last executing test programs: 13m7.761884234s ago: executing program 32 (id=20): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x5, 0x1, 0x5, 0xfffffffffffffff6, 0x2000000, 0x4}, {0x7, 0x0, 0x100000000000004, 0x59a}, 0x4000006, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x2b}, 0x2, @in=@loopback, 0x3500, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 13m6.541215316s ago: executing program 33 (id=23): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x4}, 0x80, 0x0}, 0xe07e872420dfef8a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000002a00)=ANY=[@ANYBLOB="2400000024000100263d7000fddbdf2504"], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 12m5.719124058s ago: executing program 5 (id=218): mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000001900)={0x9, 0x1, 0x0, &(0x7f00000017c0)=[{0x0}, {&(0x7f00000002c0)=""/194, 0xc2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m4.948722662s ago: executing program 5 (id=221): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x0, 0x60c0, &(0x7f000000d800)="$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") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000340)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 12m1.222403051s ago: executing program 5 (id=238): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1003f}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m0.762319585s ago: executing program 5 (id=240): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000440)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}, {@fat=@discard}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@dos1xfloppy}, {@fat=@dmask={'dmask', 0x3d, 0x4007}}, {@rodir}, {@utf8no}, {@shortname_mixed}, {@utf8}]}, 0x0, 0x2aa, &(0x7f0000000580)="$eJzs3c9rE0EUwPHXpD/SlDY5FEFBfOhFL0sb/4IgLYgBpTaiHoSp3WjImi3ZGImI6c2rf0fx6ElB/Qd68eZdvBRB8NKDGOlm16Zt0KY2bnS/Hyg7nZm3O9PZhrcLu9m6+fxBpeRZJVOXREolIbIu2yLZnVJgJNgm/PK4dFuXC1NfP5y+fuv2lXyhsLCkuphfvphT1Zkzbx49eXH2XX3qxsuZ1xOymb2z9SX3cfPE5smt78vh3l0RoyuuWzcrjq2rZa9iqV5zbOPZWq56dq2uXe0lx11ba6qprk6n12q256mpNrViN7Xuar3WVHPPlKtqWZZOpyVukn1HFDeWlkx+IINBFCZ7VdZqeZPs2Vjc+BuDAgAAwyWq/P9+2dOyp1V3T35/MP9PSB/5v0is8//+9ZX/Twx4MBiQnfw/Hfz/7kX+DwAAAAAAAAAAAAAAAAAAAADAv2C73c602+1MuA1/JkQkJSLh71GPE4PB+sdb14N7KRHnWaPYKHa2nfZ8ScriiC1zYyLf/PMh0CkvXi4szKkvK2+dVhDfahST/gNjfnwo2zt+vhOv3fEtGZN09/FzkpHZ3vG5HvGN4ricP9cOn1mzxZKMvL8rrjiy6p/Xu/FP51UvXS3si5/0+wEAAAAA8D+w9KcD1+9+u6Xha0P2tXcqd+8PSOY39wf2XV+PyqnR6OYNAAAAAECceM3HFeM4di0GhfD7D45lh9H/6VIV47SCKf2y86iIBDWvhmUtDlNI7EzsiOHJP1vlzyKyp2Y28uU+jsKnh8HpcojOUX0iAQAAABiUMOkfiXogAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADE2GFfHhb2P8q7x7oOl4xmlgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBw+BEAAP//OysUmw==") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020) 11m59.810120015s ago: executing program 5 (id=243): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001400b59527bd7000000000000a400000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) 11m57.642686441s ago: executing program 5 (id=248): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 11m56.538886063s ago: executing program 34 (id=248): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 11m34.207154585s ago: executing program 6 (id=326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x9, 0x100003, 0x0, 0x5, 0x5d9, 0x4, 0xc9, 0x5, 0x82, 0x2, 0x11, 0x7, 0x76, 0xea, 0x8, 0x3], 0x10000, 0x285f40}) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xfffffffffffffffc) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m33.950984302s ago: executing program 6 (id=327): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64d2, &(0x7f0000000280)={0x1, r4, 0xff, 0x7, 0xa, 0x1ff, 0x1}) 11m33.854133758s ago: executing program 6 (id=328): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x5, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x6da0, 0x7721, 0x16, 0x0, 0x0) 11m33.556967008s ago: executing program 6 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000580)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x1005848, 0x0) 11m32.947160165s ago: executing program 6 (id=337): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000008440)='(', 0x1}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x4006881) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000280)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000240)="e7", 0x27f}]) 11m30.714646018s ago: executing program 6 (id=344): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x78, 0x2802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m29.320350813s ago: executing program 35 (id=344): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x78, 0x2802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10m16.19111902s ago: executing program 2 (id=600): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xee42, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)) 10m14.734581246s ago: executing program 2 (id=604): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="9879ffa09bed9e22a51e36bbf10829f06cd1fbbcb3d3845f9ab5318c0860f2e177f5c64adc199457683f7d56c047b241269ea29cf3c9905936bf2c3fae01cf", 0xfffffdfb, 0x201, 0x0, 0x0) shutdown(r0, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 10m14.402520667s ago: executing program 2 (id=605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x41, 0x0}, 0x10) 10m14.329136177s ago: executing program 2 (id=606): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4851, &(0x7f0000000100), 0x0, 0x4ed, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80000, 0x0) move_mount(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) 10m13.667753222s ago: executing program 2 (id=610): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, &(0x7f00000002c0)={0x77359400}) 10m11.175114946s ago: executing program 2 (id=620): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r3}, 0x14) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r3}}}], 0x28}}], 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 10m10.309183498s ago: executing program 36 (id=620): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r3}, 0x14) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r3}}}], 0x28}}], 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 8m16.951876444s ago: executing program 8 (id=930): syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) fsetxattr(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="6f3a8f"], 0x0, 0x0, 0x2) write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 8m16.211446116s ago: executing program 8 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x8000}], 0x1, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) 8m15.225334607s ago: executing program 8 (id=938): connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) 8m15.029049907s ago: executing program 8 (id=940): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1205848, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 8m14.900381951s ago: executing program 8 (id=941): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 8m13.098637582s ago: executing program 8 (id=949): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 8m12.572130052s ago: executing program 37 (id=949): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 7m4.670606243s ago: executing program 7 (id=1202): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xc29, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0xc1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000"], 0x50) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m4.017033373s ago: executing program 7 (id=1206): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x25, 0x358, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 7m2.339244393s ago: executing program 7 (id=1210): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1, 0x8}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 7m1.104945136s ago: executing program 7 (id=1214): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f0000000580)={[{@utf8no}, {@shortname_winnt}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_mixed}, {@uni_xlate}, {@shortname_mixed}, {@fat=@nfs_stale_rw}, {@fat=@usefree}, {@numtail}, {@shortname_mixed}, {@uni_xlate}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$eJzs3UFr02AYwPFn7dZ2HVt7GIKC+KAXvYStfoIiG4gFZVvFeRAyl2ppbEZTKxVxu3n1E/gBht48Kah32cWbd/Gyi+BlB7WyNLFdF7FVttTt/4ORd++bp3nT9015Etpk+8bTe5WSa5TMusRSKjGRDdkRye6WfCP+MuaVE9JtQy5MfP14enH55pV8oTC3oDqfX7qYU9WpM28ePHp+9l194vrLqddJ2cre2v6S+7R1Yuvk9o+l4NUdEVNXHKdurtiWrpbdiqF6zbZM19Jy1bVqde1qL9nO2lpTzerqZHqtZrmumtWmVqym1h2t15pq3jHLVTUMQyfTvd0/8uIDRxS/J0TyB9IZRGE8rLJWy5vx0Mbi5mF0CgAADJeo8v+7ZVfLrladPfn9/vw/JgPk/yJh+T9+q7i5sGCS/x9xu/l/2j9+9yL/BwAAAAAAAAAAAAAAAAAAAADgf7Ajkmm1WpmdVstbBn9JEUmJSPB/1P3EwQjGnfE/nhaXR8T/4V5KxH7SKDaK7WW7PV+SsthiycyYyDdvPvja5fnLhbkZ9WTlrb3ux683inFJBvGBbHj8bDteu+PXZUzS3dvPSUamw+NzIfGNYkLOn2sl/S1bYkhGPtwWR2xZ9eZ1J/7xrOqlq4We+HFvPQAAAAAAjgJDf9l3/u61GxrcNqSnvV3ZuT4gmc71gbmw6wM959ejcmo0uv0GAAAAAOA4cZsPK6ZtW7U/FVKdmvf9Rw1VIXj+wcDh8ZCm4Bsx0e1Oqt+VR0XEr3k1LGPRTyH2D29vfIBRHts/nxMisqdm+vDn/ItnAxye/RU+3+9/0kb1iQQAAADgoARJ/7F5SCYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEOo35uHBev/zb3HujYXj2YvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOHwMwAA//8VhA3+") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 7m0.553252087s ago: executing program 7 (id=1215): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x4) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) 6m57.544155235s ago: executing program 7 (id=1223): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="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", 0xf0b}], 0x2, &(0x7f0000002140)}}], 0x1, 0x0) 6m57.019470492s ago: executing program 38 (id=1223): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="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", 0xf0b}], 0x2, &(0x7f0000002140)}}], 0x1, 0x0) 10.251151274s ago: executing program 4 (id=3249): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = fsopen(&(0x7f0000000280)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 8.267936981s ago: executing program 0 (id=3255): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001240)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYBLOB="b0790a07e1e471aed209036fa5f5ca6bc1ad170371c5e2bd52cf99296e6cdd0882cc4c075a7c4b8ca0d78022160660db09219ebb75dc37499a8272c148662b3afc124ff55a705238d347a5a54bc22fc6e8539f02d1a14d4df87689f2e34e7449a843df2a4e9fbe059f2102bb7efa83db5ef26895be033858456061b9ac965c95f1928de05eb811731601", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x4042, 0x80) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100)={0x0, 0x2}, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) 8.120804866s ago: executing program 4 (id=3257): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 8.065864855s ago: executing program 0 (id=3259): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f00000003c0)=ANY=[], 0x2b08}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@ccm_128={{0x303}, "c571aad175e9e417", "6935ad7917b8daa9366dddd0e5609d5c", "59e5ffff", "3b3e87d64904975a"}, 0x28) syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) 7.816100016s ago: executing program 4 (id=3261): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x5, @rand_addr, 0x1}, 0x1c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 7.604708863s ago: executing program 4 (id=3264): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 6.137113347s ago: executing program 0 (id=3267): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000009c0)={0x4c, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x1, 0x2000000, &(0x7f0000000900)="a4"}) 5.64478131s ago: executing program 0 (id=3269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.64442768s ago: executing program 4 (id=3270): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) 4.881758938s ago: executing program 9 (id=3273): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffbffffffe, 0x2) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x0, 0x1}) 4.126160134s ago: executing program 1 (id=3275): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000b80)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x1004}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x800001}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) close(0x3) 3.997937357s ago: executing program 3 (id=3276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x255fdbff, {0x0, 0x0, 0x0, r6, {}, {0x8, 0xfff1}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20081054}, 0x24008088) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) 3.775961778s ago: executing program 1 (id=3277): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) 3.761974514s ago: executing program 0 (id=3278): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) 3.071093922s ago: executing program 3 (id=3280): socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x18, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.00224501s ago: executing program 9 (id=3281): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r0, 0xb5d6) 2.866276607s ago: executing program 9 (id=3282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x30000004}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1c0, 0x0) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x7c0e, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.65953158s ago: executing program 3 (id=3283): socket$alg(0x26, 0x5, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x808020, 0x0, 0x0, 0x0, 0x0) 2.503354522s ago: executing program 9 (id=3284): r0 = socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) close(0x3) fchdir(r3) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0xc0089364, &(0x7f0000000140)=0x6) 2.461084076s ago: executing program 4 (id=3285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) recvfrom(r2, 0x0, 0x0, 0x2040, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@ipv6_newrule={0x34, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="696e6c696e655f64656e7472792c6a71666d743d7666737631007768696e745f6d6f64653d757362722d62617365642c657874656e745f63616368652c6e6f67635f6d657267652c6d656d6f72793d6e6f726d616c2c626172f3fb993c2c6163746976655f6c6f67733d342c6673786e635f6d6f64653d706f7369782c6e6f757365725f78617474722c7265736769643d", @ANYRESHEX, @ANYBLOB=',compress_chksum,heap,rootcontext=unconfined_u,fscontext=staff_u,\x00'], 0x1, 0x5551, &(0x7f0000005bc0)="$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") 2.333314587s ago: executing program 1 (id=3286): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000000440)=""/4070, 0x20, 0x101, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 2.234007304s ago: executing program 3 (id=3287): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) close(r1) 2.035877148s ago: executing program 3 (id=3288): socket(0x80000000000000a, 0x2, 0x0) r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mknod(0x0, 0x8001420, 0x2) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.984829359s ago: executing program 1 (id=3289): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x322}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.956026583s ago: executing program 9 (id=3290): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x43, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr(r0, 0x0, 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 1.623346044s ago: executing program 9 (id=3291): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x3f, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc042, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x20000007, 0x101, 0x5, 0x9, 0x6, 0x0, 0xff, 0x6, 0x9, 0x6, 0xfb, 0x6a, 0x401}, {0xf9d1, 0x9, 0x8, 0x2, 0x0, 0xfe, 0x9, 0x6a, 0xf, 0x44, 0xfe, 0x8, 0x1ff}, {0x5, 0x9, 0x0, 0x4, 0x0, 0x4, 0x1, 0xb, 0x3, 0x7f, 0x3, 0x7, 0x6}], 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.622514987s ago: executing program 1 (id=3292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 396.246258ms ago: executing program 1 (id=3293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) vmsplice(r5, &(0x7f0000000540)=[{&(0x7f0000000140)="e1", 0x1}], 0x1, 0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) 22.059975ms ago: executing program 0 (id=3294): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) unshare(0x20000400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) 0s ago: executing program 3 (id=3295): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x3) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TCGETS2(r1, 0x802c542a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x20, 0x51, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) kernel console output (not intermixed with test programs): 3:1B1C:1B25.0006: item fetching failed at offset 4/5 [ 549.850019][ T5745] hid-corsair-void 0003:1B1C:1B25.0006: parse failed (reason: -22) [ 549.850157][ T5745] hid-corsair-void 0003:1B1C:1B25.0006: probe with driver hid-corsair-void failed with error -22 [ 550.041933][ T5745] usb 10-1: USB disconnect, device number 14 [ 550.480617][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 550.636199][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 550.638262][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 550.648147][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 550.648176][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.648194][ T9] usb 1-1: Product: syz [ 550.648206][ T9] usb 1-1: Manufacturer: syz [ 550.648218][ T9] usb 1-1: SerialNumber: syz [ 550.702387][ T9] usb 1-1: config 0 descriptor?? [ 550.708413][T12539] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 550.788945][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 550.979530][ T6492] usb 2-1: USB disconnect, device number 13 [ 551.183869][T12557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1606'. [ 551.187589][T12557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1606'. [ 551.331596][ T9] usb 1-1: USB disconnect, device number 3 [ 551.581869][T12567] loop4: detected capacity change from 0 to 128 [ 551.872400][T12333] udevd[12333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.757881][T12653] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 556.757907][T12653] overlayfs: failed to set xattr on upper [ 556.757915][T12653] overlayfs: ...falling back to redirect_dir=nofollow. [ 556.757922][T12653] overlayfs: ...falling back to index=off. [ 557.099106][T12662] loop0: detected capacity change from 0 to 4096 [ 557.116293][T12662] EXT4-fs: inline encryption not supported [ 557.208120][ T37] kauditd_printk_skb: 31 callbacks suppressed [ 557.208141][ T37] audit: type=1326 audit(1778094132.789:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12664 comm="syz.9.1645" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f2a54cdd9 code=0x0 [ 557.429873][T12662] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 557.430006][T12662] System zones: 0-5 [ 557.538460][T12662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.853261][ T37] audit: type=1800 audit(1778094133.429:381): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1643" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 558.224711][T12684] loop4: detected capacity change from 0 to 512 [ 558.225823][T12684] EXT4-fs: Ignoring removed orlov option [ 558.233893][T12684] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 558.395091][T12684] EXT4-fs (loop4): 1 truncate cleaned up [ 558.397837][T12684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.951633][T12701] netlink: 'syz.9.1658': attribute type 4 has an invalid length. [ 559.013725][T12702] netlink: 'syz.9.1658': attribute type 4 has an invalid length. [ 559.053130][T11216] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.211367][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.793484][T12728] loop4: detected capacity change from 0 to 64 [ 559.900996][ T5738] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 560.053142][ T5738] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 560.053168][ T5738] usb 1-1: config 0 has no interface number 0 [ 560.053208][ T5738] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 560.053233][ T5738] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 560.053272][ T5738] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 560.053377][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.064659][ T5738] usb 1-1: config 0 descriptor?? [ 560.065818][T12722] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 560.189887][ T5738] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 560.877704][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 561.166178][T12750] netlink: 'syz.3.1676': attribute type 3 has an invalid length. [ 561.218679][T12750] netlink: 'syz.3.1676': attribute type 3 has an invalid length. [ 561.551639][ T823] usb 1-1: USB disconnect, device number 4 [ 561.680106][T12760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.441318][T12780] binder: 12779:12780 ioctl c0306201 200000000040 returned -11 [ 562.952747][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.952844][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.232653][T12811] netlink: 'syz.4.1698': attribute type 10 has an invalid length. [ 563.317097][T12811] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.327767][T12811] bond0: (slave team0): Enslaving as an active interface with an up link [ 563.527524][T12819] netlink: 'syz.1.1701': attribute type 4 has an invalid length. [ 563.578928][T12819] netlink: 'syz.1.1701': attribute type 4 has an invalid length. [ 563.817699][T12826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1704'. [ 564.304850][T12844] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 564.728888][ T37] audit: type=1326 audit(1778094140.299:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.4.1717" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7504cdd9 code=0x7ffc0000 [ 564.730347][ T37] audit: type=1326 audit(1778094140.299:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.4.1717" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7504cdd9 code=0x7ffc0000 [ 564.772807][ T37] audit: type=1326 audit(1778094140.349:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.4.1717" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe7504cdd9 code=0x7ffc0000 [ 564.775989][ T37] audit: type=1326 audit(1778094140.349:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.4.1717" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7504cdd9 code=0x7ffc0000 [ 564.778732][ T37] audit: type=1326 audit(1778094140.349:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.4.1717" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7504cdd9 code=0x7ffc0000 [ 564.779956][ T37] audit: type=1326 audit(1778094140.349:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.4.1717" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7efe7504cdd9 code=0x7ffc0000 [ 564.788273][ T37] audit: type=1326 audit(1778094140.359:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.4.1717" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7504cdd9 code=0x7ffc0000 [ 564.792490][ T37] audit: type=1326 audit(1778094140.369:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.4.1717" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe7504cdd9 code=0x7ffc0000 [ 564.792535][ T37] audit: type=1326 audit(1778094140.369:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.4.1717" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7504cdd9 code=0x7ffc0000 [ 564.797247][ T37] audit: type=1326 audit(1778094140.369:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.4.1717" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe7504cdd9 code=0x7ffc0000 [ 569.305777][T12925] loop9: detected capacity change from 0 to 256 [ 569.325473][T12925] exfat: Deprecated parameter 'utf8' [ 569.325494][T12925] exfat: Deprecated parameter 'utf8' [ 569.325573][T12925] exfat: Deprecated parameter 'utf8' [ 569.440067][T12925] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d) [ 570.092956][T12933] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 571.170728][T12941] loop9: detected capacity change from 0 to 32768 [ 571.249704][T12941] (syz.9.1747,12941,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 571.344493][T12941] (syz.9.1747,12941,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 571.497143][T12941] (syz.9.1747,12941,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 571.533448][T12941] JBD2: Ignoring recovery information on journal [ 571.666249][T12941] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 571.808093][T12941] (syz.9.1747,12941,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 571.808189][T12941] (syz.9.1747,12941,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 571.809868][T12941] (syz.9.1747,12941,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 571.809893][T12941] (syz.9.1747,12941,1):ocfs2_quota_read:201 ERROR: status = -5 [ 571.809916][T12941] __quota_error: 2 callbacks suppressed [ 571.809926][T12941] Quota error (device loop9): find_tree_dqentry: Can't read quota tree block 5 [ 571.810078][T12941] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 571.810112][T12941] (syz.9.1747,12941,1):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 571.813872][T12941] (syz.9.1747,12941,1):ocfs2_symlink:1892 ERROR: status = -5 [ 571.813927][T12941] (syz.9.1747,12941,1):ocfs2_symlink:2078 ERROR: status = -5 [ 572.088976][T12949] overlayfs: failed to clone upperpath [ 572.271212][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1752'. [ 572.295706][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1752'. [ 572.334925][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1754'. [ 572.334953][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1754'. [ 572.530241][ T9271] ocfs2: Unmounting device (7,9) on (node local) [ 572.661419][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'. [ 572.661453][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'. [ 574.246186][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 574.246213][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 575.242658][T13014] loop9: detected capacity change from 0 to 40427 [ 575.309412][T13014] F2FS-fs (loop9): Wrong segment_count / block_count (64 > 16384) [ 575.309437][T13014] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 576.011430][ T5738] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 576.077564][T13014] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 576.169800][ T5738] usb 5-1: Using ep0 maxpacket: 32 [ 576.176122][ T5738] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 576.176149][ T5738] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 576.176169][ T5738] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 576.176217][ T5738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 576.176239][ T5738] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 576.176263][ T5738] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 576.176303][ T5738] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 576.176325][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.192929][ T5738] usb 5-1: config 0 descriptor?? [ 576.357448][T13014] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 576.357481][T13014] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 576.599923][ T5738] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 576.610256][ T5738] usb 5-1: USB disconnect, device number 23 [ 576.626287][ T5738] usblp0: removed [ 576.775506][ T9271] syz-executor: attempt to access beyond end of device [ 576.775506][ T9271] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 576.835356][ T9271] CPU: 0 UID: 0 PID: 9271 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 576.835389][ T9271] Tainted: [L]=SOFTLOCKUP [ 576.835395][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.835407][ T9271] Call Trace: [ 576.835414][ T9271] [ 576.835422][ T9271] dump_stack_lvl+0xe8/0x150 [ 576.835451][ T9271] f2fs_stop_checkpoint+0x383/0x540 [ 576.835481][ T9271] f2fs_write_end_io+0x1274/0x1740 [ 576.835528][ T9271] __submit_merged_bio+0x256/0x6a0 [ 576.835559][ T9271] __submit_merged_write_cond+0x3c9/0x4e0 [ 576.835591][ T9271] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 576.835638][ T9271] f2fs_write_data_pages+0x287e/0x34f0 [ 576.835700][ T9271] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 576.835739][ T9271] ? do_raw_spin_lock+0x12b/0x2f0 [ 576.835797][ T9271] ? __lock_acquire+0x6b5/0x2d10 [ 576.835819][ T9271] ? __lock_acquire+0x6b5/0x2d10 [ 576.835857][ T9271] ? do_raw_spin_lock+0x12b/0x2f0 [ 576.835895][ T9271] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 576.835917][ T9271] ? lockdep_hardirqs_on+0x7a/0x110 [ 576.835940][ T9271] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 576.835961][ T9271] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 576.835987][ T9271] do_writepages+0x32e/0x550 [ 576.836012][ T9271] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 576.836038][ T9271] ? rt_spin_unlock+0x14f/0x200 [ 576.836073][ T9271] filemap_fdatawrite+0x1ec/0x2f0 [ 576.836101][ T9271] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 576.836122][ T9271] ? __lock_acquire+0x6b5/0x2d10 [ 576.836177][ T9271] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 576.836210][ T9271] ? rt_spin_unlock+0x160/0x200 [ 576.836237][ T9271] f2fs_sync_dirty_inodes+0x30e/0x830 [ 576.836279][ T9271] f2fs_write_checkpoint+0x9df/0x26a0 [ 576.836304][ T9271] ? __lock_acquire+0x6b5/0x2d10 [ 576.836354][ T9271] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 576.836434][ T9271] kill_f2fs_super+0x314/0x730 [ 576.836467][ T9271] ? __pfx_kill_f2fs_super+0x10/0x10 [ 576.836506][ T9271] ? lockdep_hardirqs_on+0x7a/0x110 [ 576.836539][ T9271] deactivate_locked_super+0xbc/0x130 [ 576.836566][ T9271] cleanup_mnt+0x437/0x4d0 [ 576.836591][ T9271] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.836615][ T9271] task_work_run+0x1d9/0x270 [ 576.836641][ T9271] ? __pfx_task_work_run+0x10/0x10 [ 576.836672][ T9271] exit_to_user_mode_loop+0xed/0x4d0 [ 576.836690][ T9271] ? rcu_is_watching+0x15/0xb0 [ 576.836713][ T9271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.836733][ T9271] ? do_syscall_64+0x33e/0xf80 [ 576.836753][ T9271] ? trace_irq_disable+0x3b/0x140 [ 576.836792][ T9271] ? clear_bhb_loop+0x40/0x90 [ 576.836816][ T9271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.836851][ T9271] [ 576.869518][ T9271] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 577.120674][ T5738] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 577.281246][ T5738] usb 5-1: Using ep0 maxpacket: 32 [ 577.289721][ T5738] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 577.289747][ T5738] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 577.289767][ T5738] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 577.289812][ T5738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 577.289833][ T5738] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 577.289856][ T5738] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 577.289895][ T5738] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 577.289916][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.393211][ T5738] usb 5-1: config 0 descriptor?? [ 577.633639][ T5738] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 577.875830][ C0] usblp0: nonzero read bulk status received: -71 [ 577.876516][ T5738] usb 5-1: USB disconnect, device number 24 [ 578.125467][T13048] usblp0: removed [ 583.574864][T13166] netlink: 'syz.3.1819': attribute type 1 has an invalid length. [ 583.638212][T13169] overlayfs: failed to clone lowerpath [ 583.693155][T13174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1819'. [ 583.697746][T13175] overlayfs: failed to clone lowerpath [ 583.989328][T13172] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 584.280652][ T9942] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 584.462981][ T9942] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 584.463013][ T9942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.593880][T13174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.103648][ T9942] usb 10-1: config 0 descriptor?? [ 585.430458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 585.680463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 585.750469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 585.830458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 586.020464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 586.090469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 586.310464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 586.500458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 586.550465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 586.680465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 587.883899][ T9942] usb 10-1: Cannot read MAC address [ 587.884157][ T9942] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 588.135737][ T37] audit: type=1804 audit(1778094163.719:394): pid=13191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1828" name="file0" dev="tmpfs" ino=569 res=1 errno=0 [ 588.216291][ T9942] usb 10-1: USB disconnect, device number 15 [ 588.476477][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 588.680725][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 588.695971][ T10] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 588.696001][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.696020][ T10] usb 5-1: Product: syz [ 588.696033][ T10] usb 5-1: Manufacturer: syz [ 588.696047][ T10] usb 5-1: SerialNumber: syz [ 588.712273][ T10] usb 5-1: config 0 descriptor?? [ 589.519553][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 590.623950][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 591.570097][ T10] gspca_ov534_9: reg_r err -71 [ 591.823840][ T10] gspca_ov534_9: Unknown sensor 0000 [ 591.823933][ T10] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 591.930666][ T10] usb 5-1: USB disconnect, device number 25 [ 598.483080][ T5596] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 598.730677][ T5596] usb 2-1: Using ep0 maxpacket: 16 [ 598.733095][ T5596] usb 2-1: config 0 has no interfaces? [ 598.735751][ T5596] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 598.735780][ T5596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.735798][ T5596] usb 2-1: Product: syz [ 598.735812][ T5596] usb 2-1: Manufacturer: syz [ 598.735826][ T5596] usb 2-1: SerialNumber: syz [ 598.819299][ T5596] usb 2-1: config 0 descriptor?? [ 599.248994][T13340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1884'. [ 599.586419][T13349] cgroup: fork rejected by pids controller in /syz9 [ 599.925672][ T5738] usb 2-1: USB disconnect, device number 14 [ 600.236152][T13358] syz_tun: entered allmulticast mode [ 600.248224][T13357] syz_tun: left allmulticast mode [ 600.375123][T13360] overlayfs: failed to clone lowerpath [ 600.716903][ T37] audit: type=1800 audit(1778094176.289:395): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1898" name="file1" dev="tmpfs" ino=2504 res=0 errno=0 [ 601.977767][ T37] audit: type=1326 audit(1778094177.549:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13396 comm="syz.1.1905" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabd7c0cdd9 code=0x0 [ 604.228444][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 604.276722][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 604.280193][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 604.294721][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 604.327077][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 606.384386][T11997] Bluetooth: hci1: command tx timeout [ 606.704818][ T37] audit: type=1326 audit(1778094182.279:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13480 comm="syz.0.1938" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7fc00000 [ 606.704951][ T1031] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.722706][ T37] audit: type=1326 audit(1778094182.299:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13480 comm="syz.0.1938" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feb399ecdd9 code=0x7fc00000 [ 608.520001][T11997] Bluetooth: hci1: command tx timeout [ 609.388532][T13507] bond2: entered promiscuous mode [ 610.091664][ T1031] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.541959][T11997] Bluetooth: hci1: command tx timeout [ 610.897152][ T1031] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.958010][T13542] netlink: 'syz.1.1958': attribute type 1 has an invalid length. [ 611.152321][T13542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 611.411720][T13543] bond1: (slave macvlan1): making interface the new active one [ 611.445425][T13543] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 611.672482][T13546] bond1 (unregistering): (slave macvlan1): Releasing active interface [ 611.736957][T13546] bond1 (unregistering): Released all slaves [ 612.457255][ T1031] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.621285][T11997] Bluetooth: hci1: command tx timeout [ 612.675469][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1965'. [ 613.041385][T13576] team0: Port device team_slave_0 removed [ 613.911563][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1976'. [ 614.219513][T13601] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 614.317241][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 614.385887][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 614.501766][ T37] audit: type=1326 audit(1778094190.079:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13606 comm="syz.4.1979" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe7504cdd9 code=0x0 [ 614.963957][ T1031] bridge_slave_1: left allmulticast mode [ 614.963990][ T1031] bridge_slave_1: left promiscuous mode [ 614.964268][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.042898][ T1031] bridge_slave_0: left allmulticast mode [ 615.042931][ T1031] bridge_slave_0: left promiscuous mode [ 615.043197][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.716627][T13657] fuse: Bad value for 'fd' [ 615.733176][T13658] loop4: detected capacity change from 0 to 512 [ 615.734307][T13660] fuse: Bad value for 'fd' [ 615.873075][T13658] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1990: bg 0: block 5: invalid block bitmap [ 615.873108][T13658] loop4: lost filesystem error report for type 5 error -117 [ 615.930486][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 615.930508][ C1] EXT4-fs (loop4): initial error at time 1778094191: ext4_validate_block_bitmap:432 [ 615.930525][ C1] EXT4-fs (loop4): last error at time 1778094191: ext4_validate_block_bitmap:432 [ 615.952581][T13658] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 615.952608][T13658] loop4: lost filesystem error report for type 5 error -117 [ 615.970680][T13658] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1990: invalid indirect mapped block 3 (level 2) [ 615.970719][T13658] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 615.973319][T13658] EXT4-fs (loop4): 2 truncates cleaned up [ 615.979152][T13658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.335511][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.678481][ T37] audit: type=1326 audit(1778094192.239:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.0.1998" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 616.678648][ T37] audit: type=1326 audit(1778094192.259:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.0.1998" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 616.678978][ T37] audit: type=1326 audit(1778094192.259:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.0.1998" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 616.679178][ T37] audit: type=1326 audit(1778094192.259:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.0.1998" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 616.684376][ T37] audit: type=1326 audit(1778094192.259:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.0.1998" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 616.778058][ T37] audit: type=1326 audit(1778094192.329:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.0.1998" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb399ad60e code=0x7ffc0000 [ 616.797216][ T37] audit: type=1326 audit(1778094192.369:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.0.1998" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb399ad60e code=0x7ffc0000 [ 616.820505][ T37] audit: type=1326 audit(1778094192.379:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.0.1998" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb399ad60e code=0x7ffc0000 [ 616.823135][ T37] audit: type=1326 audit(1778094192.399:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.0.1998" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb399ad60e code=0x7ffc0000 [ 618.306151][T13691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2003'. [ 618.514583][ T1031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.564669][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 618.564692][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 618.584575][ T1031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.638767][ T1031] bond0 (unregistering): Released all slaves [ 618.772945][T11997] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 618.775989][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 619.170040][T13438] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.233373][T13438] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.233717][T13438] bridge_slave_0: entered allmulticast mode [ 619.314630][T13438] bridge_slave_0: entered promiscuous mode [ 619.330008][T13438] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.330292][T13438] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.331458][T13438] bridge_slave_1: entered allmulticast mode [ 619.357930][T13438] bridge_slave_1: entered promiscuous mode [ 620.565593][T13438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.586374][T13438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.761957][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 620.960155][T13753] input: syz0 as /devices/virtual/input/input11 [ 621.344841][T13438] team0: Port device team_slave_0 added [ 621.356202][T13438] team0: Port device team_slave_1 added [ 621.814835][T13438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.814860][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.814887][T13438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.875421][T13778] netlink: 'syz.1.2028': attribute type 10 has an invalid length. [ 621.945572][T13438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.945596][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.945620][T13438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.983514][T13778] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.984159][T13778] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.273735][T13778] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.273891][T13778] bridge0: port 2(bridge_slave_1) entered listening state [ 622.274178][T13778] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.274322][T13778] bridge0: port 1(bridge_slave_0) entered listening state [ 622.558863][T13778] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 622.792493][T11997] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 622.818485][T11997] Bluetooth: hci3: Injecting HCI hardware error event [ 622.842283][ T5620] Bluetooth: hci3: hardware error 0x00 [ 623.464054][ T1031] hsr_slave_0: left promiscuous mode [ 623.492243][ T1031] hsr_slave_1: left promiscuous mode [ 623.494233][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.494259][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.532811][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.532839][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.306395][ T1031] veth1_macvtap: left promiscuous mode [ 624.306494][ T1031] veth0_macvtap: left promiscuous mode [ 624.306776][ T1031] veth1_vlan: left promiscuous mode [ 624.306853][ T1031] veth0_vlan: left promiscuous mode [ 624.409440][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.409538][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.598999][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2035'. [ 624.599020][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2035'. [ 625.024283][T13809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2038'. [ 625.420746][ T5620] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 625.932161][ T1031] team0 (unregistering): Port device team_slave_1 removed [ 626.001345][ T1031] team0 (unregistering): Port device team_slave_0 removed [ 626.059740][T13819] binder: 13818:13819 ioctl c0306201 2000000001c0 returned -22 [ 628.334973][T13846] fuse: Bad value for 'fd' [ 628.342358][ T37] kauditd_printk_skb: 84 callbacks suppressed [ 628.342375][ T37] audit: type=1326 audit(1778094203.919:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.2064" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 628.342798][ T37] audit: type=1326 audit(1778094203.919:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.2064" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fabd7c0e647 code=0x7ffc0000 [ 628.343317][ T37] audit: type=1326 audit(1778094203.919:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.2064" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 628.343993][ T37] audit: type=1326 audit(1778094203.919:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.2064" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 628.344279][ T37] audit: type=1326 audit(1778094203.919:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.2064" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 628.344550][ T37] audit: type=1326 audit(1778094203.919:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.2064" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 628.345011][ T37] audit: type=1326 audit(1778094203.919:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.2064" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 628.345283][ T37] audit: type=1326 audit(1778094203.919:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.2064" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 628.345604][ T37] audit: type=1326 audit(1778094203.919:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.2064" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 628.345866][ T37] audit: type=1326 audit(1778094203.919:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13845 comm="syz.1.2064" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 628.645376][T13849] netlink: 'syz.3.2054': attribute type 1 has an invalid length. [ 628.775422][T13849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 628.809455][T13854] veth1_vlan: left allmulticast mode [ 628.912680][T13854] macvlan1: left allmulticast mode [ 628.940125][ T5745] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 629.097207][T13854] team0: Port device macvlan1 removed [ 629.195616][ T5745] usb 2-1: Using ep0 maxpacket: 32 [ 629.198962][ T5745] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 629.198989][ T5745] usb 2-1: config 0 has no interface number 0 [ 629.230938][ T5745] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 629.230969][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.230989][ T5745] usb 2-1: Product: syz [ 629.231001][ T5745] usb 2-1: Manufacturer: syz [ 629.231068][ T5745] usb 2-1: SerialNumber: syz [ 629.273314][ T5745] usb 2-1: config 0 descriptor?? [ 629.380215][T13854] bond2: (slave macvlan1): making interface the new active one [ 629.436716][T13854] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 630.012460][T13856] bond2 (unregistering): (slave macvlan1): Releasing active interface [ 630.116154][T13856] bond2 (unregistering): Released all slaves [ 630.435512][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 630.515821][T13438] hsr_slave_0: entered promiscuous mode [ 630.532449][T13438] hsr_slave_1: entered promiscuous mode [ 630.537320][T13438] debugfs: 'hsr0' already exists in 'hsr' [ 630.537346][T13438] Cannot create hsr debugfs directory [ 630.756935][T13878] overlayfs: failed to resolve './file0': -2 [ 631.023880][ T5745] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 631.324746][ T5745] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 631.325045][ T5745] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 631.360280][ T5745] usb 2-1: USB disconnect, device number 15 [ 631.928907][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2069'. [ 631.928933][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2069'. [ 632.621662][T13917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2073'. [ 633.547302][T13919] macvlan2: entered promiscuous mode [ 633.547328][T13919] macvlan2: entered allmulticast mode [ 633.550160][T13919] bond2: (slave macvlan2): Opening slave failed [ 633.586813][T13934] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2076'. [ 633.723618][T13934] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 633.809184][T13934] 0ªî{X¹¦: entered allmulticast mode [ 633.809655][T13934] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 635.136527][T13952] binder: 13950:13952 ioctl c0306201 200000000040 returned -14 [ 635.253144][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 635.253164][ T37] audit: type=1804 audit(1778094210.819:513): pid=13951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2084" name="/newroot/512/file0" dev="tmpfs" ino=2711 res=1 errno=0 [ 636.345222][T13941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2080'. [ 636.345258][T13941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2080'. [ 636.997196][T13982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2092'. [ 638.073370][T13982] team0: Port device team_slave_0 removed [ 639.392138][T14032] fuse: Bad value for 'fd' [ 640.580607][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 640.737706][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 640.740288][ T9] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.740321][ T9] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.740342][ T9] usb 2-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 640.740366][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 640.790890][ T9] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 640.790919][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.860201][ T9] usb 2-1: config 0 descriptor?? [ 641.569083][ T9] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 641.569117][ T9] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 641.569139][ T9] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 641.569161][ T9] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 641.569183][ T9] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 641.569206][ T9] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 641.569229][ T9] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 641.569252][ T9] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 641.569275][ T9] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 641.569298][ T9] elo 0003:04E7:0030.0007: unknown main item tag 0x0 [ 641.569427][ T9] elo 0003:04E7:0030.0007: collection stack underflow [ 641.569447][ T9] elo 0003:04E7:0030.0007: item 0 1 0 12 parsing failed [ 641.670681][ T9] elo 0003:04E7:0030.0007: parse failed [ 641.670777][ T9] elo 0003:04E7:0030.0007: probe with driver elo failed with error -22 [ 642.287782][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 642.287806][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 642.288816][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 642.288836][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 642.495442][T14097] syz_tun: entered allmulticast mode [ 642.538915][T14097] syz_tun: left allmulticast mode [ 642.552760][ T9] usb 2-1: USB disconnect, device number 16 [ 642.941685][T14106] fuse: fd is not a fuse device [ 643.526487][T14129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2124'. [ 643.576622][T14131] overlayfs: failed to clone upperpath [ 643.626884][T13438] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 643.665468][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 643.670362][T13438] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 643.857815][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 643.868706][T13438] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 643.987341][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 643.989079][T14138] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 644.024628][T13438] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 644.067747][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 644.824393][T13438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.085393][T13438] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.173258][ T6284] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.173415][ T6284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.214364][ T6284] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.229110][ T6284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.374013][T14174] loop4: detected capacity change from 0 to 2048 [ 645.616960][T14174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 645.677171][ T7959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.391558][T14226] tipc: Started in network mode [ 647.391574][T14226] tipc: Node identity pfifo_fa.., cluster identity 4711 [ 647.701338][T13438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.515742][T13438] veth0_vlan: entered promiscuous mode [ 648.562857][T13438] veth1_vlan: entered promiscuous mode [ 649.316749][T13438] veth0_macvtap: entered promiscuous mode [ 649.416615][T13438] veth1_macvtap: entered promiscuous mode [ 649.477877][T13438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.483693][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2154'. [ 649.483714][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2154'. [ 649.524662][T13438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.554651][ T6284] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.554947][ T6284] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.555174][ T6284] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.556470][ T6284] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.826212][ T37] audit: type=1326 audit(1778094225.399:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2158" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 649.826532][ T37] audit: type=1326 audit(1778094225.399:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2158" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 649.909558][ T37] audit: type=1326 audit(1778094225.479:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2158" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 649.909599][ T37] audit: type=1326 audit(1778094225.479:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2158" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 649.909629][ T37] audit: type=1326 audit(1778094225.479:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2158" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 649.923259][ T37] audit: type=1326 audit(1778094225.489:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2158" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 650.041392][ T37] audit: type=1326 audit(1778094225.609:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2158" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 650.041506][ T37] audit: type=1326 audit(1778094225.609:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2158" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 650.066022][ T37] audit: type=1326 audit(1778094225.639:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2158" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 650.066063][ T37] audit: type=1326 audit(1778094225.639:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14289 comm="syz.0.2158" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 651.700456][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.700473][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.425152][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.425171][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.551985][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 652.553642][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 654.513826][T14352] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 654.958354][T14360] netlink: 'syz.0.2180': attribute type 4 has an invalid length. [ 656.329123][T14389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2191'. [ 656.629500][T14395] loop4: detected capacity change from 0 to 4096 [ 656.650647][T14395] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 656.979781][T14411] overlayfs: failed to clone upperpath [ 657.006149][T14395] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 657.057071][T14407] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2196'. [ 657.103278][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 657.103296][ T37] audit: type=1800 audit(1778094232.679:535): pid=14395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2193" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 657.693333][T14419] loop9: detected capacity change from 0 to 512 [ 658.095847][ T823] hid_parser_main: 10 callbacks suppressed [ 658.095870][ T823] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 658.195052][T14419] FAT-fs (loop9): bread failed, FSINFO block (sector = 1281) [ 659.686834][ T823] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 660.385740][T14532] fido_id[14532]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 663.017100][T14575] fuse: fd is not a fuse device [ 663.804401][T14600] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2236'. [ 664.167221][ T37] audit: type=1326 audit(1778094239.739:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 664.167391][ T37] audit: type=1326 audit(1778094239.739:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 664.167557][ T37] audit: type=1326 audit(1778094239.739:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 664.210579][ T37] audit: type=1326 audit(1778094239.739:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 664.210632][ T37] audit: type=1326 audit(1778094239.739:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 664.212415][ T37] audit: type=1326 audit(1778094239.789:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 664.214256][ T37] audit: type=1326 audit(1778094239.789:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 664.217113][ T37] audit: type=1326 audit(1778094239.789:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14619 comm="syz.1.2245" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabd7c0cdd9 code=0x7ffc0000 [ 665.131110][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2247'. [ 668.405008][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2276'. [ 670.150688][T14717] loop9: detected capacity change from 0 to 131072 [ 670.204054][T14717] F2FS-fs (loop9): Test dummy encryption mode enabled [ 670.214842][T14717] F2FS-fs (loop9): invalid crc value [ 670.305129][T14717] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 670.327858][T14717] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 670.539891][T14717] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 672.533145][T14767] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2299'. [ 672.533262][T14767] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 672.606355][T14767] 0ªî{X¹¦: entered allmulticast mode [ 672.607039][T14767] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 672.779637][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2303'. [ 672.901303][T14777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2304'. [ 673.763676][ T37] audit: type=1804 audit(1778094249.329:544): pid=14799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2312" name="/newroot/683/file0" dev="tmpfs" ino=3671 res=1 errno=0 [ 675.536842][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 675.536889][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 675.651441][T14840] netlink: 'syz.3.2328': attribute type 11 has an invalid length. [ 675.776961][T14844] netlink: 'syz.3.2328': attribute type 11 has an invalid length. [ 676.239076][T14847] loop9: detected capacity change from 0 to 32768 [ 676.266017][T14847] btrfs: Deprecated parameter 'usebackuproot' [ 676.266041][T14847] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 676.291215][T14847] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2330 (14847) [ 676.501251][T14847] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 676.501286][T14847] BTRFS info (device loop9): using crc32c checksum algorithm [ 676.816463][T14448] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 676.816615][T14847] BTRFS error (device loop9): failed to load root extent [ 676.816656][T14847] BTRFS warning (device loop9): try to load backup roots slot 1 [ 676.817426][T14839] uprobe: syz.1.2329:14839 failed to unregister, leaking uprobe [ 676.836585][ T4182] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 676.836721][T14847] BTRFS warning (device loop9): couldn't read tree root [ 676.836740][T14847] BTRFS warning (device loop9): try to load backup roots slot 2 [ 676.850638][T14487] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 676.850777][T14847] BTRFS warning (device loop9): couldn't read tree root [ 676.850796][T14847] BTRFS warning (device loop9): try to load backup roots slot 3 [ 676.920475][T14847] BTRFS info (device loop9): rebuilding free space tree [ 676.970195][T14868] loop4: detected capacity change from 0 to 512 [ 677.064248][T14868] EXT4-fs (loop4): 1 truncate cleaned up [ 677.067466][T14868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.110047][T14847] BTRFS info (device loop9): checking UUID tree [ 677.113988][T14847] BTRFS info (device loop9): enabling ssd optimizations [ 677.114014][T14847] BTRFS info (device loop9): turning on async discard [ 677.114029][T14847] BTRFS info (device loop9): enabling free space tree [ 677.114045][T14847] BTRFS info (device loop9): force clearing of disk cache [ 677.114062][T14847] BTRFS info (device loop9): enabling auto defrag [ 677.114078][T14847] BTRFS info (device loop9): trying to use backup root at mount time [ 677.114098][T14847] BTRFS info (device loop9): use zstd compression, level 3 [ 678.907882][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.955969][T13438] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 680.395468][ T9656] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 680.610522][ T9656] usb 10-1: Using ep0 maxpacket: 32 [ 680.617443][ T9656] usb 10-1: config 139 has an invalid interface number: 49 but max is 0 [ 680.617471][ T9656] usb 10-1: config 139 has no interface number 0 [ 680.617502][ T9656] usb 10-1: config 139 interface 49 has no altsetting 0 [ 680.620870][ T9656] usb 10-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 680.620899][ T9656] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.620918][ T9656] usb 10-1: Product: syz [ 680.620931][ T9656] usb 10-1: Manufacturer: syz [ 680.620945][ T9656] usb 10-1: SerialNumber: syz [ 681.897363][ T9656] radio-usb-si4713 10-1:139.49: Si4713 development board discovered: (10C4:8244) [ 681.908474][ T9656] radio-usb-si4713 10-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 681.909047][ T9656] usbhid 10-1:139.49: couldn't find an input interrupt endpoint [ 681.930549][ T9656] usb 10-1: USB disconnect, device number 16 [ 682.633084][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.633107][ C1] bridge0: topology change detected, propagating [ 682.637684][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.637703][ C1] bridge0: topology change detected, propagating [ 682.771345][T14957] fuse: fd is not a fuse device [ 682.936529][T14962] overlayfs: failed to clone upperpath [ 684.500805][T14994] loop4: detected capacity change from 0 to 128 [ 685.256567][T15017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2386'. [ 685.468294][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'. [ 685.468318][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'. [ 685.782981][T15036] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96 [ 685.855391][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.855493][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.635511][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2404'. [ 687.639290][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'. [ 687.639334][T15065] bond0: option arp_interval: invalid value (18446744073709551614) [ 687.639353][T15065] bond0: option arp_interval: allowed values 0 - 2147483647 [ 687.788669][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2408'. [ 688.363563][T15086] overlayfs: failed to clone upperpath [ 688.795820][T15095] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 691.070705][ T823] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 691.256729][ T823] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 691.256761][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.256781][ T823] usb 2-1: Product: syz [ 691.256794][ T823] usb 2-1: Manufacturer: syz [ 691.256808][ T823] usb 2-1: SerialNumber: syz [ 691.329651][T15145] netlink: 344 bytes leftover after parsing attributes in process `syz.9.2435'. [ 691.518968][T15145] unsupported nla_type 4298 [ 691.755355][ T823] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 691.755416][ T823] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 692.172875][ T10] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 692.457936][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.457991][ T10] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 692.458017][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 692.458050][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 692.458071][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 692.478580][ T10] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 692.478610][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 692.478631][ T10] usb 10-1: Product: syz [ 692.478645][ T10] usb 10-1: Manufacturer: syz [ 692.478712][ T10] usb 10-1: SerialNumber: syz [ 692.482332][T15152] ceph: No mds server is up or the cluster is laggy [ 692.584282][ T10] usb 10-1: config 0 descriptor?? [ 692.587226][ T5745] libceph: connect (1)[c::]:6789 error -97 [ 692.626722][ T5745] libceph: mon0 (1)[c::]:6789 connect error [ 692.857188][ T10] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 692.857204][ T10] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 692.910253][ T9942] libceph: connect (1)[c::]:6789 error -97 [ 692.938360][ T9942] libceph: mon0 (1)[c::]:6789 connect error [ 693.080983][ T823] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 693.081562][ T823] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 693.082043][ T823] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 693.082095][ T823] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 693.082935][ T823] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 693.124312][ T10] radio-si470x 10-1:0.0: software version 0, hardware version 0 [ 693.124338][ T10] radio-si470x 10-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 693.124358][ T10] radio-si470x 10-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 693.287177][ T823] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 693.316035][ T10] radio-si470x 10-1:0.0: submitting int urb failed (-90) [ 693.376051][ T823] usb 2-1: USB disconnect, device number 17 [ 694.714051][ T10] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 694.714501][ T10] radio-si470x 10-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 695.091628][ T10] usb 10-1: USB disconnect, device number 17 [ 696.144974][T15164] batadv0: entered promiscuous mode [ 696.490635][T15164] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 699.755591][T15236] fuse: Bad value for 'fd' [ 700.057176][T15243] loop9: detected capacity change from 0 to 512 [ 700.059847][T15243] EXT4-fs: Ignoring removed orlov option [ 700.059898][T15243] EXT4-fs: Ignoring removed mblk_io_submit option [ 700.173348][T15243] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 700.370877][ T9656] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 700.451707][T15243] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.2463: attempt to clear invalid blocks 2 len 1 [ 700.451745][T15243] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 700.463786][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 700.463809][ C1] EXT4-fs (loop9): initial error at time 1778094276: ext4_clear_blocks:876: inode 13 [ 700.463836][ C1] EXT4-fs (loop9): last error at time 1778094276: ext4_clear_blocks:876: inode 13 [ 700.520556][ T9656] usb 5-1: Using ep0 maxpacket: 8 [ 700.525836][ T9656] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 700.525866][ T9656] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.525887][ T9656] usb 5-1: Product: syz [ 700.525902][ T9656] usb 5-1: Manufacturer: syz [ 700.525916][ T9656] usb 5-1: SerialNumber: syz [ 700.597816][ T9656] usb 5-1: config 0 descriptor?? [ 700.782139][T15243] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 700.843062][ T9656] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 701.009411][T15243] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2463: invalid indirect mapped block 1819239214 (level 0) [ 701.009452][T15243] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 701.035177][T15243] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2463: invalid indirect mapped block 1819239214 (level 1) [ 701.035215][T15243] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 701.129071][T15243] EXT4-fs (loop9): 1 truncate cleaned up [ 701.167961][T15243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.442940][T13438] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.663067][ T9656] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 701.729344][ T9656] usb 5-1: USB disconnect, device number 26 [ 702.309197][ T5620] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 702.371971][ T5620] Bluetooth: hci1: Injecting HCI hardware error event [ 702.445659][T11997] Bluetooth: hci1: hardware error 0x00 [ 703.322448][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2472'. [ 703.322470][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2472'. [ 703.716988][T15278] syz.4.2478: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 703.717224][T15278] CPU: 0 UID: 0 PID: 15278 Comm: syz.4.2478 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 703.717252][T15278] Tainted: [L]=SOFTLOCKUP [ 703.717260][T15278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 703.717272][T15278] Call Trace: [ 703.717280][T15278] [ 703.717288][T15278] dump_stack_lvl+0xe8/0x150 [ 703.717322][T15278] warn_alloc+0x24c/0x270 [ 703.717353][T15278] ? stack_trace_save+0xa9/0x100 [ 703.717387][T15278] ? __pfx_warn_alloc+0x10/0x10 [ 703.717424][T15278] ? kasan_save_track+0x4f/0x80 [ 703.717448][T15278] ? kasan_save_track+0x3e/0x80 [ 703.717471][T15278] ? __kasan_kmalloc+0x93/0xb0 [ 703.717498][T15278] ? xskq_create+0x56/0x170 [ 703.717517][T15278] ? xsk_init_queue+0x8a/0xe0 [ 703.717534][T15278] ? xsk_setsockopt+0x603/0x990 [ 703.717563][T15278] ? do_sock_setsockopt+0x17c/0x1b0 [ 703.717586][T15278] __vmalloc_node_range_noprof+0x132/0x1750 [ 703.717650][T15278] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 703.717689][T15278] ? __kasan_kmalloc+0x93/0xb0 [ 703.717720][T15278] vmalloc_user_noprof+0xad/0xe0 [ 703.717749][T15278] ? xskq_create+0xbf/0x170 [ 703.717769][T15278] xskq_create+0xbf/0x170 [ 703.717793][T15278] xsk_init_queue+0x8a/0xe0 [ 703.717816][T15278] xsk_setsockopt+0x603/0x990 [ 703.717849][T15278] ? __pfx_xsk_setsockopt+0x10/0x10 [ 703.717879][T15278] ? __pfx_aa_sk_perm+0x10/0x10 [ 703.717911][T15278] ? aa_sock_opt_perm+0x131/0x1f0 [ 703.717945][T15278] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 703.717963][T15278] ? __pfx_xsk_setsockopt+0x10/0x10 [ 703.717995][T15278] do_sock_setsockopt+0x17c/0x1b0 [ 703.718018][T15278] __x64_sys_setsockopt+0x143/0x1b0 [ 703.718041][T15278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.718064][T15278] do_syscall_64+0x15f/0xf80 [ 703.718085][T15278] ? trace_irq_disable+0x3b/0x140 [ 703.718115][T15278] ? clear_bhb_loop+0x40/0x90 [ 703.718139][T15278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.718157][T15278] RIP: 0033:0x7efe7504cdd9 [ 703.718186][T15278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.718204][T15278] RSP: 002b:00007efe732a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 703.718231][T15278] RAX: ffffffffffffffda RBX: 00007efe752c5fa0 RCX: 00007efe7504cdd9 [ 703.718245][T15278] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 703.718258][T15278] RBP: 00007efe750e2d69 R08: 0000000000000004 R09: 0000000000000000 [ 703.718271][T15278] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 703.718283][T15278] R13: 00007efe752c6038 R14: 00007efe752c5fa0 R15: 00007ffd6cf493f8 [ 703.718312][T15278] [ 703.785533][T15278] Mem-Info: [ 703.785552][T15278] active_anon:75947 inactive_anon:0 isolated_anon:0 [ 703.785552][T15278] active_file:0 inactive_file:61473 isolated_file:0 [ 703.785552][T15278] unevictable:768 dirty:365 writeback:0 [ 703.785552][T15278] slab_reclaimable:12882 slab_unreclaimable:127207 [ 703.785552][T15278] mapped:41636 shmem:68196 pagetables:4251 [ 703.785552][T15278] sec_pagetables:0 bounce:0 [ 703.785552][T15278] kernel_misc_reclaimable:0 [ 703.785552][T15278] free:1206411 free_pcp:3879 free_cma:0 [ 703.785613][T15278] Node 0 active_anon:303788kB inactive_anon:0kB active_file:0kB inactive_file:245696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:166544kB dirty:1460kB writeback:0kB shmem:271248kB kernel_stack:15848kB pagetables:16864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 703.785664][T15278] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 703.785711][T15278] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 703.785771][T15278] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 703.785808][T15278] Node 0 DMA32 free:864916kB boost:0kB min:3916kB low:6440kB high:8964kB reserved_highatomic:0KB free_highatomic:0KB active_anon:303788kB inactive_anon:0kB active_file:0kB inactive_file:245696kB unevictable:1536kB writepending:1460kB zspages:0kB present:3129332kB managed:2555208kB mlocked:0kB bounce:0kB free_pcp:15492kB local_pcp:4596kB free_cma:0kB [ 703.785873][T15278] lowmem_reserve[]: 0 0 1 1 1 [ 703.785904][T15278] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1196kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 703.785965][T15278] lowmem_reserve[]: 0 0 0 0 0 [ 703.785995][T15278] Node 1 Normal free:3945368kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 703.786053][T15278] lowmem_reserve[]: 0 0 0 0 0 [ 703.786084][T15278] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 703.786196][T15278] Node 0 DMA32: 445*4kB (UE) 1026*8kB (UE) 758*16kB (UE) 589*32kB (UE) 892*64kB (UME) 736*128kB (UE) 411*256kB (UME) 208*512kB (UME) 96*1024kB (UM) 23*2048kB (UME) 77*4096kB (UM) = 864772kB [ 703.786342][T15278] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 703.786450][T15278] Node 1 Normal: 2*4kB (M) 2*8kB (M) 8*16kB (UM) 4*32kB (UM) 10*64kB (UM) 6*128kB (UM) 1*256kB (M) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 961*4096kB (M) = 3945368kB [ 703.786597][T15278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 703.786615][T15278] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 703.786630][T15278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 703.786647][T15278] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 703.786663][T15278] 129642 total pagecache pages [ 703.786674][T15278] 0 pages in swap cache [ 703.786681][T15278] Free swap = 124996kB [ 703.786688][T15278] Total swap = 124996kB [ 703.786695][T15278] 2097051 pages RAM [ 703.786701][T15278] 0 pages HighMem/MovableOnly [ 703.786708][T15278] 426336 pages reserved [ 703.786714][T15278] 0 pages cma reserved [ 705.370042][T15303] fuse: fd is not a fuse device [ 705.425984][T11997] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 706.267666][T15310] loop9: detected capacity change from 0 to 4096 [ 706.270615][T15310] EXT4-fs: inline encryption not supported [ 706.366958][T15310] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 706.367170][T15310] System zones: 0-5 [ 706.637107][T15310] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.784945][ T37] audit: type=1800 audit(1778094282.359:545): pid=15310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2488" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 707.488716][T13438] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.812914][T15333] loop9: detected capacity change from 0 to 512 [ 707.814930][T15333] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 707.830526][T15333] EXT4-fs (loop9): 1 truncate cleaned up [ 707.833445][T15333] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.911449][T15333] EXT4-fs (loop9): shut down requested (2) [ 708.027244][T13438] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.308204][T15339] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2495'. [ 708.555327][T15340] vlan2: entered allmulticast mode [ 708.555351][T15340] bridge1: entered allmulticast mode [ 708.712251][T15347] loop9: detected capacity change from 0 to 128 [ 708.714622][T15347] EXT4-fs (loop9): Test dummy encryption mode enabled [ 708.746228][T15347] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 708.746749][T15347] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 709.211567][T13438] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 709.426659][T15360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2503'. [ 710.306088][T15377] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 710.627650][T15383] loop4: detected capacity change from 0 to 256 [ 711.252488][T15395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 711.382654][T15395] 8021q: adding VLAN 0 to HW filter on device bond2 [ 711.738436][T15392] fuse: root generation should be zero [ 712.663962][T15423] loop4: detected capacity change from 0 to 512 [ 712.821577][T15423] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 718.227021][T15519] ªªªªªª: renamed from vlan0 (while UP) [ 721.021119][ T9942] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 721.204879][ T9942] usb 10-1: Using ep0 maxpacket: 32 [ 721.208206][ T9942] usb 10-1: config index 0 descriptor too short (expected 3659, got 75) [ 721.208236][ T9942] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.244113][ T9942] usb 10-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 721.244143][ T9942] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.244162][ T9942] usb 10-1: Product: syz [ 721.244177][ T9942] usb 10-1: Manufacturer: syz [ 721.244190][ T9942] usb 10-1: SerialNumber: syz [ 721.314034][ T9942] usb 10-1: config 0 descriptor?? [ 721.367600][ T9942] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 721.631226][T15577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2586'. [ 722.223584][T15590] overlayfs: failed to clone upperpath [ 723.516630][ T9942] gspca_sunplus: reg_r err -71 [ 723.516731][ T9942] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 723.551316][ T9942] usb 10-1: USB disconnect, device number 18 [ 725.435564][T15634] netlink: 'syz.4.2606': attribute type 1 has an invalid length. [ 725.714395][T15634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 725.763215][T15636] vlan3: entered allmulticast mode [ 725.763229][T15636] bond3: entered allmulticast mode [ 725.870599][T15642] bond3: (slave geneve2): making interface the new active one [ 725.870626][T15642] geneve2: entered allmulticast mode [ 725.875494][T15642] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 727.630811][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2611'. [ 727.718547][ T37] audit: type=1326 audit(1778094303.299:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15658 comm="syz.4.2613" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe7504cdd9 code=0x0 [ 728.927053][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2616'. [ 728.927076][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 728.971831][T15657] team0: Port device team_slave_0 removed [ 729.291564][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2616'. [ 729.291579][T15668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 729.371722][ T5738] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 729.414292][T15673] netlink: 'syz.3.2619': attribute type 10 has an invalid length. [ 729.421048][T15673] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.456912][T15673] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.467371][T15674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2619'. [ 729.528788][ T5738] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 729.528825][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.528843][ T5738] usb 5-1: Product: syz [ 729.528856][ T5738] usb 5-1: Manufacturer: syz [ 729.528869][ T5738] usb 5-1: SerialNumber: syz [ 729.547121][T15673] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.547295][T15673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.547642][T15673] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.547931][T15673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.619305][T15673] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 729.638716][T15674] bridge_slave_1: left allmulticast mode [ 729.638749][T15674] bridge_slave_1: left promiscuous mode [ 729.639043][T15674] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.711847][T15674] bridge_slave_0: left allmulticast mode [ 729.711881][T15674] bridge_slave_0: left promiscuous mode [ 729.712135][T15674] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.111029][ T5738] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 730.111090][ T5738] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 730.521011][T15674] bond0: (slave bridge0): Releasing backup interface [ 731.166454][T15700] binder: 15699:15700 ioctl c0306201 2000000003c0 returned -14 [ 731.540182][ T5738] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 731.553057][ T5738] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 731.553543][ T5738] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 731.553592][ T5738] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 731.554666][ T5738] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 731.628475][ T5738] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 731.660530][ T5738] usb 5-1: USB disconnect, device number 27 [ 731.770167][T15718] tipc: Started in network mode [ 731.770181][T15718] tipc: Node identity 4, cluster identity 4711 [ 731.770188][T15718] tipc: Node number set to 4 [ 732.222933][T15722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2638'. [ 733.078774][T15740] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2645'. [ 734.295365][ T37] audit: type=1326 audit(1778094309.869:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15765 comm="syz.0.2657" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x0 [ 734.871629][ T5745] libceph: connect (1)[c::]:6789 error -101 [ 734.871757][ T5745] libceph: mon0 (1)[c::]:6789 connect error [ 734.872692][ T5745] libceph: connect (1)[c::]:6789 error -101 [ 734.872800][ T5745] libceph: mon0 (1)[c::]:6789 connect error [ 734.999187][T15781] ceph: No mds server is up or the cluster is laggy [ 736.591750][ T5745] libceph: connect (1)[c::]:6789 error -101 [ 736.688700][ T5745] libceph: mon0 (1)[c::]:6789 connect error [ 737.756182][ T6492] libceph: connect (1)[c::]:6789 error -101 [ 738.025936][ T6492] libceph: mon0 (1)[c::]:6789 connect error [ 738.198491][T15794] netlink: 'syz.4.2665': attribute type 4 has an invalid length. [ 738.269721][T15796] netlink: 'syz.4.2665': attribute type 4 has an invalid length. [ 738.553509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.622025][T15806] loop9: detected capacity change from 0 to 1024 [ 738.806876][T15806] EXT4-fs: Ignoring removed bh option [ 738.806897][T15806] EXT4-fs: Ignoring removed oldalloc option [ 738.806937][T15806] EXT4-fs: Ignoring removed nobh option [ 738.809285][T15806] EXT4-fs (loop9): bad geometry: bigalloc file system with non-zero first_data_block [ 738.809285][T15806] [ 739.095158][T15816] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 740.232277][ T37] audit: type=1804 audit(1778094315.739:548): pid=15846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2686" name="/newroot/91/file0" dev="tmpfs" ino=507 res=1 errno=0 [ 741.235797][T15867] tunl0: entered promiscuous mode [ 741.364116][T15867] netlink: 'syz.3.2695': attribute type 4 has an invalid length. [ 741.364138][T15867] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2695'. [ 746.740532][ T5745] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 746.900985][ T5745] usb 2-1: Using ep0 maxpacket: 16 [ 746.906899][ T5745] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 746.906917][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.906928][ T5745] usb 2-1: Product: syz [ 746.906936][ T5745] usb 2-1: Manufacturer: syz [ 746.906943][ T5745] usb 2-1: SerialNumber: syz [ 746.952232][ T5745] usb 2-1: config 0 descriptor?? [ 747.033564][ T5745] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 747.229159][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 747.277217][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.277314][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.285635][ T5596] usb 2-1: USB disconnect, device number 18 [ 747.365271][T14497] usb 2-1: Failed to submit usb control message: -32 [ 747.365310][T14497] usb 2-1: unable to send the bmi data to the device: -32 [ 747.365326][T14497] usb 2-1: unable to get target info from device [ 747.365351][T14497] usb 2-1: could not get target info (-32) [ 747.396857][T14497] usb 2-1: could not probe fw (-32) [ 747.456577][T15927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2715'. [ 747.750301][T15927] 8021q: adding VLAN 0 to HW filter on device bond3 [ 748.029630][T15929] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 748.209023][T15929] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 748.705349][T15951] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2725'. [ 749.187518][T15961] loop4: detected capacity change from 0 to 128 [ 749.393722][T15966] loop9: detected capacity change from 0 to 128 [ 749.396408][T15966] ubifs: Unknown parameter ':î' [ 749.557871][ T37] audit: type=1804 audit(1778094325.119:549): pid=15968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2730" name="/newroot/101/file0" dev="tmpfs" ino=564 res=1 errno=0 [ 749.624662][ T37] audit: type=1800 audit(1778094325.199:550): pid=15967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2728" name="file1" dev="loop4" ino=1048662 res=0 errno=0 [ 750.251137][ T5596] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 750.410604][ T5596] usb 10-1: Using ep0 maxpacket: 16 [ 750.417235][ T5596] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 750.417266][ T5596] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 750.560711][ T5596] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 750.560742][ T5596] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.560762][ T5596] usb 10-1: Product: syz [ 750.560775][ T5596] usb 10-1: Manufacturer: syz [ 750.560788][ T5596] usb 10-1: SerialNumber: syz [ 750.689504][ T5596] usb 10-1: config 0 descriptor?? [ 750.797076][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2739'. [ 750.797092][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2739'. [ 750.814541][ T5596] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 750.814574][ T5596] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 751.388759][ T5596] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 751.398528][ T5596] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 751.808383][T15998] bond1: entered allmulticast mode [ 751.859274][T16000] macvlan2: entered promiscuous mode [ 751.859299][T16000] macvlan2: entered allmulticast mode [ 751.909719][T16000] bond1: (slave macvlan2): Opening slave failed [ 752.018619][ T5596] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 752.183318][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2745'. [ 752.183340][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2745'. [ 752.246012][ T5596] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 752.248516][ T5596] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 752.293119][ T5596] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 752.293550][ T5596] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 752.295097][ T5596] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 752.465850][ T5596] usb 10-1: USB disconnect, device number 19 [ 752.769676][T11997] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 754.987543][T16054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'. [ 755.238854][T16054] bond2: entered promiscuous mode [ 755.246435][T16054] 8021q: adding VLAN 0 to HW filter on device bond2 [ 755.512766][ T9] kernel read not supported for file [fscontext] (pid: 9 comm: kworker/0:0) [ 755.546188][T16060] 8021q: adding VLAN 0 to HW filter on device bond2 [ 755.546833][T16060] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 755.567590][T16060] bond2: (slave sit1): Error -95 calling set_mac_address [ 755.732029][ T37] audit: type=1326 audit(1778094331.309:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.0.2767" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 755.732077][ T37] audit: type=1326 audit(1778094331.309:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.0.2767" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 755.759469][T16075] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 755.759486][T16075] IPv6: NLM_F_CREATE should be set when creating new route [ 755.795713][ T37] audit: type=1326 audit(1778094331.369:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.0.2767" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 755.796341][ T37] audit: type=1326 audit(1778094331.369:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.0.2767" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 755.796382][ T37] audit: type=1326 audit(1778094331.369:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.0.2767" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7ffc0000 [ 755.970629][ T6492] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 756.132976][ T6492] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 756.133011][ T6492] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 756.133056][ T6492] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 756.133082][ T6492] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.211888][T16070] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 756.239447][ T6492] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 756.276174][ T37] audit: type=1326 audit(1778094331.849:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16083 comm="syz.0.2772" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb399ecdd9 code=0x7fc00000 [ 756.327410][ T37] audit: type=1326 audit(1778094331.899:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16083 comm="syz.0.2772" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feb399ecdd9 code=0x7fc00000 [ 756.711278][ T9] usb 10-1: USB disconnect, device number 20 [ 756.781001][T11997] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 756.781359][T11997] Bluetooth: hci4: Injecting HCI hardware error event [ 756.827255][ T5620] Bluetooth: hci4: hardware error 0x00 [ 756.886851][T16075] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.965586][T16075] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.028377][T16075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.407842][T16091] loop9: detected capacity change from 0 to 40427 [ 758.408781][T16091] f2fs: Unknown parameter '+' [ 759.340789][ T5620] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 759.905838][T14489] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.924404][ T67] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.924454][ T67] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.924490][ T67] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.990561][ T9942] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 760.215955][ T9942] usb 10-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 760.215982][ T9942] usb 10-1: config 17 has 0 interfaces, different from the descriptor's value: 1 [ 760.216025][ T9942] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 760.216048][ T9942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.414349][T16136] fuse: fd is not a fuse device [ 760.682603][ T9] usb 10-1: USB disconnect, device number 21 [ 760.813806][ T5620] Bluetooth: hci2: connection err: -111 [ 764.325941][ T9942] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 764.490799][ T9942] usb 10-1: Using ep0 maxpacket: 32 [ 764.492853][ T9942] usb 10-1: config index 0 descriptor too short (expected 3659, got 75) [ 764.492879][ T9942] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.498175][ T9942] usb 10-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 764.498205][ T9942] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.498224][ T9942] usb 10-1: Product: syz [ 764.498238][ T9942] usb 10-1: Manufacturer: syz [ 764.498252][ T9942] usb 10-1: SerialNumber: syz [ 764.609171][ T9942] usb 10-1: config 0 descriptor?? [ 764.953833][ T9942] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 766.607860][ T5745] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 766.813825][ T5745] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 766.813852][ T5745] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 766.813882][ T5745] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 766.813933][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.045712][T16209] fuse: fd is not a fuse device [ 767.650032][T16196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.672774][T16196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.017215][ T9942] usb 10-1: USB disconnect, device number 22 [ 768.541562][T16237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.545576][T16237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.636039][T16271] ipip0: entered promiscuous mode [ 770.636063][T16271] ipip0: entered allmulticast mode [ 771.029381][T16275] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 771.180757][ T5745] page_pool_release_retry() stalled pool shutdown: id 160, 18 inflight 60 sec [ 771.349471][T16279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2847'. [ 772.159884][T16299] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 772.404501][T16307] bond0: (slave bridge0): Releasing backup interface [ 772.622929][T16321] netlink: 'syz.0.2863': attribute type 10 has an invalid length. [ 772.631955][T16307] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.650813][T16307] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.738863][T16307] bond0: (slave team0): Releasing backup interface [ 772.777615][T16307] bridge_slave_0: left allmulticast mode [ 772.777638][T16307] bridge_slave_0: left promiscuous mode [ 772.777833][T16307] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.856870][T16307] bridge_slave_1: left allmulticast mode [ 772.856903][T16307] bridge_slave_1: left promiscuous mode [ 772.857143][T16307] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.091583][T16307] bond0: (slave bond_slave_0): Releasing backup interface [ 773.202294][T16307] bond0: (slave bond_slave_1): Releasing backup interface [ 773.306586][T16307] team0: Port device team_slave_1 removed [ 773.321120][T16307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.321138][T16307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.406012][T16307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.406031][T16307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.452731][T16307] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 773.720540][T16321] syz_tun: entered promiscuous mode [ 773.820105][T16321] team0: Port device syz_tun removed [ 775.580645][ T5620] Bluetooth: hci2: Unknown advertising packet type: 0x19 [ 775.580668][ T5620] Bluetooth: hci2: Unknown advertising packet type: 0x1f [ 779.840538][ T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 780.013237][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 780.024845][ T43] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 780.024930][ T43] usb 2-1: config 0 has no interface number 0 [ 780.024976][ T43] usb 2-1: config 0 interface 184 has no altsetting 0 [ 780.300914][ T43] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 780.300946][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.300966][ T43] usb 2-1: Product: syz [ 780.300981][ T43] usb 2-1: Manufacturer: syz [ 780.300995][ T43] usb 2-1: SerialNumber: syz [ 780.330648][ T43] usb 2-1: config 0 descriptor?? [ 781.145359][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 781.145391][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 781.145409][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 781.145689][ T43] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 781.649108][ T5745] usb 2-1: USB disconnect, device number 19 [ 782.774244][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2914'. [ 782.774268][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2914'. [ 783.489831][T16495] binder: 16494:16495 ioctl c0306201 200000000080 returned -14 [ 783.501858][T16495] binder: 16494:16495 ioctl c0306201 2000000003c0 returned -14 [ 786.719864][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 787.156253][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 787.171800][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 787.415865][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 787.416367][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 789.299813][T16571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.302471][T16571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.618349][T16584] fuse: fd is not a fuse device [ 790.233095][T16594] loop9: detected capacity change from 0 to 128 [ 790.235552][T16594] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 790.288614][ T37] audit: type=1804 audit(1778094365.859:558): pid=16594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2954" name="/newroot/153/file1/bus" dev="loop9" ino=1048663 res=1 errno=0 [ 790.931458][T16601] netlink: 'syz.1.2958': attribute type 11 has an invalid length. [ 791.287964][T14466] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 791.520460][ T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 791.691136][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 791.696555][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 791.698280][ T43] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 791.729682][ T43] usb 2-1: string descriptor 0 read error: -22 [ 791.729817][ T43] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 791.729841][ T43] usb 2-1: New USB device strings: Mfr=132, Product=132, SerialNumber=3 [ 791.787014][ T43] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 792.736968][ T43] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 794.809979][ T43] usb 2-1: USB disconnect, device number 20 [ 795.042882][T16652] binder: 16650:16652 ioctl c0306201 200000000080 returned -14 [ 795.046916][T16652] binder: 16650:16652 ioctl c0306201 2000000003c0 returned -14 [ 796.698004][T16681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2976'. [ 796.817987][T16687] overlayfs: failed to clone upperpath [ 797.366397][T16694] sctp: [Deprecated]: syz.0.2981 (pid 16694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 797.366397][T16694] Use struct sctp_sack_info instead [ 799.175648][T16722] loop9: detected capacity change from 0 to 2048 [ 799.363314][T16722] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.363459][T16722] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.126428][T16747] zonefs (nullb0) ERROR: Not a zoned block device [ 800.305556][T16731] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 800.326549][T16731] EXT4-fs (loop9): Remounting filesystem read-only [ 800.427451][T16738] syz_tun: left promiscuous mode [ 801.000861][T13438] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.273753][T16738] bond1: left promiscuous mode [ 802.618870][T16755] loop4: detected capacity change from 0 to 32768 [ 802.665210][T16755] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 802.797459][T16769] netlink: 'syz.9.3003': attribute type 1 has an invalid length. [ 803.116476][T16769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 803.386821][T16782] binder_alloc: 16781: binder_alloc_buf, no vma [ 803.519143][T16755] XFS (loop4): Ending clean mount [ 804.807879][T16790] loop9: detected capacity change from 0 to 512 [ 804.833609][T16790] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 805.915791][ T5616] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 805.939640][T16790] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 805.970938][ C1] EXT4-fs (loop9): initial error at time 1778094381: ext4_mb_generate_buddy:1317 [ 805.970968][ C1] EXT4-fs (loop9): last error at time 1778094381: ext4_mb_generate_buddy:1317 [ 806.032405][T16790] Quota error (device loop9): write_blk: dquota write failed [ 806.032427][T16790] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 806.032529][T16790] Quota error (device loop9): write_blk: dquota write failed [ 806.032638][T16790] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 806.032689][T16790] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.3008: Failed to acquire dquot type 1 [ 806.032716][T16790] loop9: lost filesystem error report for type 5 error -28 [ 806.207887][T16790] EXT4-fs (loop9): 1 truncate cleaned up [ 806.227284][T16790] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.929807][ T9] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 808.703772][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.703844][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.083387][T13438] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.180847][ T9] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 810.241390][T16841] netlink: 'syz.4.3025': attribute type 1 has an invalid length. [ 810.594412][T16844] bond4: entered promiscuous mode [ 810.605678][T16844] bond4: entered allmulticast mode [ 810.606666][T16844] 8021q: adding VLAN 0 to HW filter on device bond4 [ 810.662535][ T9] usb 10-1: config index 0 descriptor too short (expected 16557, got 1934) [ 810.662563][ T9] usb 10-1: config 108 has an invalid descriptor of length 0, skipping remainder of the config [ 810.662581][ T9] usb 10-1: config 108 has 0 interfaces, different from the descriptor's value: 8 [ 810.664899][ T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 810.664927][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.664946][ T9] usb 10-1: Product: syz [ 810.664960][ T9] usb 10-1: Manufacturer: syz [ 810.664974][ T9] usb 10-1: SerialNumber: syz [ 810.698685][ T57] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 810.712639][T16850] bridge3: entered promiscuous mode [ 810.712961][T16850] bridge3: entered allmulticast mode [ 810.880226][T16850] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 811.017445][ T9] usb 10-1: USB disconnect, device number 24 [ 811.128254][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3031'. [ 811.135135][T14455] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 812.438698][T16879] loop9: detected capacity change from 0 to 512 [ 812.483376][T16879] EXT4-fs (loop9): orphan cleanup on readonly fs [ 812.483477][T16879] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #4: comm syz.9.3035: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 812.483516][T16879] loop9: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 812.489391][T16879] EXT4-fs error (device loop9): ext4_quota_enable:7228: comm syz.9.3035: Bad quota inode: 4, type: 1 [ 812.489424][T16879] loop9: lost filesystem error report for type 5 error -117 [ 812.489892][T16879] EXT4-fs warning (device loop9): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 812.492279][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 812.492298][ C0] EXT4-fs (loop9): last error at time 1778094388: ext4_quota_enable:7228 [ 812.851580][T16879] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 812.860014][T16879] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 812.933422][T16879] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 813.333305][T16879] EXT4-fs warning (device loop9): ext4_multi_mount_protect:328: MMP startup interrupted, failing mount [ 813.333305][T16879] [ 813.693643][T16892] overlayfs: failed to clone upperpath [ 813.705989][T13438] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.272845][ T823] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 814.430487][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 814.433541][ T823] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 814.433574][ T823] usb 2-1: config 1 interface 0 has no altsetting 0 [ 814.436143][ T823] usb 2-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.40 [ 814.436170][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.436186][ T823] usb 2-1: Product: syz [ 814.436194][ T823] usb 2-1: Manufacturer: syz [ 814.436201][ T823] usb 2-1: SerialNumber: syz [ 814.713869][T16923] tipc: Failed to remove unknown binding: 66,0,0/4:636208087/636208089 [ 814.713903][T16923] tipc: Failed to remove unknown binding: 66,0,0/4:636208087/636208088 [ 814.778781][ T823] usbhid 2-1:1.0: can't add hid device: -71 [ 814.778882][ T823] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 814.821281][ T823] usb 2-1: USB disconnect, device number 21 [ 815.000598][T16923] tipc: Failed to remove unknown binding: 66,0,0/4:636208087/636208089 [ 815.000642][T16923] tipc: Failed to remove unknown binding: 66,0,0/4:636208087/636208088 [ 815.103789][T16914] loop4: detected capacity change from 0 to 32768 [ 815.104768][T16914] xfs: Unknown parameter 'mtpt' [ 815.421643][T16914] loop4: detected capacity change from 0 to 40427 [ 815.444314][T16914] F2FS-fs (loop4): invalid crc value [ 815.543549][T16914] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 815.700805][T16914] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 817.526004][T16944] gretap0: entered promiscuous mode [ 817.812748][T16953] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 818.099119][ T5616] syz-executor: attempt to access beyond end of device [ 818.099119][ T5616] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 818.187230][T16953] kvm: pic: non byte read [ 818.198738][T16953] kvm: pic: level sensitive irq not supported [ 818.199923][T16953] kvm: pic: non byte read [ 818.211271][T16953] kvm: pic: level sensitive irq not supported [ 818.211349][T16953] kvm: pic: non byte read [ 818.211656][T16953] kvm: pic: level sensitive irq not supported [ 818.211708][T16953] kvm: pic: non byte read [ 818.211940][T16953] kvm: pic: level sensitive irq not supported [ 818.218734][T16953] kvm: pic: non byte read [ 818.274159][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 818.274189][ T5616] Tainted: [L]=SOFTLOCKUP [ 818.274196][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 818.274208][ T5616] Call Trace: [ 818.274215][ T5616] [ 818.274223][ T5616] dump_stack_lvl+0xe8/0x150 [ 818.274254][ T5616] f2fs_stop_checkpoint+0x383/0x540 [ 818.274283][ T5616] f2fs_write_end_io+0x1274/0x1740 [ 818.274337][ T5616] __submit_merged_bio+0x256/0x6a0 [ 818.274368][ T5616] __submit_merged_write_cond+0x3c9/0x4e0 [ 818.274399][ T5616] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 818.274444][ T5616] f2fs_write_data_pages+0x287e/0x34f0 [ 818.274504][ T5616] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 818.274575][ T5616] ? do_raw_spin_lock+0x12b/0x2f0 [ 818.274614][ T5616] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 818.274637][ T5616] ? lockdep_hardirqs_on+0x7a/0x110 [ 818.274656][ T5616] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 818.274676][ T5616] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 818.274700][ T5616] ? reacquire_held_locks+0x104/0x190 [ 818.274721][ T5616] ? rt_spin_lock+0x1e0/0x400 [ 818.274752][ T5616] ? rt_spin_unlock+0x14f/0x200 [ 818.274780][ T5616] ? rt_spin_unlock+0x160/0x200 [ 818.274803][ T5616] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 818.274830][ T5616] do_writepages+0x32e/0x550 [ 818.274854][ T5616] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 818.274881][ T5616] ? rt_spin_unlock+0x14f/0x200 [ 818.274915][ T5616] filemap_fdatawrite+0x1ec/0x2f0 [ 818.274943][ T5616] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 818.274962][ T5616] ? __lock_acquire+0x6b5/0x2d10 [ 818.275013][ T5616] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 818.275047][ T5616] ? rt_spin_unlock+0x160/0x200 [ 818.275075][ T5616] f2fs_sync_dirty_inodes+0x30e/0x830 [ 818.275115][ T5616] f2fs_write_checkpoint+0x9df/0x26a0 [ 818.275141][ T5616] ? __lock_acquire+0x6b5/0x2d10 [ 818.275188][ T5616] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 818.275264][ T5616] kill_f2fs_super+0x314/0x730 [ 818.275297][ T5616] ? __pfx_kill_f2fs_super+0x10/0x10 [ 818.275343][ T5616] ? lockdep_hardirqs_on+0x7a/0x110 [ 818.275376][ T5616] deactivate_locked_super+0xbc/0x130 [ 818.275404][ T5616] cleanup_mnt+0x437/0x4d0 [ 818.275429][ T5616] ? _raw_spin_unlock_irq+0x23/0x50 [ 818.275456][ T5616] task_work_run+0x1d9/0x270 [ 818.275481][ T5616] ? __pfx_task_work_run+0x10/0x10 [ 818.275513][ T5616] exit_to_user_mode_loop+0xed/0x4d0 [ 818.275531][ T5616] ? rcu_is_watching+0x15/0xb0 [ 818.275554][ T5616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.275571][ T5616] ? do_syscall_64+0x33e/0xf80 [ 818.275589][ T5616] ? trace_irq_disable+0x3b/0x140 [ 818.275615][ T5616] ? clear_bhb_loop+0x40/0x90 [ 818.275638][ T5616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.275672][ T5616] [ 818.289759][ T5616] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 818.474765][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 818.474799][ T5616] Tainted: [L]=SOFTLOCKUP [ 818.474806][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 818.474817][ T5616] Call Trace: [ 818.474825][ T5616] [ 818.474833][ T5616] dump_stack_lvl+0xe8/0x150 [ 818.474861][ T5616] f2fs_stop_checkpoint+0x383/0x540 [ 818.474888][ T5616] f2fs_write_end_io+0x1274/0x1740 [ 818.474933][ T5616] __submit_merged_bio+0x256/0x6a0 [ 818.474962][ T5616] __submit_merged_write_cond+0x3c9/0x4e0 [ 818.474992][ T5616] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 818.475036][ T5616] f2fs_write_data_pages+0x287e/0x34f0 [ 818.475095][ T5616] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 818.475166][ T5616] ? do_raw_spin_lock+0x12b/0x2f0 [ 818.475204][ T5616] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 818.475226][ T5616] ? lockdep_hardirqs_on+0x7a/0x110 [ 818.475245][ T5616] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 818.475264][ T5616] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 818.475297][ T5616] ? reacquire_held_locks+0x104/0x190 [ 818.475318][ T5616] ? rt_spin_lock+0x1e0/0x400 [ 818.475348][ T5616] ? rt_spin_unlock+0x14f/0x200 [ 818.475375][ T5616] ? rt_spin_unlock+0x160/0x200 [ 818.475397][ T5616] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 818.475424][ T5616] do_writepages+0x32e/0x550 [ 818.475448][ T5616] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 818.475475][ T5616] ? rt_spin_unlock+0x14f/0x200 [ 818.475507][ T5616] filemap_fdatawrite+0x1ec/0x2f0 [ 818.475535][ T5616] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 818.475555][ T5616] ? __lock_acquire+0x6b5/0x2d10 [ 818.475606][ T5616] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 818.475638][ T5616] ? rt_spin_unlock+0x160/0x200 [ 818.475665][ T5616] f2fs_sync_dirty_inodes+0x30e/0x830 [ 818.475705][ T5616] f2fs_write_checkpoint+0x9df/0x26a0 [ 818.475729][ T5616] ? __lock_acquire+0x6b5/0x2d10 [ 818.475776][ T5616] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 818.475851][ T5616] kill_f2fs_super+0x314/0x730 [ 818.475882][ T5616] ? __pfx_kill_f2fs_super+0x10/0x10 [ 818.475919][ T5616] ? lockdep_hardirqs_on+0x7a/0x110 [ 818.475951][ T5616] deactivate_locked_super+0xbc/0x130 [ 818.475976][ T5616] cleanup_mnt+0x437/0x4d0 [ 818.476001][ T5616] ? _raw_spin_unlock_irq+0x23/0x50 [ 818.476023][ T5616] task_work_run+0x1d9/0x270 [ 818.476044][ T5616] ? __pfx_task_work_run+0x10/0x10 [ 818.476075][ T5616] exit_to_user_mode_loop+0xed/0x4d0 [ 818.476092][ T5616] ? rcu_is_watching+0x15/0xb0 [ 818.476115][ T5616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.476134][ T5616] ? do_syscall_64+0x33e/0xf80 [ 818.476152][ T5616] ? trace_irq_disable+0x3b/0x140 [ 818.476182][ T5616] ? clear_bhb_loop+0x40/0x90 [ 818.476206][ T5616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.476240][ T5616] [ 818.476259][ T5616] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 820.592385][T16983] fuse: fd is not a fuse device [ 820.658949][T16984] loop9: detected capacity change from 0 to 2048 [ 821.658470][T16994] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 823.581570][T17023] netlink: 1343 bytes leftover after parsing attributes in process `syz.1.3078'. [ 825.622212][T17067] netlink: 'syz.0.3084': attribute type 10 has an invalid length. [ 825.655240][T17067] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.655645][T17067] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.708514][T17073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3084'. [ 825.824438][T17067] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.827929][T17067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.828307][T17067] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.828494][T17067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.066003][T17067] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 826.067005][T17073] bridge_slave_1: left allmulticast mode [ 826.067029][T17073] bridge_slave_1: left promiscuous mode [ 826.067245][T17073] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.211739][T17073] bridge_slave_0: left allmulticast mode [ 826.211774][T17073] bridge_slave_0: left promiscuous mode [ 826.213935][T17073] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.532053][T17073] bond0: (slave bridge0): Releasing backup interface [ 826.698011][T17084] bond2: entered allmulticast mode [ 833.104603][ T6492] page_pool_release_retry() stalled pool shutdown: id 160, 18 inflight 122 sec [ 836.244990][T17202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3125'. [ 836.392431][T17209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3125'. [ 847.595487][T17284] loop4: detected capacity change from 0 to 2048 [ 847.625119][T17284] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 847.939765][T17292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3151'. [ 849.468783][T17310] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 851.293572][T17333] loop9: detected capacity change from 0 to 2048 [ 851.308526][T17333] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 851.669022][T17336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3165'. [ 853.979248][T17341] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 853.979299][T17341] overlayfs: failed to set xattr on upper [ 853.979308][T17341] overlayfs: ...falling back to redirect_dir=nofollow. [ 853.979316][T17341] overlayfs: ...falling back to index=off. [ 853.979323][T17341] overlayfs: ...falling back to uuid=null. [ 854.177434][T17343] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 854.355485][T17366] netlink: 'syz.4.3174': attribute type 4 has an invalid length. [ 854.471297][T17370] binder_alloc: 17369: binder_alloc_buf size 8 failed, no address space [ 854.471510][T17370] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 856.498261][T17396] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 856.803630][T17403] kernel profiling enabled (shift: 9) [ 857.250442][ T5596] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 858.472452][ T5596] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 858.472509][ T5596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.472535][ T5596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.472556][ T5596] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 858.473958][ T5596] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 858.473986][ T5596] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 858.474006][ T5596] usb 2-1: Manufacturer: syz [ 858.559787][ T5596] usb 2-1: config 0 descriptor?? [ 859.116572][ T5596] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 859.755930][ T37] audit: type=1800 audit(1778094435.329:559): pid=17437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3199" name="file1" dev="overlay" ino=3755 res=0 errno=0 [ 859.903779][ T5596] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 860.311089][ T5596] usb 2-1: USB disconnect, device number 22 [ 860.412848][T17443] fido_id[17443]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 862.360609][ T5745] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 863.468791][ T5745] usb 10-1: Using ep0 maxpacket: 32 [ 863.545620][ T5745] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 863.545650][ T5745] usb 10-1: config 0 has no interface number 0 [ 863.545712][ T5745] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 863.574368][ T5745] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 863.574399][ T5745] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.574419][ T5745] usb 10-1: Product: syz [ 863.574433][ T5745] usb 10-1: Manufacturer: syz [ 863.574446][ T5745] usb 10-1: SerialNumber: syz [ 863.693714][ T5745] usb 10-1: config 0 descriptor?? [ 863.695974][T17457] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 863.938813][T17457] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 864.412403][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803ae00800: rx timeout, send abort [ 864.937282][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803ae01c00: rx timeout, send abort [ 864.937334][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803ae00800: abort rx timeout. Force session deactivation [ 865.187452][ T5745] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 865.187711][ T5745] asix 10-1:0.188: probe with driver asix failed with error -32 [ 866.227081][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803ae01c00: abort rx timeout. Force session deactivation [ 866.308512][ T5596] usb 10-1: USB disconnect, device number 25 [ 867.643309][T17512] loop4: detected capacity change from 0 to 128 [ 867.662503][T17508] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 867.942362][T17518] team0: entered promiscuous mode [ 867.942385][T17518] team_slave_1: entered promiscuous mode [ 868.048503][T17518] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 868.068626][T17518] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 870.144460][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.144550][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.450485][ T43] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 870.700520][ T43] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 870.700548][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.700567][ T43] usb 2-1: Product: syz [ 870.700580][ T43] usb 2-1: Manufacturer: syz [ 870.700594][ T43] usb 2-1: SerialNumber: syz [ 870.709032][ T43] usb 2-1: config 0 descriptor?? [ 871.851355][ T43] usb 2-1: Firmware: major: 226, minor: 19, hardware type: UNKNOWN (46) [ 872.050217][ T43] usb 2-1: Firmware: build  [ 872.252263][ T43] usb 2-1: no permanent extended address found, random address set [ 872.252298][ T43] usb 2-1: atusb_probe: initialization failed, error = -524 [ 872.308212][ T43] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 872.364551][T17580] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3247'. [ 872.409808][T17580] ip6gre1: entered promiscuous mode [ 872.409824][T17580] ip6gre1: entered allmulticast mode [ 872.463041][ T5596] usb 2-1: USB disconnect, device number 23 [ 872.506298][T17580] netlink: 'syz.9.3247': attribute type 6 has an invalid length. [ 872.506317][T17580] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3247'. [ 873.442730][T17585] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 873.442766][T17585] overlayfs: failed to set xattr on upper [ 873.442775][T17585] overlayfs: ...falling back to redirect_dir=nofollow. [ 873.442783][T17585] overlayfs: ...falling back to index=off. [ 873.442791][T17585] overlayfs: ...falling back to uuid=null. [ 873.442809][T17585] overlayfs: maximum fs stacking depth exceeded [ 874.528463][T17604] fuse: fd is not a fuse device [ 875.356532][T17624] loop9: detected capacity change from 0 to 32768 [ 875.371851][T17624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3266 (17624) [ 876.442648][T17624] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 876.442684][T17624] BTRFS info (device loop9): using crc32c checksum algorithm [ 876.879438][T17624] BTRFS info (device loop9): enabling ssd optimizations [ 876.879463][T17624] BTRFS info (device loop9): turning on flush-on-commit [ 876.879477][T17624] BTRFS info (device loop9): enabling free space tree [ 876.879485][T17624] BTRFS info (device loop9): enabling auto defrag [ 876.879495][T17624] BTRFS info (device loop9): use lzo compression, level 1 [ 876.879505][T17624] BTRFS info (device loop9): max_inline set to 4096 [ 877.764511][T13438] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 882.824455][T17705] loop4: detected capacity change from 0 to 40427 [ 882.874406][T17705] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 882.876163][T17705] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 882.878134][T17705] F2FS-fs (loop4): invalid crc value [ 882.878373][T17705] F2FS-fs (loop4): invalid crc value [ 882.878401][T17705] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 882.878437][T17705] INFO: trying to register non-static key. [ 882.878441][T17705] The code is fine but needs lockdep annotation, or maybe [ 882.878445][T17705] you didn't initialize this object before use? [ 882.878450][T17705] turning off the locking correctness validator. [ 882.878461][T17705] CPU: 0 UID: 0 PID: 17705 Comm: syz.4.3285 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 882.878477][T17705] Tainted: [L]=SOFTLOCKUP [ 882.878480][T17705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 882.878487][T17705] Call Trace: [ 882.878492][T17705] [ 882.878496][T17705] dump_stack_lvl+0xe8/0x150 [ 882.878514][T17705] assign_lock_key+0x133/0x150 [ 882.878528][T17705] register_lock_class+0xcc/0x2e0 [ 882.878546][T17705] __lock_acquire+0xad/0x2d10 [ 882.878565][T17705] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 882.878592][T17705] ? __lock_acquire+0x6b5/0x2d10 [ 882.878612][T17705] ? __lock_acquire+0x6b5/0x2d10 [ 882.878632][T17705] ? f2fs_exist_written_data+0x53/0x90 [ 882.878656][T17705] lock_acquire+0x106/0x350 [ 882.878674][T17705] ? f2fs_exist_written_data+0x53/0x90 [ 882.878700][T17705] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 882.878730][T17705] rt_spin_lock+0x83/0x400 [ 882.878747][T17705] ? f2fs_exist_written_data+0x53/0x90 [ 882.878762][T17705] ? __pfx_rt_spin_lock+0x10/0x10 [ 882.878775][T17705] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 882.878786][T17705] ? preempt_count_add+0x91/0x190 [ 882.878801][T17705] f2fs_exist_written_data+0x53/0x90 [ 882.878815][T17705] f2fs_drop_inode+0xda/0xbf0 [ 882.878826][T17705] iput+0x651/0xe80 [ 882.878840][T17705] f2fs_fill_super+0x6047/0x7850 [ 882.878863][T17705] get_tree_bdev_flags+0x431/0x4f0 [ 882.878882][T17705] ? __pfx_f2fs_fill_super+0x10/0x10 [ 882.878896][T17705] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 882.878913][T17705] vfs_get_tree+0x92/0x2a0 [ 882.878928][T17705] do_new_mount+0x341/0xd30 [ 882.878939][T17705] ? apparmor_capable+0x126/0x170 [ 882.878953][T17705] ? __pfx_do_new_mount+0x10/0x10 [ 882.878965][T17705] ? ns_capable+0x89/0xe0 [ 882.878979][T17705] ? user_path_at+0xd4/0x160 [ 882.878993][T17705] ? user_path_at+0xd4/0x160 [ 882.879007][T17705] __se_sys_mount+0x31d/0x420 [ 882.879020][T17705] ? __pfx___se_sys_mount+0x10/0x10 [ 882.879033][T17705] ? __x64_sys_mount+0x20/0xc0 [ 882.879044][T17705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.879055][T17705] do_syscall_64+0x15f/0xf80 [ 882.879065][T17705] ? trace_irq_disable+0x3b/0x140 [ 882.879080][T17705] ? clear_bhb_loop+0x40/0x90 [ 882.879091][T17705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.879101][T17705] RIP: 0033:0x7efe7504e04a [ 882.879112][T17705] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.879121][T17705] RSP: 002b:00007efe732a5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 882.879133][T17705] RAX: ffffffffffffffda RBX: 00007efe732a5ee0 RCX: 00007efe7504e04a [ 882.879140][T17705] RDX: 0000200000000140 RSI: 0000200000000000 RDI: 00007efe732a5ea0 [ 882.879147][T17705] RBP: 0000200000000140 R08: 00007efe732a5ee0 R09: 0000000000000000 [ 882.879154][T17705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 882.879161][T17705] R13: 00007efe732a5ea0 R14: 0000000000005551 R15: 0000200000000440 [ 882.879171][T17705]