][ T5817] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 296.099611][ T8441] ceph: No mds server is up or the cluster is laggy [ 296.145078][ T6538] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 296.559532][ T8454] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 296.566533][ T8454] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 296.576426][ T8454] vhci_hcd vhci_hcd.0: Device attached [ 296.602297][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 296.611557][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 296.653093][ T8454] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.662737][ T8454] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.672163][ T8454] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.682153][ T8454] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.974764][ T5817] vhci_hcd: vhci_device speed not set [ 297.005441][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 297.211352][ T5817] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 297.270236][ T8455] vhci_hcd: connection closed [ 297.417386][ T49] vhci_hcd: stop threads [ 297.564231][ T49] vhci_hcd: release socket [ 297.652359][ T49] vhci_hcd: disconnect device [ 297.748502][ T5784] Bluetooth: hci1: unexpected event for opcode 0x0c1b [ 300.240996][ T8492] No source specified [ 301.491616][ T8520] No source specified [ 301.641525][ T8518] block nbd0: server does not support multiple connections per device. [ 301.986567][ T8518] block nbd0: shutting down sockets [ 302.413781][ T28] audit: type=1800 audit(1791134259.859:383): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.766" name="file2" dev="sda1" ino=2045 res=0 errno=0 [ 302.463994][ T5817] vhci_hcd: vhci_device speed not set [ 302.764160][ T8536] FAULT_INJECTION: forcing a failure. [ 302.764160][ T8536] name failslab, interval 1, probability 0, space 0, times 0 [ 302.777812][ T8536] CPU: 0 PID: 8536 Comm: syz.1.769 Not tainted syzkaller #0 [ 302.785315][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 302.795837][ T8536] Call Trace: [ 302.799135][ T8536] [ 302.802097][ T8536] dump_stack_lvl+0x18c/0x250 [ 302.806999][ T8536] ? show_regs_print_info+0x20/0x20 [ 302.812225][ T8536] ? load_image+0x420/0x420 [ 302.816784][ T8536] should_fail_ex+0x394/0x4c0 [ 302.822414][ T8536] ? __sigqueue_alloc+0x32/0x520 [ 302.827547][ T8536] should_failslab+0x9/0x20 [ 302.832133][ T8536] slab_pre_alloc_hook+0x59/0x300 [ 302.837465][ T8536] ? __lock_acquire+0x7eb0/0x7eb0 [ 302.842532][ T8536] ? __sigqueue_alloc+0x32/0x520 [ 302.847638][ T8536] kmem_cache_alloc+0x5a/0x2c0 [ 302.852643][ T8536] ? __sigqueue_alloc+0x40c/0x520 [ 302.857712][ T8536] ? __sigqueue_alloc+0x32/0x520 [ 302.862791][ T8536] __sigqueue_alloc+0x40c/0x520 [ 302.867782][ T8536] __send_signal_locked+0x22f/0xe00 [ 302.873013][ T8536] do_notify_parent+0xb26/0xd10 [ 302.877916][ T8536] ? trace_signal_generate+0x1c0/0x1c0 [ 302.884317][ T8536] ? __lock_acquire+0x7eb0/0x7eb0 [ 302.889385][ T8536] release_task+0x1227/0x1690 [ 302.894115][ T8536] ? do_exit+0x1888/0x2530 [ 302.898582][ T8536] ? delayed_put_task_struct+0x2a0/0x2a0 [ 302.904430][ T8536] ? _raw_write_lock_irq+0xbb/0xf0 [ 302.909564][ T8536] ? _raw_write_lock_irqsave+0x100/0x100 [ 302.915504][ T8536] ? _raw_write_unlock_irq+0x23/0x50 [ 302.921230][ T8536] ? lockdep_hardirqs_on+0x98/0x150 [ 302.926665][ T8536] do_exit+0x1888/0x2530 [ 302.931049][ T8536] ? put_task_struct+0xc0/0xc0 [ 302.935871][ T8536] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 302.941907][ T8536] ? get_signal+0x100e/0x1390 [ 302.946777][ T8536] ? lock_chain_count+0x20/0x20 [ 302.951691][ T8536] ? _raw_spin_lock_irq+0xbb/0xf0 [ 302.956803][ T8536] do_group_exit+0x22d/0x2f0 [ 302.961519][ T8536] ? lockdep_hardirqs_on+0x98/0x150 [ 302.967090][ T8536] get_signal+0x12a6/0x1390 [ 302.971724][ T8536] arch_do_signal_or_restart+0xc2/0x7b0 [ 302.977422][ T8536] ? __ia32_sys_get_robust_list+0x110/0x110 [ 302.983518][ T8536] ? slab_free_freelist_hook+0x130/0x1a0 [ 302.989375][ T8536] ? get_sigframe_size+0x20/0x20 [ 302.994438][ T8536] ? exit_to_user_mode_loop+0x3b/0x110 [ 303.000208][ T8536] exit_to_user_mode_loop+0x70/0x110 [ 303.005703][ T8536] exit_to_user_mode_prepare+0xee/0x180 [ 303.011273][ T8536] syscall_exit_to_user_mode+0x1a/0x50 [ 303.017150][ T8536] do_syscall_64+0x61/0xb0 [ 303.021675][ T8536] ? clear_bhb_loop+0x40/0x90 [ 303.026386][ T8536] ? clear_bhb_loop+0x40/0x90 [ 303.031078][ T8536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.037079][ T8536] RIP: 0033:0x7f441339e159 [ 303.041619][ T8536] Code: Unable to access opcode bytes at 0x7f441339e12f. [ 303.048781][ T8536] RSP: 002b:00007f44142070e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 303.057532][ T8536] RAX: 0000000000000001 RBX: 00007f4413625fa8 RCX: 00007f441339e159 [ 303.065689][ T8536] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4413625fac [ 303.074213][ T8536] RBP: 00007f4413625fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 303.082675][ T8536] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 303.090928][ T8536] R13: 00007f4413626038 R14: 00007fff258dadc0 R15: 00007fff258daea8 [ 303.099448][ T8536] [ 305.554365][ T6538] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 305.827011][ T6538] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 306.415303][ T8559] ceph: No mds server is up or the cluster is laggy [ 306.435119][ T6535] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 306.799667][ T28] audit: type=1326 audit(1791134264.249:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.2.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ac39e159 code=0x7ffc0000 [ 306.849696][ T28] audit: type=1326 audit(1791134264.279:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.2.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ac39e159 code=0x7ffc0000 [ 307.087561][ T28] audit: type=1326 audit(1791134264.289:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.2.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f11ac39e159 code=0x7ffc0000 [ 307.264311][ T5158] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 307.336511][ T28] audit: type=1326 audit(1791134264.289:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.2.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ac39e159 code=0x7ffc0000 [ 307.585172][ T28] audit: type=1326 audit(1791134264.349:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.2.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ac39e159 code=0x7ffc0000 [ 307.684692][ T28] audit: type=1326 audit(1791134264.379:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.2.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11ac35e98e code=0x7ffc0000 [ 307.709467][ T28] audit: type=1326 audit(1791134264.409:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.2.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11ac39ddeb code=0x7ffc0000 [ 307.730492][ T5158] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 307.738967][ T28] audit: type=1326 audit(1791134264.439:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.2.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11ac39ddeb code=0x7ffc0000 [ 307.767296][ T5158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.768389][ T28] audit: type=1326 audit(1791134264.439:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.2.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11ac39ddeb code=0x7ffc0000 [ 307.800646][ T28] audit: type=1326 audit(1791134264.439:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.2.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11ac39ddeb code=0x7ffc0000 [ 307.824881][ T28] audit: type=1326 audit(1791134264.749:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.2.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11ac39ddeb code=0x7ffc0000 [ 307.851990][ T28] audit: type=1326 audit(1791134264.779:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.2.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11ac39ddeb code=0x7ffc0000 [ 307.890278][ T28] audit: type=1326 audit(1791134265.009:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.2.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11ac39ddeb code=0x7ffc0000 [ 307.914681][ T28] audit: type=1326 audit(1791134265.169:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.2.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11ac39ddeb code=0x7ffc0000 [ 307.921185][ T5158] usb 3-1: Product: syz [ 307.988857][ T5158] usb 3-1: Manufacturer: syz [ 308.022111][ T5158] usb 3-1: SerialNumber: syz [ 308.131790][ T5158] usb 3-1: USB2VGA dongle found at address 7 [ 308.228293][ T5158] usb 3-1: Allocated 8 output buffers [ 309.332974][ T8576] netlink: 'syz.2.781': attribute type 30 has an invalid length. [ 309.465550][ T5158] usb 3-1: Failed to early initialize device [ 309.502681][ T5158] usb 3-1: USB disconnect, device number 7 [ 309.897627][ T5817] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 310.175011][ T6535] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 310.373882][ T5817] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 310.658488][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 310.706218][ T6535] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 310.722356][ T8607] ceph: No mds server is up or the cluster is laggy [ 310.766500][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 310.879807][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 311.019364][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 311.165833][ T5817] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 311.211736][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.253834][ T5817] usb 3-1: Product: syz [ 311.274304][ T5817] usb 3-1: Manufacturer: syz [ 311.278987][ T5817] usb 3-1: SerialNumber: syz [ 311.382278][ T5817] usb 3-1: config 0 descriptor?? [ 312.130301][ T5817] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 312.338788][ T8614] usb 3-1: Couldn't submit interrupt_out_urb -90 [ 312.382927][ T6535] usb 3-1: USB disconnect, device number 8 [ 312.527932][ T51] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 313.103971][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 314.690782][ T8660] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 4 (only 8 groups) [ 315.069811][ T8673] 9pnet_virtio: no channels available for device syz [ 315.190134][ T8655] ceph: No mds server is up or the cluster is laggy [ 316.280796][ T8691] wlan0 speed is unknown, defaulting to 1000 [ 316.304143][ T8691] wlan0 speed is unknown, defaulting to 1000 [ 316.388966][ T8691] wlan0 speed is unknown, defaulting to 1000 [ 316.499158][ T8691] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 316.664812][ T8691] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 317.131402][ T8691] wlan0 speed is unknown, defaulting to 1000 [ 317.186586][ T8691] wlan0 speed is unknown, defaulting to 1000 [ 317.252451][ T8691] wlan0 speed is unknown, defaulting to 1000 [ 317.315578][ T8691] wlan0 speed is unknown, defaulting to 1000 [ 317.742675][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.749243][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.577056][ T8718] futex_wake_op: syz.3.827 tries to shift op by 144; fix this program [ 319.868393][ T5784] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 321.294878][ T8741] futex_wake_op: syz.0.837 tries to shift op by 144; fix this program [ 323.461823][ T5784] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 324.884018][ T5158] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 325.586649][ T8798] syzkaller0: entered promiscuous mode [ 325.609999][ T8798] syzkaller0: entered allmulticast mode [ 325.693917][ T5158] usb 1-1: device descriptor read/64, error -71 [ 325.821808][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 325.963959][ T5158] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 327.443220][ T8821] loop1: detected capacity change from 0 to 128 [ 327.463993][ T8821] omfs: sysblock size (-58445445) is out of range [ 327.530756][ T5158] usb 1-1: device descriptor read/64, error -71 [ 327.770096][ T5158] usb usb1-port1: attempt power cycle [ 328.760663][ T8835] jffs2: notice: (8835) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 328.957400][ T8843] syzkaller0: entered promiscuous mode [ 328.963074][ T8843] syzkaller0: entered allmulticast mode [ 329.530976][ T1091] Bluetooth: hci4: Frame reassembly failed (-84) [ 329.602739][ T1091] Bluetooth: hci4: Frame reassembly failed (-84) [ 331.437091][ T8878] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 4 (only 8 groups) [ 331.583946][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 331.583991][ T5784] Bluetooth: hci4: command 0x1003 tx timeout [ 331.718476][ T8887] loop2: detected capacity change from 0 to 128 [ 331.743081][ T8887] omfs: sysblock size (-58445445) is out of range [ 332.518967][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 332.518985][ T28] audit: type=1326 audit(1791134289.969:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8889 comm="syz.1.887" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 332.557839][ T28] audit: type=1326 audit(1791134290.009:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8889 comm="syz.1.887" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 332.587201][ T28] audit: type=1326 audit(1791134290.009:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8889 comm="syz.1.887" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 332.618483][ T28] audit: type=1326 audit(1791134290.009:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8889 comm="syz.1.887" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 332.650457][ T28] audit: type=1326 audit(1791134290.009:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8889 comm="syz.1.887" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 332.675834][ T28] audit: type=1326 audit(1791134290.009:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8889 comm="syz.1.887" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 332.703593][ T28] audit: type=1326 audit(1791134290.039:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8889 comm="syz.1.887" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441339e159 code=0x7ffc0000 [ 332.730228][ T28] audit: type=1326 audit(1791134290.069:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8889 comm="syz.1.887" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f441335e98e code=0x7ffc0000 [ 332.755927][ T28] audit: type=1326 audit(1791134290.069:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8889 comm="syz.1.887" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f441339ddeb code=0x7ffc0000 [ 332.781131][ T28] audit: type=1326 audit(1791134290.069:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8889 comm="syz.1.887" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f441339ddeb code=0x7ffc0000 [ 332.805716][ T5817] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 332.933788][ T6538] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 333.065691][ T5885] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 333.417650][ T8892] ceph: No mds server is up or the cluster is laggy [ 333.802469][ T6538] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 333.812887][ T6538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.830267][ T6538] usb 2-1: Product: syz [ 333.837209][ T6538] usb 2-1: Manufacturer: syz [ 333.841903][ T6538] usb 2-1: SerialNumber: syz [ 333.869223][ T6538] usb 2-1: USB2VGA dongle found at address 6 [ 333.886878][ T6538] usb 2-1: Allocated 8 output buffers [ 334.138261][ T6538] usb 2-1: Failed to early initialize device [ 334.171735][ T6538] usb 2-1: USB disconnect, device number 6 [ 334.490373][ T51] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 335.224768][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b6ec000: rx timeout, send abort [ 335.233810][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b6ec000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 336.469920][ T8945] FAULT_INJECTION: forcing a failure. [ 336.469920][ T8945] name failslab, interval 1, probability 0, space 0, times 0 [ 336.480473][ T8948] loop7: detected capacity change from 0 to 7 [ 336.503957][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 336.513849][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 336.528993][ T8945] CPU: 0 PID: 8945 Comm: syz.2.903 Not tainted syzkaller #0 [ 336.531162][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 336.536510][ T8945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 336.536526][ T8945] Call Trace: [ 336.536536][ T8945] [ 336.536544][ T8945] dump_stack_lvl+0x18c/0x250 [ 336.546225][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 336.556491][ T8945] ? show_regs_print_info+0x20/0x20 [ 336.581080][ T8945] ? load_image+0x420/0x420 [ 336.585812][ T8945] ? __lock_acquire+0x7eb0/0x7eb0 [ 336.590881][ T8945] ? asn1_ber_decoder+0x215e/0x2390 [ 336.596141][ T8945] should_fail_ex+0x394/0x4c0 [ 336.600960][ T8945] should_failslab+0x9/0x20 [ 336.605514][ T8945] slab_pre_alloc_hook+0x59/0x300 [ 336.610752][ T8945] ? mpi_alloc+0x52/0x130 [ 336.615129][ T8945] __kmem_cache_alloc_node+0x53/0x250 [ 336.620730][ T8945] ? mpi_alloc+0x52/0x130 [ 336.625204][ T8945] kmalloc_trace+0x2a/0xe0 [ 336.629738][ T8945] mpi_alloc+0x52/0x130 [ 336.633915][ T8945] mpi_read_raw_data+0x143/0x970 [ 336.638877][ T8945] rsa_set_pub_key+0x2c4/0x5b0 [ 336.644019][ T8945] ? rsa_dec+0x5d0/0x5d0 [ 336.648807][ T8945] ? crypto_alloc_tfm_node+0x33d/0x360 [ 336.654382][ T8945] ? software_key_query+0x3aa/0xc10 [ 336.659634][ T8945] software_key_query+0x526/0xc10 [ 336.664716][ T8945] ? public_key_destroy+0x90/0x90 [ 336.669891][ T8945] ? __might_fault+0xc6/0x120 [ 336.674612][ T8945] ? __might_fault+0xaa/0x120 [ 336.679435][ T8945] keyctl_pkey_params_get_2+0x234/0x4b0 [ 336.685185][ T8945] ? keyctl_pkey_e_d_s+0x300/0x300 [ 336.690427][ T8945] ? futex_wait+0x4a7/0x5c0 [ 336.694957][ T8945] ? futex_setup_timer+0xc0/0xc0 [ 336.700042][ T8945] keyctl_pkey_verify+0xc5/0x270 [ 336.705020][ T8945] ? keyctl_pkey_params_get_2+0x4b0/0x4b0 [ 336.710775][ T8945] __se_sys_keyctl+0x4bf/0xb50 [ 336.715568][ T8945] ? security_capable+0x89/0xb0 [ 336.720472][ T8945] ? __x64_sys_keyctl+0xc0/0xc0 [ 336.725363][ T8945] ? do_futex+0x2ff/0x3e0 [ 336.729738][ T8945] ? capable+0x88/0xe0 [ 336.733832][ T8945] ? __ia32_sys_get_robust_list+0x110/0x110 [ 336.739747][ T8945] ? bpf_link_show_fdinfo+0x560/0x560 [ 336.745369][ T8945] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 336.751677][ T8945] ? lock_chain_count+0x20/0x20 [ 336.756960][ T8945] ? lockdep_hardirqs_on+0x98/0x150 [ 336.762632][ T8945] ? __x64_sys_keyctl+0x20/0xc0 [ 336.767621][ T8945] do_syscall_64+0x55/0xb0 [ 336.772072][ T8945] ? clear_bhb_loop+0x40/0x90 [ 336.776811][ T8945] ? clear_bhb_loop+0x40/0x90 [ 336.781595][ T8945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.787597][ T8945] RIP: 0033:0x7f11ac39e159 [ 336.792122][ T8945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.812030][ T8945] RSP: 002b:00007f11ad2fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 336.820494][ T8945] RAX: ffffffffffffffda RBX: 00007f11ac625fa0 RCX: 00007f11ac39e159 [ 336.828772][ T8945] RDX: 0000200000000780 RSI: 0000200000000000 RDI: 000000000000001c [ 336.836805][ T8945] RBP: 00007f11ac43506b R08: 0000000000000000 R09: 0000000000000000 [ 336.844914][ T8945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.853076][ T8945] R13: 00007f11ac626038 R14: 00007f11ac625fa0 R15: 00007fffdb1226c8 [ 336.861084][ T8945] [ 336.871859][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 336.881470][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 336.914767][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 336.924383][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 336.943756][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 336.953282][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 336.962709][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 336.972125][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 336.982296][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 336.991767][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 337.000142][ T8948] ldm_validate_partition_table(): Disk read failed. [ 337.010777][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.020182][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 337.029680][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.039386][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 337.066180][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 337.075625][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 337.085472][ T8948] Dev loop7: unable to read RDB block 0 [ 337.094467][ T8948] loop7: unable to read partition table [ 337.108064][ T8948] loop7: partition table beyond EOD, truncated [ 337.114860][ T8948] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 337.333528][ T5784] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 337.498634][ T8969] Bluetooth: MGMT ver 1.22 [ 339.433524][ T8991] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 339.623949][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 339.714158][ T176] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 340.168704][ T176] usb 2-1: Using ep0 maxpacket: 32 [ 341.057982][ T176] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 341.079514][ T176] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 341.090538][ T176] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 341.103068][ T176] usb 2-1: Product: syz [ 341.111291][ T176] usb 2-1: Manufacturer: syz [ 341.121464][ T176] usb 2-1: SerialNumber: syz [ 341.135414][ T176] usb 2-1: config 0 descriptor?? [ 341.147361][ T8995] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 341.428524][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d63c400: rx timeout, send abort [ 341.437337][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d63c400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 341.797916][ T9017] syz_tun: entered allmulticast mode [ 341.819464][ T9016] syz_tun: left allmulticast mode [ 342.682438][ T176] usb 2-1: USB disconnect, device number 7 [ 343.478827][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f7c4400: rx timeout, send abort [ 343.493768][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f7c4400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 345.811447][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802efb8800: rx timeout, send abort [ 345.820666][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802efb8800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 347.832571][ T9135] jffs2: notice: (9135) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 348.356755][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c40e000: rx timeout, send abort [ 348.365985][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c40e000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 348.509563][ T9146] loop2: detected capacity change from 0 to 512 [ 348.540181][ T9146] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 348.594312][ T5885] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 348.602450][ T9146] System zones: 1-12 [ 348.642298][ T9146] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.975: missing EA_INODE flag [ 348.663184][ T9146] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.975: error while reading EA inode 12 err=-117 [ 348.681865][ T9146] EXT4-fs (loop2): 1 orphan inode deleted [ 348.689969][ T9146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.940451][ T5885] usb 1-1: device descriptor read/64, error -71 [ 350.151664][ T5885] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 350.498707][ T5885] usb 1-1: device descriptor read/64, error -71 [ 350.624345][ T5885] usb usb1-port1: attempt power cycle [ 351.074261][ T5885] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 351.140021][ T5885] usb 1-1: device descriptor read/8, error -71 [ 351.904617][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.418233][ T9210] loop2: detected capacity change from 0 to 512 [ 354.464640][ T9210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 354.473005][ T9210] System zones: 1-12 [ 354.481812][ T9210] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.996: missing EA_INODE flag [ 354.505692][ T9210] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.996: error while reading EA inode 12 err=-117 [ 354.568625][ T9210] EXT4-fs (loop2): 1 orphan inode deleted [ 354.585836][ T9210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.943211][ T6536] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 355.425703][ T6536] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.843936][ T6536] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 355.857779][ T6536] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 355.913531][ T6536] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.942795][ T6536] usb 1-1: Product: syz [ 355.952580][ T6536] usb 1-1: Manufacturer: syz [ 355.960871][ T6536] usb 1-1: SerialNumber: syz [ 355.980483][ T6536] usb 1-1: config 0 descriptor?? [ 356.146357][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 356.146435][ T28] audit: type=1400 audit(1791134313.599:536): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=9229 comm="syz.3.1001" [ 358.163043][ T5158] usb 1-1: USB disconnect, device number 14 [ 359.487464][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.203730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!! [ 360.243444][ T9236] syz.3.1003 (9236): drop_caches: 1 [ 361.797054][ T9265] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 361.803695][ T9265] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 361.811969][ T9265] vhci_hcd vhci_hcd.0: Device attached [ 361.922170][ T176] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 362.131166][ T5158] vhci_hcd: vhci_device speed not set [ 362.216483][ T176] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.253812][ T5158] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 362.296098][ T176] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 362.351044][ T176] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 362.373890][ T176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.407701][ T176] usb 4-1: Product: syz [ 362.412312][ T176] usb 4-1: Manufacturer: syz [ 362.523833][ T176] usb 4-1: SerialNumber: syz [ 362.693547][ T176] usb 4-1: config 0 descriptor?? [ 362.713236][ T9266] vhci_hcd: connection reset by peer [ 362.788274][ T2890] vhci_hcd: stop threads [ 362.808215][ T2890] vhci_hcd: release socket [ 362.822718][ T2890] vhci_hcd: disconnect device [ 364.051684][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c617800: rx timeout, send abort [ 364.061135][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c617800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 364.321344][ T9292] jffs2: notice: (9292) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 364.927135][ T9297] tipc: Can't bind to reserved service type 2 [ 365.372235][ T5817] usb 4-1: USB disconnect, device number 6 [ 365.547360][ T28] audit: type=1800 audit(1791134322.999:537): pid=9305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1021" name="file2" dev="sda1" ino=2045 res=0 errno=0 [ 365.592680][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 365.656703][ T5817] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 365.865282][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 365.934678][ T5817] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 366.390457][ T9309] ceph: No mds server is up or the cluster is laggy [ 366.400475][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 366.407581][ T9314] ceph: No mds server is up or the cluster is laggy [ 366.455991][ T5817] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 366.997512][ T9332] syz.2.1029 (9332): drop_caches: 1 [ 367.371340][ T9332] syz.2.1029 (9332): drop_caches: 1 [ 367.549059][ T5158] vhci_hcd: vhci_device speed not set [ 367.973890][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 368.634182][ T9345] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 368.805747][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.818617][ T6536] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 368.827757][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.845567][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 368.854973][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.863205][ T9] usb 1-1: Product: syz [ 368.868394][ T9] usb 1-1: Manufacturer: syz [ 368.874015][ T9] usb 1-1: SerialNumber: syz [ 368.895745][ T9] usb 1-1: config 0 descriptor?? [ 369.084674][ T6536] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 369.615784][ T6536] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 369.624665][ T9351] ceph: No mds server is up or the cluster is laggy [ 370.475099][ T28] audit: type=1804 audit(1791134327.919:538): pid=5783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/234/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 370.898474][ T9368] syz.3.1039 (9368): drop_caches: 1 [ 371.144467][ T9368] syz.3.1039 (9368): drop_caches: 1 [ 371.404487][ T5143] udevd[5143]: could not touch /run/udev/queue: No such file or directory [ 371.420266][ T5143] udevd[5143]: could not touch /run/udev/queue: No such file or directory [ 371.432272][ T5143] udevd[5143]: could not touch /run/udev/queue: No such file or directory [ 371.484030][ T6536] usb 1-1: USB disconnect, device number 15 [ 371.532055][ T5143] udevd[5143]: could not touch /run/udev/queue: No such file or directory [ 373.252940][ T9] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 373.514925][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 373.848536][ T51] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 374.019119][ T9390] ceph: No mds server is up or the cluster is laggy [ 374.045483][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 374.254069][ T9409] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 374.260762][ T9409] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 374.269082][ T9409] vhci_hcd vhci_hcd.0: Device attached [ 374.494708][ T9] vhci_hcd: vhci_device speed not set [ 374.584077][ T9] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 375.029936][ T9410] vhci_hcd: connection reset by peer [ 375.099065][ T2890] vhci_hcd: stop threads [ 375.160388][ T2890] vhci_hcd: release socket [ 375.240086][ T2890] vhci_hcd: disconnect device [ 375.754169][ T28] audit: type=1326 audit(1791134333.199:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ac39e159 code=0x7ffc0000 [ 375.823921][ T28] audit: type=1326 audit(1791134333.199:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ac39e159 code=0x7ffc0000 [ 375.873810][ T28] audit: type=1326 audit(1791134333.239:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f11ac39e159 code=0x7ffc0000 [ 375.933839][ T28] audit: type=1326 audit(1791134333.239:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ac39e159 code=0x7ffc0000 [ 375.980141][ T28] audit: type=1326 audit(1791134333.239:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ac39e159 code=0x7ffc0000 [ 376.034430][ T28] audit: type=1326 audit(1791134333.239:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f11ac39e159 code=0x7ffc0000 [ 376.073967][ T176] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 376.087481][ T28] audit: type=1326 audit(1791134333.249:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ac39e159 code=0x7ffc0000 [ 376.143729][ T28] audit: type=1326 audit(1791134333.249:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11ac35e98e code=0x7ffc0000 [ 376.197112][ T28] audit: type=1326 audit(1791134333.249:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11ac39ddeb code=0x7ffc0000 [ 376.254215][ T28] audit: type=1326 audit(1791134333.259:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.1052" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11ac39ddeb code=0x7ffc0000 [ 376.282455][ T176] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 376.310122][ T176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.338502][ T176] usb 3-1: Product: syz [ 376.344182][ T176] usb 3-1: Manufacturer: syz [ 376.353422][ T176] usb 3-1: SerialNumber: syz [ 376.396668][ T176] usb 3-1: USB2VGA dongle found at address 9 [ 376.429298][ T176] usb 3-1: Allocated 8 output buffers [ 376.622461][ T176] usb 3-1: Failed to early initialize device [ 376.668601][ T176] usb 3-1: USB disconnect, device number 9 [ 377.127623][ T176] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 377.512952][ T176] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 377.997710][ T9435] ceph: No mds server is up or the cluster is laggy [ 378.114937][ T5158] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 378.745114][ T9448] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 378.751858][ T9448] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 378.761370][ T9448] vhci_hcd vhci_hcd.0: Device attached [ 379.032840][ T9449] vhci_hcd: connection closed [ 379.219717][ T1091] vhci_hcd: stop threads [ 379.252917][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.288985][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.319443][ T1091] vhci_hcd: release socket [ 379.324080][ T1091] vhci_hcd: disconnect device [ 379.744747][ T9] vhci_hcd: vhci_device speed not set [ 381.966095][ T5158] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 382.071497][ T9490] loop5: detected capacity change from 0 to 7 [ 382.113279][ T9490] loop5: [ 382.120653][ T9490] loop5: partition table partially beyond EOD, truncated [ 382.225480][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 382.494991][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.507751][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.529223][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.540181][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.558097][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 382.570825][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.601548][ T9499] fuse: Bad value for 'group_id' [ 382.725768][ T9484] ceph: No mds server is up or the cluster is laggy [ 382.735925][ T5158] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 383.170341][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 383.170358][ T28] audit: type=1326 audit(1791134340.609:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b939e159 code=0x7ffc0000 [ 383.398038][ T28] audit: type=1326 audit(1791134340.609:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b939e159 code=0x7ffc0000 [ 383.443780][ T5158] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 383.596654][ T28] audit: type=1326 audit(1791134340.619:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f17b939e159 code=0x7ffc0000 [ 383.780218][ T28] audit: type=1326 audit(1791134340.619:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b939e159 code=0x7ffc0000 [ 383.969492][ T28] audit: type=1326 audit(1791134340.619:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b939e159 code=0x7ffc0000 [ 384.097253][ T28] audit: type=1326 audit(1791134340.619:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f17b939e159 code=0x7ffc0000 [ 384.122066][ T28] audit: type=1326 audit(1791134340.619:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b939e159 code=0x7ffc0000 [ 384.147648][ T28] audit: type=1326 audit(1791134340.619:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17b935e98e code=0x7ffc0000 [ 384.265442][ T28] audit: type=1326 audit(1791134340.619:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17b939ddeb code=0x7ffc0000 [ 384.289241][ T9518] i8042 aux 00:02: in use; can't configure [ 384.307936][ T5158] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 384.329379][ T5158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.348464][ T28] audit: type=1326 audit(1791134340.619:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9509 comm="syz.3.1080" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17b939ddeb code=0x7ffc0000 [ 384.358724][ T5158] usb 4-1: Product: syz [ 384.441455][ T5158] usb 4-1: Manufacturer: syz [ 384.459881][ T5158] usb 4-1: SerialNumber: syz [ 384.502885][ T5158] usb 4-1: USB2VGA dongle found at address 7 [ 384.546232][ T5158] usb 4-1: Allocated 8 output buffers [ 384.664368][ T9524] fuse: Bad value for 'group_id' [ 384.782140][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 384.793894][ T5158] usb 4-1: Failed to early initialize device [ 384.815050][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 384.829759][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 384.839438][ T5158] usb 4-1: USB disconnect, device number 7 [ 384.850477][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 384.859614][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 384.867984][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.210742][ T9] smpboot: CPU 1 is now offline [ 385.433857][ T9536] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 386.598691][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.617514][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.627866][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.637329][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.660123][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 386.674749][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.151728][ T12] hsr_slave_0: left promiscuous mode [ 387.215618][ T12] hsr_slave_1: left promiscuous mode [ 387.287800][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.403441][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.504544][ T12] bridge_slave_1: left allmulticast mode [ 387.510352][ T12] bridge_slave_1: left promiscuous mode [ 387.681972][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.335123][ T12] bridge_slave_0: left allmulticast mode [ 388.442789][ T12] bridge_slave_0: left promiscuous mode [ 388.535532][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.443816][ T5815] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 391.528333][ T9587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.539880][ T9587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.561723][ T9587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.571643][ T9587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 391.602912][ T9587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 391.611071][ T9587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 392.121641][ T5815] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.058986][ T5815] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.642726][ T5815] usb 3-1: string descriptor 0 read error: -71 [ 395.665914][ T5815] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 395.712340][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.755665][ T5815] usb 3-1: can't set config #1, error -71 [ 395.797308][ T5815] usb 3-1: USB disconnect, device number 10 [ 396.205323][ T9587] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 396.371696][ T9613] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 4 (only 8 groups) [ 396.426144][ T12] team0 (unregistering): Port device team_slave_1 removed [ 396.561792][ T9587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 396.575583][ T12] team0 (unregistering): Port device team_slave_0 removed [ 396.582660][ T9587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 396.594745][ T9587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 396.613937][ T9587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 396.621958][ T9587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 396.630844][ T9587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.639876][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.318355][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.334514][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 400.346688][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 400.357116][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 400.376627][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 400.386434][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 400.394661][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 400.827978][ T12] bond0 (unregistering): Released all slaves [ 401.307988][ T12] IPVS: stop unused estimator thread 0... [ 402.559153][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 402.576350][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 402.587847][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 402.602710][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 402.620355][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 402.631191][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 404.715481][ T5784] Bluetooth: hci2: command tx timeout [ 406.146163][ T9667] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1105'. [ 406.186741][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 406.186758][ T28] audit: type=1800 audit(1791134363.639:702): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1105" name="file2" dev="sda1" ino=2045 res=0 errno=0 [ 406.219287][ T9669] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 4 (only 8 groups) [ 406.360790][ T5784] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 406.455122][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.464978][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.474898][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.483075][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.516380][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 406.529761][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 407.930144][ T9689] jffs2: notice: (9689) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 408.128370][ T9692] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 409.104150][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 409.128699][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 409.141971][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 409.166926][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 409.182939][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 409.196039][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 411.265187][ T5784] Bluetooth: hci2: command tx timeout [ 411.497449][ T9692] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 413.240676][ T9587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 413.256133][ T9587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 413.269026][ T9587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 413.277356][ T9587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 413.289968][ T9587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 413.298190][ T9587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.138083][ T9705] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 4 (only 8 groups) [ 416.671888][ T28] audit: type=1326 audit(1791134374.119:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.1119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 416.675111][ T9718] loop3: detected capacity change from 0 to 512 [ 416.729673][ T28] audit: type=1326 audit(1791134374.119:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.1119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 416.783499][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 416.793355][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 416.806803][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 416.820937][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 416.831447][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 416.840358][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 416.880340][ T28] audit: type=1326 audit(1791134374.119:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.1119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 416.933266][ T28] audit: type=1326 audit(1791134374.119:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.1119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 416.961724][ T28] audit: type=1326 audit(1791134374.119:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.1119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 416.996136][ T28] audit: type=1326 audit(1791134374.119:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.1119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 417.032635][ T28] audit: type=1326 audit(1791134374.129:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.1119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 417.066582][ T28] audit: type=1326 audit(1791134374.159:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.1119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 417.095614][ T28] audit: type=1326 audit(1791134374.159:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.1119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c979e159 code=0x7ffc0000 [ 417.126969][ T28] audit: type=1326 audit(1791134374.159:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.0.1119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63c979f9c7 code=0x7ffc0000 [ 417.193450][ T9718] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 417.217627][ T9718] System zones: 1-12 [ 417.232747][ T9718] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.1121: missing EA_INODE flag [ 417.277935][ T9718] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1121: error while reading EA inode 12 err=-117 [ 417.462254][ T9718] EXT4-fs (loop3): 1 orphan inode deleted [ 417.480540][ T9718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.884723][ T9735] fuse: Unknown parameter 'grou00000000000000000000' [ 419.159090][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 419.169732][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 419.183025][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 419.203867][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 419.211609][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 419.219600][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 419.951801][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.228685][ T5784] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 421.240851][ T5784] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 421.940888][ T9587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 421.955487][ T9587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 421.967881][ T9587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 421.984887][ T9587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 421.996461][ T9587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 422.005199][ T9587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 424.065076][ T5784] Bluetooth: hci2: command tx timeout [ 424.138831][ T9756] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 424.145409][ T9756] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 424.966046][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'. [ 424.975279][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'. [ 424.988226][ T9752] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.997211][ T9752] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.006488][ T9752] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.015447][ T9752] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.029169][ T9756] vhci_hcd vhci_hcd.0: Device attached [ 425.055912][ T9757] vhci_hcd: connection closed [ 425.059146][ T60] vhci_hcd: stop threads [ 425.089084][ T60] vhci_hcd: release socket [ 425.108194][ T60] vhci_hcd: disconnect device [ 426.721535][ T9772] fuse: Unknown parameter 'grou00000000000000000000' [ 427.000015][ T9587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.016910][ T9587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.027004][ T9587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.055027][ T9587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.063159][ T9587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 427.072499][ T9587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 429.960609][ T5784] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 431.055489][ T9587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 431.070642][ T9587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 431.081679][ T9587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 431.103426][ T9587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 431.119280][ T9587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 431.129695][ T9587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 435.214429][ T9809] fuse: Unknown parameter 'grou00000000000000000000' [ 436.580172][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 436.615229][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 436.630132][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 436.648251][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 436.663593][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 436.677245][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 436.803278][ T9813] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 436.809849][ T9813] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 438.026002][ T9813] vhci_hcd vhci_hcd.0: Device attached [ 438.109424][ T9814] vhci_hcd: connection closed [ 438.111128][ T2890] vhci_hcd: stop threads [ 438.138019][ T2890] vhci_hcd: release socket [ 438.142909][ T2890] vhci_hcd: disconnect device [ 440.547308][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.553805][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.342221][ T9587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.359332][ T9587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.372596][ T9587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.389343][ T9587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.397395][ T9587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 443.410086][ T9587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 444.326881][ T9851] loop2: detected capacity change from 0 to 512 [ 444.363123][ T9851] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 444.373038][ T5815] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 444.381655][ T9851] System zones: 1-12 [ 444.389895][ T9851] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.1150: missing EA_INODE flag [ 444.416843][ T9851] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1150: error while reading EA inode 12 err=-117 [ 444.447868][ T9851] EXT4-fs (loop2): 1 orphan inode deleted [ 444.458699][ T9851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.635416][ T5815] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 445.155373][ T5815] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 445.167818][ T9853] ceph: No mds server is up or the cluster is laggy [ 446.672549][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 446.687108][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 446.696577][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 446.712893][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 446.721056][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 446.732976][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 449.609857][ T9877] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 449.616512][ T9877] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 450.854420][ T9877] vhci_hcd vhci_hcd.0: Device attached [ 450.916646][ T9879] vhci_hcd: connection closed [ 450.916939][ T49] vhci_hcd: stop threads [ 450.943839][ T49] vhci_hcd: release socket [ 450.948387][ T49] vhci_hcd: disconnect device [ 451.208779][ T9587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 451.219508][ T9587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 451.229468][ T9587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 451.241774][ T9587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 451.251084][ T9587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 451.259028][ T9587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 451.699151][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.390769][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 454.404891][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 454.421140][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 454.430539][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 454.444293][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 454.451929][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 457.397478][ T9587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 457.412706][ T9587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 457.422844][ T9587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 457.434899][ T9587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 457.444257][ T9587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 457.452597][ T9587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 457.990673][ T5158] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 457.999813][ T9918] ceph: No mds server is up or the cluster is laggy SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=1070 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 460.395459][ T9930] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 460.402066][ T9930] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 462.053794][ T9930] vhci_hcd vhci_hcd.0: Device attached [ 462.284128][ T5815] vhci_hcd: vhci_device speed not set [ 462.393808][ T5815] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 462.922914][ T1091] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.934022][ T1091] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.993786][ T9931] vhci_hcd: connection reset by peer [ 463.024280][ T12] vhci_hcd: stop threads [ 463.028590][ T12] vhci_hcd: release socket [ 463.046546][ T12] vhci_hcd: disconnect device [ 463.066490][ T1091] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.085863][ T1091] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.173477][ T1091] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.184429][ T1091] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.287890][ T1091] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.298483][ T1091] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.283542][ T1091] hsr_slave_0: left promiscuous mode [ 464.289643][ T1091] hsr_slave_1: left promiscuous mode [ 464.296210][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.304547][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.312619][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.321360][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.329996][ T1091] bridge_slave_1: left allmulticast mode [ 464.336296][ T1091] bridge_slave_1: left promiscuous mode [ 464.342167][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.373447][ T1091] veth1_macvtap: left promiscuous mode [ 464.386862][ T1091] veth0_macvtap: left promiscuous mode [ 464.392987][ T1091] veth1_vlan: left promiscuous mode [ 464.399110][ T1091] veth0_vlan: left promiscuous mode [ 465.090924][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 465.148911][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 465.200327][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.260638][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.625457][ T1091] bond0 (unregistering): Released all slaves [ 465.963111][ T1091] IPVS: stop unused estimator thread 0... [ 466.056493][ T1091] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.162130][ T1091] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.249726][ T1091] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.310596][ T1091] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.464760][ T1091] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.476712][ T1091] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.562317][ T1091] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.573195][ T1091] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.646194][ T1091] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.656796][ T1091] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.729851][ T1091] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.742563][ T1091] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.503923][ T5815] vhci_hcd: vhci_device speed not set [ 467.896739][ T9] infiniband syz1: ib_query_port failed (-19) [ 468.142175][ T1091] hsr_slave_0: left promiscuous mode [ 468.157219][ T1091] hsr_slave_1: left promiscuous mode [ 468.164680][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.172489][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.180977][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.188679][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.201189][ T1091] bridge_slave_1: left allmulticast mode [ 468.213363][ T1091] bridge_slave_1: left promiscuous mode [ 468.219558][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.230557][ T1091] bridge_slave_0: left allmulticast mode [ 468.237393][ T1091] bridge_slave_0: left promiscuous mode [ 468.243406][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.262969][ T1091] hsr_slave_0: left promiscuous mode [ 468.269497][ T1091] hsr_slave_1: left promiscuous mode [ 468.276842][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.284567][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.293495][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.301836][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.309847][ T1091] bridge_slave_1: left allmulticast mode [ 468.315821][ T1091] bridge_slave_1: left promiscuous mode [ 468.321646][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.331287][ T1091] bridge_slave_0: left allmulticast mode [ 468.337148][ T1091] bridge_slave_0: left promiscuous mode [ 468.342914][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.442069][ T1091] veth1_macvtap: left promiscuous mode [ 468.447690][ T1091] veth0_macvtap: left promiscuous mode [ 468.454836][ T1091] veth1_vlan: left promiscuous mode [ 468.460160][ T1091] veth0_vlan: left promiscuous mode [ 468.475922][ T1091] veth1_macvtap: left promiscuous mode [ 468.481839][ T1091] veth0_macvtap: left promiscuous mode [ 468.488641][ T1091] veth1_vlan: left promiscuous mode [ 468.494906][ T1091] veth0_vlan: left promiscuous mode [ 468.707275][ T1091] bond1 (unregistering): Released all slaves [ 469.316792][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 469.387920][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 469.447988][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.503776][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface