last executing test programs: 3m29.639123032s ago: executing program 1 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) socket$kcm(0x29, 0x2, 0x0) 3m29.309372279s ago: executing program 1 (id=157): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x2000047, &(0x7f0000002100)=ANY=[], 0xa0, 0x1a9, &(0x7f0000000080)="$eJzs0L1r1GAcwPHv70lyL0LVVKcTbMBijCj3ojg4HU5XuIC4iR4a2tgrvfPl7gZ7KJyDFKTazd2pjiLoJGLBWRwEB40I3aQdDgdxKJFcUvwj+nwg+fE8/JLfS7t/r58HdscP5qkzYXGQz3nBBGYkvVMqjW+FJJ1f6ZH1PDjApSxvLYsvs1gaMVwOnh8Ie85FBxtK/ZXhctDphD2HK+PfDvZP0qtH2S/JQR35OjbmA7npC0JXLfjYTU4/xWgV8Z5RMqc4egOD2F1jTsWxuE04VB5075b7K8OzS91ri+FieLtWO3ehcr5SKVC+tdQJK28Q74koM2sv71P0HmK1eLxX3WuryJAi5FqsfzJOnTizg/K2iRE+uDvkv5ttR8FJCteTgRocEV5g+Mw2KSpMJoUallxWr6VqfjH/WIrCyDBiudNZWL2qjL+5jbpsF6S6heVWCeaK5JLVML27yWrEbEQjYiMyt34wI++w/u/VHCXvV9npGMeTdd0PBoNeNQcfxfWpJY8NU0yziZr0ZcP79JvDe3N+EzRN0zRN0zRN07R9418AAAD//+nzX2o=") connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x104009}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3m29.178017946s ago: executing program 1 (id=158): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xff, 0x5f15, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000006ec0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x12, 0x0, 0x1, 0x0, &(0x7f0000006bc0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) getdents(r0, 0x0, 0x0) 3m28.752831733s ago: executing program 1 (id=163): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x32040a7, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='s'], 0x0, 0x0, 0x2) 3m28.126000281s ago: executing program 1 (id=167): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3004000, &(0x7f0000000340), 0x2, 0x7ad, &(0x7f0000002080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000100)={@id={0x2, 0x0, @c}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@random={'security.', '\xf8\'*][.:^[%\x00'}) 3m24.683383923s ago: executing program 1 (id=178): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./proc\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40180, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3m24.401115461s ago: executing program 32 (id=178): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./proc\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40180, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2m14.590078663s ago: executing program 0 (id=637): ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 2m14.527217206s ago: executing program 0 (id=638): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000440), &(0x7f00000004c0)}) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x40047452, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x28, 0x10}}, @RTA_DST={0x8, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) 2m13.573133381s ago: executing program 0 (id=645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r5 = memfd_secret(0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r5, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r10 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) ioctl$VIDIOC_CROPCAP(r10, 0xc02c563a, &(0x7f0000000000)={0x9, {0x0, 0xfffff88f, 0x200000e7}, {0x0, 0x0, 0x3, 0x3}, {0xfdfb, 0x3}}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) r13 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r13, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750}) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000000000001122334411223344"}}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000", 0x2c}], 0x1}, 0x20008000) sendmsg$nl_generic(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42014}, 0x20089890) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m12.706429208s ago: executing program 0 (id=653): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2m11.798891943s ago: executing program 0 (id=660): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'cpuset'}]}, 0x8) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0xa, 0x4) 2m11.053973915s ago: executing program 0 (id=666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 2m10.760727385s ago: executing program 33 (id=666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1m41.828108561s ago: executing program 2 (id=837): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0xc, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000, 0xfffffffffffffffc}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000007900)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) 1m41.620250394s ago: executing program 2 (id=840): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, 0x0, 0x4051) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c0d4) 1m41.364452316s ago: executing program 2 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 1m39.822401611s ago: executing program 2 (id=845): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$eJzs3bFra1UcB/DfTdMkT5FEcBLBCzo4PV7f6pIifVDMpGRQBy22BUmCkEKhVYydXF0cXV0Ewc1/wsX/QHAV3CxYuHKTe03SpiFB06rv81l6eu755vzOyS0lQ8794KVB7zCN44tPf45GI4lKO9pxmUQrKlH6POa0vwwA4L/sMsvit2xinVwSEY3NlQUAbNDa//+/33hJAMCGvf3Ou2/udjp7b6VpI54Mvjjt5p/s858RDyJi9zg+in4cxaNoxlVE9pdJ+0mWZaNqmmvFq4PRaTdPDt7/sXj93V8bMc7vRDNa4675/H5nbyedmMmP8jqeKeZv5/nH0YwXFsy/39l7vCAf3Vq89spM/Q+jGT99GB9HPw7HRUzyUYn4bCdN38i++v2T9/Ly8nwyOu3Wx+Omsq27f3cAAAAAAAAAAAAAAAAAAAAAAPi/elicnVOP8fk9eVdx/s7WVf7LdqSl1vz5PJN8Ur7QtfOBRll8XZ7P8yhN06wYOM1X48VqVO9n1QAAAAAAAAAAAAAAAAAAAPDvcnJ23jvo94+G/0ijPA2g/Fr/qvGLaz3tmTEvx/J4fTpXpWgumSu2yjFJxNLC8kWsvPY/imMPVt2oasz2PH9bzd9+t/Jb8M3ta38wf2l72f78jUatmObsvFfeXb2DZPEe1qPsaZQ3yQ+zY2qx6qS3XcrWuP2GJ7WFl5prb0Lt2XFjtGRMJMsKe/2Xyc6d9w6e6x8Nk+urqI13dWF8u2gU8ZtjGqvfz/lfyg2J0zoAAAAAAAAAAAAAAAAAAGCjpl/6neuePK7/Ymm0ktU3WxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3JXp8//XaIyK8AqDazE8ueclAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BT4MwAA//9YnFw0") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 1m39.231941842s ago: executing program 2 (id=861): mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x11) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, 0x0) 1m39.005512338s ago: executing program 2 (id=854): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xc4, r0, &(0x7f00000008c0)='l', 0x1, 0x1, 0x0, 0x0, r0}]) 1m38.561188898s ago: executing program 34 (id=854): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xc4, r0, &(0x7f00000008c0)='l', 0x1, 0x1, 0x0, 0x0, r0}]) 36.744387488s ago: executing program 6 (id=1318): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x0, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 36.469580635s ago: executing program 6 (id=1321): syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc5f, &(0x7f0000002580)="$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") r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x14f882) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000002500), 0x10000000008, 0xd18135cf55169abc) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000000)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x7, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x800]}}) 35.912096158s ago: executing program 6 (id=1326): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000080)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r2, 0x5437, 0x0) 35.588850814s ago: executing program 6 (id=1328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xa5, 0x2c, 0x601, 0x200, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x6, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x401, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0xc}, {0x81, 0x5, 0x9, 0x7}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 35.233079397s ago: executing program 6 (id=1332): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0xf6) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) 34.869872821s ago: executing program 6 (id=1335): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000900020073797a31000000000500040000000000140007800500150040f17c070800124000000000050005000200000005"], 0x60}}, 0x20004890) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r2, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r2, 0x0, &(0x7f0000000080)=""/13}, 0x20) 27.13769494s ago: executing program 7 (id=1389): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b8001800000f23d00f21f8353000000e0f23f83e0fac8d021000000fd8e866baf80cb84a8cce8cef66bafc0c0fc7ac8ccc00000026640f23dbc7442400b30d45d50f21bc0f011c2466b82a008ed8b8dc759680ef66bafc0c0f01d166ba4300ec0f0f49e4b70fbaa70a0000000d", 0x6d}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.326012255s ago: executing program 7 (id=1392): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) 25.738006475s ago: executing program 7 (id=1395): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdir(&(0x7f0000001700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001700)='./sys\x00', &(0x7f0000001800)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) write(r0, &(0x7f0000001d00)='0 4 0 2', 0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000b40)=ANY=[@ANYBLOB="120100003a390c1030013001378f010203010902120c00000000000939"], 0x0) syz_usb_connect(0x2, 0xb3, 0x0, 0x0) 22.500604776s ago: executing program 7 (id=1414): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000580)={[{@rodir}, {@shortname_winnt}, {@shortname_mixed}, {@numtail}, {@uni_xlate}, {@fat=@dmask={'dmask', 0x3d, 0x3}}, {@shortname_mixed}, {@utf8}, {@fat=@flush}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@shortname_win95}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}]}, 0x0, 0x2c7, &(0x7f0000002b80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) stat(0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 22.280576431s ago: executing program 7 (id=1417): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x2, 0x0, 0xfa0, 0x1, 0x0, {0x5, 0x0, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r4, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 21.731886373s ago: executing program 7 (id=1419): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5420, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) 21.338447204s ago: executing program 35 (id=1419): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5420, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) 19.678670452s ago: executing program 36 (id=1335): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000900020073797a31000000000500040000000000140007800500150040f17c070800124000000000050005000200000005"], 0x60}}, 0x20004890) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r2, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r2, 0x0, &(0x7f0000000080)=""/13}, 0x20) 6.276924428s ago: executing program 4 (id=1510): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000140)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) write$binfmt_format(r0, &(0x7f00000002c0)='0\x00', 0x2) fallocate(r2, 0x10, 0x1, 0x8000) fallocate(r0, 0x0, 0xbf5, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0xc, r0, 0x9, 0x1, 0x400, 0xfffffffffdffffff}) 5.708088654s ago: executing program 4 (id=1513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[], 0x1, 0x150e, &(0x7f00000014c0)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@abort}, {@nodiscard}, {@noload}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbce, &(0x7f0000000480)="$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") sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003002d"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.422539785s ago: executing program 3 (id=1529): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x101001a, 0x0, 0xfb, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) chroot(&(0x7f0000000100)='./file0\x00') write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) umount2(&(0x7f0000000140)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000002dc0)="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", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x0, 0xf84, 0x0, 0x0, 0x10, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.34770593s ago: executing program 3 (id=1530): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001") 2.218004077s ago: executing program 3 (id=1531): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.164629038s ago: executing program 5 (id=1532): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000780)=ANY=[], 0x0) 2.132455394s ago: executing program 4 (id=1533): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103041, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) 1.711145091s ago: executing program 3 (id=1534): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) 1.709925371s ago: executing program 4 (id=1535): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1484a8, 0x0, 0x21, 0x0, 0x0) symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000240)='./file0\x00') linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0) 1.449921574s ago: executing program 5 (id=1536): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0) 1.359214792s ago: executing program 4 (id=1537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @loopback}], 0x10) listen(r1, 0x100) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 968.013812ms ago: executing program 5 (id=1538): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$null(0xffffff9c, &(0x7f00000000c0), 0x121002, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000002540)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd84f, 0x80000, 0x2004, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x435be, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7dc, 0x40, 0xffffffff, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4000000, 0x8200, 0x2, 0x4c}}], 0x1, &(0x7f0000000340)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xdc1, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 848.293577ms ago: executing program 4 (id=1539): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0xe0000009}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) 604.549206ms ago: executing program 3 (id=1540): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[], 0x0) 279.572123ms ago: executing program 5 (id=1541): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000300)={{0x9, 0xf}, {0x1, 0x4}, 0x1ff, 0x3, 0xc}) 230.681803ms ago: executing program 3 (id=1542): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 52.713919ms ago: executing program 5 (id=1543): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r2, 0x8, 0x10}, &(0x7f0000000080)=0xc) 6.112658ms ago: executing program 5 (id=1544): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000ffec00850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048045}, 0x20000000) 0s ago: executing program 8 (id=1420): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000440), &(0x7f00000004c0)}) fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x40047452, &(0x7f0000000380)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1a00}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): [ 215.208990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.278516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.294678][ T7584] FAULT_INJECTION: forcing a failure. [ 215.294678][ T7584] name failslab, interval 1, probability 0, space 0, times 0 [ 215.318075][ T7584] CPU: 1 PID: 7584 Comm: syz.4.932 Not tainted syzkaller #0 [ 215.325426][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.334431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.335484][ T7584] Call Trace: [ 215.335493][ T7584] [ 215.349822][ T7584] dump_stack_lvl+0x188/0x24e [ 215.354630][ T7584] ? show_regs_print_info+0x12/0x12 [ 215.359897][ T7584] ? load_image+0x410/0x410 [ 215.364452][ T7584] ? __might_sleep+0xd0/0xd0 [ 215.369087][ T7584] ? __lock_acquire+0x7c40/0x7c40 [ 215.374160][ T7584] should_fail_ex+0x390/0x4c0 [ 215.378970][ T7584] should_failslab+0x5/0x20 [ 215.383508][ T7584] slab_pre_alloc_hook+0x59/0x300 [ 215.384375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.388551][ T7584] ? io_wq_create+0x125/0xe20 [ 215.401352][ T7584] __kmem_cache_alloc_node+0x4f/0x270 [ 215.406765][ T7584] ? io_wq_create+0x125/0xe20 [ 215.411482][ T7584] __kmalloc+0xa3/0x240 [ 215.415678][ T7584] io_wq_create+0x125/0xe20 [ 215.420219][ T7584] ? mutex_unlock+0x10/0x10 [ 215.424765][ T7584] ? io_wq_cancel_cb+0x7c0/0x7c0 [ 215.429734][ T7584] ? __percpu_counter_init+0x20d/0x270 [ 215.435212][ T7584] io_uring_alloc_task_context+0x298/0x5b1 [ 215.441028][ T7584] ? io_uring_show_cred+0x4d9/0x4d9 [ 215.446228][ T7584] ? io_wq_free_work+0x200/0x200 [ 215.451306][ T7584] ? io_issue_sqe+0xc90/0xc90 [ 215.456004][ T7584] ? try_to_wake_up+0x6c1/0x10b0 [ 215.460977][ T7584] __io_uring_add_tctx_node+0x34b/0x4f0 [ 215.466678][ T7584] ? __fget_files+0x28/0x460 [ 215.471325][ T7584] ? __io_uring_free+0x1f0/0x1f0 [ 215.476489][ T7584] __io_uring_add_tctx_node_from_submit+0x94/0x120 [ 215.483007][ T7584] __se_sys_io_uring_enter+0x1c90/0x2150 [ 215.489007][ T7584] ? do_futex+0x2e2/0x320 [ 215.493436][ T7584] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 215.499189][ T7584] ? __ia32_sys_get_robust_list+0x100/0x100 [ 215.505106][ T7584] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 215.511093][ T7584] ? lock_chain_count+0x20/0x20 [ 215.515947][ T7584] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 215.521493][ T7584] do_syscall_64+0x4c/0xa0 [ 215.525910][ T7584] ? clear_bhb_loop+0x60/0xb0 [ 215.530578][ T7584] ? clear_bhb_loop+0x60/0xb0 [ 215.535249][ T7584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.541152][ T7584] RIP: 0033:0x7f968d59e159 [ 215.545566][ T7584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.565190][ T7584] RSP: 002b:00007f968e480fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 215.573627][ T7584] RAX: ffffffffffffffda RBX: 0000200000000440 RCX: 00007f968d59e159 [ 215.581689][ T7584] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003 [ 215.589660][ T7584] RBP: 0000200000000300 R08: 0000000000000000 R09: 0000000000000008 [ 215.597626][ T7584] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 215.606372][ T7584] R13: 00007f968d826128 R14: 00007f968d826090 R15: 00007fff4973f018 [ 215.614542][ T7584] [ 215.620348][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.645226][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.673326][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.693315][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.703195][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.740613][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.769245][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.795432][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.831481][ T7310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.839030][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 215.883133][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.912115][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.937796][ T7310] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.976454][ T7310] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.993461][ T7310] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.013324][ T7310] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.332238][ T5296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.368464][ T5296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.439172][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.603047][ T5298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.703622][ T5298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.711913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.762522][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.929'. [ 216.923932][ T7612] FAULT_INJECTION: forcing a failure. [ 216.923932][ T7612] name failslab, interval 1, probability 0, space 0, times 0 [ 216.971251][ T7612] CPU: 1 PID: 7612 Comm: syz.3.938 Not tainted syzkaller #0 [ 216.978887][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.989065][ T7612] Call Trace: [ 216.992556][ T7612] [ 216.995521][ T7612] dump_stack_lvl+0x188/0x24e [ 217.000385][ T7612] ? show_regs_print_info+0x12/0x12 [ 217.005616][ T7612] ? load_image+0x410/0x410 [ 217.010175][ T7612] ? __might_sleep+0xd0/0xd0 [ 217.014848][ T7612] ? __lock_acquire+0x7c40/0x7c40 [ 217.019921][ T7612] should_fail_ex+0x390/0x4c0 [ 217.025616][ T7612] should_failslab+0x5/0x20 [ 217.030185][ T7612] slab_pre_alloc_hook+0x59/0x300 [ 217.035697][ T7612] ? find_vma_prev+0x111/0x190 [ 217.040505][ T7612] kmem_cache_alloc+0x56/0x2f0 [ 217.045325][ T7612] ? __khugepaged_enter+0x2c/0x2f0 [ 217.050473][ T7612] __khugepaged_enter+0x2c/0x2f0 [ 217.055538][ T7612] hugepage_madvise+0x177/0x1a0 [ 217.060423][ T7612] do_madvise+0x831/0x3520 [ 217.064875][ T7612] ? release_firmware_map_entry+0x187/0x187 [ 217.070782][ T7612] ? plist_add+0x3d7/0x490 [ 217.075213][ T7612] ? madvise_set_anon_name+0x420/0x420 [ 217.080695][ T7612] ? schedule+0xd0/0x180 [ 217.085309][ T7612] ? futex_wait_queue+0x23/0x1b0 [ 217.090257][ T7612] ? futex_wait_queue+0x134/0x1b0 [ 217.095317][ T7612] ? futex_unqueue+0xc7/0xf0 [ 217.099938][ T7612] ? futex_wait+0x4a3/0x5c0 [ 217.104448][ T7612] ? futex_wait_setup+0x270/0x270 [ 217.109482][ T7612] ? file_end_write+0x156/0x250 [ 217.114363][ T7612] ? vfs_write+0x777/0x9a0 [ 217.118787][ T7612] ? do_futex+0x310/0x320 [ 217.123116][ T7612] ? __ia32_sys_get_robust_list+0x100/0x100 [ 217.129017][ T7612] ? __x64_sys_clone+0x1a7/0x220 [ 217.133973][ T7612] ? lock_chain_count+0x20/0x20 [ 217.138833][ T7612] __x64_sys_madvise+0xa2/0xb0 [ 217.143862][ T7612] do_syscall_64+0x4c/0xa0 [ 217.148273][ T7612] ? clear_bhb_loop+0x60/0xb0 [ 217.152943][ T7612] ? clear_bhb_loop+0x60/0xb0 [ 217.157613][ T7612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.163525][ T7612] RIP: 0033:0x7f6daa19e159 [ 217.167936][ T7612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.187896][ T7612] RSP: 002b:00007f6dab122028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 217.196404][ T7612] RAX: ffffffffffffffda RBX: 00007f6daa425fa0 RCX: 00007f6daa19e159 [ 217.204374][ T7612] RDX: 000000000000000e RSI: 0000000000800000 RDI: 0000200000000000 [ 217.212360][ T7612] RBP: 00007f6daa23506b R08: 0000000000000000 R09: 0000000000000000 [ 217.220499][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.228555][ T7612] R13: 00007f6daa426038 R14: 00007f6daa425fa0 R15: 00007ffcb3fb5618 [ 217.236535][ T7612] [ 217.463866][ T7620] loop6: detected capacity change from 0 to 1024 [ 217.512264][ T7620] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 217.567210][ T7620] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 217.578381][ T7620] EXT4-fs (loop6): orphan cleanup on readonly fs [ 217.587434][ T7620] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.939: Freeing blocks not in datazone - block = 0, count = 4096 [ 217.622273][ T7620] EXT4-fs (loop6): 1 orphan inode deleted [ 217.631189][ T7620] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 217.783426][ T4534] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 217.804423][ T7634] loop7: detected capacity change from 0 to 164 [ 217.859593][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.945'. [ 217.889325][ T6621] EXT4-fs (loop6): unmounting filesystem. [ 217.933143][ T7638] Illegal XDP return value 4294967274 on prog (id 29) dev syz_tun, expect packet loss! [ 217.975195][ T4534] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.003343][ T4534] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 218.044246][ T4534] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 218.077861][ T4534] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 218.112724][ T4534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.369421][ T7652] loop6: detected capacity change from 0 to 256 [ 218.399433][ T7651] binder: 7650:7651 ioctl c0306201 2000000003c0 returned -14 [ 218.843404][ T4534] cxacru 5-1:1.0: send of cm 0x91 failed (-71) [ 218.850341][ T4534] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 218.884984][ T4534] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 218.908280][ T4534] cxacru: probe of 5-1:1.0 failed with error -71 [ 218.924670][ T4534] usb 5-1: USB disconnect, device number 11 [ 219.227700][ T7679] tipc: Enabling of bearer rejected, already enabled [ 219.255696][ T7679] tipc: Resetting bearer [ 219.358165][ T7679] tipc: Disabling bearer [ 220.527455][ T7740] gadgetfs: bound to dummy_udc driver [ 220.696382][ T4531] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 220.896698][ T4531] usb 5-1: Using ep0 maxpacket: 16 [ 220.910476][ T7748] loop6: detected capacity change from 0 to 4096 [ 220.910982][ T4531] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.951053][ T4531] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.972050][ T4531] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.991465][ T4531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.018960][ T4531] usb 5-1: Product: syz [ 221.027976][ T7748] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 221.031514][ T4531] usb 5-1: Manufacturer: syz [ 221.050778][ T4531] usb 5-1: SerialNumber: syz [ 221.288564][ T4531] usb 5-1: 0:2 : does not exist [ 221.303781][ T4531] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 221.378601][ T4531] usb 5-1: USB disconnect, device number 12 [ 221.430847][ T4370] udevd[4370]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.491760][ T6621] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 221.758946][ T5138] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 221.965218][ T5138] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.981436][ T5138] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 222.016115][ T5138] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 222.043807][ T5138] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 222.063418][ T5138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.140607][ T4317] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 222.333463][ T4317] usb 7-1: Using ep0 maxpacket: 16 [ 222.341354][ T4317] usb 7-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.382745][ T4317] usb 7-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.409107][ T4317] usb 7-1: config 0 interface 0 has no altsetting 0 [ 222.437928][ T4317] usb 7-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00 [ 222.472234][ T4317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.513171][ T4317] usb 7-1: config 0 descriptor?? [ 222.575952][ T4317] usbhid 7-1:0.0: fixing wrong optional hid class descriptors count [ 222.597696][ T5138] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 222.617267][ T5138] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 222.625856][ T5138] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 222.637976][ T5138] cxacru: probe of 6-1:1.0 failed with error -71 [ 222.662918][ T5138] usb 6-1: USB disconnect, device number 9 [ 223.017041][ T4317] wacom 0003:056A:00E6.000E: hidraw0: USB HID v0.05 Device [HID 056a:00e6] on usb-dummy_hcd.6-1/input0 [ 223.245462][ T5138] usb 7-1: USB disconnect, device number 4 [ 223.405651][ T7802] loop7: detected capacity change from 0 to 512 [ 223.445655][ T7802] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 223.514913][ T7802] EXT4-fs (loop7): 1 truncate cleaned up [ 223.520811][ T7802] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 223.583306][ T4364] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 223.694179][ T7810] FAULT_INJECTION: forcing a failure. [ 223.694179][ T7810] name failslab, interval 1, probability 0, space 0, times 0 [ 223.707146][ T7810] CPU: 1 PID: 7810 Comm: syz.3.989 Not tainted syzkaller #0 [ 223.714639][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.725167][ T7810] Call Trace: [ 223.728511][ T7810] [ 223.731505][ T7810] dump_stack_lvl+0x188/0x24e [ 223.736215][ T7810] ? show_regs_print_info+0x12/0x12 [ 223.741453][ T7810] ? load_image+0x410/0x410 [ 223.745999][ T7810] ? __might_sleep+0xd0/0xd0 [ 223.750620][ T7810] ? __lock_acquire+0x7c40/0x7c40 [ 223.755700][ T7810] should_fail_ex+0x390/0x4c0 [ 223.760420][ T7810] should_failslab+0x5/0x20 [ 223.764997][ T7810] slab_pre_alloc_hook+0x59/0x300 [ 223.770484][ T7810] ? kvmalloc_node+0x6c/0x180 [ 223.775219][ T7810] __kmem_cache_alloc_node+0x4f/0x270 [ 223.780650][ T7810] ? kvmalloc_node+0x6c/0x180 [ 223.785375][ T7810] __kmalloc_node+0xa2/0x240 [ 223.790013][ T7810] kvmalloc_node+0x6c/0x180 [ 223.794595][ T7810] bpf_jit_binary_pack_alloc+0x1b5/0x400 [ 223.795262][ T4364] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.800299][ T7810] ? bpf_arch_text_copy+0x40/0x40 [ 223.800331][ T7810] ? bpf_jit_binary_free+0x60/0x60 [ 223.800348][ T7810] ? security_capable+0x85/0xb0 [ 223.826766][ T7810] bpf_int_jit_compile+0xb86d/0xcbe0 [ 223.828984][ T7802] EXT4-fs error (device loop7): ext4_search_dir:1551: inode #2: block 13: comm syz.7.986: bad entry in directory: inode out of bounds - offset=44, inode=12, rec_len=16, size=1024 fake=0 [ 223.832067][ T7810] ? slab_free_freelist_hook+0x133/0x1b0 [ 223.856039][ T7810] ? __kmem_cache_free+0xb6/0x200 [ 223.861127][ T7810] ? emit_bpf_dispatcher+0x1060/0x1060 [ 223.866733][ T7810] ? rcu_is_watching+0x11/0xa0 [ 223.871626][ T7810] bpf_prog_select_runtime+0x48b/0x7d0 [ 223.877124][ T7810] ? bpf_prog_realloc+0x142/0x1c0 [ 223.882323][ T7810] bpf_prepare_filter+0x100e/0x11b0 [ 223.882877][ T4364] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.887548][ T7810] ? seccomp_notify_detach+0x220/0x220 [ 223.887581][ T7810] ? bpf_prog_create+0x1f0/0x1f0 [ 223.887598][ T7810] ? rcu_is_watching+0x11/0xa0 [ 223.887619][ T7810] ? kmemdup+0x42/0x60 [ 223.887645][ T7810] ? memcpy+0x3c/0x60 [ 223.887664][ T7810] bpf_prog_create_from_user+0x2cc/0x420 [ 223.887686][ T7810] ? seccomp_notify_detach+0x220/0x220 [ 223.887710][ T7810] do_seccomp+0x806/0xe00 [ 223.887734][ T7810] ? prctl_set_seccomp+0x60/0x60 [ 223.941684][ T7802] EXT4-fs (loop7): Remounting filesystem read-only [ 223.948239][ T7810] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 223.950754][ T4364] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 223.954249][ T7810] ? lockdep_hardirqs_on+0x94/0x140 [ 223.954283][ T7810] do_syscall_64+0x4c/0xa0 [ 223.954299][ T7810] ? clear_bhb_loop+0x60/0xb0 [ 223.954315][ T7810] ? clear_bhb_loop+0x60/0xb0 [ 223.954331][ T7810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.954353][ T7810] RIP: 0033:0x7f6daa19e159 [ 223.954371][ T7810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.954385][ T7810] RSP: 002b:00007f6dab122028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 223.954405][ T7810] RAX: ffffffffffffffda RBX: 00007f6daa425fa0 RCX: 00007f6daa19e159 [ 223.954418][ T7810] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 224.024252][ T4364] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 224.028932][ T7810] RBP: 00007f6daa23506b R08: 0000000000000000 R09: 0000000000000000 [ 224.053129][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.061126][ T7810] R13: 00007f6daa426038 R14: 00007f6daa425fa0 R15: 00007ffcb3fb5618 [ 224.069142][ T7810] [ 224.105338][ T4364] usb 6-1: Manufacturer: syz [ 224.126242][ T7310] EXT4-fs (loop7): unmounting filesystem. [ 224.158930][ T4364] usb 6-1: config 0 descriptor?? [ 224.411444][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.991'. [ 224.473408][ T4319] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 224.492240][ T7824] capability: warning: `syz.3.992' uses deprecated v2 capabilities in a way that may be insecure [ 224.555527][ T7824] loop3: detected capacity change from 0 to 512 [ 224.650126][ T7824] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 224.663336][ T4319] usb 7-1: Using ep0 maxpacket: 16 [ 224.670317][ T4319] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 224.693634][ T4319] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.707937][ T4319] usb 7-1: config 0 has no interface number 0 [ 224.728231][ T4319] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 224.728410][ T7824] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.762289][ T4319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.770698][ T4319] usb 7-1: Product: syz [ 224.774990][ T4319] usb 7-1: Manufacturer: syz [ 224.779642][ T4319] usb 7-1: SerialNumber: syz [ 224.787230][ T4319] usb 7-1: config 0 descriptor?? [ 224.999502][ T4319] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 225.017482][ T4319] usb 7-1: No valid video chain found. [ 225.067284][ T4319] usb 7-1: USB disconnect, device number 5 [ 225.328619][ T4364] input: syz Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000F/input/input25 [ 225.448543][ T4364] uclogic 0003:256C:006D.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 225.478283][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 225.579009][ T4319] usb 6-1: USB disconnect, device number 10 [ 225.766213][ T7849] fido_id[7849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 225.820676][ T7855] netlink: 'syz.6.999': attribute type 5 has an invalid length. [ 227.807883][ T7931] FAULT_INJECTION: forcing a failure. [ 227.807883][ T7931] name failslab, interval 1, probability 0, space 0, times 0 [ 227.809166][ T7930] device syzkaller0 entered promiscuous mode [ 227.862996][ T7931] CPU: 0 PID: 7931 Comm: syz.4.1023 Not tainted syzkaller #0 [ 227.870463][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.880544][ T7931] Call Trace: [ 227.884391][ T7931] [ 227.887420][ T7931] dump_stack_lvl+0x188/0x24e [ 227.892401][ T7931] ? show_regs_print_info+0x12/0x12 [ 227.893552][ T7936] input: syz0 as /devices/virtual/input/input26 [ 227.897620][ T7931] ? load_image+0x410/0x410 [ 227.908608][ T7931] ? __might_sleep+0xd0/0xd0 [ 227.913257][ T7931] ? __lock_acquire+0x7c40/0x7c40 [ 227.918331][ T7931] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 227.924357][ T7931] should_fail_ex+0x390/0x4c0 [ 227.929079][ T7931] should_failslab+0x5/0x20 [ 227.933704][ T7931] slab_pre_alloc_hook+0x59/0x300 [ 227.938855][ T7931] ? lockdep_hardirqs_on+0x94/0x140 [ 227.944098][ T7931] ? alloc_fs_context+0x63/0x7d0 [ 227.949342][ T7931] __kmem_cache_alloc_node+0x4f/0x270 [ 227.954834][ T7931] ? alloc_fs_context+0x63/0x7d0 [ 227.957121][ T7938] FAULT_INJECTION: forcing a failure. [ 227.957121][ T7938] name failslab, interval 1, probability 0, space 0, times 0 [ 227.960180][ T7931] kmalloc_trace+0x26/0xe0 [ 227.960212][ T7931] alloc_fs_context+0x63/0x7d0 [ 227.960239][ T7931] __se_sys_fspick+0x195/0x3b0 [ 227.986891][ T7931] ? lock_chain_count+0x20/0x20 [ 227.991812][ T7931] ? __x64_sys_fspick+0x80/0x80 [ 227.996971][ T7931] ? lockdep_hardirqs_on+0x94/0x140 [ 228.002283][ T7931] do_syscall_64+0x4c/0xa0 [ 228.006790][ T7931] ? clear_bhb_loop+0x60/0xb0 [ 228.011473][ T7931] ? clear_bhb_loop+0x60/0xb0 [ 228.016336][ T7931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.022249][ T7931] RIP: 0033:0x7f968d59e159 [ 228.026763][ T7931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.046510][ T7931] RSP: 002b:00007f968e4a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 228.054936][ T7931] RAX: ffffffffffffffda RBX: 00007f968d825fa0 RCX: 00007f968d59e159 [ 228.063091][ T7931] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 228.071069][ T7931] RBP: 00007f968d63506b R08: 0000000000000000 R09: 0000000000000000 [ 228.079046][ T7931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.087036][ T7931] R13: 00007f968d826038 R14: 00007f968d825fa0 R15: 00007fff4973f018 [ 228.095032][ T7931] [ 228.098052][ T7938] CPU: 1 PID: 7938 Comm: syz.7.1025 Not tainted syzkaller #0 [ 228.105449][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.115505][ T7938] Call Trace: [ 228.118779][ T7938] [ 228.121701][ T7938] dump_stack_lvl+0x188/0x24e [ 228.126386][ T7938] ? show_regs_print_info+0x12/0x12 [ 228.131577][ T7938] ? load_image+0x410/0x410 [ 228.136076][ T7938] ? __might_sleep+0xd0/0xd0 [ 228.140660][ T7938] ? __lock_acquire+0x7c40/0x7c40 [ 228.145684][ T7938] should_fail_ex+0x390/0x4c0 [ 228.150450][ T7938] should_failslab+0x5/0x20 [ 228.154946][ T7938] slab_pre_alloc_hook+0x59/0x300 [ 228.160141][ T7938] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 228.166231][ T7938] ? bpf_int_jit_compile+0x238/0xcbe0 [ 228.171612][ T7938] __kmem_cache_alloc_node+0x4f/0x270 [ 228.177087][ T7938] ? bpf_int_jit_compile+0x238/0xcbe0 [ 228.182455][ T7938] kmalloc_trace+0x26/0xe0 [ 228.186867][ T7938] bpf_int_jit_compile+0x238/0xcbe0 [ 228.192062][ T7938] ? slab_free_freelist_hook+0x133/0x1b0 [ 228.197692][ T7938] ? bpf_convert_filter+0x5067/0x5220 [ 228.203160][ T7938] ? __kmem_cache_free+0xb6/0x200 [ 228.208272][ T7938] ? kasan_set_track+0x60/0x70 [ 228.213055][ T7938] ? emit_bpf_dispatcher+0x1060/0x1060 [ 228.218514][ T7938] ? sk_filter_release_rcu+0x110/0x110 [ 228.223982][ T7938] ? rcu_is_watching+0x11/0xa0 [ 228.228841][ T7938] bpf_prog_select_runtime+0x48b/0x7d0 [ 228.234295][ T7938] ? bpf_prog_realloc+0x142/0x1c0 [ 228.239335][ T7938] bpf_prepare_filter+0x100e/0x11b0 [ 228.244531][ T7938] ? seccomp_notify_detach+0x220/0x220 [ 228.249991][ T7938] ? bpf_prog_create+0x1f0/0x1f0 [ 228.254926][ T7938] ? rcu_is_watching+0x11/0xa0 [ 228.259686][ T7938] ? kmemdup+0x42/0x60 [ 228.263752][ T7938] ? memcpy+0x3c/0x60 [ 228.267729][ T7938] bpf_prog_create_from_user+0x2cc/0x420 [ 228.273360][ T7938] ? seccomp_notify_detach+0x220/0x220 [ 228.278815][ T7938] do_seccomp+0x806/0xe00 [ 228.283152][ T7938] ? prctl_set_seccomp+0x60/0x60 [ 228.288112][ T7938] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 228.294098][ T7938] ? lockdep_hardirqs_on+0x94/0x140 [ 228.299301][ T7938] do_syscall_64+0x4c/0xa0 [ 228.303710][ T7938] ? clear_bhb_loop+0x60/0xb0 [ 228.308396][ T7938] ? clear_bhb_loop+0x60/0xb0 [ 228.313073][ T7938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.318997][ T7938] RIP: 0033:0x7f6574b9e159 [ 228.323603][ T7938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.343380][ T7938] RSP: 002b:00007f6575a74028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 228.351817][ T7938] RAX: ffffffffffffffda RBX: 00007f6574e25fa0 RCX: 00007f6574b9e159 [ 228.359971][ T7938] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 228.367946][ T7938] RBP: 00007f6574c3506b R08: 0000000000000000 R09: 0000000000000000 [ 228.375949][ T7938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.384022][ T7938] R13: 00007f6574e26038 R14: 00007f6574e25fa0 R15: 00007ffe4e372f68 [ 228.392013][ T7938] [ 228.504218][ T7939] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 228.689179][ T7942] nullb0: [POWERTEC] p1 p2 p3 p4 [ 228.710341][ T7942] nullb0: p1 start 2197258574 is beyond EOD, truncated [ 228.758415][ T7942] nullb0: p3 start 1073872902 is beyond EOD, truncated [ 228.771256][ T7948] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 228.794590][ T7942] nullb0: p4 start 1074200584 is beyond EOD, truncated [ 228.804993][ T7951] loop5: detected capacity change from 0 to 512 [ 228.836627][ T7951] ext4: Unknown parameter 'subj_user' [ 228.913365][ T4274] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 229.135326][ T4274] usb 5-1: not running at top speed; connect to a high speed hub [ 229.160860][ T4274] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 229.207197][ T4274] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 229.233493][ T4274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.263059][ T4274] usb 5-1: Product: syz [ 229.287200][ T4274] usb 5-1: Manufacturer: syz [ 229.291945][ T4274] usb 5-1: SerialNumber: syz [ 229.333162][ T4274] oti6858 5-1:1.0: oti6858 converter detected [ 229.385947][ T4274] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 229.570326][ T7976] loop6: detected capacity change from 0 to 4096 [ 229.607314][ T7976] EXT4-fs: Ignoring removed nobh option [ 229.664492][ T7976] EXT4-fs: Ignoring removed bh option [ 229.708972][ T7976] EXT4-fs (loop6): Test dummy encryption mode enabled [ 229.727286][ T7978] syz.7.1038 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 229.763903][ T7978] CPU: 1 PID: 7978 Comm: syz.7.1038 Not tainted syzkaller #0 [ 229.771342][ T7978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.775272][ T7984] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1039'. [ 229.781402][ T7978] Call Trace: [ 229.781456][ T7978] [ 229.781465][ T7978] dump_stack_lvl+0x188/0x24e [ 229.781491][ T7978] ? ___ratelimit+0x14e/0x610 [ 229.806239][ T7978] ? show_regs_print_info+0x12/0x12 [ 229.811478][ T7978] ? load_image+0x410/0x410 [ 229.816026][ T7978] ? ___ratelimit+0x474/0x610 [ 229.820745][ T7978] ? radix_tree_cpu_dead+0x160/0x160 [ 229.826082][ T7978] dump_header+0xd8/0x820 [ 229.830461][ T7978] oom_kill_process+0x361/0x550 [ 229.835347][ T7978] out_of_memory+0xe25/0x1220 [ 229.840066][ T7978] ? mutex_lock_nested+0x10/0x10 [ 229.845041][ T7978] ? unregister_oom_notifier+0x20/0x20 [ 229.850543][ T7978] mem_cgroup_out_of_memory+0x2c0/0x390 [ 229.856131][ T7978] ? mem_cgroup_oom_trylock+0x210/0x210 [ 229.861714][ T7978] ? do_raw_spin_unlock+0x11d/0x230 [ 229.866940][ T7978] try_charge_memcg+0xc9d/0x17c0 [ 229.871986][ T7978] ? percpu_ref_put+0x180/0x180 [ 229.876876][ T7978] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 229.882691][ T7978] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 229.888713][ T7978] ? percpu_ref_tryget+0x15/0x180 [ 229.893775][ T7978] ? percpu_ref_tryget+0x15/0x180 [ 229.898831][ T7978] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 229.900040][ T7984] unsupported nlmsg_type 40 [ 229.904571][ T7978] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 229.904608][ T7978] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 229.904631][ T7978] obj_cgroup_charge+0x36a/0x620 [ 229.904654][ T7978] ? obj_cgroup_charge+0xe9/0x620 [ 229.904673][ T7978] ? mod_objcg_mlstate+0x320/0x320 [ 229.904690][ T7978] ? percpu_ref_tryget+0x15/0x180 [ 229.904720][ T7978] ? percpu_ref_tryget+0x15/0x180 [ 229.904745][ T7978] ? get_obj_cgroup_from_current+0xd0/0x280 [ 229.904765][ T7978] slab_pre_alloc_hook+0x2e2/0x300 [ 229.957364][ T7978] ? netlink_broadcast+0x1085/0x10f0 [ 229.962680][ T7978] ? __addrconf_sysctl_register+0xa2/0x3e0 [ 229.968535][ T7978] __kmem_cache_alloc_node+0x4f/0x270 [ 229.973951][ T7978] ? __addrconf_sysctl_register+0xa2/0x3e0 [ 229.979794][ T7978] __kmalloc_node_track_caller+0xa0/0x240 [ 229.985557][ T7978] kmemdup+0x27/0x60 [ 229.989492][ T7978] __addrconf_sysctl_register+0xa2/0x3e0 [ 229.995169][ T7978] ? addrconf_verify_work+0x30/0x30 [ 230.000407][ T7978] ? kmemdup+0x42/0x60 [ 230.004509][ T7978] ? memcpy+0x3c/0x60 [ 230.008514][ T7978] addrconf_init_net+0x4d4/0x750 [ 230.013485][ T7978] ? ip6addrlbl_net_init+0x3ce/0x3d0 [ 230.018808][ T7978] ops_init+0x360/0x5e0 [ 230.023001][ T7978] setup_net+0x4f2/0xbd0 [ 230.027284][ T7978] ? copy_net_ns+0x5b0/0x5b0 [ 230.031912][ T7978] ? copy_net_ns+0x324/0x5b0 [ 230.036542][ T7978] ? down_read_killable+0x1cc/0x340 [ 230.042138][ T7978] copy_net_ns+0x33e/0x5b0 [ 230.046608][ T7978] create_new_namespaces+0x3ce/0x700 [ 230.051945][ T7978] unshare_nsproxy_namespaces+0x116/0x160 [ 230.057897][ T7978] ksys_unshare+0x4f6/0x8e0 [ 230.062447][ T7978] ? sighand_ctor+0x40/0x40 [ 230.067070][ T7978] ? lock_chain_count+0x20/0x20 [ 230.071967][ T7978] ? syscall_enter_from_user_mode+0x21/0x80 [ 230.077906][ T7978] __x64_sys_unshare+0x34/0x40 [ 230.083840][ T7978] do_syscall_64+0x4c/0xa0 [ 230.088289][ T7978] ? clear_bhb_loop+0x60/0xb0 [ 230.093000][ T7978] ? clear_bhb_loop+0x60/0xb0 [ 230.097890][ T7978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.103820][ T7978] RIP: 0033:0x7f6574b9e159 [ 230.108540][ T7978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.116313][ T7976] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 230.128257][ T7978] RSP: 002b:00007f6575a74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 230.128285][ T7978] RAX: ffffffffffffffda RBX: 00007f6574e25fa0 RCX: 00007f6574b9e159 [ 230.128296][ T7978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 230.128306][ T7978] RBP: 00007f6574c3506b R08: 0000000000000000 R09: 0000000000000000 [ 230.128316][ T7978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.128326][ T7978] R13: 00007f6574e26038 R14: 00007f6574e25fa0 R15: 00007ffe4e372f68 [ 230.128352][ T7978] [ 230.205693][ T7978] memory: usage 96kB, limit 96kB, failcnt 33 [ 230.213497][ T7978] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 230.368389][ T7992] loop3: detected capacity change from 0 to 256 [ 230.412834][ T7992] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 230.541517][ T26] audit: type=1800 audit(1790403913.824:18): pid=7975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1037" name="file1" dev="loop3" ino=1048670 res=0 errno=0 [ 230.587472][ T7975] bio_check_eod: 8 callbacks suppressed [ 230.587514][ T7975] syz.3.1037: attempt to access beyond end of device [ 230.587514][ T7975] loop3: rw=0, sector=184, nr_sectors = 7383 limit=256 [ 230.635516][ T26] audit: type=1800 audit(1790403913.924:19): pid=7976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1036" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 230.744267][ T7996] EXT4-fs (loop6): shut down requested (2) [ 230.748864][ T7975] syz.3.1037: attempt to access beyond end of device [ 230.748864][ T7975] loop3: rw=0, sector=7567, nr_sectors = 13360 limit=256 [ 230.969594][ T7999] loop5: detected capacity change from 0 to 2048 [ 230.973118][ T6621] EXT4-fs (loop6): unmounting filesystem. [ 230.993984][ T7975] syz.3.1037: attempt to access beyond end of device [ 230.993984][ T7975] loop3: rw=0, sector=20927, nr_sectors = 8312 limit=256 [ 231.031971][ T7999] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.574723][ T7978] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 231.603515][ T7978] Memory cgroup stats for /syz7/test: [ 231.604635][ T7978] anon 0 [ 231.604635][ T7978] file 0 [ 231.604635][ T7978] kernel 98304 [ 231.604635][ T7978] kernel_stack 0 [ 231.604635][ T7978] pagetables 0 [ 231.604635][ T7978] sec_pagetables 0 [ 231.604635][ T7978] percpu 0 [ 231.604635][ T7978] sock 0 [ 231.604635][ T7978] vmalloc 0 [ 231.604635][ T7978] shmem 0 [ 231.604635][ T7978] zswap 0 [ 231.604635][ T7978] zswapped 0 [ 231.604635][ T7978] file_mapped 0 [ 231.604635][ T7978] file_dirty 0 [ 231.604635][ T7978] file_writeback 0 [ 231.604635][ T7978] swapcached 0 [ 231.604635][ T7978] anon_thp 0 [ 231.604635][ T7978] file_thp 0 [ 231.604635][ T7978] shmem_thp 0 [ 231.604635][ T7978] inactive_anon 0 [ 231.604635][ T7978] active_anon 0 [ 231.604635][ T7978] inactive_file 0 [ 231.604635][ T7978] active_file 0 [ 231.604635][ T7978] unevictable 0 [ 231.604635][ T7978] slab_reclaimable 20072 [ 231.604635][ T7978] slab_unreclaimable 74584 [ 231.604635][ T7978] slab 94656 [ 231.604635][ T7978] workingset_refault_anon 0 [ 231.923884][ T7978] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz7/test,task_memcg=/syz7/test,task=syz.7.1038,pid=7977,uid=0 [ 231.974109][ T7978] Memory cgroup out of memory: Killed process 7977 (syz.7.1038) total-vm:102244kB, anon-rss:1412kB, file-rss:21960kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 232.079010][ T8020] loop3: detected capacity change from 0 to 2048 [ 232.504535][ T4531] usb 5-1: USB disconnect, device number 13 [ 232.565513][ T4531] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 232.597302][ T4531] oti6858 5-1:1.0: device disconnected [ 232.602856][ T26] audit: type=1326 audit(1790403915.884:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.7.1048" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6574b9e159 code=0x0 [ 233.265557][ T4335] kworker/u4:6: attempt to access beyond end of device [ 233.265557][ T4335] loop5: rw=1, sector=2048, nr_sectors = 1 limit=2048 [ 233.306225][ T4335] buffer_io_error: 6 callbacks suppressed [ 233.306240][ T4335] Buffer I/O error on dev loop5, logical block 2048, lost async page write [ 233.331198][ T4335] kworker/u4:6: attempt to access beyond end of device [ 233.331198][ T4335] loop5: rw=1, sector=2048, nr_sectors = 1 limit=2048 [ 233.350507][ T4335] Buffer I/O error on dev loop5, logical block 2048, lost async page write [ 233.390484][ T4934] UDF-fs: warning (device loop5): udf_evict_inode: Inode 1376 (mode 40755) has inode size 368 different from extent length 880. Filesystem need not be standards compliant. [ 233.433482][ T4531] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 233.643411][ T4531] usb 7-1: Using ep0 maxpacket: 8 [ 233.650820][ T4531] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 233.677113][ T4531] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.683899][ T8064] FAULT_INJECTION: forcing a failure. [ 233.683899][ T8064] name failslab, interval 1, probability 0, space 0, times 0 [ 233.708262][ T4531] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.718936][ T8064] CPU: 1 PID: 8064 Comm: syz.7.1060 Not tainted syzkaller #0 [ 233.726451][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.736531][ T8064] Call Trace: [ 233.739858][ T8064] [ 233.742819][ T8064] dump_stack_lvl+0x188/0x24e [ 233.747530][ T8064] ? show_regs_print_info+0x12/0x12 [ 233.752742][ T8064] ? load_image+0x410/0x410 [ 233.757251][ T8064] ? __might_sleep+0xd0/0xd0 [ 233.761863][ T8064] ? __lock_acquire+0x7c40/0x7c40 [ 233.766894][ T8064] should_fail_ex+0x390/0x4c0 [ 233.771688][ T8064] should_failslab+0x5/0x20 [ 233.776194][ T8064] slab_pre_alloc_hook+0x59/0x300 [ 233.781222][ T8064] ? find_vma_prev+0x111/0x190 [ 233.785994][ T8064] kmem_cache_alloc+0x56/0x2f0 [ 233.790757][ T8064] ? __khugepaged_enter+0x2c/0x2f0 [ 233.795866][ T8064] __khugepaged_enter+0x2c/0x2f0 [ 233.800803][ T8064] hugepage_madvise+0x177/0x1a0 [ 233.805650][ T8064] do_madvise+0x831/0x3520 [ 233.810066][ T8064] ? release_firmware_map_entry+0x187/0x187 [ 233.816000][ T8064] ? plist_add+0x3d7/0x490 [ 233.820429][ T8064] ? madvise_set_anon_name+0x420/0x420 [ 233.825977][ T8064] ? schedule+0xd0/0x180 [ 233.830250][ T8064] ? futex_wait_queue+0x23/0x1b0 [ 233.835307][ T8064] ? futex_wait_queue+0x134/0x1b0 [ 233.840386][ T8064] ? futex_unqueue+0xc7/0xf0 [ 233.844977][ T8064] ? futex_wait+0x4a3/0x5c0 [ 233.849519][ T8064] ? futex_wait_setup+0x270/0x270 [ 233.854644][ T8064] ? file_end_write+0x156/0x250 [ 233.859499][ T8064] ? vfs_write+0x777/0x9a0 [ 233.864007][ T8064] ? do_futex+0x310/0x320 [ 233.868429][ T8064] ? __ia32_sys_get_robust_list+0x100/0x100 [ 233.874315][ T8064] ? __x64_sys_clone+0x1a7/0x220 [ 233.879262][ T8064] ? lock_chain_count+0x20/0x20 [ 233.884120][ T8064] __x64_sys_madvise+0xa2/0xb0 [ 233.888885][ T8064] do_syscall_64+0x4c/0xa0 [ 233.893296][ T8064] ? clear_bhb_loop+0x60/0xb0 [ 233.898056][ T8064] ? clear_bhb_loop+0x60/0xb0 [ 233.902733][ T8064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.908638][ T8064] RIP: 0033:0x7f6574b9e159 [ 233.913059][ T8064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.932684][ T8064] RSP: 002b:00007f6575a74028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 233.941101][ T8064] RAX: ffffffffffffffda RBX: 00007f6574e25fa0 RCX: 00007f6574b9e159 [ 233.949069][ T8064] RDX: 000000000000000e RSI: 0000000000800000 RDI: 0000200000000000 [ 233.957076][ T8064] RBP: 00007f6574c3506b R08: 0000000000000000 R09: 0000000000000000 [ 233.965056][ T8064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.973147][ T8064] R13: 00007f6574e26038 R14: 00007f6574e25fa0 R15: 00007ffe4e372f68 [ 233.981350][ T8064] [ 234.033478][ T4531] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.058682][ T4531] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.087283][ T4531] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 234.110134][ T4531] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.595529][ T8101] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 234.697911][ T8105] loop5: detected capacity change from 0 to 512 [ 234.797798][ T8105] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.1068: inode has both inline data and extents flags [ 234.897647][ T8105] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1068: couldn't read orphan inode 15 (err -117) [ 234.945507][ T8115] usbtmc 7-1:16.0: simple usb_control_msg failed -32 [ 234.956772][ T4531] usb 7-1: USB disconnect, device number 6 [ 234.958825][ T8105] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 235.071733][ T8120] loop3: detected capacity change from 0 to 1024 [ 235.102837][ T8120] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.191807][ T8120] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 235.239567][ T4934] EXT4-fs (loop5): unmounting filesystem. [ 235.250555][ T8120] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 235.328731][ T8120] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 235.361096][ T8130] EXT4-fs error (device loop3): __ext4_remount:6650: comm syz.3.1072: Abort forced by user [ 235.443739][ T8130] EXT4-fs (loop3): Remounting filesystem read-only [ 235.483487][ T8130] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 235.839518][ T8149] device syzkaller0 entered promiscuous mode [ 235.873341][ T4364] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 235.883122][ T8149] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 236.073385][ T4364] usb 6-1: Using ep0 maxpacket: 16 [ 236.080736][ T4364] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 236.131745][ T4364] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.152935][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 236.173827][ T4364] usb 6-1: config 0 has no interface number 0 [ 236.242390][ T4364] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 236.282564][ T4364] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.353492][ T4364] usb 6-1: Product: syz [ 236.378276][ T4364] usb 6-1: Manufacturer: syz [ 236.383025][ T4364] usb 6-1: SerialNumber: syz [ 236.429613][ T4364] usb 6-1: config 0 descriptor?? [ 236.653096][ T4364] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 236.679319][ T4364] usb 6-1: No valid video chain found. [ 236.707048][ T4364] usb 6-1: USB disconnect, device number 11 [ 236.914388][ T4531] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 237.123891][ T4531] usb 5-1: Using ep0 maxpacket: 8 [ 237.130690][ T4531] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 237.168102][ T4531] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.213296][ T4531] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.240080][ T4531] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.290200][ T4531] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.321189][ T4531] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 237.333630][ T8207] bonding: bond0 is being deleted... [ 237.342189][ T4531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.529748][ T8207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.591314][ T8207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.604015][ T8207] bond0 (unregistering): Released all slaves [ 237.742728][ T8217] loop6: detected capacity change from 0 to 1024 [ 237.751976][ T8217] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.779956][ T8217] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 237.812299][ T8217] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 237.820663][ T8217] System zones: 0-1, 3-36 [ 237.866128][ T8217] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 237.971232][ T6621] EXT4-fs (loop6): unmounting filesystem. [ 238.138318][ T8234] loop6: detected capacity change from 0 to 8192 [ 238.149734][ T8235] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 238.160872][ T4319] usb 5-1: USB disconnect, device number 14 [ 238.163461][ T8234] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 238.180625][ T8234] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 238.190878][ T8234] REISERFS (device loop6): using ordered data mode [ 238.197725][ T8234] reiserfs: using flush barriers [ 238.204182][ T8234] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 238.221236][ T8234] REISERFS (device loop6): checking transaction log (loop6) [ 238.229890][ T8234] REISERFS (device loop6): Using r5 hash to sort names [ 238.237182][ T8234] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 238.810035][ T8240] loop5: detected capacity change from 0 to 4096 [ 238.853698][ T8240] EXT4-fs: Ignoring removed nobh option [ 238.901355][ T8240] EXT4-fs: Ignoring removed bh option [ 238.902576][ T8247] input: syz0 as /devices/virtual/input/input27 [ 238.931246][ T8240] EXT4-fs (loop5): Test dummy encryption mode enabled [ 238.958292][ T8240] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 239.086654][ T26] audit: type=1800 audit(1790403922.374:21): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1109" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 239.191192][ T8240] EXT4-fs (loop5): shut down requested (2) [ 239.221708][ T8256] loop4: detected capacity change from 0 to 256 [ 239.272150][ T8256] exfat: Deprecated parameter 'namecase' [ 239.295412][ T8256] exfat: Deprecated parameter 'utf8' [ 239.321764][ T4934] EXT4-fs (loop5): unmounting filesystem. [ 239.368671][ T8256] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 239.499610][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1116'. [ 240.536174][ T8290] tipc: Enabling of bearer rejected, failed to enable media [ 240.555979][ T8293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1128'. [ 240.601214][ T8293] device vlan0 entered promiscuous mode [ 240.616386][ T8293] device eth0 entered promiscuous mode [ 240.733407][ T4364] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 240.771088][ T8300] loop5: detected capacity change from 0 to 164 [ 240.950990][ T4364] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 240.980800][ T4364] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.003582][ T4364] usb 7-1: Product: syz [ 241.007811][ T4364] usb 7-1: Manufacturer: syz [ 241.051117][ T4364] usb 7-1: SerialNumber: syz [ 241.069889][ T8307] loop4: detected capacity change from 0 to 512 [ 241.092478][ T4364] usb 7-1: config 0 descriptor?? [ 241.130071][ T4364] hub 7-1:0.0: bad descriptor, ignoring hub [ 241.158866][ T4364] hub: probe of 7-1:0.0 failed with error -5 [ 241.174613][ T8307] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 241.193173][ T8307] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.210534][ T8308] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1133'. [ 241.280378][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 241.326362][ T4364] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 241.368078][ T4364] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 241.402341][ T4364] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 241.430273][ T4364] usb 7-1: media controller created [ 241.430873][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'. [ 241.480759][ T4364] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.554156][ T8295] loop3: detected capacity change from 0 to 32768 [ 241.630986][ T26] audit: type=1800 audit(1790403924.914:22): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1129" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 241.728308][ T4364] DVB: Unable to find symbol dib7000p_attach() [ 241.743869][ T4364] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 241.752482][ T26] audit: type=1800 audit(1790403925.034:23): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1129" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 242.033483][ T4364] rc_core: IR keymap rc-dib0700-rc5 not found [ 242.040823][ T4364] Registered IR keymap rc-empty [ 242.051809][ T4364] dvb-usb: could not initialize remote control. [ 242.059562][ T4364] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 242.085173][ T4274] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 242.172379][ T4364] usb 7-1: USB disconnect, device number 7 [ 242.231159][ T4364] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 242.330287][ T4274] usb 5-1: unable to get BOS descriptor or descriptor too short [ 242.347876][ T4274] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.361754][ T4274] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 242.376871][ T4274] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 242.389377][ T4274] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 242.410264][ T4274] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 242.422560][ T4274] usb 5-1: config 1 interface 1 has no altsetting 0 [ 242.438282][ T4274] usb 5-1: string descriptor 0 read error: -22 [ 242.445033][ T4274] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 242.456540][ T4274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.479665][ T8337] kvm: vcpu 0: requested 2 ns lapic timer period limited to 200000 ns [ 243.245377][ T8369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1144'. [ 243.547248][ T5138] usb 5-1: USB disconnect, device number 15 [ 244.156107][ T8392] device macvlan0 entered promiscuous mode [ 244.589579][ T8405] netlink: 'syz.3.1155': attribute type 4 has an invalid length. [ 244.873512][ T4274] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 244.983553][ T8385] ceph: No mds server is up or the cluster is laggy [ 245.084775][ T8417] loop3: detected capacity change from 0 to 1024 [ 245.152850][ T8417] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 245.346277][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 245.552952][ T8431] FAULT_INJECTION: forcing a failure. [ 245.552952][ T8431] name failslab, interval 1, probability 0, space 0, times 0 [ 245.590174][ T8431] CPU: 0 PID: 8431 Comm: syz.3.1166 Not tainted syzkaller #0 [ 245.597658][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.607740][ T8431] Call Trace: [ 245.611046][ T8431] [ 245.614010][ T8431] dump_stack_lvl+0x188/0x24e [ 245.618724][ T8431] ? show_regs_print_info+0x12/0x12 [ 245.623943][ T8431] ? load_image+0x410/0x410 [ 245.628485][ T8431] ? __lock_acquire+0x7c40/0x7c40 [ 245.633535][ T8431] ? get_tree_mtd+0x5e2/0x760 [ 245.638251][ T8431] ? do_new_mount+0x247/0xa40 [ 245.643139][ T8431] ? __se_sys_mount+0x2e3/0x3d0 [ 245.648027][ T8431] ? do_syscall_64+0x4c/0xa0 [ 245.652633][ T8431] should_fail_ex+0x390/0x4c0 [ 245.657317][ T8431] should_failslab+0x5/0x20 [ 245.661814][ T8431] slab_pre_alloc_hook+0x59/0x300 [ 245.666839][ T8431] ? jffs2_do_mount_fs+0x10f/0x22b0 [ 245.672036][ T8431] __kmem_cache_alloc_node+0x4f/0x270 [ 245.677420][ T8431] ? jffs2_do_mount_fs+0x10f/0x22b0 [ 245.682649][ T8431] __kmalloc+0xa3/0x240 [ 245.686827][ T8431] jffs2_do_mount_fs+0x10f/0x22b0 [ 245.691862][ T8431] ? __raw_spin_lock_init+0x41/0x100 [ 245.697190][ T8431] ? __init_rwsem+0x11e/0x160 [ 245.701872][ T8431] jffs2_do_fill_super+0x551/0xc50 [ 245.707345][ T8431] ? jffs2_reconfigure+0x310/0x310 [ 245.712479][ T8431] mtd_get_sb+0xcb/0x2b0 [ 245.716742][ T8431] ? mtd_get_sb_by_nr+0x7c/0xa0 [ 245.721600][ T8431] get_tree_mtd+0x5e2/0x760 [ 245.726100][ T8431] ? jffs2_reconfigure+0x310/0x310 [ 245.731208][ T8431] ? mtd_proc_show+0x270/0x270 [ 245.735991][ T8431] ? apparmor_capable+0x12c/0x190 [ 245.741022][ T8431] ? bpf_lsm_capable+0x5/0x10 [ 245.745704][ T8431] ? security_capable+0x85/0xb0 [ 245.750552][ T8431] vfs_get_tree+0x88/0x270 [ 245.754978][ T8431] do_new_mount+0x247/0xa40 [ 245.759482][ T8431] __se_sys_mount+0x2e3/0x3d0 [ 245.764207][ T8431] ? __x64_sys_mount+0xc0/0xc0 [ 245.768993][ T8431] ? lockdep_hardirqs_on+0x94/0x140 [ 245.774213][ T8431] ? __x64_sys_mount+0x1c/0xc0 [ 245.778994][ T8431] do_syscall_64+0x4c/0xa0 [ 245.783405][ T8431] ? clear_bhb_loop+0x60/0xb0 [ 245.788079][ T8431] ? clear_bhb_loop+0x60/0xb0 [ 245.792752][ T8431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.798646][ T8431] RIP: 0033:0x7f6daa19e159 [ 245.803054][ T8431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.822661][ T8431] RSP: 002b:00007f6dab122028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 245.831070][ T8431] RAX: ffffffffffffffda RBX: 00007f6daa425fa0 RCX: 00007f6daa19e159 [ 245.839035][ T8431] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 245.847009][ T8431] RBP: 00007f6daa23506b R08: 0000000000000000 R09: 0000000000000000 [ 245.854980][ T8431] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 245.862944][ T8431] R13: 00007f6daa426038 R14: 00007f6daa425fa0 R15: 00007ffcb3fb5618 [ 245.870928][ T8431] [ 246.595819][ T8460] loop5: detected capacity change from 0 to 128 [ 246.619924][ T8460] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 246.689401][ T8460] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 247.498538][ T8475] loop6: detected capacity change from 0 to 2048 [ 247.547463][ T8475] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.934032][ T8487] loop4: detected capacity change from 0 to 1024 [ 247.992228][ T8487] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.091596][ T8487] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 248.110032][ T26] audit: type=1804 audit(1790403931.394:24): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1185" name="/newroot/265/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 248.196285][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 248.398389][ T8501] loop6: detected capacity change from 0 to 512 [ 248.424872][ T8501] EXT4-fs: Ignoring removed orlov option [ 248.461222][ T8501] ext4: Bad value for 'mb_optimize_scan' [ 249.106274][ T8519] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1193'. [ 249.136342][ T8519] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1193'. [ 249.158089][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 249.580118][ T26] audit: type=1800 audit(1790403932.864:25): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1176" name="file1" dev="loop5" ino=94 res=0 errno=0 [ 249.698629][ T4274] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 249.897080][ T4274] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 249.916631][ T4274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.938656][ T4274] usb 5-1: Product: syz [ 249.942883][ T4274] usb 5-1: Manufacturer: syz [ 249.958910][ T4274] usb 5-1: SerialNumber: syz [ 249.979267][ T4274] usb 5-1: config 0 descriptor?? [ 250.014391][ T8549] netlink: 'syz.3.1202': attribute type 3 has an invalid length. [ 250.210641][ T4274] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 016 [ 250.407347][ T8562] loop6: detected capacity change from 0 to 1024 [ 250.503861][ T4314] hfsplus: b-tree write err: -5, ino 25 [ 250.511297][ T4314] hfsplus: b-tree write err: -5, ino 4 [ 250.546056][ T8570] hfsplus: request for non-existent node 33423360 in B*Tree [ 250.563658][ T8570] hfsplus: request for non-existent node 33423360 in B*Tree [ 250.603859][ T4314] hfsplus: b-tree write err: -5, ino 2 [ 251.041260][ T8580] i2c i2c-1: failure reading status [ 251.053889][ T4317] usb 5-1: USB disconnect, device number 16 [ 251.230213][ T8595] loop6: detected capacity change from 0 to 512 [ 251.302259][ T8595] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 251.333518][ T8595] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.621330][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1214'. [ 251.661129][ T8610] netlink: 'syz.5.1214': attribute type 14 has an invalid length. [ 251.665897][ T8608] fuse: root generation should be zero [ 251.679622][ T6621] EXT4-fs (loop6): unmounting filesystem. [ 251.700065][ T8610] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.709815][ T8610] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.718805][ T8610] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.727678][ T8610] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.747584][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1214'. [ 251.766906][ T8610] netlink: 'syz.5.1214': attribute type 14 has an invalid length. [ 252.112768][ T4317] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 252.161572][ T4317] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 252.576904][ T4284] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 252.585984][ T4284] Bluetooth: hci2: Injecting HCI hardware error event [ 252.598080][ T4288] Bluetooth: hci2: hardware error 0x00 [ 252.791522][ T8653] FAULT_INJECTION: forcing a failure. [ 252.791522][ T8653] name failslab, interval 1, probability 0, space 0, times 0 [ 252.862392][ T8653] CPU: 1 PID: 8653 Comm: syz.6.1228 Not tainted syzkaller #0 [ 252.871772][ T8653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.889434][ T8653] Call Trace: [ 252.893341][ T8653] [ 252.897024][ T8653] dump_stack_lvl+0x188/0x24e [ 252.901921][ T8653] ? show_regs_print_info+0x12/0x12 [ 252.907171][ T8653] ? load_image+0x410/0x410 [ 252.911728][ T8653] ? __might_sleep+0xd0/0xd0 [ 252.916532][ T8653] ? __lock_acquire+0x7c40/0x7c40 [ 252.922146][ T8653] should_fail_ex+0x390/0x4c0 [ 252.926994][ T8653] should_failslab+0x5/0x20 [ 252.931625][ T8653] slab_pre_alloc_hook+0x59/0x300 [ 252.936691][ T8653] ? nla_strdup+0x94/0x130 [ 252.941179][ T8653] __kmem_cache_alloc_node+0x4f/0x270 [ 252.946702][ T8653] ? nla_strdup+0x94/0x130 [ 252.951167][ T8653] __kmalloc+0xa3/0x240 [ 252.955377][ T8653] nla_strdup+0x94/0x130 [ 252.959679][ T8653] nf_tables_newtable+0x42f/0x16c0 [ 252.964863][ T8653] nfnetlink_rcv+0x1119/0x2470 [ 252.969789][ T8653] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 252.975428][ T8653] ? ref_tracker_free+0x682/0x830 [ 252.980512][ T8653] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.985753][ T8653] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 252.991303][ T8653] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.996558][ T8653] netlink_unicast+0x7ad/0x920 [ 253.001358][ T8653] netlink_sendmsg+0x8ad/0xbd0 [ 253.006155][ T8653] ? netlink_getsockopt+0x550/0x550 [ 253.011409][ T8653] ? apparmor_socket_sendmsg+0x8a/0x330 [ 253.017053][ T8653] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 253.022391][ T8653] ? security_socket_sendmsg+0x7c/0xa0 [ 253.027898][ T8653] ? netlink_getsockopt+0x550/0x550 [ 253.033132][ T8653] ____sys_sendmsg+0x5ed/0x9a0 [ 253.037938][ T8653] ? __sys_sendmsg_sock+0x30/0x30 [ 253.042997][ T8653] ? __import_iovec+0x306/0x510 [ 253.047905][ T8653] ? import_iovec+0x6f/0xa0 [ 253.052617][ T8653] ___sys_sendmsg+0x2a2/0x360 [ 253.057325][ T8653] ? __sys_sendmsg+0x2a0/0x2a0 [ 253.062174][ T8653] __se_sys_sendmsg+0x1c3/0x2b0 [ 253.067070][ T8653] ? __x64_sys_sendmsg+0x80/0x80 [ 253.072055][ T8653] ? lockdep_hardirqs_on+0x94/0x140 [ 253.077287][ T8653] do_syscall_64+0x4c/0xa0 [ 253.081746][ T8653] ? clear_bhb_loop+0x60/0xb0 [ 253.086454][ T8653] ? clear_bhb_loop+0x60/0xb0 [ 253.091171][ T8653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.097196][ T8653] RIP: 0033:0x7fdb6199e159 [ 253.101637][ T8653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.121273][ T8653] RSP: 002b:00007fdb6279d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.129808][ T8653] RAX: ffffffffffffffda RBX: 00007fdb61c25fa0 RCX: 00007fdb6199e159 [ 253.137936][ T8653] RDX: 000000000000c860 RSI: 0000200000007dc0 RDI: 0000000000000004 [ 253.145943][ T8653] RBP: 00007fdb61a3506b R08: 0000000000000000 R09: 0000000000000000 [ 253.153947][ T8653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.161994][ T8653] R13: 00007fdb61c26038 R14: 00007fdb61c25fa0 R15: 00007ffff09dc6b8 [ 253.170018][ T8653] [ 253.359807][ T8664] loop5: detected capacity change from 0 to 128 [ 253.387089][ T8664] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 253.425425][ T8664] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.856389][ T8676] loop7: detected capacity change from 0 to 1024 [ 254.254149][ T8684] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1235'. [ 254.643459][ T4288] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 254.653607][ T8694] netlink: 'syz.7.1240': attribute type 4 has an invalid length. [ 254.700447][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1240'. [ 254.910040][ T8667] loop4: detected capacity change from 0 to 40427 [ 254.983842][ T8667] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 255.001412][ T8707] netlink: 'syz.5.1243': attribute type 1 has an invalid length. [ 255.023589][ T8667] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 255.124980][ T8667] F2FS-fs (loop4): invalid crc value [ 255.215997][ T8667] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 255.233863][ T8707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.240702][ T4317] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 255.283124][ T8713] bond1: (slave geneve2): making interface the new active one [ 255.302265][ T8713] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 255.342008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 255.433444][ T4317] usb 7-1: Using ep0 maxpacket: 8 [ 255.440457][ T4317] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 255.461228][ T4317] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 255.461625][ T8667] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 255.498655][ T4317] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 255.524763][ T8667] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 255.539369][ T4317] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 255.575296][ T4317] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.643791][ T4317] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 255.680283][ T4317] usb 7-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 255.693652][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.693716][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.753347][ T4317] usb 7-1: Product: syz [ 255.762499][ T4283] syz-executor: attempt to access beyond end of device [ 255.762499][ T4283] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 256.000660][ T4317] usb 7-1: usb_control_msg returned -32 [ 256.007058][ T4317] usbtmc 7-1:16.0: can't read capabilities [ 256.572673][ T4319] usb 7-1: USB disconnect, device number 8 [ 256.885975][ T8758] ubi0: attaching mtd0 [ 256.907474][ T8758] ubi0: scanning is finished [ 256.912404][ T8758] ubi0: empty MTD device detected [ 257.121146][ T8758] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 257.129142][ T8758] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 257.137635][ T8758] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 257.145050][ T8758] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 257.152605][ T8758] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 257.159783][ T8758] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 257.168296][ T8758] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3996159627 [ 257.178665][ T8758] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 257.191366][ T8764] ubi0: background thread "ubi_bgt0d" started, PID 8764 [ 257.532637][ T8772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1255'. [ 257.835748][ T8778] loop5: detected capacity change from 0 to 512 [ 257.857171][ T8780] netlink: 'syz.4.1258': attribute type 1 has an invalid length. [ 257.865279][ T8778] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 257.897214][ T8778] EXT4-fs (loop5): 1 truncate cleaned up [ 257.916424][ T8778] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 257.933637][ T8780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.004110][ T8784] bond1: (slave geneve2): making interface the new active one [ 258.050368][ T8784] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 258.072762][ T4934] EXT4-fs (loop5): unmounting filesystem. [ 258.123676][ T5296] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 258.510280][ T8798] gadgetfs: bound to dummy_udc driver [ 258.522660][ T8791] loop3: detected capacity change from 0 to 32768 [ 258.547422][ T8791] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 258.557310][ T8791] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 258.612282][ T8791] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 258.639616][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 258.657472][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 258.737607][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 80ms [ 258.741999][ T8803] loop7: detected capacity change from 0 to 1024 [ 258.768755][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 258.778553][ T8791] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 258.793392][ T4317] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 258.801442][ C1] gadgetfs: connected [ 258.808353][ T8797] gadgetfs: suspended from state 3 [ 258.815210][ T8797] gadgetfs: disconnected [ 258.831472][ T8791] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 258.831472][ T8791] inode = 0 2340 [ 258.831472][ T8791] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 409 [ 258.850238][ T8791] gfs2: fsid=syz:syz.0: G: s:SH n:2/924 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 258.859972][ T8791] gfs2: fsid=syz:syz.0: H: s:SH f:AH e:0 p:8791 [syz.3.1260] inode_permission+0x239/0x480 [ 258.870366][ T8791] gfs2: fsid=syz:syz.0: I: n:0/2340 t:4 f:0x00 d:0x00000000 s:0 p:0 [ 258.878744][ T8791] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 258.886558][ T8791] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 258.895704][ T8791] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 258.902563][ T8791] gfs2: fsid=syz:syz.0: File system withdrawn [ 258.908990][ T8791] CPU: 0 PID: 8791 Comm: syz.3.1260 Not tainted syzkaller #0 [ 258.916486][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.926567][ T8791] Call Trace: [ 258.929852][ T8791] [ 258.932780][ T8791] dump_stack_lvl+0x188/0x24e [ 258.937649][ T8791] ? show_regs_print_info+0x12/0x12 [ 258.943064][ T8791] ? load_image+0x410/0x410 [ 258.947592][ T8791] ? kobject_uevent_env+0x364/0x890 [ 258.952802][ T8791] gfs2_withdraw+0xc69/0x1450 [ 258.957488][ T8791] ? gfs2_lm+0x240/0x240 [ 258.961734][ T8791] ? gfs2_consist_inode_i+0xf1/0x110 [ 258.967116][ T8791] gfs2_inode_refresh+0xb2d/0x1190 [ 258.972404][ T8791] ? gfs2_inode_metasync+0xf0/0xf0 [ 258.978174][ T8791] ? gfs2_glock_nq+0xcee/0x14d0 [ 258.983290][ T8791] gfs2_instantiate+0x15e/0x210 [ 258.988146][ T8791] gfs2_glock_wait+0x1d0/0x2a0 [ 258.992938][ T8791] gfs2_permission+0x2e1/0x4e0 [ 258.997716][ T8791] ? gfs2_lookupi+0x660/0x660 [ 259.002394][ T8791] ? inode_permission+0x239/0x480 [ 259.007416][ T8791] ? do_raw_spin_unlock+0x11d/0x230 [ 259.012674][ T8791] ? gfs2_lookupi+0x660/0x660 [ 259.017554][ T8791] inode_permission+0x239/0x480 [ 259.022467][ T8791] may_open+0x262/0x400 [ 259.026642][ T8791] path_openat+0x251a/0x2f10 [ 259.031280][ T8791] ? verify_lock_unused+0x140/0x140 [ 259.036520][ T8791] ? do_sys_openat2+0xdd/0x4f0 [ 259.041508][ T8791] ? do_filp_open+0x420/0x420 [ 259.046234][ T8791] do_filp_open+0x1ee/0x420 [ 259.050837][ T8791] ? vfs_tmpfile+0x470/0x470 [ 259.055455][ T8791] ? _raw_spin_unlock+0x24/0x40 [ 259.060311][ T8791] ? alloc_fd+0x590/0x640 [ 259.064743][ T8791] do_sys_openat2+0x14b/0x4f0 [ 259.069591][ T8791] ? __kmem_cache_free+0xb6/0x200 [ 259.074795][ T8791] ? do_sys_open+0xe0/0xe0 [ 259.079305][ T8791] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 259.085282][ T8791] ? lock_chain_count+0x20/0x20 [ 259.090138][ T8791] __x64_sys_openat+0x135/0x160 [ 259.095017][ T8791] do_syscall_64+0x4c/0xa0 [ 259.099517][ T8791] ? clear_bhb_loop+0x60/0xb0 [ 259.104273][ T8791] ? clear_bhb_loop+0x60/0xb0 [ 259.108964][ T8791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.114855][ T8791] RIP: 0033:0x7f6daa15e98e [ 259.119350][ T8791] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 259.139247][ T8791] RSP: 002b:00007f6dab121da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 259.147668][ T8791] RAX: ffffffffffffffda RBX: 00007f6dab1226c0 RCX: 00007f6daa15e98e [ 259.155671][ T8791] RDX: 0000000000010000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 259.163742][ T8791] RBP: 0000200000000040 R08: 0000000000000000 R09: 0000000000000000 [ 259.171736][ T8791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240 [ 259.179733][ T8791] R13: 00007f6dab121ea0 R14: 00000000000125b6 R15: 0000200000000000 [ 259.187738][ T8791] [ 259.208677][ T8803] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 259.256821][ T8803] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 259.284613][ T8803] EXT4-fs (loop7): orphan cleanup on readonly fs [ 259.338888][ T8803] EXT4-fs error (device loop7): ext4_free_blocks:6220: comm syz.7.1263: Freeing blocks not in datazone - block = 0, count = 4096 [ 259.473513][ T8803] EXT4-fs (loop7): 1 orphan inode deleted [ 259.479331][ T8803] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 259.667502][ T8803] EXT4-fs error (device loop7): ext4_get_group_desc:277: comm syz.7.1263: block_group >= groups_count - block_group = 1, groups_count = 1 [ 259.857279][ T8803] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4643: inode #40: comm syz.7.1263: unable to read itable block [ 260.095231][ T7310] EXT4-fs (loop7): unmounting filesystem. [ 260.199450][ T8839] fuse: Bad value for 'fd' [ 260.390153][ T8816] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1265'. [ 260.450269][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.460199][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.837157][ T8861] overlayfs: failed to clone upperpath [ 260.964903][ T4274] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 261.165545][ T4274] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 261.182914][ T8859] loop6: detected capacity change from 0 to 32768 [ 261.194810][ T4274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.214197][ T4274] usb 5-1: Product: syz [ 261.217163][ T8859] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1279 (8859) [ 261.218422][ T4274] usb 5-1: Manufacturer: syz [ 261.255299][ T4274] usb 5-1: SerialNumber: syz [ 261.279847][ T4274] usb 5-1: config 0 descriptor?? [ 261.297753][ T4274] hub 5-1:0.0: bad descriptor, ignoring hub [ 261.303311][ T8859] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 261.320214][ T8859] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 261.330260][ T4274] hub: probe of 5-1:0.0 failed with error -5 [ 261.333053][ T8859] BTRFS info (device loop6): force zlib compression, level 3 [ 261.355431][ T8859] BTRFS info (device loop6): setting nodatasum [ 261.364423][ T8859] BTRFS info (device loop6): using free space tree [ 261.501724][ T4274] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 261.512537][ T4274] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 261.523415][ T4274] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 261.531921][ T4274] usb 5-1: media controller created [ 261.549421][ T4274] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.680797][ T8859] BTRFS info (device loop6): enabling ssd optimizations [ 261.731784][ T8892] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1286'. [ 261.849499][ T4274] DVB: Unable to find symbol dib7000p_attach() [ 261.871901][ T4274] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 261.989884][ T6621] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 262.063304][ T4274] rc_core: IR keymap rc-dib0700-rc5 not found [ 262.070750][ T4274] Registered IR keymap rc-empty [ 262.091070][ T4274] dvb-usb: could not initialize remote control. [ 262.097837][ T4274] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 262.152310][ T4274] usb 5-1: USB disconnect, device number 17 [ 262.319070][ T4274] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 262.968623][ T8925] kvm [8924]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xc0010006c0010005 [ 262.984130][ T8925] kvm [8924]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x4b564d0100000011 [ 263.840579][ T8961] FAULT_INJECTION: forcing a failure. [ 263.840579][ T8961] name failslab, interval 1, probability 0, space 0, times 0 [ 263.892152][ T8961] CPU: 1 PID: 8961 Comm: syz.6.1308 Not tainted syzkaller #0 [ 263.899607][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.909688][ T8961] Call Trace: [ 263.912982][ T8961] [ 263.916012][ T8961] dump_stack_lvl+0x188/0x24e [ 263.920716][ T8961] ? show_regs_print_info+0x12/0x12 [ 263.925920][ T8961] ? load_image+0x410/0x410 [ 263.930435][ T8961] ? __might_sleep+0xd0/0xd0 [ 263.935057][ T8961] ? __lock_acquire+0x7c40/0x7c40 [ 263.940121][ T8961] should_fail_ex+0x390/0x4c0 [ 263.945367][ T8961] should_failslab+0x5/0x20 [ 263.949901][ T8961] slab_pre_alloc_hook+0x59/0x300 [ 263.954967][ T8961] ? __kasan_slab_alloc+0x6b/0x80 [ 263.957495][ T8965] syz.4.1309 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 263.960011][ T8961] kmem_cache_alloc_node+0x5a/0x310 [ 263.960042][ T8961] ? __alloc_skb+0xf9/0x7d0 [ 263.960062][ T8961] __alloc_skb+0xf9/0x7d0 [ 263.960081][ T8961] audit_log_start+0x15a/0x890 [ 263.960111][ T8961] ? audit_serial+0x30/0x30 [ 263.960130][ T8961] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 263.960156][ T8961] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 264.006775][ T8961] audit_seccomp+0x5f/0x180 [ 264.011307][ T8961] __secure_computing+0x228/0x2f0 [ 264.016350][ T8961] syscall_trace_enter+0xab/0x150 [ 264.021386][ T8961] do_syscall_64+0x24/0xa0 [ 264.025819][ T8961] ? clear_bhb_loop+0x60/0xb0 [ 264.030517][ T8961] ? clear_bhb_loop+0x60/0xb0 [ 264.035212][ T8961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.041117][ T8961] RIP: 0033:0x7fdb6199e159 [ 264.045537][ T8961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.065161][ T8961] RSP: 002b:00007fdb6279c9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 264.073589][ T8961] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007fdb6199e159 [ 264.081605][ T8961] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 264.089747][ T8961] RBP: 00007fdb6279d030 R08: 0000000000000000 R09: 000000000000000b [ 264.097738][ T8961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 264.105734][ T8961] R13: 00007fdb61c26038 R14: 00007ffff09e4080 R15: 000000000000c64a [ 264.113755][ T8961] [ 264.116799][ T8965] CPU: 0 PID: 8965 Comm: syz.4.1309 Not tainted syzkaller #0 [ 264.124382][ T8965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.134726][ T8965] Call Trace: [ 264.138008][ T8965] [ 264.141109][ T8965] dump_stack_lvl+0x188/0x24e [ 264.145801][ T8965] ? show_regs_print_info+0x12/0x12 [ 264.150997][ T8965] ? load_image+0x410/0x410 [ 264.155529][ T8965] dump_header+0xd8/0x820 [ 264.159864][ T8965] out_of_memory+0xe9a/0x1220 [ 264.164546][ T8965] ? mutex_lock_nested+0x10/0x10 [ 264.169481][ T8965] ? unregister_oom_notifier+0x20/0x20 [ 264.174941][ T8965] mem_cgroup_out_of_memory+0x2c0/0x390 [ 264.180520][ T8965] ? mem_cgroup_oom_trylock+0x210/0x210 [ 264.186107][ T8965] ? do_raw_spin_unlock+0x11d/0x230 [ 264.191322][ T8965] try_charge_memcg+0xc9d/0x17c0 [ 264.196281][ T8965] ? percpu_ref_put+0x180/0x180 [ 264.201150][ T8965] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 264.206888][ T8965] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 264.212873][ T8965] ? percpu_ref_tryget+0x15/0x180 [ 264.217896][ T8965] ? percpu_ref_tryget+0x15/0x180 [ 264.222941][ T8965] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 264.228662][ T8965] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 264.234388][ T8965] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 264.240200][ T8965] obj_cgroup_charge+0x36a/0x620 [ 264.245140][ T8965] ? obj_cgroup_charge+0xe9/0x620 [ 264.250161][ T8965] ? mod_objcg_mlstate+0x320/0x320 [ 264.255267][ T8965] ? percpu_ref_tryget+0x15/0x180 [ 264.260293][ T8965] ? get_obj_cgroup_from_current+0xd0/0x280 [ 264.266190][ T8965] ? get_obj_cgroup_from_current+0xd0/0x280 [ 264.272083][ T8965] ? __bitmap_weight+0xa8/0xf0 [ 264.276872][ T8965] pcpu_alloc+0x21c/0x16b0 [ 264.281319][ T8965] mem_cgroup_css_alloc+0x255/0x13b0 [ 264.286616][ T8965] cgroup_apply_control_enable+0x3cc/0xb00 [ 264.292428][ T8965] cgroup_mkdir+0xc7f/0xe70 [ 264.296934][ T8965] ? css_task_iter_end+0x280/0x280 [ 264.302054][ T8965] ? kernfs_iop_permission+0x26d/0x350 [ 264.307513][ T8965] ? css_task_iter_end+0x280/0x280 [ 264.312618][ T8965] kernfs_iop_mkdir+0x23d/0x3d0 [ 264.317470][ T8965] vfs_mkdir+0x386/0x570 [ 264.321720][ T8965] do_mkdirat+0x1d8/0x440 [ 264.326086][ T8965] ? vfs_mkdir+0x570/0x570 [ 264.330521][ T8965] __x64_sys_mkdirat+0x85/0x90 [ 264.335280][ T8965] do_syscall_64+0x4c/0xa0 [ 264.339689][ T8965] ? clear_bhb_loop+0x60/0xb0 [ 264.344372][ T8965] ? clear_bhb_loop+0x60/0xb0 [ 264.349039][ T8965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.354933][ T8965] RIP: 0033:0x7f968d59e159 [ 264.359342][ T8965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.379207][ T8965] RSP: 002b:00007f968e4a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 264.387707][ T8965] RAX: ffffffffffffffda RBX: 00007f968d825fa0 RCX: 00007f968d59e159 [ 264.395692][ T8965] RDX: 0000000000000020 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 264.403658][ T8965] RBP: 00007f968d63506b R08: 0000000000000000 R09: 0000000000000000 [ 264.411796][ T8965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.419764][ T8965] R13: 00007f968d826038 R14: 00007f968d825fa0 R15: 00007fff4973f018 [ 264.427775][ T8965] [ 264.438176][ T8961] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 264.450476][ T8961] audit: out of memory in audit_log_start [ 264.458027][ T8965] memory: usage 0kB, limit 0kB, failcnt 19 [ 264.464542][ T8965] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 264.472415][ T8965] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 264.482750][ T8965] Memory cgroup stats for /syz4/test: [ 264.491190][ T8965] anon 0 [ 264.491190][ T8965] file 0 [ 264.491190][ T8965] kernel 0 [ 264.491190][ T8965] kernel_stack 0 [ 264.491190][ T8965] pagetables 0 [ 264.491190][ T8965] sec_pagetables 0 [ 264.491190][ T8965] percpu 0 [ 264.491190][ T8965] sock 0 [ 264.491190][ T8965] vmalloc 0 [ 264.491190][ T8965] shmem 0 [ 264.491190][ T8965] zswap 0 [ 264.491190][ T8965] zswapped 0 [ 264.491190][ T8965] file_mapped 0 [ 264.491190][ T8965] file_dirty 0 [ 264.491190][ T8965] file_writeback 0 [ 264.491190][ T8965] swapcached 0 [ 264.491190][ T8965] anon_thp 0 [ 264.491190][ T8965] file_thp 0 [ 264.491190][ T8965] shmem_thp 0 [ 264.491190][ T8965] inactive_anon 0 [ 264.491190][ T8965] active_anon 0 [ 264.491190][ T8965] inactive_file 0 [ 264.491190][ T8965] active_file 0 [ 264.491190][ T8965] unevictable 0 [ 264.491190][ T8965] slab_reclaimable 0 [ 264.491190][ T8965] slab_unreclaimable 0 [ 264.491190][ T8965] slab 0 [ 264.491190][ T8965] workingset_refault_anon 0 [ 264.606597][ T8965] Out of memory and no killable processes... [ 265.128132][ T8984] input: syz1 as /devices/virtual/input/input30 [ 265.269088][ T8990] loop5: detected capacity change from 0 to 512 [ 265.352743][ T8990] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1319: missing EA_INODE flag [ 265.401935][ T8990] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1319: error while reading EA inode 12 err=-117 [ 265.459363][ T8990] EXT4-fs (loop5): 1 orphan inode deleted [ 265.485365][ T8990] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 265.506407][ T8997] loop6: detected capacity change from 0 to 2048 [ 265.620599][ T8997] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.651008][ T4934] EXT4-fs (loop5): unmounting filesystem. [ 266.323633][ T9024] netlink: 121 bytes leftover after parsing attributes in process `syz.6.1328'. [ 266.408055][ T9026] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 266.515152][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'. [ 266.998427][ T9043] loop5: detected capacity change from 0 to 512 [ 267.084935][ T9043] EXT4-fs error (device loop5): __ext4_iget:5102: inode #11: block 1: comm syz.5.1334: invalid block [ 267.187949][ T9043] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1334: couldn't read orphan inode 11 (err -117) [ 267.244787][ T9043] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 267.406829][ T9055] loop4: detected capacity change from 0 to 512 [ 267.436973][ T9055] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 267.493447][ T9055] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1339: corrupted in-inode xattr [ 267.598265][ T9055] EXT4-fs (loop4): Remounting filesystem read-only [ 267.643577][ T9055] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1339: couldn't read orphan inode 15 (err -117) [ 267.719043][ T9055] EXT4-fs (loop4): Remounting filesystem read-only [ 267.740796][ T9055] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 267.809558][ T4934] EXT4-fs (loop5): unmounting filesystem. [ 267.931214][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 268.191334][ T9069] loop4: detected capacity change from 0 to 4096 [ 268.775805][ T26] audit: type=1326 audit(1790403952.064:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6574b9e159 code=0x7ffc0000 [ 268.845904][ T26] audit: type=1326 audit(1790403952.064:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6574b9e159 code=0x7ffc0000 [ 268.971624][ T26] audit: type=1326 audit(1790403952.114:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6574b9e159 code=0x7ffc0000 [ 269.060435][ T26] audit: type=1326 audit(1790403952.114:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6574b9e159 code=0x7ffc0000 [ 269.153871][ T26] audit: type=1326 audit(1790403952.114:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6574b9e159 code=0x7ffc0000 [ 269.242490][ T26] audit: type=1326 audit(1790403952.114:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6574b9e159 code=0x7ffc0000 [ 269.288173][ T26] audit: type=1326 audit(1790403952.114:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6574b9e159 code=0x7ffc0000 [ 269.336007][ T26] audit: type=1326 audit(1790403952.114:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6574b9e159 code=0x7ffc0000 [ 269.445303][ T26] kauditd_printk_skb: 88 callbacks suppressed [ 269.445316][ T26] audit: type=1326 audit(1790403952.734:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6574b5e98e code=0x7ffc0000 [ 269.524516][ T26] audit: type=1326 audit(1790403952.764:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6574b5e98e code=0x7ffc0000 [ 269.604710][ T26] audit: type=1326 audit(1790403952.764:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6574b5e98e code=0x7ffc0000 [ 269.682281][ T26] audit: type=1326 audit(1790403952.764:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6574b5e98e code=0x7ffc0000 [ 269.761243][ T26] audit: type=1326 audit(1790403952.764:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6574b5e98e code=0x7ffc0000 [ 269.825973][ T26] audit: type=1326 audit(1790403952.764:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6574b5e98e code=0x7ffc0000 [ 269.894617][ T26] audit: type=1326 audit(1790403952.774:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6574b5e98e code=0x7ffc0000 [ 269.920494][ T26] audit: type=1326 audit(1790403952.774:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6574b5e98e code=0x7ffc0000 [ 269.976745][ T26] audit: type=1326 audit(1790403952.774:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6574b5e98e code=0x7ffc0000 [ 270.054295][ T26] audit: type=1326 audit(1790403952.774:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.7.1351" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6574b5e98e code=0x7ffc0000 [ 270.608554][ T9121] loop4: detected capacity change from 0 to 32768 [ 270.724058][ T9121] loop4: p1 p3 < > [ 271.216854][ T9128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.279156][ T4348] udevd[4348]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 271.296608][ T4370] udevd[4370]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 272.554901][ T4288] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 273.133506][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 274.132996][ T9220] loop5: detected capacity change from 0 to 32768 [ 274.143117][ T9220] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1385 (9220) [ 274.173168][ T9220] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 274.210499][ T9220] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 274.242580][ T9220] BTRFS info (device loop5): setting nodatasum [ 274.269175][ T9220] BTRFS info (device loop5): using free space tree [ 274.448371][ T9220] BTRFS info (device loop5): enabling ssd optimizations [ 274.766958][ T9220] loop5: detected capacity change from 32768 to 0 [ 274.811957][ T9240] loop4: detected capacity change from 0 to 32768 [ 274.836722][ T9240] (syz.4.1388,9240,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 274.887546][ T9240] (syz.4.1388,9240,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 274.939901][ T9242] syz.5.1385: attempt to access beyond end of device [ 274.939901][ T9242] loop5: rw=6145, sector=10608, nr_sectors = 8 limit=0 [ 274.951702][ T9240] JBD2: Ignoring recovery information on journal [ 274.968309][ T9242] BTRFS error (device loop5): bdev /dev/loop5 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 275.024522][ T9242] syz.5.1385: attempt to access beyond end of device [ 275.024522][ T9242] loop5: rw=6145, sector=10600, nr_sectors = 8 limit=0 [ 275.038419][ T9242] BTRFS error (device loop5): bdev /dev/loop5 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 275.056063][ T9240] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 275.076843][ T9242] BTRFS: error (device loop5: state AL) in free_log_tree:3267: errno=-5 IO failure [ 275.171450][ T9242] BTRFS info (device loop5: state EAL): forced readonly [ 275.187778][ T26] kauditd_printk_skb: 208 callbacks suppressed [ 275.187792][ T26] audit: type=1326 audit(1790404214.476:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9255 comm="syz.3.1391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6daa19e159 code=0x0 [ 275.222085][ T9242] BTRFS: error (device loop5: state EAL) in free_log_tree:3267: errno=-5 IO failure [ 275.236094][ T9242] BTRFS warning (device loop5: state EAL): Skipping commit of aborted transaction. [ 275.248513][ T9242] BTRFS: error (device loop5: state EAL) in cleanup_transaction:2013: errno=-5 IO failure [ 275.335867][ T26] audit: type=1800 audit(1790404214.596:341): pid=9240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1388" name="file1" dev="loop4" ino=16978 res=0 errno=0 [ 275.449470][ T4934] BTRFS info (device loop5: state EAL): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 275.937465][ T4283] ocfs2: Unmounting device (7,4) on (node local) [ 276.164052][ T9264] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 276.171410][ T9264] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 276.281767][ T9264] vhci_hcd vhci_hcd.0: Device attached [ 276.318523][ T9272] netlink: 'syz.5.1393': attribute type 1 has an invalid length. [ 276.362671][ T9272] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1393'. [ 276.395252][ T9273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1396'. [ 276.473553][ T4538] vhci_hcd: vhci_device speed not set [ 276.564927][ T4538] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 276.584793][ T9268] vhci_hcd: sendmsg failed!, ret=-107 for 48 [ 276.606423][ T46] vhci_hcd: stop threads [ 276.610884][ T46] vhci_hcd: release socket [ 276.650488][ T46] vhci_hcd: disconnect device [ 277.545254][ T9293] loop4: detected capacity change from 0 to 1024 [ 277.573000][ T9293] EXT4-fs: Ignoring removed bh option [ 277.799814][ T9293] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 277.857241][ T9293] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 277.940294][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 279.220528][ T9326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1412'. [ 279.304447][ T9330] loop7: detected capacity change from 0 to 128 [ 279.467280][ T7310] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 279.503877][ T7310] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 279.796031][ T9339] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1416'. [ 280.178482][ T5296] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.327911][ T5296] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.591337][ T5296] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.819539][ T5296] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.289085][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.304271][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.315593][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.323822][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.333393][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.340712][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.479094][ T9369] loop5: detected capacity change from 0 to 16 [ 281.547602][ T9369] erofs: (device loop5): mounted with root inode @ nid 36. [ 281.783416][ T4538] vhci_hcd: vhci_device speed not set [ 282.082854][ T9385] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1429'. [ 282.316987][ T9364] chnl_net:caif_netlink_parms(): no params data found [ 282.455651][ T4689] libceph: connect (1)[c::]:6789 error -101 [ 282.477541][ T4689] libceph: mon0 (1)[c::]:6789 connect error [ 282.531532][ T9391] ceph: No mds server is up or the cluster is laggy [ 282.590756][ T9398] loop4: detected capacity change from 0 to 2048 [ 282.598309][ T6621] tipc: Resetting bearer [ 282.771957][ T6621] tipc: Disabling bearer [ 282.797489][ T4689] libceph: connect (1)[c::]:6789 error -101 [ 282.841939][ T4689] libceph: mon0 (1)[c::]:6789 connect error [ 282.890240][ T9398] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 283.204252][ T9416] EXT4-fs error (device loop4) in ext4_setattr:5695: Corrupt filesystem [ 283.281289][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.302687][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.313403][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.322136][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.333789][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 283.341224][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.405023][ T9364] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.414649][ T9364] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.439769][ T9364] device bridge_slave_0 entered promiscuous mode [ 283.446706][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 283.548630][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 283.650405][ T9364] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.664141][ T9364] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.682152][ T9364] device bridge_slave_1 entered promiscuous mode [ 283.820355][ T9364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.870296][ T9364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.070915][ T9364] team0: Port device team_slave_0 added [ 284.220679][ T9364] team0: Port device team_slave_1 added [ 284.254569][ T9447] FAULT_INJECTION: forcing a failure. [ 284.254569][ T9447] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 284.286740][ T9364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.323779][ T9447] CPU: 0 PID: 9447 Comm: syz.4.1446 Not tainted syzkaller #0 [ 284.331251][ T9447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.334683][ T9364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.341549][ T9447] Call Trace: [ 284.341561][ T9447] [ 284.369381][ T9364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.371649][ T9447] dump_stack_lvl+0x188/0x24e [ 284.389860][ T9447] ? show_regs_print_info+0x12/0x12 [ 284.395093][ T9447] ? load_image+0x410/0x410 [ 284.399633][ T9447] ? __lock_acquire+0x7c40/0x7c40 [ 284.404716][ T9447] should_fail_ex+0x390/0x4c0 [ 284.409437][ T9447] prepare_alloc_pages+0x1e1/0x5b0 [ 284.414832][ T9447] __alloc_pages+0x130/0x4f0 [ 284.419425][ T9447] ? zone_statistics+0x170/0x170 [ 284.424367][ T9447] ? bio_init+0x15c/0x2d0 [ 284.428692][ T9447] blk_rq_map_user_iov+0x1172/0x23a0 [ 284.433984][ T9447] ? blk_rq_append_bio+0x510/0x510 [ 284.439092][ T9447] ? mark_lock+0x94/0x320 [ 284.443428][ T9447] ? __lock_acquire+0x1465/0x7c40 [ 284.448472][ T9447] ? verify_lock_unused+0x140/0x140 [ 284.453670][ T9447] ? verify_lock_unused+0x140/0x140 [ 284.458865][ T9447] ? import_single_range+0x121/0x300 [ 284.464151][ T9447] blk_rq_map_user_io+0x2cd/0x460 [ 284.469178][ T9447] ? blk_rq_map_user+0x1e0/0x1e0 [ 284.474126][ T9447] ? aa_get_newest_label+0xf9/0x5b0 [ 284.479320][ T9447] ? end_current_label_crit_section+0x170/0x170 [ 284.485584][ T9447] ? __might_fault+0xa6/0x120 [ 284.490261][ T9447] ? apparmor_capable+0x12c/0x190 [ 284.495299][ T9447] ? bpf_lsm_capable+0x5/0x10 [ 284.499985][ T9447] sg_io+0x528/0x8a0 [ 284.503887][ T9447] scsi_ioctl+0x12be/0x1df0 [ 284.508398][ T9447] ? get_sg_io_hdr+0x850/0x850 [ 284.513171][ T9447] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 284.519265][ T9447] ? tomoyo_path_number_perm+0x205/0x650 [ 284.524897][ T9447] ? __might_sleep+0xd0/0xd0 [ 284.529505][ T9447] ? slab_free_freelist_hook+0x133/0x1b0 [ 284.535137][ T9447] ? tomoyo_path_number_perm+0x4fb/0x650 [ 284.540850][ T9447] ? __kmem_cache_free+0xb6/0x200 [ 284.545883][ T9447] ? tomoyo_path_number_perm+0x205/0x650 [ 284.551516][ T9447] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 284.556972][ T9447] ? scsi_timeout+0x9c0/0x9c0 [ 284.561657][ T9447] sg_ioctl+0xf84/0x2070 [ 284.565904][ T9447] ? sg_poll+0x3b0/0x3b0 [ 284.570145][ T9447] ? __fget_files+0x28/0x460 [ 284.574749][ T9447] ? bpf_lsm_file_ioctl+0x5/0x10 [ 284.579688][ T9447] ? security_file_ioctl+0x7c/0xa0 [ 284.584804][ T9447] ? sg_poll+0x3b0/0x3b0 [ 284.589042][ T9447] __se_sys_ioctl+0xfa/0x170 [ 284.593637][ T9447] do_syscall_64+0x4c/0xa0 [ 284.598047][ T9447] ? clear_bhb_loop+0x60/0xb0 [ 284.602712][ T9447] ? clear_bhb_loop+0x60/0xb0 [ 284.607382][ T9447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.613279][ T9447] RIP: 0033:0x7f968d59e159 [ 284.617690][ T9447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.637378][ T9447] RSP: 002b:00007f968e4a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.645801][ T9447] RAX: ffffffffffffffda RBX: 00007f968d825fa0 RCX: 00007f968d59e159 [ 284.653765][ T9447] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000004 [ 284.661728][ T9447] RBP: 00007f968d63506b R08: 0000000000000000 R09: 0000000000000000 [ 284.669691][ T9447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.677672][ T9447] R13: 00007f968d826038 R14: 00007f968d825fa0 R15: 00007fff4973f018 [ 284.685659][ T9447] [ 284.939428][ T9364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.948744][ T9364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.980631][ T9364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.330644][ T9469] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 285.386465][ T9364] device hsr_slave_0 entered promiscuous mode [ 285.422937][ T9364] device hsr_slave_1 entered promiscuous mode [ 285.446394][ T9364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.454272][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 285.468813][ T9364] Cannot create hsr debugfs directory [ 285.479724][ T9421] chnl_net:caif_netlink_parms(): no params data found [ 285.523319][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 285.551556][ T5296] device hsr_slave_0 left promiscuous mode [ 285.604602][ T5296] device hsr_slave_1 left promiscuous mode [ 285.670836][ T5296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.683326][ T5296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.696843][ T5296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.717747][ T5296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.750366][ T5296] device bridge_slave_1 left promiscuous mode [ 285.798495][ T5296] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.808384][ T5296] device bridge_slave_0 left promiscuous mode [ 285.815326][ T5296] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.861523][ T5296] device veth1_macvtap left promiscuous mode [ 285.868284][ T5296] device veth0_macvtap left promiscuous mode [ 285.875245][ T5296] device veth1_vlan left promiscuous mode [ 285.892229][ T5296] device veth0_vlan left promiscuous mode [ 286.092672][ T9496] overlayfs: failed to clone upperpath [ 286.271053][ T9501] overlayfs: failed to clone upperpath [ 287.523382][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 287.603490][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 287.880309][ T5296] team0 (unregistering): Port device team_slave_1 removed [ 287.961928][ T5296] team0 (unregistering): Port device team_slave_0 removed [ 288.111640][ T5296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.223577][ T5296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.341937][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 288.411799][ T9528] FAULT_INJECTION: forcing a failure. [ 288.411799][ T9528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.439117][ T9528] CPU: 1 PID: 9528 Comm: syz.5.1473 Not tainted syzkaller #0 [ 288.446565][ T9528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.456628][ T9528] Call Trace: [ 288.460018][ T9528] [ 288.463038][ T9528] dump_stack_lvl+0x188/0x24e [ 288.467753][ T9528] ? show_regs_print_info+0x12/0x12 [ 288.472952][ T9528] ? load_image+0x410/0x410 [ 288.477457][ T9528] ? __lock_acquire+0x7c40/0x7c40 [ 288.482483][ T9528] should_fail_ex+0x390/0x4c0 [ 288.487166][ T9528] _copy_from_user+0x2c/0x170 [ 288.491870][ T9528] ucma_create_id+0xe6/0x370 [ 288.496461][ T9528] ? __lock_acquire+0x7c40/0x7c40 [ 288.501491][ T9528] ? ucma_close+0x170/0x170 [ 288.505989][ T9528] ? __might_fault+0xa6/0x120 [ 288.511181][ T9528] ? __might_fault+0xc2/0x120 [ 288.515873][ T9528] ? __might_fault+0xa6/0x120 [ 288.520543][ T9528] ucma_write+0x24e/0x2f0 [ 288.524884][ T9528] ? ucma_get_global_nl_info+0x70/0x70 [ 288.530350][ T9528] ? common_file_perm+0x171/0x1c0 [ 288.535369][ T9528] ? fsnotify_perm+0x5a/0x550 [ 288.540052][ T9528] ? security_file_permission+0x75/0xa0 [ 288.545591][ T9528] ? ucma_get_global_nl_info+0x70/0x70 [ 288.551040][ T9528] vfs_write+0x2dc/0x9a0 [ 288.555295][ T9528] ? file_end_write+0x250/0x250 [ 288.560163][ T9528] ? __fget_files+0x28/0x460 [ 288.564746][ T9528] ? __fget_files+0x3fc/0x460 [ 288.569415][ T9528] ? __fdget_pos+0x1d4/0x360 [ 288.574027][ T9528] ? ksys_write+0x70/0x260 [ 288.578439][ T9528] ksys_write+0x14d/0x260 [ 288.582760][ T9528] ? __ia32_sys_read+0x80/0x80 [ 288.587528][ T9528] ? lockdep_hardirqs_on+0x94/0x140 [ 288.592720][ T9528] do_syscall_64+0x4c/0xa0 [ 288.597122][ T9528] ? clear_bhb_loop+0x60/0xb0 [ 288.601889][ T9528] ? clear_bhb_loop+0x60/0xb0 [ 288.606569][ T9528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.612469][ T9528] RIP: 0033:0x7f9ca339e159 [ 288.616886][ T9528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.636501][ T9528] RSP: 002b:00007f9ca42fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.644910][ T9528] RAX: ffffffffffffffda RBX: 00007f9ca3625fa0 RCX: 00007f9ca339e159 [ 288.652878][ T9528] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000003 [ 288.660847][ T9528] RBP: 00007f9ca343506b R08: 0000000000000000 R09: 0000000000000000 [ 288.668831][ T9528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.676819][ T9528] R13: 00007f9ca3626038 R14: 00007f9ca3625fa0 R15: 00007ffd0b8dca68 [ 288.684812][ T9528] [ 288.692562][ T9477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.603277][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 289.683266][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 290.045133][ T5296] bond0 (unregistering): Released all slaves [ 290.332146][ T9569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1488'. [ 290.559710][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.595396][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.637572][ T9421] device bridge_slave_0 entered promiscuous mode [ 290.760588][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.773485][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.805156][ T9421] device bridge_slave_1 entered promiscuous mode [ 291.006245][ T9421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.119895][ T9421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.239142][ T9364] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 291.279996][ T9364] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 291.348560][ T9421] team0: Port device team_slave_0 added [ 291.374348][ T9364] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 291.409965][ T9421] team0: Port device team_slave_1 added [ 291.429926][ T9364] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 291.503728][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.510883][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.538956][ T9421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.559540][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.568313][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.595530][ T9421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.613455][ T4537] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 291.693373][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 291.741176][ T5296] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.803295][ T4537] usb 5-1: Using ep0 maxpacket: 32 [ 291.810290][ T4537] usb 5-1: config 0 has an invalid interface number: 131 but max is 0 [ 291.818944][ T4537] usb 5-1: config 0 has no interface number 0 [ 291.825283][ T4537] usb 5-1: too many endpoints for config 0 interface 131 altsetting 181: 207, using maximum allowed: 30 [ 291.863139][ T4537] usb 5-1: config 0 interface 131 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 291.902599][ T4537] usb 5-1: config 0 interface 131 has no altsetting 0 [ 291.915376][ T4537] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 291.916876][ T5296] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.933268][ T4537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.952523][ T4537] usb 5-1: Product: syz [ 291.965747][ T4537] usb 5-1: Manufacturer: syz [ 291.971198][ T4537] usb 5-1: SerialNumber: syz [ 291.989161][ T9421] device hsr_slave_0 entered promiscuous mode [ 292.011319][ T4537] usb 5-1: config 0 descriptor?? [ 292.024065][ T9421] device hsr_slave_1 entered promiscuous mode [ 292.054541][ T9421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.071380][ T9421] Cannot create hsr debugfs directory [ 292.120964][ T5296] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.294349][ T5296] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.375637][ T9364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.451486][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.459946][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.476648][ T4537] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 292.517700][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1500'. [ 292.549606][ T9364] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.624825][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.644482][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.663405][ T5298] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.670565][ T5298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.686989][ T4537] gspca_topro: reg_w err -71 [ 292.701947][ T9635] xt_hashlimit: size too large, truncated to 1048576 [ 292.721024][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.735450][ T4537] gspca_topro: Sensor soi763a [ 292.742497][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.765288][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.781515][ T4537] usb 5-1: USB disconnect, device number 18 [ 292.783765][ T5298] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.794700][ T5298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.845944][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.924160][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.940267][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.970120][ T9642] overlayfs: failed to clone upperpath [ 292.983697][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.020621][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.056560][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.076324][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.095180][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.176307][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.198682][ T9364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.221172][ T9364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.240067][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.273877][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.301026][ T5296] tipc: Left network mode [ 293.346059][ T9421] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 293.412531][ T9421] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 293.478421][ T9421] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 293.524871][ T9421] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 294.180601][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.202495][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.231999][ T9421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.418942][ T9364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.440495][ T9421] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.464859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.477828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.581918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.595479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.623695][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.630885][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.665628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.692532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.716924][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.724180][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.762771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.855222][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.888033][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.914406][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.961347][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.999457][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.044507][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.221603][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.234387][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.263988][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.379364][ T9421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.424226][ T9421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 295.440551][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.460927][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.601066][ T9696] loop4: detected capacity change from 0 to 512 [ 295.707670][ T9696] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 295.723377][ T9696] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.984058][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.001590][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.053646][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 296.227158][ T9710] loop4: detected capacity change from 0 to 256 [ 296.274439][ T9710] exfat: Unknown parameter 'TIPCv2' [ 296.381897][ T9710] loop4: detected capacity change from 0 to 4096 [ 296.421212][ T9364] device veth0_vlan entered promiscuous mode [ 296.448449][ T9710] EXT4-fs (loop4): Test dummy encryption mode enabled [ 296.474662][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.476155][ T9710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 296.483161][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.532558][ T9717] 9pnet_fd: p9_fd_create_tcp (9717): problem connecting socket to 127.0.0.1 [ 296.589539][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.602922][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.644670][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.683077][ T5300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.706274][ T5296] device hsr_slave_0 left promiscuous mode [ 296.717804][ T5296] device hsr_slave_1 left promiscuous mode [ 296.730752][ T5296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.747394][ T5296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.763254][ T5296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.779606][ T5296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.797426][ T5296] device bridge_slave_1 left promiscuous mode [ 296.810577][ T5296] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.836529][ T5296] device bridge_slave_0 left promiscuous mode [ 296.851050][ T5296] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.898011][ T5296] device veth1_macvtap left promiscuous mode [ 296.911076][ T5296] device veth0_macvtap left promiscuous mode [ 296.929797][ T5296] device veth1_vlan left promiscuous mode [ 296.942512][ T5296] device veth0_vlan left promiscuous mode [ 298.126405][ T5296] team0 (unregistering): Port device team_slave_1 removed [ 298.229430][ T5296] team0 (unregistering): Port device team_slave_0 removed [ 298.350724][ T5296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.447938][ T5296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.304778][ T5296] bond0 (unregistering): Released all slaves [ 299.479662][ T9364] device veth1_vlan entered promiscuous mode [ 299.539835][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.645489][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.654711][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 299.659629][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.722713][ T9364] device veth0_macvtap entered promiscuous mode [ 299.747187][ T9364] device veth1_macvtap entered promiscuous mode [ 299.878622][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.921756][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.004683][ T9364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.036696][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 300.051554][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 300.088585][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 300.122792][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.149720][ T9770] overlayfs: upper fs does not support file handles, falling back to index=off. [ 300.163420][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.210016][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.227342][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.256780][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.284742][ T9364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.317293][ T9364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.344232][ T9776] EXT4-fs (sda1): shut down requested (0) [ 300.351722][ T9364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.385060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.417752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.488895][ T9364] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.516842][ T9364] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.550757][ T9364] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.576747][ T9364] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.854831][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.886615][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.959413][ T4895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.023016][ T4895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.037377][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 301.057262][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 301.076799][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.102426][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.127319][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.154017][ T9421] device veth0_vlan entered promiscuous mode [ 301.214611][ T9421] device veth1_vlan entered promiscuous mode [ 301.236487][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.259352][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.277788][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.300047][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 301.327589][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 301.379591][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.404045][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.436031][ T9421] device veth0_macvtap entered promiscuous mode [ 301.459639][ T9421] device veth1_macvtap entered promiscuous mode [ 301.575903][ T9818] device bridge_slave_1 left promiscuous mode [ 301.583516][ T9818] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.598705][ T9818] device bridge_slave_0 left promiscuous mode [ 301.609010][ T9818] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.760980][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.831155][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.852891][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.884638][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.910445][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.028269][ T4314] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.053627][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 302.061851][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 302.075618][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.085225][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.098573][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.117342][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.127922][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.138792][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.213581][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.258228][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.292352][ T9421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.313158][ T9421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.325220][ T9421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.489298][ T4314] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.523651][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.554477][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.685334][ T4314] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.005000][ T4314] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.469181][ T4314] device hsr_slave_0 left promiscuous mode [ 304.476009][ T4314] device hsr_slave_1 left promiscuous mode [ 304.482303][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.491130][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.499486][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.507510][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.516018][ T4314] device bridge_slave_1 left promiscuous mode [ 304.522202][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.530950][ T4314] device bridge_slave_0 left promiscuous mode [ 304.537503][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.562303][ T4314] device veth1_macvtap left promiscuous mode [ 304.568757][ T4314] device veth0_macvtap left promiscuous mode [ 304.575457][ T4314] device veth1_vlan left promiscuous mode [ 304.581367][ T4314] device veth0_vlan left promiscuous mode [ 305.405256][ T4314] team0 (unregistering): Port device team_slave_1 removed [ 305.471531][ T4314] team0 (unregistering): Port device team_slave_0 removed [ 305.535428][ T4314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.611173][ T4314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.141023][ T4314] bond0 (unregistering): Released all slaves [ 306.803983][ T4314] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.860011][ T4314] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.934178][ T4314] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.991073][ T4314] bridge0: port 3(netdevsim0) entered disabled state [ 307.032968][ T4314] device netdevsim0 left promiscuous mode [ 307.038984][ T4314] bridge0: port 3(netdevsim0) entered disabled state [ 307.049368][ T4314] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.740480][ T4314] tipc: Left network mode [ 309.012275][ T4314] device hsr_slave_0 left promiscuous mode [ 309.018825][ T4314] device hsr_slave_1 left promiscuous mode [ 309.027496][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.035052][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.042641][ T4314] device bridge_slave_1 left promiscuous mode [ 309.048989][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.059303][ T4314] device bridge_slave_0 left promiscuous mode [ 309.066233][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.078858][ T4314] device hsr_slave_0 left promiscuous mode [ 309.085708][ T4314] device hsr_slave_1 left promiscuous mode [ 309.092051][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.099662][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.107642][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.115191][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.122775][ T4314] device bridge_slave_1 left promiscuous mode [ 309.129240][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.139884][ T4314] device bridge_slave_0 left promiscuous mode [ 309.146690][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.201829][ T4314] device veth1_macvtap left promiscuous mode [ 309.208287][ T4314] device veth0_macvtap left promiscuous mode [ 309.214487][ T4314] device veth1_vlan left promiscuous mode [ 309.220564][ T4314] device veth0_vlan left promiscuous mode [ 309.227305][ T4314] device veth1_macvtap left promiscuous mode [ 309.233522][ T4314] device veth0_macvtap left promiscuous mode [ 309.239618][ T4314] device veth1_vlan left promiscuous mode [ 309.245657][ T4314] device veth0_vlan left promiscuous mode [ 309.448960][ T4314] bond1 (unregistering): (slave geneve2): Releasing active interface [ 309.707800][ T4314] bond1 (unregistering): Released all slaves [ 310.408947][ T4314] team0 (unregistering): Port device team_slave_1 removed [ 310.487258][ T4314] team0 (unregistering): Port device team_slave_0 removed [ 310.569322][ T4314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.631543][ T4314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.143583][ T4314] bond0 (unregistering): Released all slaves [ 311.980614][ T4314] team0 (unregistering): Port device team_slave_1 removed