last executing test programs: 1m7.780297s ago: executing program 4 (id=1154): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='./file0\x00', 0xa4000061) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x8500017e) removexattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@known='system.posix_acl_default\x00') 1m7.527746806s ago: executing program 4 (id=1160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x10002e78) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000001}) epoll_pwait2(r1, &(0x7f0000000300)=[{}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 1m7.253468364s ago: executing program 4 (id=1163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0xa142, 0x14b) 1m7.141747375s ago: executing program 4 (id=1166): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) chroot(&(0x7f0000000480)='./sys\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 1m6.975203052s ago: executing program 4 (id=1169): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m6.406458211s ago: executing program 4 (id=1177): r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) fchdir(r1) mknod$loop(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m6.002441883s ago: executing program 32 (id=1177): r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) fchdir(r1) mknod$loop(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 49.745033527s ago: executing program 3 (id=1276): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004ac0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r0, 0xffffffffffffc000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x18000, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000100)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000480), 0x208e24b) fdatasync(r1) 49.100067773s ago: executing program 3 (id=1282): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x1000001, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./bus\x00', 0x4080, 0x0, 0x1, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000100), &(0x7f0000000140)='./file0/file1\x00', 0xe, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 48.764599438s ago: executing program 3 (id=1287): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) read$watch_queue(r0, &(0x7f0000000300)=""/176, 0xb0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 48.710589984s ago: executing program 5 (id=1288): r0 = syz_clone(0x2a102211, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) setpriority(0x0, r0, 0x0) 48.323059623s ago: executing program 3 (id=1291): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001240)='./file0\x00', 0x204001, &(0x7f0000001280), 0x1, 0xb9f, &(0x7f00000012c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001e80), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000001ec0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000001f40)='.\x00', 0x0, 0x2390024, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004b00)='./file1\x00', 0x0) syz_mount_image$msdos(&(0x7f0000004b80), &(0x7f0000004bc0)='.\x00', 0x18920f4, &(0x7f0000004c00)=ANY=[], 0x0, 0x0, &(0x7f0000004c40)) 47.685070949s ago: executing program 5 (id=1293): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x2, 0x44, 0x48, 0xcf, 0x7, [], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x9, 0x2}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0x80, 0xf, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000001800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000020c0)={0x14, 0x0, &(0x7f0000002000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x20, 0x9, 0x1, "d2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000003ac0)={0x44, &(0x7f0000003880)={0x40, 0x17, 0x9, "7098615c0db74dfa1a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) 47.022425617s ago: executing program 3 (id=1295): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x5) unlinkat(r0, &(0x7f00000011c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r1, &(0x7f0000003cc0)=""/4128, 0x1020) 46.053124777s ago: executing program 3 (id=1301): socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000840)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r3, &(0x7f0000000780), 0x0}, 0x20) 45.44720251s ago: executing program 33 (id=1301): socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000840)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r3, &(0x7f0000000780), 0x0}, 0x20) 44.08320189s ago: executing program 5 (id=1311): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0x42, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000ac0)='./file1\x00', &(0x7f0000000b00)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x3) 43.717784748s ago: executing program 5 (id=1313): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x10000, &(0x7f00000001c0), 0x1, 0x50b, &(0x7f0000000f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L0mav1v63dMN+RABAADgL64Qtb/9L0w20oXC5GT9GtCh2FsoX19Y/F9EXJur3yMwGsXCpflyKb8gNxrFJL/+OdqUn27Jn86uG380MFLLT85eL89tdfCwy+2r9fmkrf+nflrjdV5gG9pB96EBa9Sr/x++t0k7Amw6v/+wezX1/25Ptqj4SxnYmfz+w+7Vqf/fjs9WvXfBdwZsf1V9GXa11ft/7+dtAtvXYLzZSNdue+54ty2wE3X//XdmADtY75vkh9Z87/9yojrU+a3h6PDEgOF1VdEzMdKhri1JpCOrDSywGBH9rTyyniryIWD3JzwU1lbgULS/NRCrbZV0fo5DRFS6bpV+Kj335/Lhfht/6UbytP6gzB4B5s9E2ehm8/lyPy32ebi7JH7rt/k53wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHaU3wMAAP//hKnQPw==") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x20000021) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 42.547265668s ago: executing program 5 (id=1318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() syz_open_procfs$namespace(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 41.788145486s ago: executing program 5 (id=1321): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)='%pI4 \x00'}, 0x20) 41.039677023s ago: executing program 34 (id=1321): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)='%pI4 \x00'}, 0x20) 5.952726997s ago: executing program 2 (id=1523): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @local, 0x13}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 5.43416376s ago: executing program 2 (id=1529): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) r1 = inotify_init() readv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) 5.093366545s ago: executing program 2 (id=1534): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000009c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000048500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000b80)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) 4.392552588s ago: executing program 2 (id=1542): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f00000008c0)={{0x12, 0x1, 0x300, 0x18, 0xd0, 0x53, 0x20, 0x421, 0x481, 0x25bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x2e, 0x1, 0x20, 0x1, "", [{{0x9, 0x4, 0x95, 0x1, 0x3, 0x2, 0x2, 0xff, 0xf8, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x2, 0x2, 0x4}}], [{{0x9, 0x5, 0xe, 0x1a, 0x3ff, 0x0, 0x7, 0x6}}, {{0x9, 0x5, 0xa, 0x2, 0x20, 0x8, 0xc9, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x493014492e2b22ec, 0x3, 0xb}}]}}]}}]}}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0}) r0 = accept(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) 3.620007977s ago: executing program 6 (id=1548): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x4, 0x0, 0x400, 0xffffffff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x0, 0x1000}}]}]}}}]}, 0x64}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24000855, &(0x7f0000000140)={0xa, 0x2, 0x10000, @loopback}, 0x1c) 3.19924196s ago: executing program 6 (id=1552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x24, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 2.882426813s ago: executing program 6 (id=1555): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x4006}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x0, 0x1, 0x6, 0x7fff800000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x7, 0x5}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f00000024c0)=""/209, 0xd1, 0xa) 2.736018488s ago: executing program 7 (id=1558): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2046e7c4ac1d1537}) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x20000014}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 2.463081276s ago: executing program 7 (id=1562): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x4e23, 0x4e22, [0x10000, 0xffff], [], 0x0, [0x5, 0x3]}, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) 2.406499812s ago: executing program 2 (id=1563): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000180)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x7c, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xffffffeffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0xa000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x20}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) 2.32706119s ago: executing program 0 (id=1564): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2.263493707s ago: executing program 1 (id=1565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.13291454s ago: executing program 2 (id=1566): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) 2.045573569s ago: executing program 7 (id=1567): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x62207}}, 0x20}, 0x1, 0x4000, 0x0, 0x44000}, 0x20000000) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00562653ef2b152c7200"/19, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f000000"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.027176871s ago: executing program 0 (id=1568): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0x0, 0x0}) r2 = syz_io_uring_setup(0x82, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3, 0x10020b, 0x0, 0x0}, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)=0x0, &(0x7f0000000d80)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000dc0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8f9, 0x0, &(0x7f0000000e40), 0x40, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000e80)='a', 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000ec0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x40010022, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 1.868803368s ago: executing program 6 (id=1569): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000680)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000740)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f00000007c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4002}, 0x2}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.868073008s ago: executing program 1 (id=1570): capset(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000a00)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x1000004}) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f0000000b80)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x0, &(0x7f0000000c40)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000001000)=""/4096, 0xc00) 1.677956647s ago: executing program 7 (id=1571): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0xc08) 1.675379797s ago: executing program 0 (id=1572): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 1.557357949s ago: executing program 6 (id=1573): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) write$cgroup_pid(r1, &(0x7f0000000600), 0x12) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f00000017c0)={0x2020}, 0x2020) 1.373089348s ago: executing program 1 (id=1574): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @remote}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x1, 0x4) 1.333088272s ago: executing program 0 (id=1575): r0 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x6}]) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 1.281074408s ago: executing program 7 (id=1576): r0 = syz_mount_image$ext4(&(0x7f0000002400)='ext4\x00', &(0x7f0000002440)='./mnt\x00', 0x0, &(0x7f0000002480), 0x0, 0x23cf, &(0x7f00000024c0)="$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") mknodat(r0, &(0x7f00000048c0)='verity_file\x00', 0x8180, 0x0) r1 = openat(r0, &(0x7f0000004900)='verity_file\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000004940)='A', 0x1, 0x0) close(r1) r2 = openat(r0, &(0x7f00000049c0)='verity_file\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000004a00)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.198475826s ago: executing program 6 (id=1577): r0 = gettid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0xe2, 0x0, 0x7fc000fd}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000900)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000940)) timer_settime(0x0, 0x1, &(0x7f0000000980)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(0x3) 1.059878331s ago: executing program 1 (id=1578): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000200)) 833.392164ms ago: executing program 1 (id=1579): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) fstat(0xffffffffffffffff, 0x0) 721.135606ms ago: executing program 0 (id=1580): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000008"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x5, r0}, 0x38) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x19, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r2}, 0xc) 577.88577ms ago: executing program 1 (id=1581): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1b7) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) r0 = open$dir(&(0x7f0000000280)='./mnt\x00', 0x0, 0x2) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f00000002c0)=0x2) openat(r0, &(0x7f0000000380)='./mnt\x00', 0x40, 0x33) 490.53829ms ago: executing program 7 (id=1582): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='10', 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x90) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0xa0011, 0x0, 0x0, @by_dev, [@raid={0x0, 0x8, 0x0, 0x70, 'raid\x00', {'raid1', 0x20, '3 64 rebuild 0', 0x20, 0x1, [{0x20, @none, 0x20, @ram_num={'1:', 0x0}}]}}]}) 419.485597ms ago: executing program 0 (id=1583): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$packet(0x11, 0x2, 0x300) syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000002c0)={[{}, {}, {@errors_remount}, {@umask={'umask', 0x3d, 0xf}}, {}, {@namecase}, {@gid}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@umask={'umask', 0x3d, 0x77}}, {@namecase}, {@gid}]}, 0xfd, 0x154a, &(0x7f0000000e00)="$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") openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002940)='.\x00', 0x181400, 0x108) getdents64(r0, &(0x7f00000029c0)=""/4096, 0x1000) 0s ago: executing program 35 (id=1582): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='10', 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x90) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0xa0011, 0x0, 0x0, @by_dev, [@raid={0x0, 0x8, 0x0, 0x70, 'raid\x00', {'raid1', 0x20, '3 64 rebuild 0', 0x20, 0x1, [{0x20, @none, 0x20, @ram_num={'1:', 0x0}}]}}]}) kernel console output (not intermixed with test programs): st_run+0x31c/0x390 [ 173.978415][ T6590] __sys_bpf+0x62b/0x780 [ 173.982736][ T6590] ? bpf_link_show_fdinfo+0x550/0x550 [ 173.988213][ T6590] ? lock_chain_count+0x20/0x20 [ 173.993157][ T6590] __x64_sys_bpf+0x78/0x90 [ 173.997656][ T6590] do_syscall_64+0x4c/0xa0 [ 174.002141][ T6590] ? clear_bhb_loop+0x60/0xb0 [ 174.006911][ T6590] ? clear_bhb_loop+0x60/0xb0 [ 174.011669][ T6590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.017639][ T6590] RIP: 0033:0x7f4975da94d9 [ 174.022462][ T6590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.042141][ T6590] RSP: 002b:00007f4976cbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.050618][ T6590] RAX: ffffffffffffffda RBX: 00007f4976025fa0 RCX: 00007f4975da94d9 [ 174.058825][ T6590] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 174.066857][ T6590] RBP: 00007f4975e3804e R08: 0000000000000000 R09: 0000000000000000 [ 174.074891][ T6590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.083820][ T6590] R13: 00007f4976026038 R14: 00007f4976025fa0 R15: 00007ffc042a0cb8 [ 174.092121][ T6590] [ 174.095270][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.405001][ T6632] loop2: detected capacity change from 0 to 33792 [ 175.432074][ T6632] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 175.482901][ T6619] loop4: detected capacity change from 0 to 32768 [ 175.519726][ T6632] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842c018, mo2=0003] [ 175.554386][ T6632] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 175.575442][ T6619] XFS (loop4): Mounting V5 Filesystem [ 175.720819][ T6619] XFS (loop4): Ending clean mount [ 175.823792][ T27] audit: type=1800 audit(1794561738.075:67): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.834" name="file2" dev="loop4" ino=9287 res=0 errno=0 [ 175.920815][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 176.027049][ T4284] XFS (loop4): Unmounting Filesystem [ 176.469667][ T6663] loop3: detected capacity change from 0 to 16 [ 176.517512][ T6663] erofs: (device loop3): mounted with root inode @ nid 36. [ 176.689902][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 177.247767][ T4355] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 177.468091][ T4355] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.486459][ T4355] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.506225][ T4355] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.526978][ T6693] gadgetfs: bound to dummy_udc driver [ 177.540511][ T4355] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.559778][ T4355] usb 4-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 0.00 [ 177.588648][ T4355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.621669][ T4355] usb 4-1: config 0 descriptor?? [ 177.956721][ T6697] loop4: detected capacity change from 0 to 256 [ 177.999621][ T6697] exFAT-fs (loop4): bogus sectors bits per cluster : 245 [ 178.046482][ T6697] exFAT-fs (loop4): failed to read boot sector [ 178.052811][ T6697] exFAT-fs (loop4): failed to recognize exfat type [ 178.068209][ T4355] hid-generic 0003:0001:0000.0003: unbalanced collection at end of report description [ 178.080464][ T4355] hid-generic: probe of 0003:0001:0000.0003 failed with error -22 [ 178.276045][ T4350] usb 4-1: USB disconnect, device number 7 [ 178.914703][ T6729] loop2: detected capacity change from 0 to 33280 [ 178.922916][ T6729] EXT4-fs: inline encryption not supported [ 178.958120][ T6729] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.996021][ T6729] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 179.026504][ T6729] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 179.037687][ T6729] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 179.053518][ T6729] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 179.065689][ T6729] EXT4-fs (loop2): orphan cleanup on readonly fs [ 179.092884][ T6729] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.878: bg 0: block 34: padding at end of block bitmap is not set [ 179.118241][ T6729] Quota error (device loop2): write_blk: dquota write failed [ 179.128097][ T6729] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 179.140391][ T6729] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.878: Failed to acquire dquot type 1 [ 179.174551][ T6729] EXT4-fs (loop2): 1 truncate cleaned up [ 179.222562][ T6729] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 179.273380][ T6729] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 179.506339][ T4355] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 179.546109][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 179.699080][ T4355] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.740732][ T4355] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.781702][ T4355] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 179.812149][ T4355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.882004][ T4355] hub 4-1:4.0: USB hub found [ 180.086418][ T4355] hub 4-1:4.0: 2 ports detected [ 180.091447][ T4355] usb 4-1: selecting invalid altsetting 1 [ 180.095852][ T7] libceph: connect (1)[c::]:6789 error -101 [ 180.106230][ T4355] hub 4-1:4.0: Using single TT (err -22) [ 180.125872][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 180.131622][ T4350] libceph: connect (1)[c::]:6789 error -101 [ 180.138123][ T4350] libceph: mon0 (1)[c::]:6789 connect error [ 180.179114][ T7] libceph: connect (1)[c::]:6789 error -101 [ 180.197713][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 180.282794][ T4355] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 180.291791][ T4355] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 180.338229][ T4355] usb 4-1: USB disconnect, device number 8 [ 180.419610][ T4350] libceph: connect (1)[c::]:6789 error -101 [ 180.426011][ T4350] libceph: mon0 (1)[c::]:6789 connect error [ 180.476836][ T3604] libceph: connect (1)[c::]:6789 error -101 [ 180.491962][ T3604] libceph: mon0 (1)[c::]:6789 connect error [ 180.504992][ T6764] FAULT_INJECTION: forcing a failure. [ 180.504992][ T6764] name failslab, interval 1, probability 0, space 0, times 0 [ 180.525644][ T6764] CPU: 0 PID: 6764 Comm: syz.0.891 Not tainted syzkaller #0 [ 180.533031][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 180.543150][ T6764] Call Trace: [ 180.546499][ T6764] [ 180.549482][ T6764] dump_stack_lvl+0x188/0x24e [ 180.554237][ T6764] ? show_regs_print_info+0x12/0x12 [ 180.559525][ T6764] ? load_image+0x410/0x410 [ 180.564111][ T6764] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 180.570453][ T6764] should_fail_ex+0x390/0x4c0 [ 180.575222][ T6764] should_failslab+0x5/0x20 [ 180.579803][ T6764] slab_pre_alloc_hook+0x59/0x300 [ 180.584907][ T6764] ? current_time+0x19b/0x2c0 [ 180.589666][ T6764] ? proc_self_get_link+0xe1/0x170 [ 180.594853][ T6764] __kmem_cache_alloc_node+0x4f/0x270 [ 180.600294][ T6764] ? proc_self_get_link+0xe1/0x170 [ 180.605497][ T6764] kmalloc_trace+0x26/0xe0 [ 180.609992][ T6764] proc_self_get_link+0xe1/0x170 [ 180.615183][ T6764] ? proc_setup_self+0x2d0/0x2d0 [ 180.620212][ T6764] pick_link+0x6ed/0xe20 [ 180.624565][ T6764] step_into+0xc14/0xee0 [ 180.628893][ T6764] ? set_root+0x3a0/0x3a0 [ 180.633299][ T6764] ? lookup_fast+0x14a/0x4c0 [ 180.637985][ T6764] ? security_inode_permission+0xac/0xf0 [ 180.643703][ T6764] link_path_walk+0x744/0xea0 [ 180.648485][ T6764] ? handle_lookup_down+0x130/0x130 [ 180.653778][ T6764] path_openat+0x285/0x2f10 [ 180.658393][ T6764] ? kasan_set_track+0x60/0x70 [ 180.663247][ T6764] ? verify_lock_unused+0x140/0x140 [ 180.668554][ T6764] ? do_sys_openat2+0xdd/0x4f0 [ 180.673408][ T6764] ? do_filp_open+0x420/0x420 [ 180.678239][ T6764] do_filp_open+0x1ee/0x420 [ 180.682826][ T6764] ? vfs_tmpfile+0x490/0x490 [ 180.688562][ T6764] ? _raw_spin_unlock+0x24/0x40 [ 180.693500][ T6764] ? alloc_fd+0x590/0x640 [ 180.697927][ T6764] do_sys_openat2+0x14b/0x4f0 [ 180.702866][ T6764] ? do_sys_open+0xe0/0xe0 [ 180.707679][ T6764] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 180.713828][ T6764] ? lock_chain_count+0x20/0x20 [ 180.718806][ T6764] __x64_sys_openat+0x135/0x160 [ 180.723741][ T6764] do_syscall_64+0x4c/0xa0 [ 180.728258][ T6764] ? clear_bhb_loop+0x60/0xb0 [ 180.733513][ T6764] ? clear_bhb_loop+0x60/0xb0 [ 180.738287][ T6764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.744282][ T6764] RIP: 0033:0x7f4975d69d0e [ 180.748756][ T6764] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.768605][ T6764] RSP: 002b:00007f4976cbbec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 180.777112][ T6764] RAX: ffffffffffffffda RBX: 00007f4976cbc6c0 RCX: 00007f4975d69d0e [ 180.785189][ T6764] RDX: 0000000000000000 RSI: 00007f4976cbbf90 RDI: ffffffffffffff9c [ 180.793240][ T6764] RBP: 00007f4975e3804e R08: 0000000000000000 R09: 0000000000000000 [ 180.801272][ T6764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.809299][ T6764] R13: 00007f4976026038 R14: 00007f4976025fa0 R15: 00007ffc042a0cb8 [ 180.817455][ T6764] [ 180.828286][ T6749] ceph: No mds server is up or the cluster is laggy [ 180.856445][ T6753] ceph: No mds server is up or the cluster is laggy [ 180.946749][ T4350] libceph: connect (1)[c::]:6789 error -101 [ 180.963629][ T4350] libceph: mon0 (1)[c::]:6789 connect error [ 181.046628][ T3604] libceph: connect (1)[c::]:6789 error -101 [ 181.052847][ T3604] libceph: mon0 (1)[c::]:6789 connect error [ 181.208515][ T6773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.895'. [ 181.480235][ T6766] loop4: detected capacity change from 0 to 40427 [ 181.520011][ T6766] F2FS-fs (loop4): invalid crc value [ 181.551934][ T6766] F2FS-fs (loop4): Found nat_bits in checkpoint [ 181.687510][ T6766] F2FS-fs (loop4): Start checkpoint disabled! [ 181.734278][ T6766] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 181.975959][ T6797] loop3: detected capacity change from 0 to 33280 [ 182.041727][ T6797] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 182.051230][ T6797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 182.061804][ T6797] EXT4-fs (loop3): orphan cleanup on readonly fs [ 182.070274][ T6797] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #13: comm syz.3.902: iget: bad i_size value: 12154761577498 [ 182.093498][ T6797] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.902: couldn't read orphan inode 13 (err -117) [ 182.117107][ T6797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 182.161788][ T6797] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.902: dx entry: limit 65535 != root limit 120 [ 182.196838][ T6802] FAULT_INJECTION: forcing a failure. [ 182.196838][ T6802] name failslab, interval 1, probability 0, space 0, times 0 [ 182.236510][ T6802] CPU: 0 PID: 6802 Comm: syz.1.904 Not tainted syzkaller #0 [ 182.243910][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 182.254167][ T6802] Call Trace: [ 182.258116][ T6802] [ 182.261118][ T6802] dump_stack_lvl+0x188/0x24e [ 182.266176][ T6802] ? show_regs_print_info+0x12/0x12 [ 182.272344][ T6802] ? load_image+0x410/0x410 [ 182.276913][ T6802] ? __might_sleep+0xd0/0xd0 [ 182.281604][ T6802] ? __lock_acquire+0x7ea0/0x7ea0 [ 182.287310][ T6802] should_fail_ex+0x390/0x4c0 [ 182.292923][ T6802] should_failslab+0x5/0x20 [ 182.297479][ T6802] slab_pre_alloc_hook+0x59/0x300 [ 182.304802][ T6802] kmem_cache_alloc+0x56/0x2f0 [ 182.310258][ T6802] ? ptlock_alloc+0x1c/0x60 [ 182.315090][ T6802] ptlock_alloc+0x1c/0x60 [ 182.319490][ T6802] pte_alloc_one+0xc0/0x310 [ 182.324059][ T6802] ? pfn_modify_allowed+0x560/0x560 [ 182.329342][ T6802] ? count_memcg_event_mm+0x36b/0x3c0 [ 182.334855][ T6802] ? __lock_acquire+0x7ea0/0x7ea0 [ 182.339940][ T6802] ? count_memcg_event_mm+0x8a/0x3c0 [ 182.345602][ T6802] ? put_page+0x270/0x270 [ 182.350224][ T6802] __pte_alloc+0x21/0x150 [ 182.354640][ T6802] handle_mm_fault+0x34b1/0x3d40 [ 182.359648][ T6802] ? mt_find+0x157/0x830 [ 182.363967][ T6802] ? numa_migrate_prep+0x250/0x250 [ 182.369140][ T6802] ? lock_chain_count+0x20/0x20 [ 182.374431][ T6802] ? lock_mm_and_find_vma+0xae/0x2f0 [ 182.379806][ T6802] do_user_addr_fault+0x5a9/0xbb0 [ 182.385099][ T6802] exc_page_fault+0x60/0x100 [ 182.389843][ T6802] asm_exc_page_fault+0x22/0x30 [ 182.394787][ T6802] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 182.401610][ T6802] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 182.421621][ T6802] RSP: 0018:ffffc90003837d28 EFLAGS: 00050206 [ 182.427931][ T6802] RAX: ffffffff8410fd01 RBX: 00000000000000d0 RCX: 00000000000000d0 [ 182.436350][ T6802] RDX: 00000000000000d0 RSI: 0000000000000000 RDI: ffffc90003837da0 [ 182.444582][ T6802] RBP: 0000000000000000 R08: ffffc90003837e6f R09: 1ffff92000706fcd [ 182.452877][ T6802] R10: dffffc0000000000 R11: fffff52000706fce R12: 00007fffffffef30 [ 182.461430][ T6802] R13: f8f8f8f8f8f8f8f8 R14: ffffc90003837da0 R15: 0000000000000000 [ 182.469751][ T6802] ? _copy_from_user+0x11/0x170 [ 182.475496][ T6802] _copy_from_user+0xf4/0x170 [ 182.480353][ T6802] __x64_sys_clock_adjtime+0x11e/0x320 [ 182.485983][ T6802] ? do_clock_adjtime+0x120/0x120 [ 182.491113][ T6802] ? lock_chain_count+0x20/0x20 [ 182.496207][ T6802] ? lockdep_hardirqs_on+0x94/0x140 [ 182.501490][ T6802] do_syscall_64+0x4c/0xa0 [ 182.506235][ T6802] ? clear_bhb_loop+0x60/0xb0 [ 182.511446][ T6802] ? clear_bhb_loop+0x60/0xb0 [ 182.516221][ T6802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.522281][ T6802] RIP: 0033:0x7fa47fba94d9 [ 182.526838][ T6802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.547109][ T6802] RSP: 002b:00007fa48099e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 182.555692][ T6802] RAX: ffffffffffffffda RBX: 00007fa47fe25fa0 RCX: 00007fa47fba94d9 [ 182.563805][ T6802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.571923][ T6802] RBP: 00007fa47fc3804e R08: 0000000000000000 R09: 0000000000000000 [ 182.579928][ T6802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.588018][ T6802] R13: 00007fa47fe26038 R14: 00007fa47fe25fa0 R15: 00007ffdb4392c98 [ 182.596071][ T6802] [ 182.600387][ T6797] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.902: Corrupt directory, running e2fsck is recommended [ 182.661163][ T6797] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.902: path /154/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 182.770638][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 182.931105][ T6809] FAULT_INJECTION: forcing a failure. [ 182.931105][ T6809] name failslab, interval 1, probability 0, space 0, times 0 [ 182.980822][ T6809] CPU: 1 PID: 6809 Comm: syz.3.906 Not tainted syzkaller #0 [ 182.988212][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 182.998322][ T6809] Call Trace: [ 183.001661][ T6809] [ 183.004637][ T6809] dump_stack_lvl+0x188/0x24e [ 183.009393][ T6809] ? show_regs_print_info+0x12/0x12 [ 183.014664][ T6809] ? load_image+0x410/0x410 [ 183.019293][ T6809] ? __might_sleep+0xd0/0xd0 [ 183.023959][ T6809] ? __lock_acquire+0x7ea0/0x7ea0 [ 183.029049][ T6809] should_fail_ex+0x390/0x4c0 [ 183.033806][ T6809] should_failslab+0x5/0x20 [ 183.038482][ T6809] slab_pre_alloc_hook+0x59/0x300 [ 183.043585][ T6809] ? memcg_list_lru_alloc+0x331/0xb00 [ 183.049139][ T6809] __kmem_cache_alloc_node+0x4f/0x270 [ 183.054576][ T6809] ? memcg_list_lru_alloc+0x331/0xb00 [ 183.060186][ T6809] __kmalloc+0xa3/0x240 [ 183.064430][ T6809] memcg_list_lru_alloc+0x331/0xb00 [ 183.069702][ T6809] ? slab_pre_alloc_hook+0xb1/0x300 [ 183.075075][ T6809] ? memcg_reparent_list_lrus+0x850/0x850 [ 183.080931][ T6809] ? get_obj_cgroup_from_current+0xd0/0x280 [ 183.086924][ T6809] slab_pre_alloc_hook+0x2ad/0x300 [ 183.092196][ T6809] ? slab_pre_alloc_hook+0xb1/0x300 [ 183.097437][ T6809] kmem_cache_alloc_lru+0x49/0x2e0 [ 183.102590][ T6809] ? new_inode_pseudo+0x7e/0x1c0 [ 183.107597][ T6809] new_inode_pseudo+0x7e/0x1c0 [ 183.112444][ T6809] new_inode+0x25/0x1d0 [ 183.116674][ T6809] simple_fill_super+0xca/0x5e0 [ 183.121556][ T6809] ? net_generic+0x1e/0x240 [ 183.126148][ T6809] nfsd_fill_super+0x80/0x110 [ 183.130918][ T6809] ? nfsd_fs_get_tree+0xc0/0xc0 [ 183.135823][ T6809] get_tree_keyed+0xd8/0x190 [ 183.140473][ T6809] vfs_get_tree+0x88/0x270 [ 183.144941][ T6809] do_new_mount+0x247/0xa50 [ 183.149495][ T6809] __se_sys_mount+0x2e3/0x3d0 [ 183.154211][ T6809] ? __x64_sys_mount+0xc0/0xc0 [ 183.159042][ T6809] ? lockdep_hardirqs_on+0x94/0x140 [ 183.164308][ T6809] ? __x64_sys_mount+0x1c/0xc0 [ 183.169126][ T6809] do_syscall_64+0x4c/0xa0 [ 183.173607][ T6809] ? clear_bhb_loop+0x60/0xb0 [ 183.178328][ T6809] ? clear_bhb_loop+0x60/0xb0 [ 183.183045][ T6809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.189095][ T6809] RIP: 0033:0x7f76ba1a94d9 [ 183.193550][ T6809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.213232][ T6809] RSP: 002b:00007f76b83f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.221834][ T6809] RAX: ffffffffffffffda RBX: 00007f76ba425fa0 RCX: 00007f76ba1a94d9 [ 183.230034][ T6809] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 183.238380][ T6809] RBP: 00007f76ba23804e R08: 0000000000000000 R09: 0000000000000000 [ 183.246527][ T6809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.254845][ T6809] R13: 00007f76ba426038 R14: 00007f76ba425fa0 R15: 00007ffd1d9386d8 [ 183.262973][ T6809] [ 183.270822][ T6515] kworker/u4:9: attempt to access beyond end of device [ 183.270822][ T6515] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 184.173234][ T6844] netlink: 'syz.3.917': attribute type 2 has an invalid length. [ 184.208068][ T6844] netlink: 'syz.3.917': attribute type 2 has an invalid length. [ 184.246329][ T6844] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.917'. [ 184.366669][ T6846] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input10 [ 184.479444][ T6841] loop4: detected capacity change from 0 to 8192 [ 184.576954][ T6841] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.592425][ T6841] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 184.602889][ T6841] REISERFS (device loop4): using ordered data mode [ 184.611603][ T6841] reiserfs: using flush barriers [ 184.621141][ T6841] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.639140][ T6841] REISERFS (device loop4): checking transaction log (loop4) [ 184.719049][ T6856] FAULT_INJECTION: forcing a failure. [ 184.719049][ T6856] name failslab, interval 1, probability 0, space 0, times 0 [ 184.794805][ T6841] REISERFS (device loop4): Using tea hash to sort names [ 184.804424][ T6856] CPU: 1 PID: 6856 Comm: syz.1.921 Not tainted syzkaller #0 [ 184.813288][ T6856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 184.824834][ T6856] Call Trace: [ 184.828885][ T6856] [ 184.832664][ T6856] dump_stack_lvl+0x188/0x24e [ 184.837803][ T6856] ? show_regs_print_info+0x12/0x12 [ 184.843281][ T6856] ? load_image+0x410/0x410 [ 184.849298][ T6856] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 184.856761][ T6856] should_fail_ex+0x390/0x4c0 [ 184.861573][ T6856] should_failslab+0x5/0x20 [ 184.863685][ T3604] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 184.868283][ T6856] slab_pre_alloc_hook+0x59/0x300 [ 184.868339][ T6856] ? current_time+0x19b/0x2c0 [ 184.888608][ T6856] ? proc_self_get_link+0xe1/0x170 [ 184.896843][ T6856] __kmem_cache_alloc_node+0x4f/0x270 [ 184.905112][ T6856] ? proc_self_get_link+0xe1/0x170 [ 184.912388][ T6856] kmalloc_trace+0x26/0xe0 [ 184.918963][ T6856] proc_self_get_link+0xe1/0x170 [ 184.924257][ T6856] ? proc_setup_self+0x2d0/0x2d0 [ 184.930179][ T6856] pick_link+0x6ed/0xe20 [ 184.932837][ T6841] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 184.935034][ T6856] step_into+0xc14/0xee0 [ 184.935084][ T6856] ? set_root+0x3a0/0x3a0 [ 184.956886][ T6856] ? lookup_fast+0x14a/0x4c0 [ 184.961729][ T6856] ? security_inode_permission+0xac/0xf0 [ 184.967698][ T6856] link_path_walk+0x744/0xea0 [ 184.972698][ T6856] ? handle_lookup_down+0x130/0x130 [ 184.979156][ T6856] path_openat+0x285/0x2f10 [ 184.984127][ T6856] ? kasan_set_track+0x60/0x70 [ 184.989602][ T6856] ? verify_lock_unused+0x140/0x140 [ 184.995987][ T6856] ? do_sys_openat2+0xdd/0x4f0 [ 185.001033][ T6856] ? do_filp_open+0x420/0x420 [ 185.006203][ T6856] do_filp_open+0x1ee/0x420 [ 185.011329][ T6856] ? vfs_tmpfile+0x490/0x490 [ 185.016953][ T6856] ? _raw_spin_unlock+0x24/0x40 [ 185.023574][ T6856] ? alloc_fd+0x590/0x640 [ 185.029706][ T6856] do_sys_openat2+0x14b/0x4f0 [ 185.037918][ T6856] ? do_sys_open+0xe0/0xe0 [ 185.043066][ T6856] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 185.049254][ T6856] ? lock_chain_count+0x20/0x20 [ 185.054285][ T6856] __x64_sys_openat+0x135/0x160 [ 185.059234][ T6856] do_syscall_64+0x4c/0xa0 [ 185.064111][ T6856] ? clear_bhb_loop+0x60/0xb0 [ 185.068868][ T6856] ? clear_bhb_loop+0x60/0xb0 [ 185.073801][ T6856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.079811][ T6856] RIP: 0033:0x7fa47fb69d0e [ 185.084419][ T6856] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.105366][ T6856] RSP: 002b:00007fa48099dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 185.116143][ T6856] RAX: ffffffffffffffda RBX: 00007fa48099e6c0 RCX: 00007fa47fb69d0e [ 185.126726][ T6856] RDX: 0000000000000000 RSI: 00007fa48099df90 RDI: ffffffffffffff9c [ 185.135477][ T6856] RBP: 00007fa47fc3804e R08: 0000000000000000 R09: 0000000000000000 [ 185.144036][ T6856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.152619][ T6856] R13: 00007fa47fe26038 R14: 00007fa47fe25fa0 R15: 00007ffdb4392c98 [ 185.160869][ T6856] [ 185.166568][ T3604] usb 4-1: Using ep0 maxpacket: 8 [ 185.187015][ T3604] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.245912][ T3604] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.273015][ T3604] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.352189][ T6863] batadv_slave_0: Caught tx_queue_len zero misconfig [ 185.356947][ T3604] usb 4-1: config 0 interface 0 has no altsetting 0 [ 185.389500][ T3604] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 185.433003][ T3604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.509113][ T3604] usb 4-1: config 0 descriptor?? [ 185.640079][ T6866] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 185.817254][ T6870] overlayfs: failed to resolve './file1': -2 [ 185.928944][ T6874] netlink: 'syz.2.925': attribute type 14 has an invalid length. [ 185.963083][ T3604] input: HID 046d:c623 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C623.0004/input/input11 [ 186.005335][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 186.082367][ T6874] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.082517][ T3604] logitech 0003:046D:C623.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.3-1/input0 [ 186.105686][ T6874] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.115524][ T6874] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.124564][ T6874] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.177440][ T27] audit: type=1800 audit(1794561749.437:68): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.907" name="file0" dev="loop4" ino=4 res=0 errno=0 [ 186.209783][ T6874] netlink: 'syz.2.925': attribute type 14 has an invalid length. [ 186.271564][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 187.335198][ T6908] FAULT_INJECTION: forcing a failure. [ 187.335198][ T6908] name failslab, interval 1, probability 0, space 0, times 0 [ 187.352142][ T6908] CPU: 0 PID: 6908 Comm: syz.4.935 Not tainted syzkaller #0 [ 187.360227][ T6908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 187.371395][ T6908] Call Trace: [ 187.375525][ T6908] [ 187.378591][ T6908] dump_stack_lvl+0x188/0x24e [ 187.383334][ T6908] ? show_regs_print_info+0x12/0x12 [ 187.388777][ T6908] ? load_image+0x410/0x410 [ 187.394521][ T6908] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 187.401540][ T6908] should_fail_ex+0x390/0x4c0 [ 187.406655][ T6908] should_failslab+0x5/0x20 [ 187.411215][ T6908] slab_pre_alloc_hook+0x59/0x300 [ 187.416820][ T6908] ? current_time+0x19b/0x2c0 [ 187.421925][ T6908] ? proc_self_get_link+0xe1/0x170 [ 187.427812][ T6908] __kmem_cache_alloc_node+0x4f/0x270 [ 187.433657][ T6908] ? proc_self_get_link+0xe1/0x170 [ 187.438915][ T6908] kmalloc_trace+0x26/0xe0 [ 187.443920][ T6908] proc_self_get_link+0xe1/0x170 [ 187.449154][ T6908] ? proc_setup_self+0x2d0/0x2d0 [ 187.454803][ T6908] pick_link+0x6ed/0xe20 [ 187.459235][ T6908] step_into+0xc14/0xee0 [ 187.464710][ T6908] ? set_root+0x3a0/0x3a0 [ 187.469573][ T6908] ? lookup_fast+0x14a/0x4c0 [ 187.475563][ T6908] ? security_inode_permission+0xac/0xf0 [ 187.481302][ T6908] link_path_walk+0x744/0xea0 [ 187.486265][ T6908] ? handle_lookup_down+0x130/0x130 [ 187.491860][ T6908] path_openat+0x285/0x2f10 [ 187.496725][ T6908] ? kasan_set_track+0x60/0x70 [ 187.501640][ T6908] ? verify_lock_unused+0x140/0x140 [ 187.506980][ T6908] ? do_sys_openat2+0xdd/0x4f0 [ 187.511790][ T6908] ? do_filp_open+0x420/0x420 [ 187.516781][ T6908] do_filp_open+0x1ee/0x420 [ 187.521494][ T6908] ? vfs_tmpfile+0x490/0x490 [ 187.526161][ T6908] ? _raw_spin_unlock+0x24/0x40 [ 187.531066][ T6908] ? alloc_fd+0x590/0x640 [ 187.535629][ T6908] do_sys_openat2+0x14b/0x4f0 [ 187.540966][ T6908] ? do_sys_open+0xe0/0xe0 [ 187.545808][ T6908] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 187.553460][ T6908] ? lock_chain_count+0x20/0x20 [ 187.558933][ T6908] __x64_sys_openat+0x135/0x160 [ 187.564807][ T6908] do_syscall_64+0x4c/0xa0 [ 187.569475][ T6908] ? clear_bhb_loop+0x60/0xb0 [ 187.574204][ T6908] ? clear_bhb_loop+0x60/0xb0 [ 187.579400][ T6908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.586407][ T6908] RIP: 0033:0x7fd9cd969d0e [ 187.591774][ T6908] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 187.613111][ T6908] RSP: 002b:00007fd9ce882ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 187.621859][ T6908] RAX: ffffffffffffffda RBX: 00007fd9ce8836c0 RCX: 00007fd9cd969d0e [ 187.630165][ T6908] RDX: 0000000000000000 RSI: 00007fd9ce882f90 RDI: ffffffffffffff9c [ 187.638475][ T6908] RBP: 00007fd9cda3804e R08: 0000000000000000 R09: 0000000000000000 [ 187.647638][ T6908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.655851][ T6908] R13: 00007fd9cdc26038 R14: 00007fd9cdc25fa0 R15: 00007fffdae96ad8 [ 187.664008][ T6908] [ 188.117947][ T3604] usb 4-1: USB disconnect, device number 9 [ 188.217399][ T6928] gadgetfs: bound to dummy_udc driver [ 188.745484][ T6950] netlink: 'syz.2.948': attribute type 2 has an invalid length. [ 188.816822][ T6950] netlink: 'syz.2.948': attribute type 2 has an invalid length. [ 188.854104][ T6950] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.948'. [ 188.973130][ T6954] FAULT_INJECTION: forcing a failure. [ 188.973130][ T6954] name failslab, interval 1, probability 0, space 0, times 0 [ 189.006339][ T6954] CPU: 1 PID: 6954 Comm: syz.3.950 Not tainted syzkaller #0 [ 189.013995][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 189.024112][ T6954] Call Trace: [ 189.027656][ T6954] [ 189.030823][ T6954] dump_stack_lvl+0x188/0x24e [ 189.035580][ T6954] ? show_regs_print_info+0x12/0x12 [ 189.040949][ T6954] ? load_image+0x410/0x410 [ 189.047717][ T6954] ? __might_sleep+0xd0/0xd0 [ 189.052464][ T6954] ? __lock_acquire+0x7ea0/0x7ea0 [ 189.057698][ T6954] should_fail_ex+0x390/0x4c0 [ 189.062881][ T6954] should_failslab+0x5/0x20 [ 189.067481][ T6954] slab_pre_alloc_hook+0x59/0x300 [ 189.072770][ T6954] kmem_cache_alloc_lru+0x49/0x2e0 [ 189.077974][ T6954] ? __d_alloc+0x2e/0x6e0 [ 189.082874][ T6954] __d_alloc+0x2e/0x6e0 [ 189.091468][ T6954] d_alloc_parallel+0xdc/0x1590 [ 189.096369][ T6954] ? __d_lookup+0x8b/0x7c0 [ 189.100831][ T6954] ? __lock_acquire+0x7ea0/0x7ea0 [ 189.106108][ T6954] ? __d_lookup+0x8b/0x7c0 [ 189.111609][ T6954] ? d_hash_and_lookup+0x1b0/0x1b0 [ 189.118984][ T6954] path_openat+0x949/0x2f10 [ 189.123615][ T6954] ? kasan_set_track+0x60/0x70 [ 189.128500][ T6954] ? verify_lock_unused+0x140/0x140 [ 189.133801][ T6954] ? do_filp_open+0x420/0x420 [ 189.139100][ T6954] do_filp_open+0x1ee/0x420 [ 189.143863][ T6954] ? vfs_tmpfile+0x490/0x490 [ 189.149152][ T6954] ? noop_direct_IO+0x10/0x10 [ 189.154530][ T6954] ? _raw_spin_unlock+0x24/0x40 [ 189.159472][ T6954] ? alloc_fd+0x590/0x640 [ 189.163860][ T6954] do_sys_openat2+0x14b/0x4f0 [ 189.168671][ T6954] ? do_sys_open+0xe0/0xe0 [ 189.173240][ T6954] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 189.179332][ T6954] ? lock_chain_count+0x20/0x20 [ 189.184874][ T6954] __x64_sys_openat+0x135/0x160 [ 189.190082][ T6954] do_syscall_64+0x4c/0xa0 [ 189.194641][ T6954] ? clear_bhb_loop+0x60/0xb0 [ 189.199617][ T6954] ? clear_bhb_loop+0x60/0xb0 [ 189.204741][ T6954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.210979][ T6954] RIP: 0033:0x7f76ba169d0e [ 189.215868][ T6954] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 189.236052][ T6954] RSP: 002b:00007f76b83f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 189.245279][ T6954] RAX: ffffffffffffffda RBX: 00007f76b83f66c0 RCX: 00007f76ba169d0e [ 189.253600][ T6954] RDX: 0000000000000000 RSI: 00007f76b83f5f90 RDI: ffffffffffffff9c [ 189.261667][ T6954] RBP: 00007f76ba23804e R08: 0000000000000000 R09: 0000000000000000 [ 189.269688][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.277710][ T6954] R13: 00007f76ba426038 R14: 00007f76ba425fa0 R15: 00007ffd1d9386d8 [ 189.285737][ T6954] [ 189.675261][ T6971] netlink: 51 bytes leftover after parsing attributes in process `syz.1.959'. [ 190.033168][ T6989] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 190.040871][ T6989] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 190.127680][ T6992] gadgetfs: bound to dummy_udc driver [ 190.134196][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 190.205182][ T6989] device hsr_slave_0 left promiscuous mode [ 190.217656][ T6989] device hsr_slave_1 left promiscuous mode [ 190.415768][ T6996] device vlan2 entered promiscuous mode [ 190.452683][ T6996] device bond0 entered promiscuous mode [ 190.461306][ T6996] device bond_slave_0 entered promiscuous mode [ 190.896366][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 191.196410][ T26] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 191.388326][ T26] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 191.405879][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.176403][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 192.263705][ T7062] loop2: detected capacity change from 0 to 8192 [ 192.315391][ T7062] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 192.329221][ T7062] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 192.338992][ T7062] REISERFS (device loop2): using ordered data mode [ 192.345652][ T7062] reiserfs: using flush barriers [ 192.357803][ T7062] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 192.437173][ T7062] REISERFS (device loop2): checking transaction log (loop2) [ 192.615295][ T7071] netlink: 'syz.0.1000': attribute type 14 has an invalid length. [ 192.655055][ T26] usb 4-1: Cannot set autoneg [ 192.662371][ T26] MOSCHIP usb-ethernet driver: probe of 4-1:7.0 failed with error -71 [ 192.671222][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1000'. [ 192.719947][ T7071] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.729691][ T7071] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.739353][ T7071] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.752135][ T7071] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.775575][ T26] usb 4-1: USB disconnect, device number 10 [ 192.820183][ T7062] REISERFS (device loop2): Using tea hash to sort names [ 192.849859][ T7062] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 192.901109][ T7071] netlink: 'syz.0.1000': attribute type 14 has an invalid length. [ 192.914751][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1000'. [ 192.999248][ T7062] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 193.023281][ T7062] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 3) not found (pos 4) [ 193.044052][ T7062] overlayfs: upper fs needs to support d_type. [ 193.054992][ T7062] overlayfs: upper fs does not support tmpfile. [ 193.088988][ T7062] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 193.114041][ T7062] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 4) not found (pos 4) [ 193.196390][ T4384] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 193.398991][ T4384] usb 5-1: unable to get BOS descriptor or descriptor too short [ 193.410915][ T4384] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.439055][ T4384] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 193.466769][ T4384] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 193.534102][ T4384] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 193.570404][ T4384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 193.595713][ T4384] usb 5-1: Product: syz [ 193.601101][ T4384] usb 5-1: Manufacturer: syz [ 193.622593][ T4384] uvcvideo 5-1:1.0: Found Unit with invalid ID 0 [ 193.639676][ T4384] usb 5-1: Found UVC 0.00 device syz (8086:0ad2) [ 193.656460][ T4384] usb 5-1: No streaming interface found for terminal 2. [ 193.849846][ T4384] usb 5-1: USB disconnect, device number 6 [ 194.339995][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.346445][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.600611][ T7115] device ip6gre1 entered promiscuous mode [ 194.645431][ T7117] loop2: detected capacity change from 0 to 33280 [ 194.773140][ T7117] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 194.823389][ T7117] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.003445][ T7131] loop4: detected capacity change from 0 to 32896 [ 195.075589][ T7131] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 195.161563][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 195.199725][ T7131] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.447777][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 195.696314][ T26] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 195.714534][ T7151] loop4: detected capacity change from 0 to 2048 [ 195.765775][ T7151] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.889318][ T26] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 195.911845][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.385589][ T7164] gadgetfs: bound to dummy_udc driver [ 196.449319][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 196.871817][ T7175] loop3: detected capacity change from 0 to 33280 [ 196.915714][ T7175] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 196.936480][ T7175] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.970064][ T7175] EXT4-fs (loop3): 1 truncate cleaned up [ 196.978411][ T7175] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 197.002240][ T27] audit: type=1800 audit(1794561760.257:69): pid=7175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1046" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 197.104593][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 197.193152][ T26] usb 3-1: Cannot set autoneg [ 197.203336][ T26] MOSCHIP usb-ethernet driver: probe of 3-1:7.0 failed with error -71 [ 197.248654][ T26] usb 3-1: USB disconnect, device number 6 [ 198.693222][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'. [ 198.919104][ T7239] device ip6gre1 entered promiscuous mode [ 199.426892][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 199.515112][ T7] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.696541][ T3604] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 199.908697][ T3604] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.936312][ T3604] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 199.956977][ T3604] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 199.977289][ T3604] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.011803][ T3604] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 200.037826][ T3604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.954600][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.962575][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.062222][ T7303] netlink: 3568 bytes leftover after parsing attributes in process `syz.3.1101'. [ 201.306529][ T3604] gud 3-1:1.0: USB-2: Failed to add properties (ret=-71) [ 201.316508][ T3604] gud 3-1:1.0: Failed to get connectors (error=-71) [ 201.330201][ T3604] gud: probe of 3-1:1.0 failed with error -71 [ 201.382087][ T3604] usb 3-1: USB disconnect, device number 7 [ 201.486415][ T132] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 201.536430][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 201.542551][ T4292] Bluetooth: hci2: command 0x0406 tx timeout [ 201.550720][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 201.562405][ T7320] IPv6: sit3: Disabled Multicast RS [ 201.634111][ T7322] gadgetfs: bound to dummy_udc driver [ 201.676332][ T132] usb 4-1: Using ep0 maxpacket: 8 [ 201.688890][ T132] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 201.699071][ T132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.707330][ T132] usb 4-1: Product: syz [ 201.711827][ T132] usb 4-1: Manufacturer: syz [ 201.716618][ T132] usb 4-1: SerialNumber: syz [ 201.732895][ T132] usb 4-1: config 0 descriptor?? [ 201.947816][ T132] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 202.662107][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'. [ 202.774162][ T132] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 202.802416][ T132] usb 4-1: USB disconnect, device number 11 [ 203.148698][ T3604] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 203.204835][ T7358] gadgetfs: bound to dummy_udc driver [ 203.348239][ T3604] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 203.366369][ T3604] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 203.386576][ T3604] usb 5-1: config 4 has no interface number 0 [ 203.392883][ T3604] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 203.449432][ T3604] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 203.466249][ T3604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.484958][ T3604] usb 5-1: Product: syz [ 203.493869][ T3604] usb 5-1: Manufacturer: syz [ 203.503454][ T3604] usb 5-1: SerialNumber: syz [ 203.786252][ T7379] netlink: 'syz.3.1132': attribute type 9 has an invalid length. [ 203.845521][ T7380] netlink: 3568 bytes leftover after parsing attributes in process `syz.0.1133'. [ 203.948709][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 203.968647][ T3604] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 204.000070][ T3604] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 204.026856][ T3604] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 204.045660][ T3604] usb 5-1: media controller created [ 204.058485][ T3604] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.294723][ T3604] DVB: Unable to find symbol dib7000p_attach() [ 204.302066][ T3604] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 204.546309][ T3604] rc_core: IR keymap rc-dib0700-rc5 not found [ 204.562699][ T3604] Registered IR keymap rc-empty [ 204.573320][ T3604] dvb-usb: could not initialize remote control. [ 204.605547][ T3604] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 204.636242][ T3604] usb 5-1: USB disconnect, device number 7 [ 204.677112][ T3604] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 205.374307][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.381951][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.031485][ T7447] device bridge_slave_0 left promiscuous mode [ 206.048162][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.265599][ T7457] IPv6: sit1: Disabled Multicast RS [ 206.424421][ T7462] netlink: 'syz.2.1179': attribute type 9 has an invalid length. [ 206.590436][ T7464] gadgetfs: bound to dummy_udc driver [ 206.772323][ T7473] overlayfs: failed to clone lowerpath [ 207.026476][ T4359] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.223470][ T4359] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.295752][ T4359] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.408892][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 207.565617][ T4359] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.835479][ T7499] overlayfs: failed to clone upperpath [ 207.859893][ T7502] gadgetfs: bound to dummy_udc driver [ 208.138130][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.149464][ T4292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.160903][ T4292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.169804][ T4292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.179530][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.189508][ T4292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.403925][ T7506] rxe_eth0 speed is unknown, defaulting to 1000 [ 209.595196][ T7506] chnl_net:caif_netlink_parms(): no params data found [ 209.661394][ T7541] loop3: detected capacity change from 0 to 40427 [ 209.680101][ T7541] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 209.732797][ T7541] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 209.830352][ T7541] F2FS-fs (loop3): Found nat_bits in checkpoint [ 210.131893][ T7541] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 210.156549][ T7541] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 210.256598][ T4293] Bluetooth: hci3: command 0x0409 tx timeout [ 210.370362][ T7506] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.391692][ T7506] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.418371][ T7506] device bridge_slave_0 entered promiscuous mode [ 210.473956][ T7506] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.499875][ T7506] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.535142][ T7506] device bridge_slave_1 entered promiscuous mode [ 210.762782][ T7569] overlayfs: statfs failed on './file0' [ 211.089843][ T7506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.132189][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.187375][ T7506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.399605][ T7506] team0: Port device team_slave_0 added [ 211.455053][ T7506] team0: Port device team_slave_1 added [ 211.487755][ T7590] gadgetfs: bound to dummy_udc driver [ 211.542517][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.574709][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.624617][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.666257][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.712184][ T4359] device bridge_slave_1 left promiscuous mode [ 211.733057][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.753747][ T4359] device bridge_slave_0 left promiscuous mode [ 211.765561][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.843362][ T4359] device veth1_macvtap left promiscuous mode [ 211.852144][ T4359] device veth0_macvtap left promiscuous mode [ 211.859102][ T4359] device veth1_vlan left promiscuous mode [ 211.865394][ T4359] device veth0_vlan left promiscuous mode [ 212.206410][ T4276] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 212.336529][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 212.445992][ T4276] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 212.455329][ T4276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.474023][ T4276] usb 4-1: Product: syz [ 212.485926][ T4276] usb 4-1: Manufacturer: syz [ 212.501284][ T4276] usb 4-1: SerialNumber: syz [ 212.710290][ T4276] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 212.969823][ T4356] usb 4-1: USB disconnect, device number 12 [ 213.461901][ T7624] loop2: detected capacity change from 0 to 33792 [ 213.497152][ T7624] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.637949][ T7624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 213.840598][ T4359] team0 (unregistering): Port device team_slave_1 removed [ 213.856390][ T4276] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 213.871613][ T4276] ath9k_htc: Failed to initialize the device [ 213.885153][ T4356] usb 4-1: ath9k_htc: USB layer deinitialized [ 213.898515][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 213.973805][ T4359] team0 (unregistering): Port device team_slave_0 removed [ 214.059338][ T4359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.143711][ T4359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.315596][ T4356] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 214.416469][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 214.514639][ T4356] usb 4-1: Using ep0 maxpacket: 8 [ 214.539005][ T4356] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 214.566641][ T4356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 214.574810][ T4356] usb 4-1: Product: syz [ 214.582676][ T4356] usb 4-1: Manufacturer: syz [ 214.590793][ T4356] usb 4-1: SerialNumber: syz [ 214.613676][ T4356] usb 4-1: config 0 descriptor?? [ 214.784753][ T4359] bond0 (unregistering): Released all slaves [ 214.829179][ T4356] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 214.836074][ T4356] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 214.967123][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.978737][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.018414][ T7506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.056284][ T4356] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 215.069014][ T4356] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 215.090862][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.104339][ T4356] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 215.122485][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.213866][ T7506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.364610][ T7506] device hsr_slave_0 entered promiscuous mode [ 215.392566][ T7506] device hsr_slave_1 entered promiscuous mode [ 215.440354][ T7506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.458469][ T7506] Cannot create hsr debugfs directory [ 215.656497][ T4356] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 215.675552][ T4356] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 215.702660][ T4356] radio-si470x: probe of 4-1:0.0 failed with error -22 [ 215.889497][ T4356] usb 4-1: USB disconnect, device number 13 [ 216.189408][ T7506] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.207113][ T7506] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.226574][ T7506] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.242737][ T7506] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.496374][ T4293] Bluetooth: hci3: command 0x0419 tx timeout [ 216.525425][ T7506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.552841][ T7506] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.586995][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.595450][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.632094][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.661844][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.695350][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.704750][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.755784][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.779097][ T7672] FAULT_INJECTION: forcing a failure. [ 216.779097][ T7672] name failslab, interval 1, probability 0, space 0, times 0 [ 216.801113][ T7665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1238'. [ 216.823247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.846547][ T7672] CPU: 1 PID: 7672 Comm: syz.3.1239 Not tainted syzkaller #0 [ 216.854763][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 216.868113][ T7672] Call Trace: [ 216.868835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.871664][ T7672] [ 216.885813][ T7672] dump_stack_lvl+0x188/0x24e [ 216.891419][ T7672] ? show_regs_print_info+0x12/0x12 [ 216.898645][ T7672] ? load_image+0x410/0x410 [ 216.903899][ T7672] ? __might_sleep+0xd0/0xd0 [ 216.908847][ T7672] ? __lock_acquire+0x7ea0/0x7ea0 [ 216.914753][ T7672] should_fail_ex+0x390/0x4c0 [ 216.920346][ T7672] should_failslab+0x5/0x20 [ 216.925768][ T7672] slab_pre_alloc_hook+0x59/0x300 [ 216.931067][ T7672] kmem_cache_alloc+0x56/0x2f0 [ 216.935912][ T7672] ? security_inode_alloc+0x30/0x110 [ 216.941316][ T7672] security_inode_alloc+0x30/0x110 [ 216.946651][ T7672] inode_init_always+0x910/0xc90 [ 216.947634][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.951748][ T7672] new_inode_pseudo+0x91/0x1c0 [ 216.959399][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.963783][ T7672] __sock_create+0x129/0x940 [ 216.975868][ T7672] ? do_raw_spin_unlock+0x11d/0x230 [ 216.980860][ T7650] loop2: detected capacity change from 0 to 40427 [ 216.981240][ T7672] inet_ctl_sock_create+0x9f/0x230 [ 216.993503][ T7672] ? fib_default_rule_add+0x4b/0x390 [ 216.998897][ T7672] ? inet_gro_complete+0x570/0x570 [ 217.004225][ T7672] ? ndisc_net_init+0x12c/0x250 [ 217.009152][ T7672] ? fib6_info_release+0xa0/0xa0 [ 217.014616][ T7672] ? fib_default_rule_add+0x1fa/0x390 [ 217.020362][ T7672] igmp6_net_init+0x18a/0x3f0 [ 217.025643][ T7672] ops_init+0x360/0x5e0 [ 217.029964][ T7672] setup_net+0x4f2/0xbd0 [ 217.034515][ T7672] ? copy_net_ns+0x5b0/0x5b0 [ 217.039659][ T7672] ? copy_net_ns+0x324/0x5b0 [ 217.045310][ T7672] ? down_read_killable+0x1cc/0x340 [ 217.051096][ T7672] copy_net_ns+0x33e/0x5b0 [ 217.056224][ T7672] create_new_namespaces+0x3ce/0x700 [ 217.062776][ T7672] unshare_nsproxy_namespaces+0x116/0x160 [ 217.068770][ T7672] ksys_unshare+0x4f6/0x8e0 [ 217.073349][ T7672] ? sighand_ctor+0x40/0x40 [ 217.077926][ T7672] ? lock_chain_count+0x20/0x20 [ 217.082852][ T7672] ? syscall_enter_from_user_mode+0x21/0x80 [ 217.088818][ T7672] __x64_sys_unshare+0x34/0x40 [ 217.093661][ T7672] do_syscall_64+0x4c/0xa0 [ 217.098250][ T7672] ? clear_bhb_loop+0x60/0xb0 [ 217.103000][ T7672] ? clear_bhb_loop+0x60/0xb0 [ 217.107935][ T7672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.114007][ T7672] RIP: 0033:0x7f76ba1a94d9 [ 217.118498][ T7672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.138167][ T7672] RSP: 002b:00007f76b83f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 217.146735][ T7672] RAX: ffffffffffffffda RBX: 00007f76ba425fa0 RCX: 00007f76ba1a94d9 [ 217.155010][ T7672] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 217.163018][ T7672] RBP: 00007f76ba23804e R08: 0000000000000000 R09: 0000000000000000 [ 217.171024][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.179522][ T7672] R13: 00007f76ba426038 R14: 00007f76ba425fa0 R15: 00007ffd1d9386d8 [ 217.189668][ T7672] [ 217.227377][ T7650] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 217.234336][ T7650] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 217.268412][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.278786][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.288505][ T7650] F2FS-fs (loop2): invalid crc value [ 217.321328][ T7650] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 217.323270][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.407943][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.432237][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.475481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.485629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.507761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.523466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.558070][ T7506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.587225][ T7506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.595899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.615384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.638474][ T7650] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 217.645628][ T7650] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 217.718634][ T7650] syz.2.1235: attempt to access beyond end of device [ 217.718634][ T7650] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 217.853055][ T4277] syz-executor: attempt to access beyond end of device [ 217.853055][ T4277] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 218.246521][ T7672] socket: no more sockets [ 218.250944][ T7672] Failed to initialize the IGMP6 autojoin socket (err -23) [ 218.393507][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.414975][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.444468][ T7506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.753945][ T7738] page:ffffea0001402000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50080 [ 219.805190][ T7738] head:ffffea0001402000 order:3 compound_mapcount:0 compound_pincount:0 [ 219.823992][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.844586][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.864128][ T7738] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 219.896337][ T7738] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888018442140 [ 219.905064][ T7738] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 219.968207][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.986874][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.017198][ T7738] page dumped because: unmovable page [ 220.035086][ T7506] device veth0_vlan entered promiscuous mode [ 220.056800][ T7738] page_owner tracks the page as allocated [ 220.058460][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.060817][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.102905][ T7506] device veth1_vlan entered promiscuous mode [ 220.116421][ T7738] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4500, tgid 4500 (udevd), ts 142162571561, free_ts 140707380907 [ 220.202472][ T7738] post_alloc_hook+0x173/0x1a0 [ 220.222083][ T7738] get_page_from_freelist+0x206b/0x2180 [ 220.229347][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 220.239098][ T7738] __alloc_pages+0x1ec/0x4f0 [ 220.251855][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 220.270273][ T7738] alloc_slab_page+0x5d/0x180 [ 220.275586][ T7738] new_slab+0x87/0x2d0 [ 220.291865][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 220.311171][ T7738] ___slab_alloc+0xbc5/0x1240 [ 220.326313][ T7738] __kmem_cache_alloc_node+0x126/0x270 [ 220.336556][ T7738] __kmalloc+0xa3/0x240 [ 220.341191][ T7738] tomoyo_realpath_from_path+0xe2/0x5c0 [ 220.344671][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 220.381057][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.391466][ T7752] loop2: detected capacity change from 0 to 16 [ 220.414138][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.432635][ T7738] tomoyo_check_open_permission+0x212/0x440 [ 220.436913][ T7752] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature 40, please upgrade kernel version [ 220.478430][ T7506] device veth0_macvtap entered promiscuous mode [ 220.496693][ T7738] security_file_open+0x5e/0xa0 [ 220.501671][ T7738] do_dentry_open+0x2fd/0x10b0 [ 220.528364][ T7506] device veth1_macvtap entered promiscuous mode [ 220.572172][ T7738] path_openat+0x2674/0x2f10 [ 220.613242][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.641593][ T7738] do_filp_open+0x1ee/0x420 [ 220.666210][ T7738] do_sys_openat2+0x14b/0x4f0 [ 220.672251][ T7738] __x64_sys_openat+0x135/0x160 [ 220.686279][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.716233][ T7738] page last free stack trace: [ 220.723847][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.735621][ T7738] free_unref_page_prepare+0x8e5/0x9e0 [ 220.760032][ T7729] loop3: detected capacity change from 0 to 40427 [ 220.766633][ T7738] free_unref_page+0x2e/0x3f0 [ 220.771464][ T7738] __unfreeze_partials+0x188/0x1e0 [ 220.776907][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.812675][ T7738] put_cpu_partial+0x17c/0x250 [ 220.817986][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.837784][ T7738] qlist_free_all+0x76/0xe0 [ 220.842414][ T7738] kasan_quarantine_reduce+0x144/0x160 [ 220.864862][ T7729] F2FS-fs (loop3): invalid crc value [ 220.876380][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.896292][ T7738] __kasan_slab_alloc+0x1e/0x80 [ 220.901426][ T7738] slab_post_alloc_hook+0x4b/0x490 [ 220.907910][ T7729] F2FS-fs (loop3): Found nat_bits in checkpoint [ 220.916216][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.931778][ T7738] __kmem_cache_alloc_node+0x19d/0x270 [ 220.938982][ T7738] __kmalloc+0xa3/0x240 [ 220.943720][ T7738] tomoyo_realpath_from_path+0xe2/0x5c0 [ 220.956219][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.976349][ T7738] tomoyo_path_number_perm+0x22f/0x650 [ 220.982137][ T7738] security_file_ioctl+0x6c/0xa0 [ 220.989517][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.005445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.023604][ T7738] __se_sys_ioctl+0x48/0x170 [ 221.038055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.056244][ T7738] do_syscall_64+0x4c/0xa0 [ 221.060785][ T7738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.077070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.107161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.158619][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.187543][ T7729] F2FS-fs (loop3): Start checkpoint disabled! [ 221.206349][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.251326][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.291428][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.301644][ T7729] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 221.342950][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.399110][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.457417][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.479891][ T7729] syz.3.1254: attempt to access beyond end of device [ 221.479891][ T7729] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 221.513632][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.537393][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.547696][ T7729] syz.3.1254: attempt to access beyond end of device [ 221.547696][ T7729] loop3: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 221.595838][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.617615][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.666659][ T7506] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.712904][ T7506] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.764449][ T7506] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.806069][ T7506] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.066734][ T9] kworker/u4:0: attempt to access beyond end of device [ 222.066734][ T9] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 222.132411][ T9] kworker/u4:0: attempt to access beyond end of device [ 222.132411][ T9] loop3: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 222.182301][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.192039][ T4356] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 222.214474][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.243222][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.334893][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.353618][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.373399][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 222.398716][ T4356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.420237][ T4356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.449094][ T4356] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.463259][ T4356] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.473773][ T4356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.518082][ T4356] usb 3-1: config 0 descriptor?? [ 222.923698][ T7787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1269'. [ 222.953383][ T4356] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 223.024822][ T4356] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 223.274446][ T132] usb 3-1: USB disconnect, device number 8 [ 223.401498][ T7793] fido_id[7793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 223.626111][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1275'. [ 223.779557][ T7810] loop3: detected capacity change from 0 to 128 [ 223.878022][ T7810] syz.3.1276: attempt to access beyond end of device [ 223.878022][ T7810] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 223.961974][ T7810] syz.3.1276: attempt to access beyond end of device [ 223.961974][ T7810] loop3: rw=2049, sector=169, nr_sectors = 6 limit=128 [ 224.074252][ T7813] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 224.081639][ T7813] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 224.099992][ T7817] vhci_hcd: xmit failed -107 [ 224.128375][ T7813] vhci_hcd vhci_hcd.0: Device attached [ 224.145901][ T58] vhci_hcd: stop threads [ 224.154178][ T58] vhci_hcd: release socket [ 224.173845][ T58] vhci_hcd: disconnect device [ 224.390189][ T7826] overlayfs: invalid redirect (./file0/file1) [ 224.781754][ T7845] loop2: detected capacity change from 0 to 256 [ 224.839029][ T7845] exfat: Deprecated parameter 'utf8' [ 224.876842][ T7845] exfat: Deprecated parameter 'namecase' [ 224.882849][ T7845] exfat: Deprecated parameter 'namecase' [ 224.916441][ T7845] exfat: Deprecated parameter 'namecase' [ 225.012821][ T7845] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 225.153138][ T7845] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1289'. [ 225.254759][ T7852] loop3: detected capacity change from 0 to 36864 [ 225.335983][ T7852] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 225.524977][ T7856] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 225.591568][ T7856] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 225.686229][ T7856] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.1291: Failed to acquire dquot type 1 [ 225.738944][ T7856] EXT4-fs warning (device loop3): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 225.832263][ T7852] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 225.857428][ T7852] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 225.892792][ T7852] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 225.940605][ T7852] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.1291: Failed to acquire dquot type 1 [ 226.000786][ T7852] EXT4-fs warning (device loop3): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 226.026603][ T3604] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 226.062723][ T7864] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 226.069326][ T7864] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 226.118196][ T7865] vhci_hcd: xmit failed -107 [ 226.133309][ T7864] vhci_hcd vhci_hcd.0: Device attached [ 226.154118][ T41] vhci_hcd: stop threads [ 226.175238][ T41] vhci_hcd: release socket [ 226.203540][ T41] vhci_hcd: disconnect device [ 226.228484][ T3604] usb 6-1: config 253 has an invalid interface number: 130 but max is 0 [ 226.254595][ T3604] usb 6-1: config 253 has no interface number 0 [ 226.290225][ T3604] usb 6-1: config 253 interface 130 has no altsetting 0 [ 226.328513][ T3604] usb 6-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 226.362501][ T3604] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.418315][ T3604] usb 6-1: Product: syz [ 226.422562][ T3604] usb 6-1: Manufacturer: syz [ 226.436288][ T3604] usb 6-1: SerialNumber: syz [ 226.902038][ T7877] overlayfs: failed to clone upperpath [ 227.075669][ T3604] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 227.104180][ T3604] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.173348][ T3604] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 227.209118][ T3604] usb 6-1: media controller created [ 227.282692][ T3604] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 227.556785][ T4369] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.601805][ T7895] rxe_eth0 speed is unknown, defaulting to 1000 [ 227.608481][ T3604] DVB: Unable to find symbol dib8000_attach() [ 227.614951][ T3604] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 227.816417][ T4369] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.006312][ T3604] rc_core: IR keymap rc-dib0700-nec not found [ 228.013921][ T3604] Registered IR keymap rc-empty [ 228.045621][ T3604] dvb-usb: could not initialize remote control. [ 228.067686][ T3604] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 228.099285][ T3604] dib0700: There's no endpoint for remote controller [ 228.149324][ T4369] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.373849][ T4369] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.422083][ T3604] usb 6-1: USB disconnect, device number 2 [ 228.550745][ T3604] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 229.110448][ T4293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.133165][ T4293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.145821][ T4293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.160398][ T4293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.174473][ T4293] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.185656][ T4293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.536874][ T4276] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 229.586562][ T7930] overlayfs: failed to clone upperpath [ 229.680985][ T7922] rxe_eth0 speed is unknown, defaulting to 1000 [ 229.745172][ T7933] loop5: detected capacity change from 0 to 33280 [ 229.754732][ T4276] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.789543][ T4276] usb 3-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 229.862724][ T4276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 229.896403][ T4276] usb 3-1: Product: syz [ 229.901029][ T4276] usb 3-1: Manufacturer: syz [ 229.964808][ T7936] fuse: Bad value for 'fd' [ 229.984339][ T4276] navman 3-1:1.0: navman converter detected [ 229.993287][ T7933] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.1313: iget: bad i_size value: 38620345925642 [ 230.092562][ T4276] usb 3-1: navman converter now attached to ttyUSB0 [ 230.126833][ T7933] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1313: couldn't read orphan inode 15 (err -117) [ 230.198686][ T7933] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 230.239598][ T4384] usb 3-1: USB disconnect, device number 9 [ 230.277324][ T4384] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 230.285838][ T4384] navman 3-1:1.0: device disconnected [ 231.216657][ T4292] Bluetooth: hci4: command 0x0409 tx timeout [ 231.413019][ T7950] rxe_eth0 speed is unknown, defaulting to 1000 [ 231.428028][ T7506] EXT4-fs (loop5): unmounting filesystem. [ 232.030725][ T7922] chnl_net:caif_netlink_parms(): no params data found [ 232.642432][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.658227][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.697716][ T7922] device bridge_slave_0 entered promiscuous mode [ 232.744340][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.761876][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.787938][ T7922] device bridge_slave_1 entered promiscuous mode [ 232.805700][ T7975] overlayfs: failed to clone lowerpath [ 232.852051][ T4369] device hsr_slave_0 left promiscuous mode [ 232.867562][ T4369] device hsr_slave_1 left promiscuous mode [ 232.896749][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.905072][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.937857][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.946031][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.967170][ T4369] device bridge_slave_1 left promiscuous mode [ 232.973625][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.084397][ T4293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.104894][ T4293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.114207][ T4293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.123485][ T4293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.133330][ T4293] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.144343][ T4293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.151953][ T4369] device veth1_macvtap left promiscuous mode [ 233.186421][ T4369] device veth0_macvtap left promiscuous mode [ 233.203975][ T4369] device veth1_vlan left promiscuous mode [ 233.214776][ T4369] device veth0_vlan left promiscuous mode [ 233.296324][ T4293] Bluetooth: hci4: command 0x041b tx timeout [ 233.618487][ T7991] overlayfs: failed to clone upperpath [ 234.918355][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 234.982870][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 235.057197][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.226487][ T4293] Bluetooth: hci3: command 0x0409 tx timeout [ 235.396430][ T4293] Bluetooth: hci4: command 0x040f tx timeout [ 235.641505][ T4369] bond0 (unregistering): Released all slaves [ 235.816030][ T7922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.869521][ T7922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.890401][ T7977] rxe_eth0 speed is unknown, defaulting to 1000 [ 235.988101][ T7922] team0: Port device team_slave_0 added [ 236.009542][ T7922] team0: Port device team_slave_1 added [ 236.082690][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.106190][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.156295][ T7922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.254292][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.266618][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.326460][ T7922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.465536][ T7922] device hsr_slave_0 entered promiscuous mode [ 236.473420][ T7922] device hsr_slave_1 entered promiscuous mode [ 236.480841][ T7922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.488572][ T7922] Cannot create hsr debugfs directory [ 236.938546][ T4369] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.110777][ T4369] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.146839][ T7977] chnl_net:caif_netlink_parms(): no params data found [ 237.164825][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 237.296785][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 237.401763][ T4369] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.456457][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 237.553679][ T8043] IPVS: rr: UDP [::1]:8080 - no destination available [ 237.595600][ T4369] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.726363][ T7977] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.733681][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.750839][ T7977] device bridge_slave_0 entered promiscuous mode [ 237.767607][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.775183][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.783745][ T7977] device bridge_slave_1 entered promiscuous mode [ 237.810705][ T7922] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.827510][ T7922] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 237.855133][ T7922] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 237.926834][ T7977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.956754][ T7922] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 238.010489][ T7977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.145919][ T7977] team0: Port device team_slave_0 added [ 238.260376][ T7977] team0: Port device team_slave_1 added [ 238.364048][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.391000][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.418384][ T7977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.451329][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.464186][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.556433][ T7977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.932038][ T7977] device hsr_slave_0 entered promiscuous mode [ 238.942862][ T7977] device hsr_slave_1 entered promiscuous mode [ 238.956520][ T132] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 238.975339][ T7977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.993806][ T7977] Cannot create hsr debugfs directory [ 239.174759][ T132] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 239.197351][ T132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.274789][ T7922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.378211][ T4293] Bluetooth: hci3: command 0x040f tx timeout [ 239.571461][ T7922] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.619802][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.637506][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.770146][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.790786][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.821151][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.828427][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.941227][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.958461][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.999618][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.026921][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.034217][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.263409][ T132] usb 3-1: ATUSB: AT86RF231 version 1 [ 240.271886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.292713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.304386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.331734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.357537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.464763][ T132] usb 3-1: Firmware version (0.0) predates our first public release. [ 240.484523][ T132] usb 3-1: Please update to version 0.2 or newer [ 240.512692][ T8112] overlayfs: failed to clone upperpath [ 240.536847][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.575377][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.615672][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.635234][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.675719][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.702521][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.855437][ T7922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.928504][ T132] usb 3-1: USB disconnect, device number 10 [ 241.000365][ T8120] FAULT_INJECTION: forcing a failure. [ 241.000365][ T8120] name failslab, interval 1, probability 0, space 0, times 0 [ 241.018479][ T8120] CPU: 0 PID: 8120 Comm: syz.0.1358 Not tainted syzkaller #0 [ 241.026660][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 241.037140][ T8120] Call Trace: [ 241.041131][ T8120] [ 241.047922][ T8120] dump_stack_lvl+0x188/0x24e [ 241.053866][ T8120] ? show_regs_print_info+0x12/0x12 [ 241.059721][ T8120] ? load_image+0x410/0x410 [ 241.064743][ T8120] ? __might_sleep+0xd0/0xd0 [ 241.069603][ T8120] ? __lock_acquire+0x7ea0/0x7ea0 [ 241.075002][ T8120] should_fail_ex+0x390/0x4c0 [ 241.080207][ T8120] should_failslab+0x5/0x20 [ 241.084800][ T8120] slab_pre_alloc_hook+0x59/0x300 [ 241.089993][ T8120] ? pkcs7_parse_message+0x15c/0x520 [ 241.095374][ T8120] __kmem_cache_alloc_node+0x4f/0x270 [ 241.101441][ T8120] ? pkcs7_parse_message+0x15c/0x520 [ 241.106916][ T8120] kmalloc_trace+0x26/0xe0 [ 241.111432][ T8120] pkcs7_parse_message+0x15c/0x520 [ 241.116757][ T8120] verify_pkcs7_signature+0x2c/0x90 [ 241.122245][ T8120] pkcs7_preparse+0x87/0xb0 [ 241.127190][ T8120] ? pkcs7_preparse+0xb0/0xb0 [ 241.133026][ T8120] key_create_or_update+0x405/0xa50 [ 241.138944][ T8120] ? key_type_put+0x20/0x20 [ 241.143577][ T8120] ? __check_object_size+0x86/0xa70 [ 241.149170][ T8120] ? strncpy_from_user+0x1dc/0x340 [ 241.154476][ T8120] __se_sys_add_key+0x34b/0x410 [ 241.159974][ T8120] ? __x64_sys_add_key+0xc0/0xc0 [ 241.165016][ T8120] ? lockdep_hardirqs_on+0x94/0x140 [ 241.170283][ T8120] ? __x64_sys_add_key+0x1c/0xc0 [ 241.175335][ T8120] do_syscall_64+0x4c/0xa0 [ 241.179929][ T8120] ? clear_bhb_loop+0x60/0xb0 [ 241.184786][ T8120] ? clear_bhb_loop+0x60/0xb0 [ 241.189949][ T8120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.196386][ T8120] RIP: 0033:0x7f4975da94d9 [ 241.200870][ T8120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.221511][ T8120] RSP: 002b:00007f4976cbc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 241.230020][ T8120] RAX: ffffffffffffffda RBX: 00007f4976025fa0 RCX: 00007f4975da94d9 [ 241.238060][ T8120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 241.246302][ T8120] RBP: 00007f4975e3804e R08: ffffffffffffffff R09: 0000000000000000 [ 241.255127][ T8120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.264573][ T8120] R13: 00007f4976026038 R14: 00007f4976025fa0 R15: 00007ffc042a0cb8 [ 241.273100][ T8120] [ 241.456456][ T4293] Bluetooth: hci3: command 0x0419 tx timeout [ 241.655991][ T8126] page:ffffea0001402000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50080 [ 241.735699][ T8126] head:ffffea0001402000 order:3 compound_mapcount:0 compound_pincount:0 [ 241.785570][ T8126] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 241.865582][ T8126] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888018442140 [ 241.925369][ T8126] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 241.980666][ T7977] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 241.987061][ T8126] page dumped because: unmovable page [ 241.993117][ T8126] page_owner tracks the page as allocated [ 242.031411][ T8126] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4500, tgid 4500 (udevd), ts 142162571561, free_ts 140707380907 [ 242.086467][ T8126] post_alloc_hook+0x173/0x1a0 [ 242.136417][ T8126] get_page_from_freelist+0x206b/0x2180 [ 242.146350][ T8126] __alloc_pages+0x1ec/0x4f0 [ 242.186282][ T8126] alloc_slab_page+0x5d/0x180 [ 242.191201][ T8126] new_slab+0x87/0x2d0 [ 242.195479][ T8126] ___slab_alloc+0xbc5/0x1240 [ 242.226293][ T8126] __kmem_cache_alloc_node+0x126/0x270 [ 242.232116][ T8126] __kmalloc+0xa3/0x240 [ 242.256476][ T8126] tomoyo_realpath_from_path+0xe2/0x5c0 [ 242.266485][ T8126] tomoyo_check_open_permission+0x212/0x440 [ 242.303251][ T8126] security_file_open+0x5e/0xa0 [ 242.310295][ T8126] do_dentry_open+0x2fd/0x10b0 [ 242.338249][ T8126] path_openat+0x2674/0x2f10 [ 242.343316][ T8126] do_filp_open+0x1ee/0x420 [ 242.349162][ T8126] do_sys_openat2+0x14b/0x4f0 [ 242.401011][ T8126] __x64_sys_openat+0x135/0x160 [ 242.405957][ T8126] page last free stack trace: [ 242.452716][ T8126] free_unref_page_prepare+0x8e5/0x9e0 [ 242.464122][ T8126] free_unref_page+0x2e/0x3f0 [ 242.476271][ T8126] __unfreeze_partials+0x188/0x1e0 [ 242.481501][ T8126] put_cpu_partial+0x17c/0x250 [ 242.496472][ T8126] qlist_free_all+0x76/0xe0 [ 242.501100][ T8126] kasan_quarantine_reduce+0x144/0x160 [ 242.516233][ T8126] __kasan_slab_alloc+0x1e/0x80 [ 242.530390][ T8126] slab_post_alloc_hook+0x4b/0x490 [ 242.541855][ T8126] __kmem_cache_alloc_node+0x19d/0x270 [ 242.556238][ T8126] __kmalloc+0xa3/0x240 [ 242.560556][ T8126] tomoyo_realpath_from_path+0xe2/0x5c0 [ 242.606372][ T8126] tomoyo_path_number_perm+0x22f/0x650 [ 242.612130][ T8126] security_file_ioctl+0x6c/0xa0 [ 242.623027][ T8126] __se_sys_ioctl+0x48/0x170 [ 242.637979][ T8126] do_syscall_64+0x4c/0xa0 [ 242.650610][ T8126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.683858][ T4369] device hsr_slave_0 left promiscuous mode [ 242.702049][ T4369] device hsr_slave_1 left promiscuous mode [ 242.716630][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.724438][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.756691][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.777995][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.807656][ T4369] device bridge_slave_1 left promiscuous mode [ 242.814105][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.845417][ T4369] device bridge_slave_0 left promiscuous mode [ 242.866638][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.943326][ T4369] device veth1_macvtap left promiscuous mode [ 242.965062][ T4369] device veth0_macvtap left promiscuous mode [ 242.992612][ T4369] device veth1_vlan left promiscuous mode [ 243.012477][ T4369] device veth0_vlan left promiscuous mode [ 243.251442][ T8162] overlayfs: failed to clone upperpath [ 243.262105][ T8160] loop2: detected capacity change from 0 to 4096 [ 243.481942][ T8166] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.595756][ T27] audit: type=1800 audit(1794561806.847:70): pid=8160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1368" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 244.741463][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 244.817779][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 244.892131][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.958619][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.513925][ T4369] bond0 (unregistering): Released all slaves [ 245.613983][ T7977] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 245.625993][ T7977] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 245.696998][ T7977] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 245.728649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.747651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.781654][ T7922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.986830][ T8184] page:ffffea0001402000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50080 [ 246.058384][ T8184] head:ffffea0001402000 order:3 compound_mapcount:0 compound_pincount:0 [ 246.144470][ T8184] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 246.222793][ T8184] raw: 00fff00000010200 ffffea000093b600 dead000000000002 ffff888018442140 [ 246.269204][ T8184] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 246.334766][ T7977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.346527][ T8184] page dumped because: unmovable page [ 246.354165][ T8184] page_owner tracks the page as allocated [ 246.409918][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.421285][ T8193] EXT4-fs warning (device sda1): ext4_group_extend:1870: can't shrink FS - resize aborted [ 246.429117][ T8184] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4500, tgid 4500 (udevd), ts 142162571561, free_ts 140707380907 [ 246.448557][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.511999][ T7977] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.534484][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.552781][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.561656][ T8184] post_alloc_hook+0x173/0x1a0 [ 246.571526][ T8184] get_page_from_freelist+0x206b/0x2180 [ 246.588442][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.599227][ T6515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.646732][ T8184] __alloc_pages+0x1ec/0x4f0 [ 246.651692][ T8184] alloc_slab_page+0x5d/0x180 [ 246.666475][ T8184] new_slab+0x87/0x2d0 [ 246.686388][ T8184] ___slab_alloc+0xbc5/0x1240 [ 246.696921][ T8184] __kmem_cache_alloc_node+0x126/0x270 [ 246.726527][ T8184] __kmalloc+0xa3/0x240 [ 246.736582][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.763276][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.802387][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.836863][ T8184] tomoyo_realpath_from_path+0xe2/0x5c0 [ 246.844427][ T8184] tomoyo_check_open_permission+0x212/0x440 [ 246.854886][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.866022][ T6515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.886253][ T8184] security_file_open+0x5e/0xa0 [ 246.892362][ T8184] do_dentry_open+0x2fd/0x10b0 [ 246.916456][ T8184] path_openat+0x2674/0x2f10 [ 246.922051][ T8184] do_filp_open+0x1ee/0x420 [ 246.942411][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.970043][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.981665][ T8184] do_sys_openat2+0x14b/0x4f0 [ 246.997118][ T8184] __x64_sys_openat+0x135/0x160 [ 247.002234][ T8184] page last free stack trace: [ 247.022251][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.047572][ T8184] free_unref_page_prepare+0x8e5/0x9e0 [ 247.053650][ T8184] free_unref_page+0x2e/0x3f0 [ 247.064547][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.095516][ T8184] __unfreeze_partials+0x188/0x1e0 [ 247.103801][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.113809][ T8184] put_cpu_partial+0x17c/0x250 [ 247.124987][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.135813][ T8184] qlist_free_all+0x76/0xe0 [ 247.155022][ T8184] kasan_quarantine_reduce+0x144/0x160 [ 247.163114][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.177276][ T8184] __kasan_slab_alloc+0x1e/0x80 [ 247.182553][ T8184] slab_post_alloc_hook+0x4b/0x490 [ 247.195854][ T8184] __kmem_cache_alloc_node+0x19d/0x270 [ 247.205414][ T8184] __kmalloc+0xa3/0x240 [ 247.228609][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.237249][ T8184] tomoyo_realpath_from_path+0xe2/0x5c0 [ 247.248752][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.279558][ T7977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.316364][ T8184] tomoyo_path_number_perm+0x22f/0x650 [ 247.319048][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.324124][ T8184] security_file_ioctl+0x6c/0xa0 [ 247.364196][ T8184] __se_sys_ioctl+0x48/0x170 [ 247.380616][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.386859][ T8184] do_syscall_64+0x4c/0xa0 [ 247.396010][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.418811][ T8184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.046358][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.069903][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.113253][ T7922] device veth0_vlan entered promiscuous mode [ 248.127523][ T8223] overlayfs: failed to clone upperpath [ 248.144816][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.175169][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.203897][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.230144][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.282934][ T7922] device veth1_vlan entered promiscuous mode [ 248.482777][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 248.523004][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 248.542112][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.579648][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.613418][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.645597][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.707686][ T7922] device veth0_macvtap entered promiscuous mode [ 248.740479][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'. [ 248.760239][ T8238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.029569][ T8238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.158488][ T7922] device veth1_macvtap entered promiscuous mode [ 249.178733][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.189513][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.257743][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.277277][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.299348][ T7977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.364112][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.406208][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.459224][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.506673][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.546382][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.576549][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.618130][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.654478][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.672763][ T8257] loop2: detected capacity change from 0 to 8 [ 249.698119][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.741001][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.807262][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.869443][ T7922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.903471][ T7922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.955135][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.992861][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.028840][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 250.067590][ T7922] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.088345][ T7922] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.127690][ T7922] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.160055][ T7922] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.529448][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.554318][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.608656][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.638776][ T6515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.654231][ T6515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.679732][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 251.103794][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.121496][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.193654][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.209358][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.233441][ T7977] device veth0_vlan entered promiscuous mode [ 251.248227][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.274269][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.313125][ T7977] device veth1_vlan entered promiscuous mode [ 251.420181][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 251.439048][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 251.484890][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 251.517790][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 251.546290][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 251.587135][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.627940][ T7977] device veth0_macvtap entered promiscuous mode [ 251.641415][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 251.692148][ T7977] device veth1_macvtap entered promiscuous mode [ 251.735440][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'. [ 251.905396][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.963546][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.997080][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.044512][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.074245][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.115788][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.139709][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.186518][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.227824][ T7977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.247341][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.265362][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.315750][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.346877][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.376925][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.411442][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.455999][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.490961][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.534425][ T7977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.572259][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.592032][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.626795][ T7977] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.647185][ T7977] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.669705][ T7977] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.679748][ T4276] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 252.706344][ T7977] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.879574][ T4276] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.918797][ T4276] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 252.956483][ T4276] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.005962][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.019711][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.023405][ T4276] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 253.073045][ T4276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 253.093617][ T4276] usb 3-1: Product: syz [ 253.103846][ T4276] usb 3-1: Manufacturer: syz [ 253.108718][ T4276] usb 3-1: SerialNumber: syz [ 253.179147][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 253.279167][ T4359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.306595][ T4359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.339054][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 253.355016][ T4276] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 253.551072][ T8314] loop6: detected capacity change from 0 to 40427 [ 253.608852][ T8314] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 253.620027][ T8314] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 253.648900][ T4276] usb 3-1: USB disconnect, device number 11 [ 253.679321][ T8316] usblp0: removed [ 253.705370][ T8314] F2FS-fs (loop6): invalid crc value [ 253.742952][ T8314] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 254.108562][ T8314] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 254.126460][ T8314] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 254.473262][ T8347] loop7: detected capacity change from 0 to 8192 [ 254.568410][ T7922] syz-executor: attempt to access beyond end of device [ 254.568410][ T7922] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 254.586411][ T8347] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 254.601238][ T8347] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 254.612112][ T8347] REISERFS (device loop7): using ordered data mode [ 254.619427][ T8347] reiserfs: using flush barriers [ 254.627723][ T8347] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 254.707256][ T8347] REISERFS (device loop7): checking transaction log (loop7) [ 254.984928][ T8347] REISERFS (device loop7): Using tea hash to sort names [ 255.003970][ T8347] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 255.780178][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.976633][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1425'. [ 256.424324][ T8404] loop6: detected capacity change from 0 to 33280 [ 256.546563][ T8404] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 256.573862][ T8404] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.129054][ T8404] EXT4-fs error (device loop6): ext4_do_update_inode:5312: inode #2: comm syz.6.1434: corrupted inode contents [ 257.397005][ T8404] EXT4-fs (loop6): Remounting filesystem read-only [ 257.557500][ T8404] EXT4-fs error (device loop6): ext4_dirty_inode:6199: inode #2: comm syz.6.1434: mark_inode_dirty error [ 257.675977][ T8404] EXT4-fs (loop6): Remounting filesystem read-only [ 257.773272][ T8404] EXT4-fs error (device loop6): ext4_do_update_inode:5312: inode #2: comm syz.6.1434: corrupted inode contents [ 257.956540][ T8404] EXT4-fs (loop6): Remounting filesystem read-only [ 257.963299][ T8404] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.1434: mark_inode_dirty error [ 258.079037][ T8404] EXT4-fs (loop6): Remounting filesystem read-only [ 258.138381][ T8451] EXT4-fs error (device loop6): ext4_do_update_inode:5312: inode #2: comm syz.6.1434: corrupted inode contents [ 258.226245][ T8451] EXT4-fs (loop6): Remounting filesystem read-only [ 258.267513][ T8451] EXT4-fs error (device loop6): ext4_dirty_inode:6199: inode #2: comm syz.6.1434: mark_inode_dirty error [ 258.330368][ T8451] EXT4-fs (loop6): Remounting filesystem read-only [ 258.384257][ T8451] EXT4-fs error (device loop6): ext4_do_update_inode:5312: inode #2: comm syz.6.1434: corrupted inode contents [ 258.433493][ T8451] EXT4-fs (loop6): Remounting filesystem read-only [ 258.475875][ T8454] EXT4-fs error (device loop6): ext4_do_update_inode:5312: inode #2: comm syz.6.1434: corrupted inode contents [ 258.566580][ T8454] EXT4-fs (loop6): Remounting filesystem read-only [ 258.576693][ T8454] EXT4-fs error (device loop6): ext4_append:88: inode #2: comm syz.6.1434: mark_inode_dirty error [ 258.636994][ T8454] EXT4-fs (loop6): Remounting filesystem read-only [ 258.649388][ T8454] EXT4-fs error (device loop6) in ext4_append:100: Corrupt filesystem [ 258.795836][ T8508] loop7: detected capacity change from 0 to 36864 [ 258.858285][ T8508] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 258.967530][ T8508] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 259.013079][ T8508] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 259.169535][ T7977] EXT4-fs (loop7): unmounting filesystem. [ 259.409508][ T8526] Bluetooth: MGMT ver 1.22 [ 259.495076][ T8529] overlayfs: failed to clone upperpath [ 259.569479][ T27] audit: type=1800 audit(1794562078.824:71): pid=8533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1455" name="ipv4_address" dev="configfs" ino=50293 res=0 errno=0 [ 260.045173][ T8545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1459'. [ 260.089276][ T8545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1459'. [ 260.611134][ T8573] ip_tables: iptables: counters copy to user failed while replacing table [ 260.814751][ T8570] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 260.922111][ T8582] rxe_eth0 speed is unknown, defaulting to 1000 [ 261.038104][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 261.537230][ T4293] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 261.546410][ T4292] Bluetooth: hci0: command 0x0401 tx timeout [ 261.924814][ T8610] loop7: detected capacity change from 0 to 2048 [ 262.053655][ T8613] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.215768][ T8597] eCryptfs: maximum fs stacking depth exceeded [ 262.284033][ T8597] Reading sb failed; rc = [-22] [ 262.499181][ T8613] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 262.563336][ T8613] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 262.583747][ T8625] ip_tables: iptables: counters copy to user failed while replacing table [ 262.624881][ T8613] Remounting filesystem read-only [ 262.645625][ T7977] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 263.015028][ T8638] FAULT_INJECTION: forcing a failure. [ 263.015028][ T8638] name failslab, interval 1, probability 0, space 0, times 0 [ 263.062398][ T8640] loop2: detected capacity change from 0 to 33792 [ 263.185381][ T8640] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 263.204113][ T8638] CPU: 1 PID: 8638 Comm: syz.6.1488 Not tainted syzkaller #0 [ 263.212022][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 263.222338][ T8638] Call Trace: [ 263.225698][ T8638] [ 263.228822][ T8638] dump_stack_lvl+0x188/0x24e [ 263.234403][ T8638] ? show_regs_print_info+0x12/0x12 [ 263.240058][ T8638] ? load_image+0x410/0x410 [ 263.244923][ T8638] ? __might_sleep+0xd0/0xd0 [ 263.250219][ T8638] should_fail_ex+0x390/0x4c0 [ 263.255771][ T8638] should_failslab+0x5/0x20 [ 263.260359][ T8638] slab_pre_alloc_hook+0x59/0x300 [ 263.265500][ T8638] kmem_cache_alloc+0x56/0x2f0 [ 263.271457][ T8638] ? zswap_frontswap_store+0x414/0x1680 [ 263.277554][ T8638] zswap_frontswap_store+0x414/0x1680 [ 263.283462][ T8638] ? zswap_frontswap_init+0x100/0x100 [ 263.288924][ T8638] ? __lock_acquire+0x7ea0/0x7ea0 [ 263.294216][ T8638] ? do_raw_spin_lock+0x128/0x2f0 [ 263.299334][ T8638] ? __rwlock_init+0x140/0x140 [ 263.304196][ T8638] ? do_raw_spin_unlock+0x11d/0x230 [ 263.309516][ T8638] __frontswap_store+0x2d9/0x5b0 [ 263.314634][ T8638] swap_writepage+0xc8/0x1a0 [ 263.319429][ T8638] shrink_folio_list+0x2f81/0x8050 [ 263.324855][ T8638] ? reclaim_clean_pages_from_list+0xb80/0xb80 [ 263.331735][ T8638] ? __lock_acquire+0x142d/0x7ea0 [ 263.336900][ T8638] ? arch_stack_walk+0xf2/0x140 [ 263.343235][ T8638] ? verify_lock_unused+0x140/0x140 [ 263.349160][ T8638] ? verify_lock_unused+0x140/0x140 [ 263.354627][ T8638] reclaim_folio_list+0x85/0x2e0 [ 263.359968][ T8638] reclaim_pages+0x575/0x690 [ 263.364753][ T8638] ? folio_isolate_lru+0xf10/0xf10 [ 263.369975][ T8638] ? do_raw_spin_unlock+0x11d/0x230 [ 263.376927][ T8638] madvise_cold_or_pageout_pte_range+0x1936/0x1f30 [ 263.383821][ T8638] ? folio_put+0xd0/0xd0 [ 263.388406][ T8638] ? __lock_acquire+0x7ea0/0x7ea0 [ 263.394136][ T8638] walk_pgd_range+0xb28/0x1370 [ 263.399204][ T8638] __walk_page_range+0x136/0x590 [ 263.404576][ T8638] walk_page_range+0x3b9/0x590 [ 263.409880][ T8638] ? page_mapped_in_vma+0x800/0x800 [ 263.415903][ T8638] ? mlock_page_drain_local+0x75/0x490 [ 263.423635][ T8638] ? mlock_page_drain_local+0x75/0x490 [ 263.430564][ T8638] do_madvise+0x1cb1/0x3520 [ 263.435554][ T8638] ? plist_add+0x3d7/0x490 [ 263.440764][ T8638] ? madvise_set_anon_name+0x420/0x420 [ 263.446531][ T8638] ? schedule+0xd0/0x180 [ 263.451972][ T8638] ? futex_wait_queue+0x23/0x1b0 [ 263.457637][ T8638] ? futex_wait_queue+0x134/0x1b0 [ 263.464105][ T8638] ? futex_unqueue+0xc7/0xf0 [ 263.468977][ T8638] ? futex_wait+0x525/0x640 [ 263.473850][ T8638] ? futex_wait_setup+0x270/0x270 [ 263.479076][ T8638] ? file_end_write+0x156/0x250 [ 263.484273][ T8638] ? vfs_write+0x777/0x9a0 [ 263.488786][ T8638] ? do_futex+0x310/0x320 [ 263.493244][ T8638] ? __ia32_sys_get_robust_list+0x100/0x100 [ 263.499320][ T8638] ? lock_chain_count+0x20/0x20 [ 263.504257][ T8638] __x64_sys_madvise+0xa2/0xb0 [ 263.509138][ T8638] do_syscall_64+0x4c/0xa0 [ 263.513652][ T8638] ? clear_bhb_loop+0x60/0xb0 [ 263.518430][ T8638] ? clear_bhb_loop+0x60/0xb0 [ 263.523195][ T8638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.529177][ T8638] RIP: 0033:0x7f0e517a94d9 [ 263.533672][ T8638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.553440][ T8638] RSP: 002b:00007f0e525b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 263.562472][ T8638] RAX: ffffffffffffffda RBX: 00007f0e51a25fa0 RCX: 00007f0e517a94d9 [ 263.570528][ T8638] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 263.578576][ T8638] RBP: 00007f0e5183804e R08: 0000000000000000 R09: 0000000000000000 [ 263.586711][ T8638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.594759][ T8638] R13: 00007f0e51a26038 R14: 00007f0e51a25fa0 R15: 00007ffc7b313328 [ 263.602816][ T8638] [ 263.664157][ T8652] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 49 (only 8 groups) [ 263.746480][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 264.647986][ T8676] loop6: detected capacity change from 0 to 4096 [ 264.764140][ T8683] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.769324][ T8682] FAULT_INJECTION: forcing a failure. [ 264.769324][ T8682] name failslab, interval 1, probability 0, space 0, times 0 [ 264.824446][ T8682] CPU: 1 PID: 8682 Comm: syz.2.1503 Not tainted syzkaller #0 [ 264.837868][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 264.848948][ T8682] Call Trace: [ 264.852679][ T8682] [ 264.855978][ T8682] dump_stack_lvl+0x188/0x24e [ 264.861194][ T8682] ? show_regs_print_info+0x12/0x12 [ 264.867127][ T8682] ? load_image+0x410/0x410 [ 264.872901][ T8682] ? __lock_acquire+0x7ea0/0x7ea0 [ 264.878631][ T8682] should_fail_ex+0x390/0x4c0 [ 264.883764][ T8682] should_failslab+0x5/0x20 [ 264.888471][ T8682] slab_pre_alloc_hook+0x59/0x300 [ 264.893687][ T8682] ? __lock_acquire+0x7ea0/0x7ea0 [ 264.899008][ T8682] ? anon_vma_name_alloc+0x37/0xb0 [ 264.904695][ T8682] __kmem_cache_alloc_node+0x4f/0x270 [ 264.910233][ T8682] ? anon_vma_name_alloc+0x37/0xb0 [ 264.915428][ T8682] __kmalloc+0xa3/0x240 [ 264.919648][ T8682] ? _copy_from_user+0x10b/0x170 [ 264.924701][ T8682] anon_vma_name_alloc+0x37/0xb0 [ 264.929713][ T8682] prctl_set_vma+0x185/0x2e0 [ 264.934477][ T8682] __se_sys_prctl+0x162/0x1100 [ 264.939326][ T8682] ? __x64_sys_prctl+0xc0/0xc0 [ 264.944165][ T8682] ? lockdep_hardirqs_on+0x94/0x140 [ 264.949403][ T8682] ? __x64_sys_prctl+0x1c/0xc0 [ 264.954514][ T8682] do_syscall_64+0x4c/0xa0 [ 264.959188][ T8682] ? clear_bhb_loop+0x60/0xb0 [ 264.963926][ T8682] ? clear_bhb_loop+0x60/0xb0 [ 264.968749][ T8682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.974797][ T8682] RIP: 0033:0x7fef591a94d9 [ 264.979479][ T8682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.999444][ T8682] RSP: 002b:00007fef5a027028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 265.008883][ T8682] RAX: ffffffffffffffda RBX: 00007fef59425fa0 RCX: 00007fef591a94d9 [ 265.017036][ T8682] RDX: 0000200000ffa000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 265.025171][ T8682] RBP: 00007fef5923804e R08: 0000200000000100 R09: 0000000000000000 [ 265.033922][ T8682] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 265.041958][ T8682] R13: 00007fef59426038 R14: 00007fef59425fa0 R15: 00007ffef4800b68 [ 265.050061][ T8682] [ 265.915121][ T8713] netlink: 'syz.6.1512': attribute type 3 has an invalid length. [ 266.591116][ T8736] FAULT_INJECTION: forcing a failure. [ 266.591116][ T8736] name failslab, interval 1, probability 0, space 0, times 0 [ 266.613808][ T8736] CPU: 1 PID: 8736 Comm: syz.7.1518 Not tainted syzkaller #0 [ 266.621931][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 266.632452][ T8736] Call Trace: [ 266.635824][ T8736] [ 266.638998][ T8736] dump_stack_lvl+0x188/0x24e [ 266.643861][ T8736] ? show_regs_print_info+0x12/0x12 [ 266.649238][ T8736] ? load_image+0x410/0x410 [ 266.653842][ T8736] ? __might_sleep+0xd0/0xd0 [ 266.659041][ T8736] ? __lock_acquire+0x7ea0/0x7ea0 [ 266.664358][ T8736] should_fail_ex+0x390/0x4c0 [ 266.669146][ T8736] should_failslab+0x5/0x20 [ 266.674694][ T8736] slab_pre_alloc_hook+0x59/0x300 [ 266.680900][ T8736] kmem_cache_alloc+0x56/0x2f0 [ 266.685904][ T8736] ? security_file_alloc+0x30/0x110 [ 266.693778][ T8736] security_file_alloc+0x30/0x110 [ 266.699785][ T8736] __alloc_file+0xc2/0x230 [ 266.704786][ T8736] alloc_empty_file+0x90/0x180 [ 266.710248][ T8736] alloc_file+0x5b/0x5f0 [ 266.714863][ T8736] alloc_file_pseudo+0x180/0x200 [ 266.720181][ T8736] ? alloc_empty_file_noaccount+0x80/0x80 [ 266.726530][ T8736] ? lockdep_softirqs_off+0x430/0x430 [ 266.732008][ T8736] anon_inode_getfile+0xc1/0x1a0 [ 266.737434][ T8736] init_listener+0x27c/0x3e0 [ 266.742278][ T8736] do_seccomp+0x976/0xe00 [ 266.746746][ T8736] ? prctl_set_seccomp+0x60/0x60 [ 266.752922][ T8736] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 266.759195][ T8736] ? lockdep_hardirqs_on+0x94/0x140 [ 266.764472][ T8736] do_syscall_64+0x4c/0xa0 [ 266.769009][ T8736] ? clear_bhb_loop+0x60/0xb0 [ 266.773753][ T8736] ? clear_bhb_loop+0x60/0xb0 [ 266.778515][ T8736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.784469][ T8736] RIP: 0033:0x7f0a131a94d9 [ 266.788924][ T8736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.809240][ T8736] RSP: 002b:00007f0a140de028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 266.817887][ T8736] RAX: ffffffffffffffda RBX: 00007f0a13425fa0 RCX: 00007f0a131a94d9 [ 266.826103][ T8736] RDX: 00002000000002c0 RSI: 0000000000000008 RDI: 0000000000000001 [ 266.834514][ T8736] RBP: 00007f0a1323804e R08: 0000000000000000 R09: 0000000000000000 [ 266.842658][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.851355][ T8736] R13: 00007f0a13426038 R14: 00007f0a13425fa0 R15: 00007ffc7b037f38 [ 266.859765][ T8736] [ 267.436386][ T8746] fuse: Bad value for 'fd' [ 267.506726][ T8748] lo: Caught tx_queue_len zero misconfig [ 269.356609][ T3604] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 269.546451][ T3604] usb 3-1: Using ep0 maxpacket: 32 [ 269.555434][ T3604] usb 3-1: unable to get BOS descriptor or descriptor too short [ 269.595770][ T3604] usb 3-1: config 46 has an invalid interface number: 149 but max is 0 [ 269.635218][ T3604] usb 3-1: config 46 has no interface number 0 [ 269.656860][ T3604] usb 3-1: config 46 interface 149 altsetting 1 bulk endpoint 0xE has invalid maxpacket 1023 [ 269.697071][ T3604] usb 3-1: config 46 interface 149 altsetting 1 bulk endpoint 0xA has invalid maxpacket 32 [ 269.750887][ T3604] usb 3-1: config 46 interface 149 altsetting 1 endpoint 0x3 has invalid maxpacket 8940, setting to 64 [ 269.785589][ T8823] fuse: Bad value for 'fd' [ 269.810951][ T3604] usb 3-1: config 46 interface 149 has no altsetting 0 [ 269.839812][ T3604] usb 3-1: New USB device found, idVendor=0421, idProduct=0481, bcdDevice=25.bb [ 269.867498][ T3604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.883310][ T8827] overlayfs: failed to clone upperpath [ 269.896304][ T3604] usb 3-1: Product: syz [ 269.906278][ T3604] usb 3-1: Manufacturer: syz [ 269.932313][ T3604] usb 3-1: SerialNumber: syz [ 269.964006][ T8808] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 270.014879][ T8808] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 270.265177][ T3604] usb 3-1: bad CDC descriptors [ 270.285910][ T3604] usb 3-1: bad CDC descriptors [ 270.328974][ T3604] usb 3-1: USB disconnect, device number 12 [ 271.566249][ T3604] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 271.583340][ T8889] overlayfs: failed to clone lowerpath [ 271.636049][ T8891] overlayfs: failed to clone lowerpath [ 271.781527][ T3604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.815123][ T3604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.841990][ T3604] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 271.887325][ T3604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.947384][ T3604] usb 3-1: config 0 descriptor?? [ 272.369477][ T3604] savu 0003:1E7D:2D5A.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 272.652143][ T4350] usb 3-1: USB disconnect, device number 13 [ 272.905155][ T8912] fido_id[8912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 272.924716][ T8920] EXT4-fs (sda1): shut down requested (2) [ 272.955941][ T8920] Aborting journal on device sda1-8. [ 273.004568][ T8456] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.233159][ T8456] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 273.345174][ T8456] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.775722][ T8456] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.887654][ T8456] device hsr_slave_0 left promiscuous mode [ 275.894297][ T8456] device hsr_slave_1 left promiscuous mode [ 275.901222][ T8456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.909427][ T8456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.919372][ T8456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.927596][ T8456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.935394][ T8456] device bridge_slave_1 left promiscuous mode [ 275.941876][ T8456] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.951292][ T8456] device bridge_slave_0 left promiscuous mode [ 275.958255][ T8456] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.988043][ T8456] device veth1_macvtap left promiscuous mode [ 275.994192][ T8456] device veth0_macvtap left promiscuous mode [ 276.001509][ T8456] device veth1_vlan left promiscuous mode [ 276.008208][ T8456] device veth0_vlan left promiscuous mode [ 277.050994][ T8456] team0 (unregistering): Port device team_slave_1 removed [ 277.128679][ T8456] team0 (unregistering): Port device team_slave_0 removed [ 277.205551][ T8456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.278229][ T8456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.850935][ T8456] bond0 (unregistering): Released all slaves [ 278.602585][ T8456] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.696044][ T8456] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.830339][ T8456] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.923168][ T8456] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.142161][ T8456] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.153511][ T8456] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.248580][ T8456] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.260557][ T8456] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.370554][ T8456] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.392361][ T8456] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.485326][ T8456] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.497426][ T8456] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.771042][ T8456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.783174][ T8456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.903035][ T8456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.914604][ T8456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.996943][ T8456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.009301][ T8456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.103845][ T8456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.117841][ T8456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0