last executing test programs: 6m14.960361186s ago: executing program 2 (id=3): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x70, 0x4, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0x4, 0x3}}}}}]}}]}}, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x1, 0x0, 0x0) 6m11.776440546s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipe\x00', 0xff) mount(0x0, &(0x7f0000000040)='./pipe\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000140)) syz_open_dev$sndpcmc(0x0, 0x1, 0x1f40) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000300)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9801) move_mount(r1, &(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r0, &(0x7f0000000480)='\x00', 0x89901) 6m11.420333452s ago: executing program 2 (id=28): r0 = syz_open_dev$sndpcmc(0x0, 0x8001, 0x200000) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001540)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000001580)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f00000015c0)=[{{&(0x7f0000001640)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f00000016c0)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) 6m9.725537712s ago: executing program 2 (id=32): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000500)={0x1, 0x7f}) 6m8.924371722s ago: executing program 32 (id=32): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000500)={0x1, 0x7f}) 5m45.167512348s ago: executing program 1 (id=111): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) 5m43.833782212s ago: executing program 1 (id=119): r0 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r1 = syz_open_dev$loop(&(0x7f0000003a80), 0xa33, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000840)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000040)='./dm0\x00', 0x800, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x55, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x2, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x87, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6202, 0x5, 0x0, 0x80}, [@mdlm_detail={0x4, 0x24, 0x13, 0x9}, @mdlm_detail={0x4, 0x24, 0x13, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x10, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xcf, 0x79, 0x53}}}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}}) close(0xffffffffffffffff) 5m41.027389174s ago: executing program 1 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000000000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000015000300686173683a69702c"], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000340)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='0', 0x1) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m40.590760917s ago: executing program 1 (id=132): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x804000, &(0x7f0000000180)=ANY=[], 0x2, 0xc2d, &(0x7f0000000f40)="$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") mount(&(0x7f0000001b80)=@loop={'/dev/loop', 0x0}, &(0x7f0000001bc0)='./file1\x00', 0x0, 0x41002, 0x0) r0 = open(&(0x7f00000006c0)='./file1\x00', 0x14f840, 0xa2) preadv2(r0, &(0x7f0000000700)=[{&(0x7f0000002c80)=""/4096, 0x100000}], 0x18, 0x0, 0x0, 0x0) 5m39.929408294s ago: executing program 1 (id=136): r0 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='mnt\x00', 0x4, &(0x7f0000000380)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000500)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000780)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000880)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000008c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f0000000900)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, &(0x7f0000000940)='./file2\x00', 0x942, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000980)={@id={0x2, 0x0, @a}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 5m38.917659826s ago: executing program 1 (id=141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) 5m37.539481084s ago: executing program 33 (id=141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) 3m33.863304524s ago: executing program 4 (id=769): syz_mount_image$ext4(&(0x7f0000005780)='ext4\x00', &(0x7f00000057c0)='./file1\x00', 0x1000040, &(0x7f0000005800), 0x1, 0x5a3, &(0x7f0000005840)="$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") creat(&(0x7f0000007480)='./file0/file0\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000074c0)='./file1\x00', 0x48042, 0x18c) fallocate(r0, 0x10, 0x6, 0x105ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000005e40)='./file1\x00', 0x101042, 0x15) write$FUSE_GETXATTR(r1, &(0x7f0000005e80)={0x18, 0xfffffffffffffffe, 0x0, {0x7ff}}, 0x18) 3m33.508705239s ago: executing program 4 (id=773): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x6}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m32.745703106s ago: executing program 4 (id=774): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000"], 0x24}}, 0x14040) 3m32.51218507s ago: executing program 4 (id=777): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210000, &(0x7f00000002c0)={[{@noquota}, {@noquota}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@noquota}, {@nojournal_checksum}, {@errors_continue}, {@barrier}, {@usrjquota}, {}, {@abort}]}, 0x5, 0x5a4, &(0x7f0000001d80)="$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") syz_mount_image$exfat(0x0, &(0x7f0000002a80)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000002ac0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c40)='.\x00', 0x20000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000c80)=0x20) syz_mount_image$ext4(0x0, &(0x7f0000002b00)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000002b40)) rename(&(0x7f0000002b80)='./bus/file0\x00', &(0x7f0000002bc0)='./file0\x00') 3m32.356306905s ago: executing program 4 (id=778): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000030805000000000000004c5fa95916f4478a8f6f46d2000000000000050003"], 0x28}}, 0x0) write(r0, 0x0, 0x0) 3m31.781411433s ago: executing program 4 (id=782): mknod(&(0x7f000000e980)='./bus\x00', 0x1000, 0xfffffffe) r0 = openat(0xffffffffffffff9c, &(0x7f000000e9c0)='./bus\x00', 0x8042, 0xec) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="85b067", 0x3}], 0x1, 0x7) write$rfkill(r0, &(0x7f000000ea80)={0x2, 0x4, 0x3, 0x1}, 0x8) 3m31.344657447s ago: executing program 34 (id=782): mknod(&(0x7f000000e980)='./bus\x00', 0x1000, 0xfffffffe) r0 = openat(0xffffffffffffff9c, &(0x7f000000e9c0)='./bus\x00', 0x8042, 0xec) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="85b067", 0x3}], 0x1, 0x7) write$rfkill(r0, &(0x7f000000ea80)={0x2, 0x4, 0x3, 0x1}, 0x8) 5.925471005s ago: executing program 7 (id=1875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}}, 0x4000080) 5.780825859s ago: executing program 7 (id=1880): syz_io_uring_setup(0xd3a, &(0x7f0000000040)={0x0, 0x8a16, 0x3a10, 0x3, 0x31d}, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f00000002c0)={0x0, 0x0, 0x800, 0x0, 0xe7}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 5.606965297s ago: executing program 7 (id=1884): r0 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000700)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000880), 0x651, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r0, 0xaea3) recvmmsg(r2, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xd0ff}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000006c0)="f5c3", 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000640)={r6, r7/1000+60000}, 0x10) recvfrom(r5, 0x0, 0x319c, 0x2000, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e04, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x10003}, 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fb, &(0x7f0000000140)="$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") rseq(0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) 5.417444126s ago: executing program 3 (id=1887): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 4.38189291s ago: executing program 7 (id=1889): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300d0000000ffffffffffff080211000000fffffffffffff00f0404"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.371562011s ago: executing program 3 (id=1890): openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$loop(0x0, 0x401, 0x145981) r1 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001300010004000000000000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0xff00, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) 4.190298049s ago: executing program 7 (id=1893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000980), 0x0, 0x802) writev(r2, &(0x7f00000009c0)=[{&(0x7f0000000a00)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000a40)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000004c0)=0xc) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syzkaller1\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0x88, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r7, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_EMATCHES={0x54, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x44, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x7}, {{0x2, 0x1}, {0x4, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xffff, 0x3, 0xb}, {0x6, 0x2, 0x7, 0x5}}}]}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000006c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r4}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', 0x41}) bind$inet6(r3, &(0x7f00000005c0)={0xa, 0x60e6, 0x4003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000000000000001200100000000000000000000000000024e2460e6"], 0x64) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/fscaps', 0x0, 0x60) pread64(r8, &(0x7f00000003c0)=""/75, 0x8e, 0x100000) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)='\t', 0x1}], 0x1}}], 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f0000000640), &(0x7f0000000680)=0x4) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x4}, &(0x7f00000002c0)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a70000000060a01060000000000000000020000000900010021944639ddd94d620900020073797a300000000048000480440001800a0001006d6174636800000034000280090001006c3274700000000008000240000000001c000300000000000000000000000000000000000000000000000000140000001100010000000000000002000200000a"], 0x9c}}, 0x0) 3.799778209s ago: executing program 3 (id=1896): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)={0x5c, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3a, 0x1, 0x0, 0x0, @binary="00112233445566748899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) 3.771405501s ago: executing program 6 (id=1897): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x450a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x8e, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000440)="bf1891bc8ea3307253874a6150f8329c499c34d666e26f42e4475811261c48abf625c9412165f0174c39668d1939e3787f8e3b34e5ab7e1465d58859c73e030d8b9209486972b9c82d64f7269dc02a8ae26cbdeb739c130bf99d4fede1502a4b3bc72b1cefc705abf8fbed3ea56a4cae83c3527daaad85ce20046a9c11bc091e13b9e1acda251b41e4fa424d97b3", 0x0, 0x1000001, 0x10011, 0x200, 0x0}) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x20000800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x24040884) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0x3c}}, 0x4000000) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x3d) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r8, 0x0) r9 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x8, 0xc000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f0000000040)={0x3, 0x0, 0x3, 0x13}) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) ioctl$EXT4_IOC_MIGRATE(r11, 0xff08) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x70) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x26020480) move_mount(r12, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x267) 3.649224484s ago: executing program 3 (id=1900): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 3.465282532s ago: executing program 0 (id=1901): r0 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000700)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000880), 0x651, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r0, 0xaea3) recvmmsg(r2, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0xf, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xd0ff}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000006c0)="f5c3", 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000640)={r6, r7/1000+60000}, 0x10) recvfrom(r5, 0x0, 0x319c, 0x2000, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e04, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x10003}, 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fb, &(0x7f0000000140)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3sxz/X2vzrwXfx3PC2BoXY2I3YgYi4i7ETGdnc9lW3zW3pLHPdt7uLS/93ApF63W7X/l0vrkXHT8m8SV7DmLEfGj70X8NPdy3Mb2ztpitVrZLGQnmrWN2cb2zo3V2uJKZaWyXi4vzC/MfXLz4/KZ9fW92lhW+urTP+5+6+dJs6ayM539OEvtrhcO4yRGI+IH5xFsAEay/owNuiG8lnxEvB0R76fX/3SMpK8mAHCZtVrT0ZruPAYALrt8mgPL5UtZLmAq8vlSqZ3Deycm89V6o3n9Xn1rfbmdK5uJQv7earUyl+UKZ6KQS47n0/Lz4/KR45sR8VZE/HJ8Ij0uLdWry4P8xQcAhtiVI/P/f8fb8z8AcMkVB90AAKDvzP8AMHzM/wAwfMz/ADB82vP/xKCbAQD0kff/ADB8zP8AMFR+eOtWsrX2s/tfL9/f3lqr37+xXGmslWpbS6Wl+uZGaaVeX0nv2VM77vmq9frG/Eex9WDm2xuN5mxje+dOrb613ryT3tf7TqV9u+/dPvQMAOjlrfee/CWXzMifTqRbdKzlUBhoy4Dzlh90A4CBGRl0A4CBsdoXDK9TvMeXHoBLossSvS8odvuCUKvVap1fk4Bzdu1L8v8wrDry//4KGIaM/D8ML/l/GF6tVu6ka/7HSR8IAFxscvxAj8//3872v8s+HPjJ8tFHPD7PVgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFdrD+bylbC3wq8vlSKeKNiJiJQu7earUyFxFvRsSfxwvjyfH8gNsMAJxW/u+5bP2va9MfTr1Q9e6Vw+JYRPzs17d/9WCx2dz8U8RY7t/jB+ebj7Pz5f63HgA43sE8ne473sg/23u4dLD1sz3/+G5EFNvx9/fGYv8w/miMpvtiFCJi8j+57Lgt15G7OI3dRxHxxW79z8VUmgNpr3x6NH4S+42+xs+/ED+f1rX3yf/FF86gLTBsniTjz2fdrr98XE333a//YjpCnV42/iVPtbSfjoHP4x+MfyM9xr+rJ43x0R++3y5NvFz3KOLLoxEHsfc7xp+D+Lke8T88Yfy/fuXd93vVtX4TcS26x++MNdusbcw2tndurNYWVyorlfVyeWF+Ye6Tmx+XZ9Mc9Wzv2eCfn15/s1dd0v/JHvGLx/T/6yfs/2//f/fHX3tF/G9+0C1+Pt55RfxkTvzGCeMvTv6+2Ksuib/co//Hvf7XTxj/6d92Xlo2HAAYnMb2ztpitVrZVFC4+IXkR/YCNKNr4Tv9ijUW3at+8UH7mj5S1Wq9VqxeI8ZZZN2Ai+Dwoo+I/w26MQAAAAAAAAAAAAAAQFf9+MbSoPsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5fV5AAAA//8UG875") rseq(0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) 2.748741204s ago: executing program 5 (id=1902): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001340)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000023c0)=""/32, 0x20}], 0x1}, 0x9}], 0x1, 0x40010083, 0x0) close(r1) 2.640450365s ago: executing program 3 (id=1903): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300d0000000ffffffffffff080211000000fffffffffffff00f0404"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.560219823s ago: executing program 6 (id=1904): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x3400c804) 2.325392327s ago: executing program 7 (id=1905): syz_usb_connect(0x0, 0x24, &(0x7f0000006300)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000006340), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000006380)={&(0x7f00000063c0)=[{0x1000, 0x5820, 0x50, &(0x7f0000006400)="11055f2b562b05465ab03875936a50119037dedf738c9b5b48b102ed763b64fc8394d9378230da634410bb2c69bdbf860d7da68dcecfa39701fd9f78bd9a9e1ea5345dacaa733a1c635436eda30d6b8b"}], 0x1}) 2.270238872s ago: executing program 3 (id=1906): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='htcp', 0x4) sendto$inet(r0, &(0x7f0000000340), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 2.219375337s ago: executing program 6 (id=1907): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x1000003, 0x100000, 0x1}, 0x10) write(r0, &(0x7f0000000340)="1c0000001a005f0214f9f407000904001f000000fe000000000a0000", 0x1c) 2.061470793s ago: executing program 6 (id=1908): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e22, 0x5, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000780)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000900)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000940)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000980)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) listen(r2, 0x0) preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000001080)=""/4111, 0x100f}], 0x1, 0x144, 0x0) 2.026953727s ago: executing program 0 (id=1909): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000001, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000002700)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002800)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000002840)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002880), 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, 0x0, 0x400, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002940)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 1.909922588s ago: executing program 6 (id=1910): r0 = syz_open_dev$vbi(&(0x7f0000000700), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000740)={0x5, @capture={0x1000, 0x1, {0xfffffff7, 0x6}, 0x4c, 0x6}}) syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000840)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473000c00028005db010003000000", 0x38) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f00000002c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r4) r6 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f00000003c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r4) r7 = add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f00000004c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899ff00", 0x40}, 0x48, r4) keyctl$KEYCTL_MOVE(0x1e, r7, r5, r6, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x38, r9, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10}]}, 0x38}}, 0x24000000) sendmmsg$inet(r2, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x54048000) r10 = socket(0x2, 0x3, 0xff) bind$inet(r10, &(0x7f0000000540)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r10, &(0x7f0000000580)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r10, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="189772100048f5c56a6aeb00ffffffff0bd87cc6fcc9b76b0300000000000000", 0x20}], 0x1, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="2d0d30f1496b290d77ce90d1e3bf899020c60aed", 0x14}], 0x1, 0x0, 0x0, 0x4000}}], 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000280), 0xfdef) 1.869262123s ago: executing program 0 (id=1911): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) 1.721470487s ago: executing program 0 (id=1912): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @broadcast}}}}, 0x0) 1.69636803s ago: executing program 5 (id=1913): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 1.684458491s ago: executing program 0 (id=1914): openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0xa82, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000600)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000640)={0x2000000a}) 1.545173515s ago: executing program 0 (id=1915): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x450a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x8e, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000440)="bf1891bc8ea3307253874a6150f8329c499c34d666e26f42e4475811261c48abf625c9412165f0174c39668d1939e3787f8e3b34e5ab7e1465d58859c73e030d8b9209486972b9c82d64f7269dc02a8ae26cbdeb739c130bf99d4fede1502a4b3bc72b1cefc705abf8fbed3ea56a4cae83c3527daaad85ce20046a9c11bc091e13b9e1acda251b41e4fa424d97b3", 0x0, 0x1000001, 0x10011, 0x200, 0x0}) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x20000800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x24040884) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0x3c}}, 0x4000000) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x3d) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r8, 0x0) r9 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x8, 0xc000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r9, 0x40146f2c, &(0x7f0000000040)={0x3, 0x0, 0x3, 0x13}) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) ioctl$EXT4_IOC_MIGRATE(r11, 0xff08) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x70) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x26020480) move_mount(r12, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x267) 766.891293ms ago: executing program 5 (id=1916): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300d0000000ffffffffffff080211000000fffffffffffff00f0404"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 698.00702ms ago: executing program 5 (id=1917): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x3400c804) 569.440053ms ago: executing program 5 (id=1918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000800), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000840)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000880)={0x0, 0xe0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 29.821987ms ago: executing program 5 (id=1919): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000440), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000500)={0x0, [[0xffffffff, 0xffffffdf, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000780)={0x0, &(0x7f00000007c0)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000440), &(0x7f0000000880)='./file1\x00', 0x0, &(0x7f0000000900)={[{@nodecompose}]}, 0x1, 0x5dd, &(0x7f0000000b40)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000001140)='mountinfo\x00') lseek(r4, 0x10001, 0x0) readv(r2, &(0x7f0000000800)=[{0x0}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) pipe2$watch_queue(&(0x7f0000000840), 0x80) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000400)={0x2, 0x5, 0x9, 0x3, 0x11, "33ea0986e206df96"}) setns(0xffffffffffffffff, 0x24020000) 0s ago: executing program 6 (id=1920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x10001, @mcast1}, 0x1c, 0x0}}], 0x1, 0x20002040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24008801}, 0x24040008) kernel console output (not intermixed with test programs): omes ready [ 138.878654][ T5012] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.908175][ T5012] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.938806][ T5012] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.972443][ T5012] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.008266][ T5372] fuse: Bad value for 'fd' [ 139.188633][ T5302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.201196][ T5302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.477178][ T5302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.570487][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.587331][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.650127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.696289][ T5382] capability: warning: `syz.0.266' uses 32-bit capabilities (legacy support in use) [ 139.945253][ T5391] device wlan0 entered promiscuous mode [ 140.819083][ T50] Bluetooth: hci2: command 0x0405 tx timeout [ 141.512026][ T5418] ip_tables: iptables: counters copy to user failed while replacing table [ 141.712500][ T4416] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 141.907941][ T4416] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.931205][ T4416] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.958390][ T4416] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.019037][ T4416] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.042757][ T4416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.075851][ T4416] usb 6-1: config 0 descriptor?? [ 143.051840][ T4281] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9 [ 143.201313][ T4416] plantronics 0003:047F:FFFF.0001: unbalanced collection at end of report description [ 143.615537][ T4416] plantronics 0003:047F:FFFF.0001: parse failed [ 143.624093][ T5454] loop6: detected capacity change from 0 to 128 [ 143.630499][ T4416] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 143.668896][ T4416] usb 6-1: USB disconnect, device number 3 [ 143.770755][ T5454] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 143.842193][ T5454] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.031210][ T5461] EXT4-fs (loop6): unmounting filesystem. [ 144.197768][ T5451] device wlan0 entered promiscuous mode [ 144.247981][ T5465] loop5: detected capacity change from 0 to 8 [ 147.731079][ T5512] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 148.795107][ T5521] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 151.386132][ T5556] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.394162][ T5556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.748015][ T5553] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 152.553296][ T27] audit: type=1326 audit(1793104060.216:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.0.314" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x0 [ 154.338350][ T5602] loop5: detected capacity change from 0 to 512 [ 154.402534][ T5604] fuse: Bad value for 'fd' [ 157.277359][ T5636] fuse: Bad value for 'fd' [ 160.632435][ T26] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 160.832582][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 160.839262][ T26] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.878031][ T26] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.908267][ T26] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.941746][ T26] usb 6-1: config 0 interface 0 has no altsetting 0 [ 161.051482][ T26] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 161.133108][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.363638][ T26] usb 6-1: config 0 descriptor?? [ 161.951223][ T26] input: HID 046d:c623 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C623.0002/input/input6 [ 162.128393][ T26] logitech 0003:046D:C623.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.5-1/input0 [ 163.904648][ T5679] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 164.263567][ T4281] Bluetooth: hci1: Malformed LE Event: 0x02 [ 164.852995][ T956] usb 6-1: USB disconnect, device number 4 [ 171.122731][ T956] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 171.330640][ T956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.361836][ T956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.439859][ T956] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.665473][ T956] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.678009][ T956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.743097][ T956] usb 6-1: config 0 descriptor?? [ 172.163518][ T956] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 172.198637][ T956] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 172.450242][ T956] usb 6-1: USB disconnect, device number 5 [ 172.541402][ T5884] fido_id[5884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 173.392505][ T5679] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 173.594754][ T5679] usb 6-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 173.607241][ T5679] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.657706][ T5679] usb-storage 6-1:1.0: USB Mass Storage device detected [ 174.074436][ T5679] scsi host1: usb-storage 6-1:1.0 [ 174.122597][ T5679] usb 6-1: USB disconnect, device number 6 [ 174.681436][ T27] audit: type=1326 audit(1793104082.336:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.428" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 174.746023][ T27] audit: type=1326 audit(1793104082.366:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.428" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 174.825612][ T27] audit: type=1326 audit(1793104082.366:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.428" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 175.666614][ T27] audit: type=1326 audit(1793104082.366:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.428" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 175.752447][ T27] audit: type=1326 audit(1793104082.366:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.428" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 175.824332][ T27] audit: type=1326 audit(1793104082.366:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.428" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 175.916684][ T27] audit: type=1326 audit(1793104082.366:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.428" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 175.981443][ T27] audit: type=1326 audit(1793104082.366:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.428" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 176.016862][ T27] audit: type=1326 audit(1793104082.366:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5949 comm="syz.0.428" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 176.092081][ T5972] loop5: detected capacity change from 0 to 1024 [ 176.164007][ T5972] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.014212][ T5972] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 177.311425][ T4549] EXT4-fs (loop5): unmounting filesystem. [ 179.860404][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 179.883605][ T6017] fuse: Bad value for 'fd' [ 179.913526][ T6023] capability: warning: `syz.6.451' uses deprecated v2 capabilities in a way that may be insecure [ 179.939281][ T6017] fuse: Bad value for 'fd' [ 180.384035][ T6033] netlink: 48 bytes leftover after parsing attributes in process `syz.3.454'. [ 181.587748][ T6029] netlink: 84 bytes leftover after parsing attributes in process `syz.6.453'. [ 182.263872][ T6064] FAULT_INJECTION: forcing a failure. [ 182.263872][ T6064] name failslab, interval 1, probability 0, space 0, times 1 [ 182.320006][ T6064] CPU: 1 PID: 6064 Comm: syz.5.464 Not tainted syzkaller #0 [ 182.327389][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 182.337484][ T6064] Call Trace: [ 182.340798][ T6064] [ 182.343749][ T6064] dump_stack_lvl+0x188/0x24e [ 182.348491][ T6064] ? show_regs_print_info+0x12/0x12 [ 182.353694][ T6064] ? load_image+0x410/0x410 [ 182.358194][ T6064] ? __might_sleep+0xd0/0xd0 [ 182.362777][ T6064] ? __lock_acquire+0x7ea0/0x7ea0 [ 182.367813][ T6064] should_fail_ex+0x390/0x4c0 [ 182.372500][ T6064] should_failslab+0x5/0x20 [ 182.377008][ T6064] slab_pre_alloc_hook+0x59/0x300 [ 182.382049][ T6064] ? __list_lru_init+0xb0/0x600 [ 182.386921][ T6064] __kmem_cache_alloc_node+0x4f/0x270 [ 182.392301][ T6064] ? __list_lru_init+0xb0/0x600 [ 182.397190][ T6064] __kmalloc+0xa3/0x240 [ 182.401343][ T6064] __list_lru_init+0xb0/0x600 [ 182.406021][ T6064] alloc_super+0x766/0x930 [ 182.410436][ T6064] ? kill_litter_super+0xa0/0xa0 [ 182.415378][ T6064] sget_fc+0x2d4/0x750 [ 182.419488][ T6064] ? kill_litter_super+0xa0/0xa0 [ 182.424454][ T6064] ? ramfs_get_tree+0x20/0x20 [ 182.429144][ T6064] get_tree_nodev+0x26/0x160 [ 182.433752][ T6064] vfs_get_tree+0x88/0x270 [ 182.438190][ T6064] vfs_fsconfig_locked+0x22f/0x400 [ 182.443331][ T6064] __se_sys_fsconfig+0x69e/0x7e0 [ 182.448302][ T6064] ? __x64_sys_fsconfig+0xc0/0xc0 [ 182.453363][ T6064] ? lockdep_hardirqs_on+0x94/0x140 [ 182.458558][ T6064] ? __x64_sys_fsconfig+0x1c/0xc0 [ 182.463595][ T6064] do_syscall_64+0x4c/0xa0 [ 182.468023][ T6064] ? clear_bhb_loop+0x60/0xb0 [ 182.472688][ T6064] ? clear_bhb_loop+0x60/0xb0 [ 182.477363][ T6064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.483280][ T6064] RIP: 0033:0x7ff89019f559 [ 182.487695][ T6064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.507303][ T6064] RSP: 002b:00007ff890fe3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 182.515735][ T6064] RAX: ffffffffffffffda RBX: 00007ff890425fa0 RCX: 00007ff89019f559 [ 182.523700][ T6064] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 182.531686][ T6064] RBP: 00007ff890236b20 R08: 0000000000000000 R09: 0000000000000000 [ 182.539651][ T6064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.547617][ T6064] R13: 00007ff890426038 R14: 00007ff890425fa0 R15: 00007fffc842df78 [ 182.555592][ T6064] [ 183.028750][ T6083] netlink: 48 bytes leftover after parsing attributes in process `syz.0.468'. [ 184.667170][ T27] audit: type=1326 audit(1793104092.328:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.481" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 184.748044][ T27] audit: type=1326 audit(1793104092.358:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.481" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 184.841788][ T27] audit: type=1326 audit(1793104092.358:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.481" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 184.860232][ T6130] netlink: 48 bytes leftover after parsing attributes in process `syz.6.484'. [ 184.914780][ T6093] loop5: detected capacity change from 0 to 32768 [ 184.917236][ T27] audit: type=1326 audit(1793104092.358:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.481" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 184.925938][ T6093] ======================================================= [ 184.925938][ T6093] WARNING: The mand mount option has been deprecated and [ 184.925938][ T6093] and is ignored by this kernel. Remove the mand [ 184.925938][ T6093] option from the mount to silence this warning. [ 184.925938][ T6093] ======================================================= [ 185.616318][ T27] audit: type=1326 audit(1793104092.358:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.481" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 185.677034][ T27] audit: type=1326 audit(1793104092.358:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.481" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 185.700930][ T6093] JBD2: Ignoring recovery information on journal [ 185.932599][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 185.938724][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 185.983232][ T6093] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 186.030995][ T27] audit: type=1326 audit(1793104092.358:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.481" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 186.778473][ T27] audit: type=1326 audit(1793104092.358:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.481" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 186.971327][ T27] audit: type=1326 audit(1793104092.358:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.481" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 187.004881][ T4549] ocfs2: Unmounting device (7,5) on (node local) [ 187.098649][ T27] audit: type=1326 audit(1793104092.358:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.481" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 188.132190][ T6168] ip_tables: iptables: counters copy to user failed while replacing table [ 190.716952][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.725380][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.822713][ T6227] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 191.439731][ T6246] loop5: detected capacity change from 0 to 1024 [ 192.962574][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 192.962590][ T27] audit: type=1326 audit(1793104100.598:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.0.529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 193.538453][ T27] audit: type=1326 audit(1793104100.598:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.0.529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 193.967946][ T27] audit: type=1326 audit(1793104100.598:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.0.529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 194.058439][ T27] audit: type=1326 audit(1793104100.598:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.0.529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 194.106854][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.110387][ T27] audit: type=1326 audit(1793104100.598:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.0.529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 194.113321][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.168542][ T27] audit: type=1326 audit(1793104100.598:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.0.529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 194.280662][ T27] audit: type=1326 audit(1793104100.598:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.0.529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 194.562694][ T27] audit: type=1326 audit(1793104100.608:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.0.529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 194.798488][ T6316] loop5: detected capacity change from 0 to 128 [ 195.094605][ T6316] EXT4-fs (loop5): Test dummy encryption mode enabled [ 195.213426][ T27] audit: type=1326 audit(1793104100.608:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.0.529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 195.278038][ T27] audit: type=1326 audit(1793104101.078:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.0.529" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 195.360785][ T6316] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 195.383888][ T6316] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.469233][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.539'. [ 195.930914][ T6316] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 196.019776][ T6325] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 196.266776][ T4549] EXT4-fs (loop5): unmounting filesystem. [ 197.764699][ T6384] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 197.764699][ T6384] The task syz.5.552 (6384) triggered the difference, watch for misbehavior. [ 200.697474][ T6453] 9pnet_fd: Insufficient options for proto=fd [ 201.063503][ T27] kauditd_printk_skb: 73 callbacks suppressed [ 201.063517][ T27] audit: type=1326 audit(1793104108.728:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.4.571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389719f559 code=0x7ffc0000 [ 201.132692][ T129] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 201.150340][ T27] audit: type=1326 audit(1793104108.728:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.4.571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389719f559 code=0x7ffc0000 [ 201.186741][ T27] audit: type=1326 audit(1793104108.728:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.4.571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389719f559 code=0x7ffc0000 [ 201.983952][ T129] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.032532][ T27] audit: type=1326 audit(1793104108.728:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.4.571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f389719f559 code=0x7ffc0000 [ 202.060561][ T129] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.082965][ T129] usb 6-1: config 0 interface 0 has no altsetting 0 [ 202.089671][ T129] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 202.109526][ T27] audit: type=1326 audit(1793104108.728:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.4.571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389719f559 code=0x7ffc0000 [ 202.130355][ T6487] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 202.142609][ T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.169180][ T129] usb 6-1: config 0 descriptor?? [ 202.198746][ T27] audit: type=1326 audit(1793104108.728:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.4.571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389719f559 code=0x7ffc0000 [ 202.272646][ T27] audit: type=1326 audit(1793104108.728:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.4.571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389719f559 code=0x7ffc0000 [ 202.356745][ T27] audit: type=1326 audit(1793104108.728:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.4.571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389719f559 code=0x7ffc0000 [ 202.436464][ T27] audit: type=1326 audit(1793104108.728:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.4.571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f389719f559 code=0x7ffc0000 [ 202.508590][ T27] audit: type=1326 audit(1793104108.728:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6471 comm="syz.4.571" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389719f559 code=0x7ffc0000 [ 202.598816][ T129] hid-picolcd 0003:04D8:F002.0004: unbalanced collection at end of report description [ 202.622969][ T129] hid-picolcd 0003:04D8:F002.0004: device report parse failed [ 202.644757][ T129] hid-picolcd: probe of 0003:04D8:F002.0004 failed with error -22 [ 202.801624][ T26] usb 6-1: USB disconnect, device number 7 [ 204.158397][ T6528] loop5: detected capacity change from 0 to 128 [ 204.201689][ T6528] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 204.249909][ T6528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.616435][ T6551] loop5: detected capacity change from 0 to 512 [ 205.697363][ T6551] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 205.820161][ T6551] EXT4-fs (loop5): 1 truncate cleaned up [ 205.896556][ T6551] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 207.519698][ T4549] EXT4-fs (loop5): unmounting filesystem. [ 208.415484][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.611'. [ 209.142532][ T5679] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 209.323788][ T6616] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes»G [ 209.333093][ T6616] Error parsing options; rc = [-22] [ 209.392598][ T5679] usb 6-1: Using ep0 maxpacket: 8 [ 209.413740][ T5679] usb 6-1: unable to get BOS descriptor or descriptor too short [ 209.508436][ T5679] usb 6-1: config 9 has an invalid interface number: 75 but max is 0 [ 209.605456][ T5679] usb 6-1: config 9 has no interface number 0 [ 209.721557][ T5679] usb 6-1: New USB device found, idVendor=fb5c, idProduct=268b, bcdDevice=22.cc [ 209.844907][ T5679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.564042][ T5679] usb 6-1: Product: syz [ 210.568304][ T5679] usb 6-1: Manufacturer: syz [ 210.583848][ T5679] usb 6-1: SerialNumber: syz [ 210.837792][ T5679] usb-storage 6-1:9.75: USB Mass Storage device detected [ 210.993976][ T5679] usb 6-1: USB disconnect, device number 8 [ 211.398589][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.626'. [ 212.863071][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 216.640208][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 217.954880][ T6744] netlink: 168 bytes leftover after parsing attributes in process `syz.6.649'. [ 218.926304][ T6716] rxe_eth0 speed is unknown, defaulting to 1000 [ 221.319039][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 222.699256][ T27] kauditd_printk_skb: 64 callbacks suppressed [ 222.699270][ T27] audit: type=1326 audit(1793104130.358:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.3.678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 222.958721][ T27] audit: type=1326 audit(1793104130.358:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.3.678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 223.521016][ T27] audit: type=1326 audit(1793104130.358:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.3.678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 223.630847][ T27] audit: type=1326 audit(1793104130.358:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.3.678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 224.467742][ T27] audit: type=1326 audit(1793104130.368:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.3.678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 224.545487][ T27] audit: type=1326 audit(1793104130.368:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.3.678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 224.618102][ T27] audit: type=1326 audit(1793104130.368:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.3.678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 224.692424][ T27] audit: type=1326 audit(1793104130.368:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.3.678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 224.782904][ T27] audit: type=1326 audit(1793104130.368:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.3.678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 224.998434][ T27] audit: type=1326 audit(1793104130.368:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.3.678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 225.279874][ T6867] fuse: Bad value for 'fd' [ 226.301486][ T6893] loop5: detected capacity change from 0 to 512 [ 226.985054][ T6893] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 226.994807][ T6893] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.195662][ T4549] EXT4-fs (loop5): unmounting filesystem. [ 228.183535][ T27] kauditd_printk_skb: 105 callbacks suppressed [ 228.183548][ T27] audit: type=1326 audit(1793104135.848:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.0.701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 228.256665][ T27] audit: type=1326 audit(1793104135.848:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.0.701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 228.313973][ T27] audit: type=1326 audit(1793104135.848:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.0.701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 228.394476][ T6935] loop5: detected capacity change from 0 to 512 [ 228.421249][ T6935] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 228.536485][ T6935] EXT4-fs (loop5): 1 truncate cleaned up [ 228.673064][ T6935] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 228.974026][ T27] audit: type=1326 audit(1793104135.848:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.0.701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 229.100441][ T27] audit: type=1326 audit(1793104135.848:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.0.701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 229.141169][ T27] audit: type=1326 audit(1793104135.848:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.0.701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 229.355837][ T27] audit: type=1326 audit(1793104135.848:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.0.701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 229.381054][ T27] audit: type=1326 audit(1793104135.848:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.0.701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 229.432940][ T27] audit: type=1326 audit(1793104135.848:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.0.701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 229.912021][ T27] audit: type=1326 audit(1793104135.848:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.0.701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 230.329653][ T4549] EXT4-fs (loop5): unmounting filesystem. [ 231.463010][ T6960] loop5: detected capacity change from 0 to 32768 [ 231.611062][ T6960] XFS (loop5): Mounting V5 Filesystem [ 232.672618][ T6960] XFS (loop5): Ending clean mount [ 232.728582][ T6960] XFS (loop5): Quotacheck needed: Please wait. [ 232.995087][ T6960] XFS (loop5): Quotacheck: Done. [ 234.259279][ T4549] XFS (loop5): Unmounting Filesystem [ 234.782438][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 234.782453][ T27] audit: type=1326 audit(1793104142.438:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 234.856899][ T27] audit: type=1326 audit(1793104142.438:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 234.927127][ T27] audit: type=1326 audit(1793104142.438:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 235.003263][ T27] audit: type=1326 audit(1793104142.438:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 235.092194][ T27] audit: type=1326 audit(1793104142.438:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 235.162399][ T27] audit: type=1326 audit(1793104142.438:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 235.274504][ T7035] loop5: detected capacity change from 0 to 512 [ 236.007549][ T7035] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 236.016830][ T7035] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.083430][ T27] audit: type=1326 audit(1793104142.438:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 236.113770][ T27] audit: type=1326 audit(1793104142.438:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 236.192548][ T27] audit: type=1326 audit(1793104142.438:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 236.240891][ T4549] EXT4-fs (loop5): unmounting filesystem. [ 236.322507][ T27] audit: type=1326 audit(1793104142.438:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.3.718" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 236.416079][ T7049] loop5: detected capacity change from 0 to 1024 [ 236.479592][ T7049] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 236.502211][ T7049] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.543187][ T7049] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.733: lblock 0 mapped to illegal pblock 0 (length 6) [ 236.679012][ T7049] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.733: lblock 0 mapped to illegal pblock 0 (length 1) [ 236.750060][ T7049] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 236.787669][ T7049] EXT4-fs (loop5): This should not happen!! Data will be lost [ 236.787669][ T7049] [ 236.919920][ T4549] EXT4-fs (loop5): unmounting filesystem. [ 238.524677][ T7060] loop5: detected capacity change from 0 to 40427 [ 238.588400][ T7060] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0) [ 238.627423][ T7060] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 238.674513][ T7060] F2FS-fs (loop5): Unrecognized mount option "age_extent_cache" or missing value [ 238.875128][ T7094] loop5: detected capacity change from 0 to 1024 [ 238.902676][ T7094] EXT4-fs: Ignoring removed oldalloc option [ 238.946576][ T7094] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 238.967713][ T7094] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.714225][ T7040] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 240.672997][ T7115] overlayfs: failed to resolve './file0': -2 [ 240.918344][ T4549] EXT4-fs (loop5): unmounting filesystem. [ 241.401727][ T7136] loop5: detected capacity change from 0 to 4096 [ 241.431821][ T7136] EXT4-fs: Ignoring removed nobh option [ 242.252505][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 242.459255][ T7136] EXT4-fs: Ignoring removed bh option [ 242.473633][ T7136] EXT4-fs (loop5): Test dummy encryption mode enabled [ 242.521288][ T7136] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 242.896444][ T7136] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 243.104451][ T7136] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 243.132147][ T27] kauditd_printk_skb: 112 callbacks suppressed [ 243.132162][ T27] audit: type=1800 audit(1793104150.788:652): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.771" name="file1" dev="loop5" ino=19 res=0 errno=0 [ 243.248631][ T4549] EXT4-fs (loop5): unmounting filesystem. [ 243.463712][ T4398] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.575430][ T4398] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.714433][ T4398] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.811158][ T4398] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.957590][ T7187] loop5: detected capacity change from 0 to 1024 [ 244.463380][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.473017][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.482176][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.491492][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.500077][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 244.548527][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.684307][ T7196] rxe_eth0 speed is unknown, defaulting to 1000 [ 245.780812][ T7196] chnl_net:caif_netlink_parms(): no params data found [ 246.060564][ T7240] loop5: detected capacity change from 0 to 24 [ 246.093574][ T7240] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 246.144803][ T7240] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 246.293220][ T7240] VFS: Lookup of 'file0' in romfs loop5 would have caused loop [ 246.335760][ T7196] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.362536][ T7196] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.398396][ T7196] device bridge_slave_0 entered promiscuous mode [ 246.453012][ T7196] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.460184][ T7196] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.514207][ T7196] device bridge_slave_1 entered promiscuous mode [ 246.594404][ T7249] loop5: detected capacity change from 0 to 1764 [ 246.600497][ T7196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.652428][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 246.674967][ T7196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.874228][ T7249] loop5: detected capacity change from 0 to 4096 [ 246.875990][ T7196] team0: Port device team_slave_0 added [ 246.930168][ T4398] device hsr_slave_0 left promiscuous mode [ 246.980801][ T4398] device hsr_slave_1 left promiscuous mode [ 246.991372][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.024905][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.101280][ T7257] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.210438][ T4398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.248738][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.727512][ T4398] device bridge_slave_1 left promiscuous mode [ 247.932722][ T4398] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.007197][ T4398] device bridge_slave_0 left promiscuous mode [ 248.053644][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.224302][ T4398] device veth1_macvtap left promiscuous mode [ 248.230449][ T4398] device veth0_macvtap left promiscuous mode [ 248.289973][ T4398] device veth1_vlan left promiscuous mode [ 248.302656][ T4398] device veth0_vlan left promiscuous mode [ 248.758054][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 250.601781][ T7289] loop5: detected capacity change from 0 to 32768 [ 250.812426][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 251.131482][ T4398] team0 (unregistering): Port device team_slave_1 removed [ 251.271290][ T7297] loop5: detected capacity change from 0 to 512 [ 251.303963][ T7297] EXT4-fs: Ignoring removed nobh option [ 251.327581][ T7297] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 252.037623][ T4398] team0 (unregistering): Port device team_slave_0 removed [ 252.072445][ T7297] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.177029][ T7297] EXT4-fs (loop5): 1 truncate cleaned up [ 252.229197][ T7297] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 252.248737][ T4398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.447685][ T4549] EXT4-fs (loop5): unmounting filesystem. [ 252.500736][ T4398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.892621][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 253.068640][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 253.915301][ T7313] loop5: detected capacity change from 0 to 32768 [ 253.988286][ T7313] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.827 (7313) [ 254.148500][ T7313] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 254.177442][ T7313] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 254.187620][ T7313] BTRFS info (device loop5): using free space tree [ 254.218168][ T4398] bond0 (unregistering): Released all slaves [ 255.001985][ T7196] team0: Port device team_slave_1 added [ 255.232388][ T7313] BTRFS info (device loop5): enabling ssd optimizations [ 255.299734][ T7196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.498369][ T7196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.535604][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.542028][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.343930][ T7196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.427957][ T7196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.437984][ T7196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.511032][ T4549] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 256.582333][ T7196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.950329][ T7196] device hsr_slave_0 entered promiscuous mode [ 256.983629][ T7196] device hsr_slave_1 entered promiscuous mode [ 257.037672][ T7196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.061890][ T7196] Cannot create hsr debugfs directory [ 257.085268][ T7161] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop5 scanned by udevd (7161) [ 257.609951][ T7196] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 257.660160][ T7196] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 257.740356][ T7196] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 257.779483][ T7196] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 258.645617][ T7196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.695130][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.711760][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.803939][ T7196] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.839957][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.876668][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.897701][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'. [ 258.905962][ T4521] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.913681][ T4521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.972726][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.021292][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.040986][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.074999][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.082233][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.085030][ T7377] loop5: detected capacity change from 0 to 40427 [ 259.120835][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.144973][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.153429][ T7377] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0) [ 259.168635][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.188934][ T7377] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 259.219962][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.222560][ T7377] F2FS-fs (loop5): Unrecognized mount option "age_extent_cache" or missing value [ 259.259675][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.290562][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.315501][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.347810][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.375338][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.410351][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.420461][ T27] audit: type=1326 audit(1793104167.078:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.0.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 259.470242][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.498450][ T27] audit: type=1326 audit(1793104167.078:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.0.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 259.524650][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.581688][ T7409] loop5: detected capacity change from 0 to 512 [ 259.604265][ T27] audit: type=1326 audit(1793104167.078:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.0.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 259.688482][ T27] audit: type=1326 audit(1793104167.078:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.0.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 259.765404][ T7409] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 259.765409][ T27] audit: type=1326 audit(1793104167.108:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.0.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 259.765444][ T27] audit: type=1326 audit(1793104167.108:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.0.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 259.782441][ T7409] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.943164][ T27] audit: type=1326 audit(1793104167.108:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.0.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 259.968191][ T4549] EXT4-fs (loop5): unmounting filesystem. [ 260.056268][ T27] audit: type=1326 audit(1793104167.108:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.0.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 260.123212][ T7421] loop5: detected capacity change from 0 to 764 [ 260.162809][ T27] audit: type=1326 audit(1793104167.108:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.0.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 260.260123][ T27] audit: type=1326 audit(1793104167.108:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.0.849" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7959f559 code=0x7ffc0000 [ 260.562169][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.580257][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.607370][ T7196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.212754][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.226326][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.267601][ T7451] loop5: detected capacity change from 0 to 32768 [ 262.276375][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.300526][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.333536][ T7451] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 262.354061][ T7451] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 262.376255][ T7196] device veth0_vlan entered promiscuous mode [ 262.386087][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.398146][ T7451] BTRFS info (device loop5): using free space tree [ 262.405906][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.419962][ T7196] device veth1_vlan entered promiscuous mode [ 262.459003][ T7196] device veth0_macvtap entered promiscuous mode [ 262.468982][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 262.527435][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 262.579705][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.588635][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.597577][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.608618][ T7196] device veth1_macvtap entered promiscuous mode [ 262.713514][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.792026][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.822444][ T7451] BTRFS info (device loop5): enabling ssd optimizations [ 262.846605][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.902327][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.912222][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.962467][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.998815][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.018622][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.061589][ T7196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.094391][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.163432][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.191107][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.236954][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.250204][ T7451] BTRFS info (device loop5): balance: start -d -m [ 263.269510][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.305769][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.310678][ T7451] BTRFS info (device loop5): relocating block group 6881280 flags data|metadata [ 263.346757][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.382336][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.422388][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.465789][ T7196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.506856][ T7196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.557630][ T7196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.585891][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.597307][ T7451] BTRFS info (device loop5): relocating block group 5242880 flags data|metadata [ 263.603194][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.644634][ T7196] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.669618][ T7196] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.703423][ T7196] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.743445][ T7196] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.756367][ T7451] BTRFS info (device loop5): balance: canceled [ 263.913925][ T7515] overlayfs: failed to resolve './file0': -2 [ 263.924518][ T4549] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 263.935617][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.953664][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.060737][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 264.088246][ T4398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.135145][ T4398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.182779][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.590078][ T7557] tipc: Failed to remove unknown binding: 66,0,0/0:2265606115/2265606117 [ 266.652450][ T7557] tipc: Failed to remove unknown binding: 66,0,0/0:2265606115/2265606116 [ 266.679681][ T7557] tipc: Failed to remove unknown binding: 66,0,0/0:2265606115/2265606117 [ 266.752339][ T7557] tipc: Failed to remove unknown binding: 66,0,0/0:2265606115/2265606116 [ 267.553022][ T7591] syz.3.888 (7591) used greatest stack depth: 17952 bytes left [ 267.978926][ T7601] loop5: detected capacity change from 0 to 1024 [ 268.455412][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.891'. [ 268.636274][ T7612] netlink: 'syz.6.894': attribute type 10 has an invalid length. [ 268.695879][ T7612] team0: Port device wlan1 added [ 268.772582][ T4394] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 269.702492][ T4394] usb 8-1: Using ep0 maxpacket: 32 [ 269.719814][ T4394] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 269.762379][ T4394] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.789041][ T4394] usb 8-1: config 0 has no interface number 0 [ 269.816042][ T4394] usb 8-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 269.856542][ T4394] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 269.898500][ T4394] usb 8-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.972574][ T4394] usb 8-1: config 0 interface 196 has no altsetting 0 [ 269.993219][ T4394] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 270.046744][ T4394] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.085833][ T4394] usb 8-1: Product: syz [ 270.090066][ T4394] usb 8-1: Manufacturer: syz [ 270.132736][ T4394] usb 8-1: SerialNumber: syz [ 270.165517][ T4394] usb 8-1: config 0 descriptor?? [ 270.379262][ T4394] ipheth 8-1:0.196: Unable to find endpoints [ 270.403418][ T4394] usb 8-1: USB disconnect, device number 2 [ 273.368128][ T27] kauditd_printk_skb: 69 callbacks suppressed [ 273.368144][ T27] audit: type=1326 audit(1793104181.028:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.6.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 273.462369][ T27] audit: type=1326 audit(1793104181.068:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.6.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 273.557327][ T27] audit: type=1326 audit(1793104181.068:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.6.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 273.627701][ T27] audit: type=1326 audit(1793104181.068:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.6.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 273.705396][ T27] audit: type=1326 audit(1793104181.068:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.6.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 273.747701][ T27] audit: type=1326 audit(1793104181.068:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.6.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 273.804752][ T27] audit: type=1326 audit(1793104181.068:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.6.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 273.850394][ T27] audit: type=1326 audit(1793104181.068:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.6.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 273.906310][ T27] audit: type=1326 audit(1793104181.068:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.6.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 273.964107][ T27] audit: type=1326 audit(1793104181.068:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.6.916" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 276.873725][ T7765] loop5: detected capacity change from 0 to 512 [ 277.544964][ T7765] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 277.554116][ T7765] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.739124][ T4549] EXT4-fs (loop5): unmounting filesystem. [ 277.918912][ T7778] loop5: detected capacity change from 0 to 16 [ 278.019782][ T7778] erofs: (device loop5): mounted with root inode @ nid 36. [ 279.970910][ T7805] overlayfs: failed to clone upperpath [ 282.505493][ T4278] Bluetooth: hci3: command 0x0405 tx timeout [ 282.566117][ T7822] overlayfs: failed to clone upperpath [ 283.163334][ T7834] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.460881][ T7860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.961'. [ 284.520468][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 284.619660][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.962'. [ 284.706341][ T7870] fuse: Bad value for 'fd' [ 286.800886][ T7887] rxe_eth0 speed is unknown, defaulting to 1000 [ 291.775515][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.7.976'. [ 292.377065][ T7934] loop5: detected capacity change from 0 to 1024 [ 292.464861][ T7934] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 292.473907][ T7934] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.493533][ T7934] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.971: lblock 3 mapped to illegal pblock 3 (length 3) [ 292.519843][ T7934] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 292.534526][ T7934] EXT4-fs (loop5): This should not happen!! Data will be lost [ 292.534526][ T7934] [ 292.547496][ T7941] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.971: lblock 3 mapped to illegal pblock 3 (length 1) [ 292.625725][ T7941] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.971: lblock 3 mapped to illegal pblock 3 (length 1) [ 292.661007][ T7941] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.971: lblock 3 mapped to illegal pblock 3 (length 1) [ 292.703287][ T7941] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.971: lblock 3 mapped to illegal pblock 3 (length 1) [ 292.741764][ T7941] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.971: lblock 3 mapped to illegal pblock 3 (length 1) [ 292.777676][ T7941] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.971: lblock 3 mapped to illegal pblock 3 (length 1) [ 292.826864][ T7941] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.971: lblock 3 mapped to illegal pblock 3 (length 1) [ 292.871969][ T7941] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.971: lblock 3 mapped to illegal pblock 3 (length 1) [ 292.914035][ T7941] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #15: block 3: comm syz.5.971: lblock 3 mapped to illegal pblock 3 (length 1) [ 292.944816][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 293.081382][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.990'. [ 293.091687][ T7964] netlink: 'syz.3.990': attribute type 1 has an invalid length. [ 293.296177][ T33] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 293.337009][ T33] EXT4-fs (loop5): This should not happen!! Data will be lost [ 293.337009][ T33] [ 293.378529][ T4549] EXT4-fs (loop5): unmounting filesystem. [ 293.508321][ T7980] netlink: 32 bytes leftover after parsing attributes in process `syz.5.995'. [ 293.866029][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1003'. [ 295.252394][ T4394] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 295.454035][ T4394] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.476310][ T4394] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.505148][ T4394] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 295.524822][ T4394] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.589147][ T4394] usb 8-1: config 0 descriptor?? [ 295.745103][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 296.027830][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 296.041461][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 296.048635][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 296.062543][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 296.818100][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 296.840736][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 296.851217][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 296.870451][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 296.932506][ T7521] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 296.940517][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 296.960612][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 296.982366][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 296.989250][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.002376][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.009291][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.029262][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.041839][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.067158][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.079327][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.086367][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.098510][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.105508][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.119636][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.126616][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.140761][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.148163][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.165524][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.196002][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.224583][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.234296][ T7521] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 297.243053][ T7521] usb 6-1: config 0 has no interface number 0 [ 297.258604][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.300012][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.324308][ T7521] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 297.335482][ T7521] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 297.356360][ T7521] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 297.385653][ T7521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.394517][ T7521] usb 6-1: Product: syz [ 297.398884][ T7521] usb 6-1: Manufacturer: syz [ 297.457926][ T7521] usb 6-1: SerialNumber: syz [ 297.592604][ T7521] usb 6-1: config 0 descriptor?? [ 297.666776][ T8058] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 297.692064][ T8058] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 297.767916][ T7521] smsc95xx v2.0.0 [ 297.892347][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.899227][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.942410][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 297.990363][ T4394] savu 0003:1E7D:2D5A.0005: unknown main item tag 0x0 [ 298.007061][ T4394] savu 0003:1E7D:2D5A.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 298.007707][ T8058] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 298.062444][ T8058] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 298.082565][ T4394] usb 8-1: USB disconnect, device number 3 [ 298.300512][ T7521] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 298.322386][ T7521] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 298.369874][ T8089] fido_id[8089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 298.491491][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1031'. [ 298.540268][ T7521] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 298.570564][ T7521] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 298.601519][ T7521] usb 6-1: USB disconnect, device number 9 [ 298.735863][ T8105] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 302.986301][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'. [ 302.999138][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'. [ 304.738073][ T8237] Non-string source [ 304.764244][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1071'. [ 304.877680][ T7519] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 305.065306][ T7519] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 305.083422][ T7519] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.132863][ T7519] usb 6-1: config 1 has no interface number 0 [ 305.152545][ T7519] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 305.191814][ T7519] usb 6-1: config 1 interface 105 has no altsetting 0 [ 305.207171][ T8255] netlink: 'syz.7.1076': attribute type 7 has an invalid length. [ 305.216607][ T8255] netlink: 'syz.7.1076': attribute type 5 has an invalid length. [ 305.225217][ T8255] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1076'. [ 305.236162][ T7519] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 305.252352][ T7519] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 305.281043][ T7519] usb 6-1: Product: syz [ 305.291188][ T7519] usb 6-1: Manufacturer: syz [ 305.301329][ T7519] usb 6-1: SerialNumber: syz [ 305.392680][ T4349] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 305.428056][ T4349] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 306.246840][ T7519] aqc111: probe of 6-1:1.105 failed with error -22 [ 306.312143][ T7519] usb 6-1: USB disconnect, device number 10 [ 306.490563][ T8261] fido_id[8261]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 309.414872][ T8328] loop5: detected capacity change from 0 to 128 [ 311.473972][ T8350] syz.5.1096 uses obsolete (PF_INET,SOCK_PACKET) [ 311.742191][ T8364] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 311.774864][ T8364] xt_hashlimit: size too large, truncated to 1048576 [ 313.797165][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 314.255337][ T8412] loop5: detected capacity change from 0 to 256 [ 314.293527][ T8412] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda10bcab, utbl_chksum : 0xe619d30d) [ 314.311639][ T8412] exFAT-fs (loop5): failed to load alloc-bitmap [ 314.324311][ T8412] exFAT-fs (loop5): failed to recognize exfat type [ 316.993300][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.999665][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.212350][ T4394] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 319.415200][ T4394] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 319.440806][ T4394] usb 8-1: config 1 interface 0 has no altsetting 0 [ 319.466618][ T4394] usb 8-1: string descriptor 0 read error: -22 [ 319.495322][ T4394] usb 8-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.40 [ 319.522950][ T4394] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.373995][ T8463] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 320.566008][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1137'. [ 320.754399][ T8487] loop5: detected capacity change from 0 to 512 [ 320.793909][ T8487] EXT4-fs: Ignoring removed nobh option [ 320.803930][ T4394] usbhid 8-1:1.0: can't add hid device: -71 [ 320.824749][ T4394] usbhid: probe of 8-1:1.0 failed with error -71 [ 320.846746][ T4394] usb 8-1: USB disconnect, device number 4 [ 320.896408][ T8487] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 320.933498][ T8487] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.112800][ T4549] EXT4-fs (loop5): unmounting filesystem. [ 323.272693][ T8516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1146'. [ 325.231160][ T8548] loop5: detected capacity change from 0 to 1024 [ 327.993274][ T8571] netlink: 'syz.0.1165': attribute type 10 has an invalid length. [ 328.676272][ T8583] loop5: detected capacity change from 0 to 512 [ 328.769513][ T8583] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 329.229807][ T4549] EXT4-fs (loop5): unmounting filesystem. [ 330.588373][ T8630] overlayfs: failed to clone upperpath [ 331.803552][ T8647] loop7: detected capacity change from 0 to 256 [ 331.821664][ T8647] exfat: Deprecated parameter 'utf8' [ 331.874025][ T8647] exfat: Deprecated parameter 'utf8' [ 331.881966][ T8649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1190'. [ 331.932328][ T8647] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 332.270379][ T8658] rxe_eth0 speed is unknown, defaulting to 1000 [ 334.790682][ T8688] loop7: detected capacity change from 0 to 1024 [ 336.653078][ T8703] overlayfs: upper fs does not support tmpfile. [ 337.480621][ T8712] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1203'. [ 337.669562][ T8717] rxe_eth0 speed is unknown, defaulting to 1000 [ 337.798692][ T8721] ip_tables: iptables: counters copy to user failed while replacing table [ 338.788225][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1213'. [ 339.112398][ T7521] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 339.302430][ T7521] usb 6-1: Using ep0 maxpacket: 32 [ 339.317260][ T7521] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 339.412637][ T7521] usb 6-1: config 0 has no interface number 0 [ 339.419202][ T7521] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 339.434135][ T7521] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.445444][ T7521] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 339.632361][ T7521] usb 6-1: config 0 interface 196 has no altsetting 0 [ 339.717538][ T7521] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 339.726863][ T7521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.735977][ T7521] usb 6-1: Product: syz [ 339.740187][ T7521] usb 6-1: Manufacturer: syz [ 339.744974][ T7521] usb 6-1: SerialNumber: syz [ 339.755281][ T7521] usb 6-1: config 0 descriptor?? [ 339.760804][ T8729] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 340.811425][ T7521] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 341.019511][ T4349] usb 6-1: USB disconnect, device number 11 [ 341.177509][ T4349] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected [ 344.279243][ T8793] loop7: detected capacity change from 0 to 512 [ 344.353727][ T8793] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 344.362856][ T8793] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.659925][ T8822] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1236'. [ 348.335195][ T8841] netlink: 3556 bytes leftover after parsing attributes in process `syz.6.1241'. [ 352.140639][ T7196] EXT4-fs (loop7): unmounting filesystem. [ 354.711069][ T8880] loop7: detected capacity change from 0 to 256 [ 355.847307][ T8884] FAULT_INJECTION: forcing a failure. [ 355.847307][ T8884] name failslab, interval 1, probability 0, space 0, times 0 [ 355.912706][ T8884] CPU: 0 PID: 8884 Comm: syz.5.1248 Not tainted syzkaller #0 [ 355.920161][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 355.930274][ T8884] Call Trace: [ 355.933607][ T8884] [ 355.936552][ T8884] dump_stack_lvl+0x188/0x24e [ 355.941267][ T8884] ? show_regs_print_info+0x12/0x12 [ 355.946461][ T8884] ? load_image+0x410/0x410 [ 355.950977][ T8884] ? __lock_acquire+0x7ea0/0x7ea0 [ 355.956005][ T8884] should_fail_ex+0x390/0x4c0 [ 355.960687][ T8884] should_failslab+0x5/0x20 [ 355.965186][ T8884] slab_pre_alloc_hook+0x59/0x300 [ 355.970210][ T8884] kmem_cache_alloc_node+0x5a/0x310 [ 355.975421][ T8884] ? alloc_vmap_area+0x18e/0x18d0 [ 355.980470][ T8884] alloc_vmap_area+0x18e/0x18d0 [ 355.985347][ T8884] ? vm_map_ram+0xab0/0xab0 [ 355.989858][ T8884] ? rcu_is_watching+0x11/0xa0 [ 355.994636][ T8884] __get_vm_area_node+0x158/0x330 [ 355.999662][ T8884] ? kasan_set_track+0x60/0x70 [ 356.004457][ T8884] ? __kasan_kmalloc+0x8e/0xa0 [ 356.009225][ T8884] __vmalloc_node_range+0x357/0x1380 [ 356.014511][ T8884] ? write_ldt+0x354/0x5c0 [ 356.018945][ T8884] ? free_vm_area+0x50/0x50 [ 356.023476][ T8884] ? write_ldt+0x354/0x5c0 [ 356.027900][ T8884] __vmalloc+0x76/0x80 [ 356.031982][ T8884] ? write_ldt+0x354/0x5c0 [ 356.036400][ T8884] write_ldt+0x354/0x5c0 [ 356.040647][ T8884] ? __ia32_sys_modify_ldt+0x80/0x80 [ 356.045930][ T8884] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 356.051927][ T8884] ? lock_chain_count+0x20/0x20 [ 356.056798][ T8884] __se_sys_modify_ldt+0x1ed/0x320 [ 356.061907][ T8884] ? lockdep_hardirqs_on+0x94/0x140 [ 356.067167][ T8884] do_syscall_64+0x4c/0xa0 [ 356.071598][ T8884] ? clear_bhb_loop+0x60/0xb0 [ 356.076269][ T8884] ? clear_bhb_loop+0x60/0xb0 [ 356.080965][ T8884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.086862][ T8884] RIP: 0033:0x7ff89019f559 [ 356.091273][ T8884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.110894][ T8884] RSP: 002b:00007ff890fe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 356.119315][ T8884] RAX: ffffffffffffffda RBX: 00007ff890425fa0 RCX: 00007ff89019f559 [ 356.127289][ T8884] RDX: 0000000000000010 RSI: 00002000000011c0 RDI: 0000000000000001 [ 356.135258][ T8884] RBP: 00007ff890236b20 R08: 0000000000000000 R09: 0000000000000000 [ 356.143230][ T8884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.151225][ T8884] R13: 00007ff890426038 R14: 00007ff890425fa0 R15: 00007fffc842df78 [ 356.159251][ T8884] [ 356.362901][ T8884] syz.5.1248: vmalloc error: size 65536, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 356.396587][ T8884] CPU: 1 PID: 8884 Comm: syz.5.1248 Not tainted syzkaller #0 [ 356.404143][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 356.414219][ T8884] Call Trace: [ 356.417497][ T8884] [ 356.420421][ T8884] dump_stack_lvl+0x188/0x24e [ 356.425155][ T8884] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 356.431571][ T8884] ? show_regs_print_info+0x12/0x12 [ 356.436768][ T8884] ? load_image+0x410/0x410 [ 356.441277][ T8884] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 356.447685][ T8884] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 356.454194][ T8884] warn_alloc+0x242/0x330 [ 356.458540][ T8884] ? slab_free_freelist_hook+0x133/0x1b0 [ 356.464169][ T8884] ? zone_watermark_ok_safe+0x270/0x270 [ 356.469714][ T8884] ? __get_vm_area_node+0x16d/0x330 [ 356.474931][ T8884] ? __get_vm_area_node+0x16d/0x330 [ 356.480142][ T8884] ? kasan_set_track+0x60/0x70 [ 356.484901][ T8884] ? __kasan_kmalloc+0x8e/0xa0 [ 356.489667][ T8884] __vmalloc_node_range+0x37c/0x1380 [ 356.494992][ T8884] ? free_vm_area+0x50/0x50 [ 356.499509][ T8884] ? write_ldt+0x354/0x5c0 [ 356.503934][ T8884] __vmalloc+0x76/0x80 [ 356.508003][ T8884] ? write_ldt+0x354/0x5c0 [ 356.512412][ T8884] write_ldt+0x354/0x5c0 [ 356.516652][ T8884] ? __ia32_sys_modify_ldt+0x80/0x80 [ 356.521929][ T8884] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 356.527923][ T8884] ? lock_chain_count+0x20/0x20 [ 356.532788][ T8884] __se_sys_modify_ldt+0x1ed/0x320 [ 356.537909][ T8884] ? lockdep_hardirqs_on+0x94/0x140 [ 356.543103][ T8884] do_syscall_64+0x4c/0xa0 [ 356.547526][ T8884] ? clear_bhb_loop+0x60/0xb0 [ 356.552289][ T8884] ? clear_bhb_loop+0x60/0xb0 [ 356.556979][ T8884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.562886][ T8884] RIP: 0033:0x7ff89019f559 [ 356.567297][ T8884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.586899][ T8884] RSP: 002b:00007ff890fe3028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 356.595325][ T8884] RAX: ffffffffffffffda RBX: 00007ff890425fa0 RCX: 00007ff89019f559 [ 356.603301][ T8884] RDX: 0000000000000010 RSI: 00002000000011c0 RDI: 0000000000000001 [ 356.611262][ T8884] RBP: 00007ff890236b20 R08: 0000000000000000 R09: 0000000000000000 [ 356.619238][ T8884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.627225][ T8884] R13: 00007ff890426038 R14: 00007ff890425fa0 R15: 00007fffc842df78 [ 356.635202][ T8884] [ 356.835763][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1257'. [ 356.918909][ T8905] device vlan2 entered promiscuous mode [ 356.938765][ T8905] device syz_tun entered promiscuous mode [ 357.072392][ T8884] Mem-Info: [ 357.075743][ T8884] active_anon:4054 inactive_anon:18672 isolated_anon:0 [ 357.075743][ T8884] active_file:23508 inactive_file:37753 isolated_file:0 [ 357.075743][ T8884] unevictable:768 dirty:89 writeback:0 [ 357.075743][ T8884] slab_reclaimable:18035 slab_unreclaimable:98484 [ 357.075743][ T8884] mapped:36747 shmem:14774 pagetables:1331 [ 357.075743][ T8884] sec_pagetables:0 bounce:0 [ 357.075743][ T8884] kernel_misc_reclaimable:0 [ 357.075743][ T8884] free:1302397 free_pcp:6460 free_cma:0 [ 357.165354][ T8884] Node 0 active_anon:16136kB inactive_anon:74368kB active_file:94016kB inactive_file:150828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147056kB dirty:368kB writeback:0kB shmem:57176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12616kB pagetables:5328kB sec_pagetables:0kB all_unreclaimable? no [ 357.771174][ T8884] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 357.838147][ T8884] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.933343][ T8884] lowmem_reserve[]: 0 2509 2510 2510 2510 [ 357.939467][ T8884] Node 0 DMA32 free:1313224kB boost:0kB min:3932kB low:6504kB high:9076kB reserved_highatomic:0KB active_anon:16132kB inactive_anon:58444kB active_file:94016kB inactive_file:150828kB unevictable:1536kB writepending:408kB present:3129332kB managed:2574528kB mlocked:0kB bounce:0kB free_pcp:6120kB local_pcp:3204kB free_cma:0kB [ 358.039385][ T8884] lowmem_reserve[]: 0 0 1 1 1 [ 358.053081][ T8884] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 358.112390][ T8884] lowmem_reserve[]: 0 0 0 0 0 [ 358.117398][ T8884] Node 1 Normal free:3899688kB boost:0kB min:6292kB low:10408kB high:14524kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:184kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19556kB local_pcp:4704kB free_cma:0kB [ 358.197581][ T8884] lowmem_reserve[]: 0 0 0 0 0 [ 358.202606][ T8884] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 358.236222][ T8884] Node 0 DMA32: 2360*4kB (UME) 1809*8kB (UME) 1604*16kB (UME) 1235*32kB (UME) 643*64kB (UME) 319*128kB (UME) 172*256kB (UME) 71*512kB (UME) 31*1024kB (UME) 7*2048kB (ME) 250*4096kB (UM) = 1321544kB [ 358.285590][ T8884] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 358.300268][ T8884] Node 1 Normal: 65*4kB (UE) 19*8kB (UME) 24*16kB (UME) 46*32kB (UME) 20*64kB (UME) 7*128kB (UE) 2*256kB (UM) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 950*4096kB (M) = 3899740kB [ 358.336107][ T8884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 358.349010][ T8884] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 358.396584][ T8884] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 358.447271][ T8884] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 358.466095][ T8884] 68230 total pagecache pages [ 358.471854][ T8884] 0 pages in swap cache [ 358.495794][ T8884] Free swap = 124456kB [ 358.515298][ T8884] Total swap = 124996kB [ 358.533335][ T8884] 2097051 pages RAM [ 358.538807][ T8935] loop7: detected capacity change from 0 to 512 [ 358.551315][ T8884] 0 pages HighMem/MovableOnly [ 358.567556][ T8884] 419818 pages reserved [ 358.574378][ T8884] 0 pages cma reserved [ 358.586974][ T8935] EXT4-fs (loop7): Test dummy encryption mode enabled [ 358.622436][ T8935] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 358.675436][ T8935] EXT4-fs (loop7): 1 truncate cleaned up [ 358.721485][ T8935] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 362.776914][ T7196] EXT4-fs (loop7): unmounting filesystem. [ 368.042550][ T7521] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 368.173205][ T9053] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1304'. [ 368.232398][ T7521] usb 8-1: Using ep0 maxpacket: 16 [ 368.242125][ T7521] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 7 [ 368.295524][ T7521] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 368.329106][ T7521] usb 8-1: string descriptor 0 read error: -22 [ 368.342376][ T7521] usb 8-1: New USB device found, idVendor=0499, idProduct=1034, bcdDevice= 0.40 [ 368.371888][ T7521] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.408434][ T7521] snd-usb-audio: probe of 8-1:1.0 failed with error -2 [ 368.428157][ T7521] snd-usb-audio: probe of 8-1:1.1 failed with error -2 [ 368.559059][ T7521] snd-usb-audio: probe of 8-1:1.2 failed with error -2 [ 368.569777][ T8863] udevd[8863]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.385297][ T7521] usb 8-1: USB disconnect, device number 5 [ 370.364205][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 370.532552][ T7521] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 370.812475][ T7521] usb 6-1: Using ep0 maxpacket: 32 [ 370.819554][ T7521] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.881784][ T7521] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.912374][ T7521] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 370.948856][ T7521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.961858][ T9091] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1316'. [ 370.983615][ T7521] usb 6-1: config 0 descriptor?? [ 371.019288][ T7521] hub 6-1:0.0: USB hub found [ 371.214840][ T9098] syz.0.1318 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 371.226669][ T7521] hub 6-1:0.0: 1 port detected [ 371.248638][ T9098] overlayfs: failed to clone upperpath [ 371.354582][ T9101] loop7: detected capacity change from 0 to 512 [ 371.373183][ T9101] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 371.511947][ T9101] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 371.529324][ T9101] __quota_error: 29 callbacks suppressed [ 371.529340][ T9101] Quota error (device loop7): write_blk: dquota write failed [ 371.543277][ T9101] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 371.553213][ T9101] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.1319: Failed to acquire dquot type 0 [ 371.568769][ T9101] EXT4-fs (loop7): 1 truncate cleaned up [ 371.574548][ T9101] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 371.589174][ T7521] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 371.589925][ T9101] EXT4-fs error (device loop7): ext4_lookup:1860: inode #15: comm syz.7.1319: iget: bad i_size value: 360287970189639690 [ 371.722821][ T7521] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 371.769877][ T7521] usbhid 6-1:0.0: can't add hid device: -71 [ 371.811599][ T7521] usbhid: probe of 6-1:0.0 failed with error -71 [ 371.996489][ T7521] usb 6-1: USB disconnect, device number 12 [ 372.200506][ T9101] EXT4-fs (loop7): unmounting filesystem. [ 372.451493][ T9110] loop7: detected capacity change from 0 to 2048 [ 372.547334][ T9110] EXT4-fs warning (device loop7): read_mmp_block:115: Error -117 while reading MMP block 320 [ 373.450922][ T9120] loop7: detected capacity change from 0 to 512 [ 373.490909][ T9120] ext4: Unknown parameter 'defcontext' [ 373.514077][ T9124] overlayfs: failed to clone upperpath [ 373.698779][ T9129] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1328'. [ 374.379266][ T9149] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1325'. [ 377.312439][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1351'. [ 377.729352][ T9211] loop7: detected capacity change from 0 to 1024 [ 377.966560][ T7] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 378.809357][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.816225][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.862456][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 378.873303][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.889086][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.901599][ T7] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 379.032757][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.097466][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.122336][ T7] usb 6-1: Product: syz [ 379.126650][ T7] usb 6-1: Manufacturer: syz [ 379.131257][ T7] usb 6-1: SerialNumber: syz [ 380.208382][ T7] cdc_ncm 6-1:1.0: bind() failure [ 380.219405][ T7] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 380.227167][ T7] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 380.235135][ T7] usbtest: probe of 6-1:1.1 failed with error -71 [ 380.256920][ T7] usb 6-1: USB disconnect, device number 13 [ 381.338228][ T9255] loop7: detected capacity change from 0 to 1024 [ 382.059241][ T9263] binder: BINDER_SET_CONTEXT_MGR already set [ 382.732592][ T9263] binder: 9262:9263 ioctl 4018620d 200000000000 returned -16 [ 384.299282][ T9286] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1381'. [ 384.504054][ T9299] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 387.123763][ T9341] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1399'. [ 387.192540][ T129] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 387.385163][ T129] usb 8-1: unable to get BOS descriptor or descriptor too short [ 387.397231][ T129] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.420103][ T129] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 387.446102][ T129] usb 8-1: string descriptor 0 read error: -22 [ 387.458316][ T129] usb 8-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 387.472861][ T129] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.267087][ T129] usb 8-1: USB disconnect, device number 6 [ 389.682499][ T4349] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 389.904748][ T4349] usb 8-1: unable to get BOS descriptor or descriptor too short [ 389.928304][ T4349] usb 8-1: not running at top speed; connect to a high speed hub [ 389.970173][ T4349] usb 8-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 390.000562][ T4349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.029169][ T4349] usb 8-1: Product: syz [ 390.039578][ T4349] usb 8-1: Manufacturer: syz [ 390.049411][ T4349] usb 8-1: SerialNumber: syz [ 390.188013][ T9387] program syz.5.1417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.042498][ T7520] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 391.092013][ T9390] IPVS: Scheduler module ip_vs_mh not found [ 391.263950][ T7520] usb 6-1: config 2 has an invalid descriptor of length 48, skipping remainder of the config [ 391.282324][ T7520] usb 6-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.316386][ T7520] usb 6-1: config 2 interface 0 has no altsetting 0 [ 391.335755][ T7520] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 391.366256][ T7520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.374918][ T7520] usb 6-1: Product: syz [ 391.379360][ T7520] usb 6-1: Manufacturer: syz [ 391.384495][ T7520] usb 6-1: SerialNumber: syz [ 391.390121][ T9404] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1424'. [ 391.420424][ T9404] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1424'. [ 391.549537][ T4349] usb 8-1: MIDIStreaming interface descriptor not found [ 391.629030][ T7520] ims_pcu 6-1:2.0: Zero length descriptor [ 391.643153][ T7520] ims_pcu: probe of 6-1:2.0 failed with error -22 [ 391.673724][ T7520] usb 6-1: USB disconnect, device number 14 [ 391.761377][ T7518] usb 8-1: USB disconnect, device number 7 [ 392.589381][ T9439] rxe_eth0 speed is unknown, defaulting to 1000 [ 393.002040][ T9455] rxe_eth0 speed is unknown, defaulting to 1000 [ 394.021453][ T9455] rxe_eth0 speed is unknown, defaulting to 1000 [ 394.163278][ T9486] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1445'. [ 394.963690][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1452'. [ 395.914625][ T9516] tipc: Enabling of bearer rejected, failed to enable media [ 396.824710][ T9533] rxe_eth0 speed is unknown, defaulting to 1000 [ 397.093306][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1462'. [ 397.145621][ T9543] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1462'. [ 397.505798][ T9549] netlink: 'syz.3.1465': attribute type 10 has an invalid length. [ 397.634338][ T9549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1465'. [ 397.680378][ T9549] device caif0 entered promiscuous mode [ 397.730860][ T9549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.753230][ T9556] loop7: detected capacity change from 0 to 1024 [ 399.602531][ T9587] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1475'. [ 399.667215][ T9587] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1475'. [ 399.888769][ T9592] loop7: detected capacity change from 0 to 512 [ 400.582148][ T9592] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 400.591619][ T9592] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.805439][ T7196] EXT4-fs (loop7): unmounting filesystem. [ 401.563670][ T9608] loop7: detected capacity change from 0 to 1024 [ 402.170615][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1484'. [ 402.404006][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1486'. [ 405.924707][ T9683] mmap: syz.0.1507 (9683) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 407.640940][ T27] audit: type=1326 audit(1793628603.290:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.6.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 407.742358][ T27] audit: type=1326 audit(1793628603.330:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.6.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7e6b992d7 code=0x7ffc0000 [ 407.826443][ T27] audit: type=1326 audit(1793628603.330:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.6.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7e6b408d9 code=0x7ffc0000 [ 407.902137][ T27] audit: type=1326 audit(1793628603.330:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.6.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 407.983882][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1524'. [ 408.036586][ T27] audit: type=1326 audit(1793628603.330:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.6.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 408.126320][ T27] audit: type=1326 audit(1793628603.330:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.6.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 408.223698][ T27] audit: type=1326 audit(1793628603.330:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.6.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 408.302377][ T27] audit: type=1326 audit(1793628603.330:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.6.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 408.384500][ T27] audit: type=1326 audit(1793628603.330:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.6.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 408.438750][ T27] audit: type=1326 audit(1793628603.330:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.6.1521" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc7e6b9f559 code=0x7ffc0000 [ 409.031631][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1539'. [ 410.873221][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1557'. [ 411.519846][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'. [ 411.632485][ T7521] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 412.573912][ T7521] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.602313][ T7521] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 412.641900][ T7521] usb 8-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 412.680142][ T7521] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.729222][ T7521] usb 8-1: Product: syz [ 412.759607][ T7521] usb 8-1: Manufacturer: syz [ 412.771404][ T7521] usb 8-1: SerialNumber: syz [ 413.011506][ T9834] device sit0 entered promiscuous mode [ 413.060928][ T9834] netlink: 'syz.7.1563': attribute type 1 has an invalid length. [ 413.085826][ T9834] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1563'. [ 413.114953][ T7521] usb 8-1: USB disconnect, device number 8 [ 414.093362][ T9883] loop7: detected capacity change from 0 to 1024 [ 415.541315][ T4354] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 415.732336][ T4354] usb 6-1: Using ep0 maxpacket: 8 [ 415.747346][ T4354] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 415.779490][ T4354] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 415.809682][ T4354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.829935][ T4354] usb 6-1: Product: syz [ 415.840074][ T4354] usb 6-1: Manufacturer: syz [ 415.860313][ T4354] usb 6-1: SerialNumber: syz [ 415.877189][ T4354] usb 6-1: config 0 descriptor?? [ 415.895260][ T4354] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 415.932584][ T4354] usb 6-1: setting power ON [ 415.943744][ T4354] dvb-usb: bulk message failed: -22 (2/0) [ 415.998929][ T4354] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 416.019642][ T4354] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 416.044962][ T4354] usb 6-1: media controller created [ 416.054696][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1592'. [ 416.081863][ T4354] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.095588][ T9907] dvb-usb: bulk message failed: -22 (3/0) [ 416.108267][ T9907] cxusb: i2c wr: len=80 is too big! [ 416.108267][ T9907] [ 416.141481][ T9938] bridge_slave_0: default FDB implementation only supports local addresses [ 416.174014][ T4354] usb 6-1: selecting invalid altsetting 6 [ 416.180198][ T4354] usb 6-1: digital interface selection failed (-22) [ 416.187139][ T4354] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 416.208512][ T4354] usb 6-1: setting power OFF [ 416.222450][ T4354] dvb-usb: bulk message failed: -22 (2/0) [ 416.244789][ T4354] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 416.256542][ T4354] (NULL device *): no alternate interface [ 416.269481][ T7521] input: syz0 as /devices/virtual/misc/uhid/0003:0001:10C10.0007/input/input8 [ 416.280874][ T9944] netlink: 666 bytes leftover after parsing attributes in process `syz.6.1597'. [ 416.309890][ T7521] hid-generic 0003:0001:10C10.0007: input,hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 416.317698][ T4354] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 416.362714][ T4354] usb 6-1: USB disconnect, device number 15 [ 416.507083][ T9951] sctp: [Deprecated]: syz.3.1599 (pid 9951) Use of int in max_burst socket option deprecated. [ 416.507083][ T9951] Use struct sctp_assoc_value instead [ 416.558442][ T9947] fido_id[9947]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 416.870258][ T9967] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1606'. [ 416.996189][ T9973] device bridge_slave_1 left promiscuous mode [ 417.016144][ T9966] loop7: detected capacity change from 0 to 512 [ 417.029858][ T9973] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.069274][ T9973] device bridge_slave_0 left promiscuous mode [ 417.084698][ T9973] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.176411][ T9966] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 417.214546][ T9966] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.451571][ T7521] input: syz0 as /devices/virtual/misc/uhid/0003:0001:10C10.0008/input/input9 [ 417.480651][ T7521] hid-generic 0003:0001:10C10.0008: input,hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 417.730145][ T9989] fido_id[9989]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 418.670776][ T7196] EXT4-fs (loop7): unmounting filesystem. [ 419.744250][T10071] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1647'. [ 420.232295][ T129] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 420.422315][ T129] usb 8-1: Using ep0 maxpacket: 8 [ 420.430309][ T129] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 420.452351][ T129] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 420.462153][ T129] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 420.491773][ T129] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 420.506783][ T129] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.522756][ T129] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 420.534811][ T129] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.773155][ T129] usb 8-1: usb_control_msg returned -71 [ 420.778845][ T129] usbtmc 8-1:16.0: can't read capabilities [ 420.838782][ T129] usb 8-1: USB disconnect, device number 9 [ 421.029194][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1664'. [ 421.067811][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1664'. [ 421.087933][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1664'. [ 422.632445][ T7521] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 423.542319][ T7521] usb 8-1: Using ep0 maxpacket: 8 [ 423.549210][ T7521] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 423.564185][ T7521] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 423.582521][ T7521] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.590684][ T7521] usb 8-1: Product: syz [ 423.595434][ T7521] usb 8-1: Manufacturer: syz [ 423.611275][ T7521] usb 8-1: SerialNumber: syz [ 423.640198][ T7521] usb 8-1: config 0 descriptor?? [ 423.676118][ T7521] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 423.700708][ T7521] usb 8-1: setting power ON [ 423.711555][ T7521] dvb-usb: bulk message failed: -22 (2/0) [ 423.741272][ T7521] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 423.764018][ T7521] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 423.784468][ T7521] usb 8-1: media controller created [ 423.840247][ T7521] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 423.961363][ T7521] usb 8-1: selecting invalid altsetting 6 [ 423.982284][ T7521] usb 8-1: digital interface selection failed (-22) [ 423.991749][ T7521] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 424.011368][ T7521] usb 8-1: setting power OFF [ 424.025807][ T7521] dvb-usb: bulk message failed: -22 (2/0) [ 424.041725][ T7521] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 424.059702][ T7521] (NULL device *): no alternate interface [ 424.099666][ T7521] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 424.160399][ T7521] usb 8-1: USB disconnect, device number 10 [ 426.076898][T10238] tipc: Enabling of bearer rejected, failed to enable media [ 427.343690][T10272] binder: 10271:10272 ioctl 400c620e 200000000240 returned -22 [ 427.382737][T10274] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1715'. [ 427.420828][T10276] sg_write: data in/out 358400/136 bytes for SCSI command 0x0-- guessing data in; [ 427.420828][T10276] program syz.7.1716 not setting count and/or reply_len properly [ 427.682471][ T4354] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 427.882299][ T4354] usb 6-1: Using ep0 maxpacket: 8 [ 427.890982][ T4354] usb 6-1: unable to get BOS descriptor or descriptor too short [ 427.913701][ T4354] usb 6-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 427.927332][ T4354] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 427.941466][ T4354] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.963191][ T4354] usb 6-1: config 1 interface 1 has no altsetting 0 [ 427.981077][ T4354] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 427.997041][ T4354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.021203][ T4354] usb 6-1: Product: syz [ 428.032932][ T4354] usb 6-1: Manufacturer: syz [ 428.041824][ T4354] usb 6-1: SerialNumber: syz [ 428.362274][ T7521] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 428.367681][ T4354] usb 6-1: 0:2 : does not exist [ 428.430568][ T4354] usb 6-1: unknown interface protocol 0x6b, assuming v1 [ 428.455535][ T4354] usb 6-1: cannot find UAC_HEADER [ 428.499703][ T4354] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 428.559643][ T4354] usb 6-1: USB disconnect, device number 16 [ 428.563999][ T7521] usb 8-1: config 14 has an invalid interface number: 217 but max is 0 [ 428.587897][ T7521] usb 8-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 428.623592][ T7521] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 428.684461][ T7521] usb 8-1: config 14 has 2 interfaces, different from the descriptor's value: 1 [ 428.713977][ T7521] usb 8-1: config 14 has no interface number 1 [ 428.743607][ T7521] usb 8-1: config 14 interface 217 has no altsetting 0 [ 428.765133][ T7521] usb 8-1: New USB device found, idVendor=0421, idProduct=0070, bcdDevice=46.26 [ 428.768309][T10318] netlink: 'syz.3.1727': attribute type 7 has an invalid length. [ 428.782118][ T7521] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.797956][ T7521] usb 8-1: Product: syz [ 428.806794][ T7521] usb 8-1: Manufacturer: syz [ 428.807803][T10318] fuse: Bad value for 'fd' [ 428.811414][ T7521] usb 8-1: SerialNumber: syz [ 429.060761][T10306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.076036][T10306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.103064][ T7521] rndis_wlan 8-1:14.217: skipping garbage [ 429.109062][ T7521] usb 8-1: bad CDC descriptors [ 429.117796][ T7521] rndis_host 8-1:14.217: skipping garbage [ 429.124097][ T7521] usb 8-1: bad CDC descriptors [ 429.130541][ T7521] cdc_acm 8-1:14.217: skipping garbage [ 429.151527][ T7521] usb 8-1: USB disconnect, device number 11 [ 429.182545][T10326] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1730'. [ 429.207454][T10326] device vlan2 entered promiscuous mode [ 429.213634][T10326] device syz_tun entered promiscuous mode [ 429.275999][T10328] syz.5.1731 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 429.297627][T10328] CPU: 1 PID: 10328 Comm: syz.5.1731 Not tainted syzkaller #0 [ 429.305131][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 429.315193][T10328] Call Trace: [ 429.318461][T10328] [ 429.321376][T10328] dump_stack_lvl+0x188/0x24e [ 429.326056][T10328] ? ___ratelimit+0x14e/0x610 [ 429.330722][T10328] ? show_regs_print_info+0x12/0x12 [ 429.335928][T10328] ? load_image+0x410/0x410 [ 429.340433][T10328] ? ___ratelimit+0x474/0x610 [ 429.345110][T10328] ? radix_tree_cpu_dead+0x160/0x160 [ 429.350391][T10328] dump_header+0xd8/0x820 [ 429.354728][T10328] oom_kill_process+0x361/0x550 [ 429.359594][T10328] out_of_memory+0xe25/0x1220 [ 429.364278][T10328] ? mutex_lock_nested+0x10/0x10 [ 429.369215][T10328] ? unregister_oom_notifier+0x20/0x20 [ 429.374676][T10328] mem_cgroup_out_of_memory+0x2c0/0x390 [ 429.380222][T10328] ? mem_cgroup_oom_trylock+0x210/0x210 [ 429.385774][T10328] ? do_raw_spin_unlock+0x11d/0x230 [ 429.390990][T10328] try_charge_memcg+0xc9d/0x17c0 [ 429.396031][T10328] ? percpu_ref_put+0x180/0x180 [ 429.400920][T10328] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 429.406644][T10328] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 429.412639][T10328] ? percpu_ref_tryget+0x15/0x180 [ 429.417662][T10328] ? percpu_ref_tryget+0x15/0x180 [ 429.422683][T10328] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 429.428401][T10328] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 429.434120][T10328] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 429.439928][T10328] obj_cgroup_charge+0x36a/0x620 [ 429.444870][T10328] ? obj_cgroup_charge+0xe9/0x620 [ 429.449887][T10328] ? mod_objcg_mlstate+0x320/0x320 [ 429.455022][T10328] ? percpu_ref_put+0x12/0x100 [ 429.459782][T10328] ? percpu_ref_put+0x12/0x100 [ 429.464546][T10328] slab_pre_alloc_hook+0x2e2/0x300 [ 429.469749][T10328] ? slab_pre_alloc_hook+0xb1/0x300 [ 429.474946][T10328] kmem_cache_alloc_lru+0x49/0x2e0 [ 429.480065][T10328] ? new_inode_pseudo+0x7e/0x1c0 [ 429.484996][T10328] ? lookup_one_common+0x450/0x450 [ 429.490125][T10328] new_inode_pseudo+0x7e/0x1c0 [ 429.494901][T10328] new_inode+0x25/0x1d0 [ 429.499144][T10328] ? start_creating+0x1f5/0x310 [ 429.503997][T10328] __debugfs_create_file+0x147/0x500 [ 429.509291][T10328] kvm_create_vm_debugfs+0x6da/0x980 [ 429.514578][T10328] ? hardware_enable_all+0x120/0x120 [ 429.519858][T10328] ? __raw_spin_lock_init+0x41/0x100 [ 429.525154][T10328] kvm_dev_ioctl+0x13ff/0x17f0 [ 429.529922][T10328] ? hardware_enable_nolock+0x220/0x220 [ 429.535463][T10328] ? bpf_lsm_file_ioctl+0x5/0x10 [ 429.540395][T10328] ? security_file_ioctl+0x7c/0xa0 [ 429.545508][T10328] ? hardware_enable_nolock+0x220/0x220 [ 429.551045][T10328] __se_sys_ioctl+0xfa/0x170 [ 429.555635][T10328] do_syscall_64+0x4c/0xa0 [ 429.560040][T10328] ? clear_bhb_loop+0x60/0xb0 [ 429.564719][T10328] ? clear_bhb_loop+0x60/0xb0 [ 429.569394][T10328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.575286][T10328] RIP: 0033:0x7ff89019f559 [ 429.579710][T10328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.599309][T10328] RSP: 002b:00007ff890fe3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.607734][T10328] RAX: ffffffffffffffda RBX: 00007ff890425fa0 RCX: 00007ff89019f559 [ 429.615737][T10328] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 429.623700][T10328] RBP: 00007ff890236b20 R08: 0000000000000000 R09: 0000000000000000 [ 429.631662][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.639622][T10328] R13: 00007ff890426038 R14: 00007ff890425fa0 R15: 00007fffc842df78 [ 429.647632][T10328] [ 429.680179][T10328] memory: usage 96kB, limit 96kB, failcnt 44 [ 429.706235][T10328] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 429.722108][T10328] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 429.740844][T10328] Memory cgroup stats for /syz5/test: [ 429.741274][T10328] anon 0 [ 429.741274][T10328] file 0 [ 429.741274][T10328] kernel 98304 [ 429.741274][T10328] kernel_stack 0 [ 429.741274][T10328] pagetables 0 [ 429.741274][T10328] sec_pagetables 0 [ 429.741274][T10328] percpu 0 [ 429.741274][T10328] sock 0 [ 429.741274][T10328] vmalloc 45056 [ 429.741274][T10328] shmem 0 [ 429.741274][T10328] zswap 0 [ 429.741274][T10328] zswapped 0 [ 429.741274][T10328] file_mapped 0 [ 429.741274][T10328] file_dirty 0 [ 429.741274][T10328] file_writeback 0 [ 429.741274][T10328] swapcached 0 [ 429.741274][T10328] anon_thp 0 [ 429.741274][T10328] file_thp 0 [ 429.741274][T10328] shmem_thp 0 [ 429.741274][T10328] inactive_anon 0 [ 429.741274][T10328] active_anon 0 [ 429.741274][T10328] inactive_file 0 [ 429.741274][T10328] active_file 0 [ 429.741274][T10328] unevictable 0 [ 429.741274][T10328] slab_reclaimable 42824 [ 429.741274][T10328] slab_unreclaimable 4896 [ 429.741274][T10328] slab 47720 [ 429.741274][T10328] workingset_refault_anon 0 [ 429.865442][T10328] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.1731,pid=10327,uid=0 [ 429.885101][T10328] Memory cgroup out of memory: Killed process 10327 (syz.5.1731) total-vm:102272kB, anon-rss:1436kB, file-rss:21768kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 429.949902][T10328] debugfs: out of free dentries, can not create file 'halt_poll_fail_hist' [ 430.326841][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 430.362027][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 430.380025][T10345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 433.695361][T10447] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1769'. [ 434.416852][T10463] netlink: 83 bytes leftover after parsing attributes in process `syz.5.1774'. [ 434.554856][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 434.554870][ T27] audit: type=1326 audit(1793628630.210:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.3.1776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 434.645214][T10474] usb usb8: usbfs: process 10474 (syz.5.1778) did not claim interface 0 before use [ 434.672388][ T27] audit: type=1326 audit(1793628630.210:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.3.1776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 434.737234][ T27] audit: type=1326 audit(1793628630.210:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.3.1776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 434.815475][ T27] audit: type=1326 audit(1793628630.210:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.3.1776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 434.900859][ T27] audit: type=1326 audit(1793628630.210:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.3.1776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 434.937032][ T27] audit: type=1326 audit(1793628630.210:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.3.1776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 434.965908][ T27] audit: type=1326 audit(1793628630.210:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.3.1776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 435.023937][ T27] audit: type=1326 audit(1793628630.210:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.3.1776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 435.048564][ T27] audit: type=1326 audit(1793628630.210:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.3.1776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 435.079486][ T27] audit: type=1326 audit(1793628630.210:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.3.1776" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03cb39f559 code=0x7ffc0000 [ 438.249979][T10554] TCP: TCP_TX_DELAY enabled [ 439.903498][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.918581][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.873718][T10630] xt_connbytes: Forcing CT accounting to be enabled [ 444.771713][ T129] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 445.170545][ T129] usb 6-1: Using ep0 maxpacket: 8 [ 445.294913][ T129] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 445.592364][ T129] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.602655][ T129] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 445.613120][ T129] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 445.641114][ T129] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.729907][ T129] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 445.749451][ T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.830530][T10698] netlink: 'syz.3.1847': attribute type 1 has an invalid length. [ 445.959068][T10707] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1850'. [ 447.343612][T10741] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1862'. [ 447.886066][ T129] usb 6-1: USB disconnect, device number 17 [ 449.082047][T10779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1874'. [ 450.809252][T10827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1890'. [ 450.850440][T10827] netlink: 'syz.3.1890': attribute type 10 has an invalid length. [ 450.889155][T10827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1890'. [ 450.916350][T10827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.042754][T10832] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1893'. [ 452.902384][ T4349] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 453.072530][ T4349] usb 8-1: device descriptor read/64, error -71 [ 453.342362][ T4349] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 453.543085][ T4349] usb 8-1: device descriptor read/64, error -71 [ 453.683311][ T4349] usb usb8-port1: attempt power cycle [ 454.162690][ T4349] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 454.203060][ T4349] usb 8-1: device descriptor read/8, error -71 [ 454.386347][T10883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.419081][T10883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.502304][ T4349] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 454.579742][ T4349] usb 8-1: device descriptor read/8, error -71 [ 454.661117][T10883] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.671056][T10883] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.680164][T10883] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.689083][T10883] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.712768][ T4349] usb usb8-port1: unable to enumerate USB device [ 454.799868][T10884] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 454.810358][T10884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.818805][T10884] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.828151][T10884] device caif0 left promiscuous mode [ 454.837043][T10884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.854939][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1910'. [ 454.864648][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1910'. [ 454.989650][T10922] ------------[ cut here ]------------ [ 454.995753][T10922] WARNING: CPU: 0 PID: 10922 at net/netfilter/nf_queue.c:329 nf_reinject+0x280/0x870 [ 455.005357][T10922] Modules linked in: [ 455.009265][T10922] CPU: 0 PID: 10922 Comm: syz.6.1920 Not tainted syzkaller #0 [ 455.016780][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 455.026888][T10922] RIP: 0010:nf_reinject+0x280/0x870 [ 455.032118][T10922] Code: 3a e8 34 a1 ee f8 89 c3 31 ff 89 c6 e8 09 be 05 f9 85 db 74 61 e8 a0 ba 05 f9 e9 21 01 00 00 e8 96 ba 05 f9 0f 0b 4c 8b 3c 24 <0f> 0b e9 98 05 00 00 e8 84 ba 05 f9 e9 05 01 00 00 e8 7a ba 05 f9 [ 455.051822][T10922] RSP: 0018:ffffc9000d467008 EFLAGS: 00010287 [ 455.057963][T10922] RAX: ffffffff887c8e45 RBX: 0000000000000006 RCX: 0000000000080000 [ 455.066001][T10922] RDX: ffffc90005ab1000 RSI: 000000000000107c RDI: 000000000000107d [ 455.074027][T10922] RBP: 0000000000000000 R08: ffff88801a7a0000 R09: 0000000000000003 [ 455.082013][T10922] R10: 000000000000000a R11: 0000000000000002 R12: ffff888030803100 [ 455.090053][T10922] R13: ffff888077aa9068 R14: ffff888054de6900 R15: ffff888054de6900 [ 455.098143][T10922] FS: 00007fc7e7b586c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 455.107174][T10922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.113866][T10922] CR2: 000000110c350e83 CR3: 00000000594d3000 CR4: 00000000003506f0 [ 455.121872][T10922] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 455.129915][T10922] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 455.137947][T10922] Call Trace: [ 455.141245][T10922] [ 455.144230][T10922] ? nfqnl_nf_hook_drop+0x8d/0x2b0 [ 455.149376][T10922] nfqnl_nf_hook_drop+0x1e9/0x2b0 [ 455.154481][T10922] ? nf_queue_nf_hook_drop+0x1a/0x220 [ 455.160020][T10922] nf_queue_nf_hook_drop+0x126/0x220 [ 455.165492][T10922] __nf_unregister_net_hook+0x4fb/0x6d0 [ 455.171081][T10922] nf_tables_commit+0x4ee1/0x7830 [ 455.176229][T10922] ? nf_tables_rule_release+0x360/0x360 [ 455.181806][T10922] ? nft_trans_commit_list_add_tail+0x302/0x410 [ 455.188139][T10922] ? nft_flush_table+0x1542/0x1630 [ 455.193333][T10922] ? nf_tables_deltable+0x637/0xd90 [ 455.198564][T10922] ? nf_tables_gettable+0x6b0/0x6b0 [ 455.203847][T10922] ? mutex_unlock+0x10/0x10 [ 455.208381][T10922] ? __nla_parse+0x3c/0x50 [ 455.212922][T10922] nfnetlink_rcv+0x1aae/0x2470 [ 455.217745][T10922] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 455.223398][T10922] ? ref_tracker_free+0x682/0x830 [ 455.228486][T10922] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.233774][T10922] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 455.239276][T10922] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.244573][T10922] netlink_unicast+0x7ad/0x920 [ 455.249382][T10922] netlink_sendmsg+0x8ad/0xbd0 [ 455.254243][T10922] ? netlink_getsockopt+0x550/0x550 [ 455.259479][T10922] ? apparmor_socket_sendmsg+0x16c/0x330 [ 455.265195][T10922] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 455.270530][T10922] ? security_socket_sendmsg+0x7c/0xa0 [ 455.276081][T10922] ? netlink_getsockopt+0x550/0x550 [ 455.281315][T10922] ____sys_sendmsg+0x5ed/0x9a0 [ 455.286190][T10922] ? __sys_sendmsg_sock+0x30/0x30 [ 455.291247][T10922] ? __import_iovec+0x306/0x510 [ 455.296203][T10922] ? import_iovec+0x6f/0xa0 [ 455.300753][T10922] ___sys_sendmsg+0x2a2/0x360 [ 455.305529][T10922] ? __sys_sendmsg+0x2a0/0x2a0 [ 455.310379][T10922] __se_sys_sendmsg+0x1c3/0x2b0 [ 455.315316][T10922] ? __x64_sys_sendmsg+0x80/0x80 [ 455.320292][T10922] ? lockdep_hardirqs_on+0x94/0x140 [ 455.325709][T10922] do_syscall_64+0x4c/0xa0 [ 455.330144][T10922] ? clear_bhb_loop+0x60/0xb0 [ 455.334896][T10922] ? clear_bhb_loop+0x60/0xb0 [ 455.339593][T10922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.345584][T10922] RIP: 0033:0x7fc7e6b9f559 [ 455.350039][T10922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.369785][T10922] RSP: 002b:00007fc7e7b58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.378313][T10922] RAX: ffffffffffffffda RBX: 00007fc7e6e25fa0 RCX: 00007fc7e6b9f559 [ 455.386403][T10922] RDX: 0000000024040008 RSI: 0000200000000400 RDI: 0000000000000005 [ 455.394445][T10922] RBP: 00007fc7e6c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 455.402484][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.410481][T10922] R13: 00007fc7e6e26038 R14: 00007fc7e6e25fa0 R15: 00007fffec7bf538 [ 455.418539][T10922] [ 455.421591][T10922] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 455.428878][T10922] CPU: 0 PID: 10922 Comm: syz.6.1920 Not tainted syzkaller #0 [ 455.436331][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 455.446391][T10922] Call Trace: [ 455.449670][T10922] [ 455.452602][T10922] dump_stack_lvl+0x188/0x24e [ 455.457280][T10922] ? memcpy+0x3c/0x60 [ 455.461271][T10922] ? show_regs_print_info+0x12/0x12 [ 455.466463][T10922] ? load_image+0x410/0x410 [ 455.470972][T10922] panic+0x2d3/0x710 [ 455.474868][T10922] ? bpf_jit_dump+0xd0/0xd0 [ 455.479397][T10922] __warn+0x2f8/0x4f0 [ 455.483400][T10922] ? nf_reinject+0x280/0x870 [ 455.488178][T10922] ? nf_reinject+0x280/0x870 [ 455.492769][T10922] report_bug+0x2ba/0x4f0 [ 455.497099][T10922] ? nf_reinject+0x280/0x870 [ 455.501687][T10922] handle_bug+0x3a/0x70 [ 455.505850][T10922] exc_invalid_op+0x16/0x40 [ 455.510370][T10922] asm_exc_invalid_op+0x16/0x20 [ 455.515213][T10922] RIP: 0010:nf_reinject+0x280/0x870 [ 455.520412][T10922] Code: 3a e8 34 a1 ee f8 89 c3 31 ff 89 c6 e8 09 be 05 f9 85 db 74 61 e8 a0 ba 05 f9 e9 21 01 00 00 e8 96 ba 05 f9 0f 0b 4c 8b 3c 24 <0f> 0b e9 98 05 00 00 e8 84 ba 05 f9 e9 05 01 00 00 e8 7a ba 05 f9 [ 455.540009][T10922] RSP: 0018:ffffc9000d467008 EFLAGS: 00010287 [ 455.546075][T10922] RAX: ffffffff887c8e45 RBX: 0000000000000006 RCX: 0000000000080000 [ 455.554064][T10922] RDX: ffffc90005ab1000 RSI: 000000000000107c RDI: 000000000000107d [ 455.562047][T10922] RBP: 0000000000000000 R08: ffff88801a7a0000 R09: 0000000000000003 [ 455.570036][T10922] R10: 000000000000000a R11: 0000000000000002 R12: ffff888030803100 [ 455.578002][T10922] R13: ffff888077aa9068 R14: ffff888054de6900 R15: ffff888054de6900 [ 455.585978][T10922] ? nf_reinject+0x4d5/0x870 [ 455.590575][T10922] ? nf_reinject+0x4d5/0x870 [ 455.595162][T10922] ? nfqnl_nf_hook_drop+0x8d/0x2b0 [ 455.600272][T10922] nfqnl_nf_hook_drop+0x1e9/0x2b0 [ 455.605298][T10922] ? nf_queue_nf_hook_drop+0x1a/0x220 [ 455.610664][T10922] nf_queue_nf_hook_drop+0x126/0x220 [ 455.615951][T10922] __nf_unregister_net_hook+0x4fb/0x6d0 [ 455.621514][T10922] nf_tables_commit+0x4ee1/0x7830 [ 455.626544][T10922] ? nf_tables_rule_release+0x360/0x360 [ 455.632085][T10922] ? nft_trans_commit_list_add_tail+0x302/0x410 [ 455.638340][T10922] ? nft_flush_table+0x1542/0x1630 [ 455.643466][T10922] ? nf_tables_deltable+0x637/0xd90 [ 455.648701][T10922] ? nf_tables_gettable+0x6b0/0x6b0 [ 455.653902][T10922] ? mutex_unlock+0x10/0x10 [ 455.658506][T10922] ? __nla_parse+0x3c/0x50 [ 455.662933][T10922] nfnetlink_rcv+0x1aae/0x2470 [ 455.667716][T10922] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 455.673267][T10922] ? ref_tracker_free+0x682/0x830 [ 455.678330][T10922] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.683542][T10922] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 455.689019][T10922] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.694242][T10922] netlink_unicast+0x7ad/0x920 [ 455.699027][T10922] netlink_sendmsg+0x8ad/0xbd0 [ 455.703793][T10922] ? netlink_getsockopt+0x550/0x550 [ 455.708997][T10922] ? apparmor_socket_sendmsg+0x16c/0x330 [ 455.714633][T10922] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 455.719911][T10922] ? security_socket_sendmsg+0x7c/0xa0 [ 455.725365][T10922] ? netlink_getsockopt+0x550/0x550 [ 455.730558][T10922] ____sys_sendmsg+0x5ed/0x9a0 [ 455.735325][T10922] ? __sys_sendmsg_sock+0x30/0x30 [ 455.740361][T10922] ? __import_iovec+0x306/0x510 [ 455.745211][T10922] ? import_iovec+0x6f/0xa0 [ 455.749709][T10922] ___sys_sendmsg+0x2a2/0x360 [ 455.754384][T10922] ? __sys_sendmsg+0x2a0/0x2a0 [ 455.759176][T10922] __se_sys_sendmsg+0x1c3/0x2b0 [ 455.764029][T10922] ? __x64_sys_sendmsg+0x80/0x80 [ 455.768970][T10922] ? lockdep_hardirqs_on+0x94/0x140 [ 455.774230][T10922] do_syscall_64+0x4c/0xa0 [ 455.778662][T10922] ? clear_bhb_loop+0x60/0xb0 [ 455.783339][T10922] ? clear_bhb_loop+0x60/0xb0 [ 455.788017][T10922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.793914][T10922] RIP: 0033:0x7fc7e6b9f559 [ 455.798323][T10922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.817935][T10922] RSP: 002b:00007fc7e7b58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.826365][T10922] RAX: ffffffffffffffda RBX: 00007fc7e6e25fa0 RCX: 00007fc7e6b9f559 [ 455.834326][T10922] RDX: 0000000024040008 RSI: 0000200000000400 RDI: 0000000000000005 [ 455.842288][T10922] RBP: 00007fc7e6c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 455.850254][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.858233][T10922] R13: 00007fc7e6e26038 R14: 00007fc7e6e25fa0 R15: 00007fffec7bf538 [ 455.866231][T10922] [ 455.869586][T10922] Kernel Offset: disabled [ 455.874021][T10922] Rebooting in 86400 seconds..