last executing test programs: 14m37.717767096s ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 14m37.256161316s ago: executing program 2 (id=9): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private2, @in=@rand_addr=0x64010101, 0x4e22, 0x2000, 0x2, 0xd1e2, 0xa, 0xa0, 0x0, 0xa3}, {0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x7, 0x6, 0x3}, {0x3, 0xfffffffffffffffc, 0x0, 0xffffffffffff3826}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffd, 0x33}, 0x14, @in=@multicast1, 0xfffffffd, 0x4, 0x0, 0x0, 0x3, 0x7}}, 0xe8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 14m36.976571017s ago: executing program 2 (id=13): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030302c756d61736b3d30303030303030303030303030303030303030303030302c756e64656c6574652c6c6f6e6761642c73686f727461642c7569643d666f726765742c756e64656c6574652c696f636861727365743d757466382c73686f727461642c696f636861727365743d64656661756c742c7569643d666f726765742c6e6f7374726963742c73657373696f6e3d30303030303030303030303030303030303030302c706172746974696f6e3d30303030303030303030303030303030303030362c00b2e01f5c0b5c8fb2623d8f888e41dfceb3ecf959d23d90b071660660b17884bd109d37086024cf83fa"], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) creat(0x0, 0x80) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 14m36.634049472s ago: executing program 2 (id=16): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xa439, 0x80, 0x800002, 0x23b9}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 14m34.336847821s ago: executing program 2 (id=33): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x120, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x804) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="120100030a242bff800410d0e50c01"], 0x0) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m34.046098313s ago: executing program 32 (id=33): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x120, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x804) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="120100030a242bff800410d0e50c01"], 0x0) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13m33.848851072s ago: executing program 4 (id=421): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x300d10cc213f3597, 0x12, r0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x100000b, 0x4008032, r0, 0x3a471000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380), 0x1000a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0xeffb, 0x9) 13m33.805375493s ago: executing program 4 (id=423): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) 13m32.464703901s ago: executing program 4 (id=435): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m32.374143035s ago: executing program 4 (id=436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) 13m32.128828895s ago: executing program 4 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 13m31.204250685s ago: executing program 4 (id=447): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x6000) shmdt(0x0) 13m16.170947856s ago: executing program 33 (id=447): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x6000) shmdt(0x0) 13m8.831222459s ago: executing program 1 (id=587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000026c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) tee(r1, r5, 0x8f5, 0x100000000000000) write(r3, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) 13m8.546744851s ago: executing program 1 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 13m8.123366869s ago: executing program 1 (id=591): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000000), &(0x7f0000000540)={[&(0x7f00000003c0)=',$-\x00', &(0x7f0000000400)='):\x00', &(0x7f0000000580)=',!{\\](!([{+.$-))[\x00\x02.\xe3\x12-\xdcQ\xba\xb3^\x9e\b\r\xf7\x8b\xe9N\x8bP\x84I3k\xce\xaa\xa9\xfb1\xb7\xbf3\t\x8f\xf5\xec7\xe4\xa642O\xc8\x06\x15\x1d\x18\xe7\x89\x1c\x81(\xd7\xe1\x93\xa5\xa2\xfd\xc9\xdc\xa0t\t\x1c\xeb`\xab\xab^\xdd\xd0', &(0x7f0000000480)='@\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='-\x00']}, 0x100) 13m7.496931076s ago: executing program 1 (id=592): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) socket$nl_audit(0x10, 0x3, 0x9) write$UHID_CREATE(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x2000c000) write$UHID_CREATE(r1, &(0x7f0000000740)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/7, 0x7, 0x1, 0x3, 0x7, 0x3, 0xd2}}, 0x120) 13m5.823154268s ago: executing program 1 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x1774, &(0x7f0000000640)={0x0, 0x6005, 0x0, 0x1, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r4 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r4, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000d00)=ANY=[], 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) 13m5.257544782s ago: executing program 1 (id=600): openat(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x7}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x408cd, 0x0) msgget$private(0x0, 0x480) 13m4.793420692s ago: executing program 34 (id=600): openat(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x7}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x408cd, 0x0) msgget$private(0x0, 0x480) 12m38.770445352s ago: executing program 5 (id=697): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 12m38.708461974s ago: executing program 5 (id=698): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) socket$inet(0x2, 0x2, 0xd) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) r2 = epoll_create1(0x80000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x10000000}) rmdir(&(0x7f0000000280)='./file0\x00') 12m38.510288813s ago: executing program 5 (id=702): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x11) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") 12m35.429425444s ago: executing program 5 (id=717): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x80211, 0x0, 0xffffffffffffffd7, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) stat(&(0x7f0000000540)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 12m34.186268978s ago: executing program 5 (id=722): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='wchan\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000140)=""/181, 0xb5}], 0x1, 0x6, 0x1) 12m32.581249426s ago: executing program 5 (id=733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 12m31.686615794s ago: executing program 35 (id=733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 11m46.204796341s ago: executing program 7 (id=940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xfffffffc, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0xfffffff8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffff, 0x9, 0x3, 0xffffff2e}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0x1, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 11m45.789597769s ago: executing program 7 (id=943): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d63703836332c636f6465706167653d63703935302c747970653d3ae6f8f02c00"], 0x1, 0x2e5, &(0x7f0000000140)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x1db) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x5d9f61795f7ff7ff) 11m45.501992171s ago: executing program 7 (id=945): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f00000000c0)) 11m44.464308936s ago: executing program 7 (id=948): syz_mount_image$fuse(0x0, 0x0, 0x21000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x597, &(0x7f0000000bc0)="$eJzs3c9rHFUcAPDvm/xqm2pSEbT2YKBgC2rSpBVFBFusNw/+KHgSjElaSrdtaCLYWrGF+h/oHyB48yIei0hRD3r1JvgHSLFIzcVbZDYzcdvs5ke7ycTM5wOTzJu3w3uT5Zv35u17swHU1kj+I4vYHxGzKWKoJa83isyRpdf9fffq1MLdq1MpFhff+StFKo6Vr0/F78Hi5F0R8esPKR7rWVnu3OUr5yYbjZlLRXps/vzs2NzlK8+fPT95ZubMzIWJ8RfHXzh2dOLYka5c596I+Gn0ZO+N068d+Gbqq32ffvf1zRTHm8fjvuvolpEYWf6btMr/ri91u7CK9BTX0/oWp/zAzxVWinUr37++iHgihqKniPrcUHz2VqWVAzbVYopYBGoqiX+oqbIfkN//llu1PRJgq9w5sTQAUI7tLSzHf+/S2GDsao4N7FlILSMDS2N93RiZy8uYfSYN5Vts0jgc0N616xHxZLv2PzVjc7g5ip/Hf3ZP/GcR8WbxOz/+9gOWP3JfWvzD1nmY+H+/Jf4/eMDyxT8AAAAAAAB0z60TEfFcu8//suX5P9Fm/s9gRBzvQvlrf/6X3V5xUrtFdcCG3TkR8UpELKyY/5eVLxnuKVKPNOcD9KXTZxszRyLi0Yg4HH0DeXp8lTJGDvzS1zGvZf5fvuXll3MBi3rc7h2495zpyfnJh7lmYMmd6xFP9ebxn+Le+E/L7X9q0/7n/w9m11nG4slXf+yUt3b8A5tl8cuIQ23b//862Wn153OMNfsDY2WvYKWP37v5bafyxT9UJ2//96we/8Op9Xk9cxsv45M/f3+I+G/f/+9Pp5qPnOkvjn00OT9/aTyiP72x8vjExusMO1EZD2W85PF/+GD7+//V+v+7I+LaOss89f3rNzrlaf+hOnn8T2+o/d/4zsF3v/inU/nra/+PNdv0w8UR43+wuvUGaNX1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/oywi9kbKRpf3s2x0NGIwIh6PPVnj4tz8s6cvfnhhOs9rfv9/Vn7T79BSOpXf/z/ckp64L300IvZFxOc9u5vp0amLjemqLx4AAAAAAAAAAAAAAAAAAAC2icEO6/9zf/RUXTtg0/VWXQGgMuIf6kv8Q31tMP77NqsewNbT/kN9iX+oL/EP9SX+ob7y+N9VdSWASmj/AQAAAABgR9n39K3fUkRce3l3c8v1F3nm+cPOllVdAaAyHvED9WXqD9SXe3wgrZHfeXnAWmcCAAAAAAAAAAAAAN1yaL/1/1BX1v9DfVn/D/Vl/T/Ul3t8wPp/AAAAAAAAAAAAANj+5i5fOTfZaMxcqmJnoKhENaVvz52Bqt8UO1uwE9ujGqvtVPyPCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWPZvAAAA///B3PO2") mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x210145b, 0x0) mount$9p_xen(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) stat(0x0, &(0x7f0000000280)) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20004020}, 0x8011) 11m43.972901947s ago: executing program 7 (id=952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x28, 0x64, 0x0, 0xff08) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04000000080000002000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e0010000"], 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0x8090) 11m41.956903854s ago: executing program 7 (id=958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r3, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6, {0x4, 0x5, 0x1f, 0x3}}}}}}]}, 0x48}}, 0x0) 11m41.536767691s ago: executing program 36 (id=958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r3, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6, {0x4, 0x5, 0x1f, 0x3}}}}}}]}, 0x48}}, 0x0) 14.362756644s ago: executing program 6 (id=2318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x1, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)='|') r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$sock_bt_hci(r4, 0x400448e7, 0x0) 14.312475116s ago: executing program 8 (id=2319): syz_open_dev$usbfs(0x0, 0x800000001f7, 0x82) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 13.472963782s ago: executing program 0 (id=2321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r6) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) 13.396897945s ago: executing program 6 (id=2322): openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) epoll_create(0x50000) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1e6682, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x80, 0xa, 0x1, 0x1, 0x0, 0x7, 0x0}) keyctl$clear(0x7, 0x0) pipe(&(0x7f0000000040)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x240200, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x4000000000010046) bpf$PROG_LOAD(0x5, 0x0, 0x0) 13.059416849s ago: executing program 3 (id=2323): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x7, 0x1}]}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x30, 0x0, 0x1, 0x1}, 0x28) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@rand_addr=' \x01\x00', @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x0, 0x4e24, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x10000, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000002}, 0x8, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@data_err_ignore}], [{@dont_hash}, {@fowner_lt}, {@flag='rw'}, {@appraise}, {@uid_lt}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") open(&(0x7f0000000180)='./file1\x00', 0x64842, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) lseek(r3, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, 0x0) 12.34889368s ago: executing program 8 (id=2324): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x0, 0x0}) fcntl$setownex(r3, 0xf, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) 11.913858929s ago: executing program 0 (id=2325): r0 = socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb9e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendfile(r0, r0, &(0x7f0000000000)=0x2, 0x1422) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = socket$inet_tcp(0x2, 0x1, 0x0) kexec_load(0x0, 0x1, &(0x7f00000004c0)=[{0x0}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r5, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020ded4c9310457da979fa4388dd60154c2", 0x2a, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) 11.168909051s ago: executing program 6 (id=2326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x0) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x124) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621f22a5200", "3549ffff40bcffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0x9, 0x0, 0x9, 0xffffffff, 0x0, 0x4, "0ff8000000000000c5c6ff0717c3a86d", 0x4, 0x2, 0x5, 0xff, 0x0, 0x1, 0xff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44800}, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB='uid=forget,noadinicb,iocharset=koi8-u,gid=ignore,dmode=000000000000000000004,rootdir=00000000000000000005,iocharset=macinuit,nostrict,mode=00000000000000000004622,\x00'], 0x1, 0xc39, &(0x7f0000000240)="$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") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') 10.769661368s ago: executing program 8 (id=2327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@private0}}, 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r4, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r4, r4, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 10.769375358s ago: executing program 3 (id=2328): timer_create(0x0, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$sndpcmp(0x0, 0x1ff, 0x2000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x50424752, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='memory'}]}) setpgid(0x0, 0xffffffffffffffff) 10.612816114s ago: executing program 0 (id=2329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000f00)='./file2\x00', 0x1000000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030342c757466382c696f636861727365743d63703835372c616c6c6f775f7574696d653d30313737373737373737373733373737373737373737372c836f634ccb4fe865743d69736f383835392d362c6572726f72733d636f6e74696e75652c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',utf8,errors=continue,namecase=1,umask=00000000000000000000001,dmask=00000000000000000000001,mask=MAY_WRITE,dont_measure,obj_type=utf8,subj_user=,\x00'], 0x1, 0x1505, &(0x7f0000002c80)="$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") r4 = io_uring_setup(0x2311, &(0x7f0000000440)={0x0, 0xa05b, 0x1, 0x1, 0xfffffbff}) r5 = socket$inet(0x2, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, 0x0, 0x9) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000f07000)}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800003, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 9.954773143s ago: executing program 6 (id=2330): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) sendfile(r3, r3, 0x0, 0x40008) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fchdir(0xffffffffffffffff) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 6.084950859s ago: executing program 0 (id=2331): pipe(&(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161b01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {}, {}, {0x0, 0x0, 0xfffffffe}, 0x70bd26, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) getresuid(&(0x7f0000000080), 0x0, &(0x7f0000000100)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000280)='debugfs\x00', 0x1, 0x0) 5.954805954s ago: executing program 8 (id=2332): syz_open_dev$usbfs(0x0, 0x800000001f7, 0x82) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 4.89105875s ago: executing program 0 (id=2333): openat(0xffffffffffffff9c, 0x0, 0x107842, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x200, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@frag={{0x30}, {[0xfffffffe, 0xbb0], 0x101, 0x2a, 0x2}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e22, 0x4e21, 0x4e20, 0x4e24, 0x4e22, 0x4e21, 0x4e20, 0x4e21, 0x4e21, 0x4e21, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e23], [0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1e, 0x6, 0x4, 0x4e80, 'netbios-ns\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x400) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000000440), 0x1004) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000140)={[{@nomblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@data_err_ignore}, {@usrjquota}, {@dax_inode}]}, 0x0, 0x4e5, &(0x7f0000000980)="$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") 4.89084359s ago: executing program 3 (id=2334): syz_open_dev$cec(&(0x7f0000000280), 0x0, 0xc0240) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aa4a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x48}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538", 0x58}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[], 0x10}, 0x1, 0x7}, 0x20000884) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x5, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) fsopen(0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x3284b164842c97f7, 0x8014) 4.823298703s ago: executing program 8 (id=2335): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(0xffffffffffffffff, 0x409, 0x9c66edc32267ac72) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2a) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f00000006c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0x4f7}}, {@fat=@uid}, {@nodots}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x74}}, {@fat=@discard}, {}, {@dots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x1fe}}, {@fat=@nfs_stale_rw}, {@fat=@nfs_stale_rw}, {@dots}, {@fat=@sys_immutable}, {@fat=@tz_utc}, {@fat=@nocase}]}, 0x21, 0x23d, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 3.543932847s ago: executing program 0 (id=2336): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x22, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={0x0}, 0x0) syz_open_dev$media(0x0, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r5, 0x4}, 0x8) 2.507980912s ago: executing program 3 (id=2337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084522, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 2.485537583s ago: executing program 6 (id=2338): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) rseq(0x0, 0x0, 0x0, 0x0) unshare(0x8000000) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) 2.31592931s ago: executing program 8 (id=2339): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) write$binfmt_elf64(r3, 0x0, 0x78) 1.024475436s ago: executing program 3 (id=2340): socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket(0x10, 0x1, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) openat(0xffffffffffffffff, &(0x7f0000004280)='./file0\x00', 0x180, 0x41) 949.559779ms ago: executing program 6 (id=2341): pipe(&(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161b01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {}, {}, {0x0, 0x0, 0xfffffffe}, 0x70bd26, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) getresuid(&(0x7f0000000080), 0x0, &(0x7f0000000100)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000280)='debugfs\x00', 0x1, 0x0) 0s ago: executing program 3 (id=2342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(0x0, 0xfff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/15], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r5, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaba0180c200000008060001084006"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): neric 0003:0003:0000.0001: unknown main item tag 0x0 [ 225.682964][ T5808] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 225.694474][ T5808] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 225.709361][ T5808] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 225.756345][ T5808] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 225.773692][ T5808] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 225.811125][ T5808] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 225.829742][ T5808] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 225.874865][ T5808] hid-generic 0003:0003:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 226.024997][ T9007] fido_id[9007]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 226.059128][ T6073] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 226.093582][ T6073] em28xx 7-1:0.0: board has no eeprom [ 227.095621][ T6073] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 227.103504][ T6073] em28xx 7-1:0.0: dvb set to bulk mode. [ 227.136881][ T6082] em28xx 7-1:0.0: Binding DVB extension [ 228.204492][ T8975] em28xx 7-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 228.330003][ T6082] em28xx 7-1:0.0: Registering input extension [ 228.368487][ T6066] usb 7-1: USB disconnect, device number 2 [ 228.375259][ T6066] em28xx 7-1:0.0: Disconnecting em28xx [ 228.416195][ T6066] em28xx 7-1:0.0: Closing input extension [ 228.547430][ T6066] em28xx 7-1:0.0: Freeing device [ 229.620830][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.628732][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.655988][ T9043] bridge0: entered allmulticast mode [ 229.713736][ T9044] bridge_slave_1: left allmulticast mode [ 229.727886][ T9044] bridge_slave_1: left promiscuous mode [ 229.743309][ T9044] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.782876][ T9044] bridge_slave_0: left allmulticast mode [ 229.790252][ T9044] bridge_slave_0: left promiscuous mode [ 229.804671][ T9044] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.154075][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 230.326668][ T9055] veth0: entered promiscuous mode [ 230.374406][ T9054] veth0: left promiscuous mode [ 230.667168][ T9064] binder_alloc: 9062: binder_alloc_buf, no vma [ 233.591581][ T9102] mmap: syz.3.900 (9102) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 238.652655][ T9165] overlayfs: failed to clone upperpath [ 243.708887][ T9229] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 244.254283][ T9243] syzkaller0: entered promiscuous mode [ 244.270098][ T9243] syzkaller0: entered allmulticast mode [ 244.610246][ T9251] loop7: detected capacity change from 0 to 64 [ 246.011869][ T9265] loop7: detected capacity change from 0 to 1024 [ 246.068954][ T9265] EXT4-fs (loop7): orphan cleanup on readonly fs [ 246.112992][ T9265] EXT4-fs (loop7): 1 truncate cleaned up [ 246.129649][ T9265] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 248.122748][ T9276] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.328854][ T9194] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.575135][ T9194] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.757838][ T9194] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.871928][ T9194] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.358968][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.370804][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.382723][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.391577][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.407334][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 250.414850][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.609923][ T9316] tipc: Enabling of bearer rejected, failed to enable media [ 250.785513][ T9321] af_packet: tpacket_rcv: packet too big, clamped from 32769 to 4294967272. macoff=96 [ 251.452740][ T9321] bridge_slave_0: entered promiscuous mode [ 253.066966][ T9333] binder: 9329:9333 ioctl 0 200000000040 returned -22 [ 253.112993][ T5773] Bluetooth: hci0: command tx timeout [ 254.342030][ T9309] chnl_net:caif_netlink_parms(): no params data found [ 255.227953][ T5773] Bluetooth: hci0: command tx timeout [ 255.950231][ T9194] hsr_slave_0: left promiscuous mode [ 255.956362][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.962734][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.973414][ T9194] hsr_slave_1: left promiscuous mode [ 255.990705][ T9194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.998413][ T9194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.016376][ T9194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.023828][ T9194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.047176][ T9194] bridge_slave_1: left allmulticast mode [ 256.052886][ T9194] bridge_slave_1: left promiscuous mode [ 256.066711][ T9194] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.083425][ T9194] bridge_slave_0: left allmulticast mode [ 256.089486][ T9194] bridge_slave_0: left promiscuous mode [ 256.095245][ T9194] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.156234][ T9194] veth1_macvtap: left promiscuous mode [ 256.161844][ T9194] veth0_macvtap: left promiscuous mode [ 256.175654][ T9194] veth1_vlan: left promiscuous mode [ 256.181046][ T9194] veth0_vlan: left promiscuous mode [ 257.310646][ T5773] Bluetooth: hci0: command tx timeout [ 258.592063][ T9194] team0 (unregistering): Port device team_slave_1 removed [ 258.654745][ T9194] team0 (unregistering): Port device team_slave_0 removed [ 258.713531][ T9194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.824108][ T9194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.405134][ T5773] Bluetooth: hci0: command tx timeout [ 259.676713][ T9194] bond0 (unregistering): Released all slaves [ 260.201970][ T9394] random: crng reseeded on system resumption [ 261.092960][ T9309] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.105563][ T9309] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.112846][ T9309] bridge_slave_0: entered allmulticast mode [ 261.134943][ T9309] bridge_slave_0: entered promiscuous mode [ 261.168081][ T9309] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.195588][ T9309] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.202866][ T9309] bridge_slave_1: entered allmulticast mode [ 261.216814][ T9309] bridge_slave_1: entered promiscuous mode [ 261.223488][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 261.246434][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 261.882598][ T9309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.147089][ T9309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.769789][ T9309] team0: Port device team_slave_0 added [ 263.818313][ T9309] team0: Port device team_slave_1 added [ 264.014365][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.055272][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.142461][ T9309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.204614][ T9415] loop6: detected capacity change from 0 to 512 [ 264.216155][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.272881][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.378260][ T9309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.639991][ T9309] hsr_slave_0: entered promiscuous mode [ 264.676209][ T9309] hsr_slave_1: entered promiscuous mode [ 266.312329][ T9309] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 266.329984][ T9309] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 266.350463][ T9309] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 266.373439][ T9309] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 266.515101][ T9309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.539420][ T9309] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.566456][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.573692][ T9186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.590176][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.597409][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.134644][ T9309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.118132][ T9459] netlink: 'syz.3.1003': attribute type 11 has an invalid length. [ 268.368783][ T9309] veth0_vlan: entered promiscuous mode [ 268.398971][ T9309] veth1_vlan: entered promiscuous mode [ 268.497186][ T9309] veth0_macvtap: entered promiscuous mode [ 268.509116][ T9309] veth1_macvtap: entered promiscuous mode [ 268.528901][ T9309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.542295][ T9309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.802497][ T9309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.108525][ T9309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.151399][ T9309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.193911][ T9309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.238035][ T9309] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.273633][ T9309] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.289485][ T9309] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.301466][ T9309] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.980505][ T9477] omfs: Invalid superblock (0) [ 270.397515][ T9187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.405585][ T9187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.655143][ T9187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.664137][ T9187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.284497][ T9505] loop6: detected capacity change from 0 to 128 [ 276.063205][ T9532] loop8: detected capacity change from 0 to 1024 [ 277.284585][ T9553] loop8: detected capacity change from 0 to 128 [ 277.451469][ T9553] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.469753][ T9553] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 280.049021][ T9309] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.333632][ T9561] loop6: detected capacity change from 0 to 40427 [ 280.378067][ T9561] F2FS-fs (loop6): build fault injection attr: rate: 25, type: 0x7ffff [ 280.394723][ T9561] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x7698c [ 280.444952][ T9561] F2FS-fs (loop6): invalid crc value [ 280.476709][ T9561] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 280.494723][ T9561] F2FS-fs (loop6): Found nat_bits in checkpoint [ 280.574385][ T9561] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 280.599632][ T5773] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 280.893696][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1038'. [ 280.903493][ T9561] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 280.904992][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1038'. [ 280.953634][ T9561] F2FS-fs (loop6): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 281.043383][ T9561] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910 [ 281.148204][ T8072] bio_check_eod: 1 callbacks suppressed [ 281.148221][ T8072] syz-executor: attempt to access beyond end of device [ 281.148221][ T8072] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 281.185765][ T8072] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 281.203745][ T8072] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 283.468404][ T9613] random: crng reseeded on system resumption [ 286.851883][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1053'. [ 286.872146][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1053'. [ 287.480924][ T9644] ip6gretap0: entered promiscuous mode [ 287.490386][ T9644] syz_tun: entered promiscuous mode [ 287.503822][ T9644] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 287.550866][ T9644] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 287.897095][ T9658] CIFS: VFS: Malformed UNC in devname [ 287.919595][ T9659] tipc: Started in network mode [ 287.926343][ T9659] tipc: Node identity 664eb856222, cluster identity 4711 [ 287.940817][ T9659] tipc: Enabled bearer , priority 0 [ 287.956040][ T9659] syzkaller0: entered promiscuous mode [ 287.962184][ T9659] syzkaller0: entered allmulticast mode [ 288.621233][ T9659] tipc: Resetting bearer [ 288.663851][ T9656] tipc: Resetting bearer [ 288.751420][ T9656] tipc: Disabling bearer [ 290.238563][ T9688] loop8: detected capacity change from 0 to 16 [ 290.280181][ T9688] erofs: (device loop8): mounted with root inode @ nid 36. [ 290.332419][ T9673] syz.3.1065: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 290.352385][ T9688] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 290.381186][ T9673] CPU: 1 PID: 9673 Comm: syz.3.1065 Not tainted syzkaller #0 [ 290.388612][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.398670][ T9673] Call Trace: [ 290.401937][ T9673] [ 290.404861][ T9673] dump_stack_lvl+0x16c/0x230 [ 290.409532][ T9673] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 290.415158][ T9673] ? show_regs_print_info+0x20/0x20 [ 290.420349][ T9673] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 290.425997][ T9673] warn_alloc+0x210/0x300 [ 290.430318][ T9673] ? zone_watermark_ok_safe+0x230/0x230 [ 290.435940][ T9673] ? _raw_spin_unlock+0x28/0x40 [ 290.440783][ T9673] ? __kmem_cache_free+0xba/0x1f0 [ 290.445816][ T9673] __vmalloc_node_range+0x662/0x1320 [ 290.451101][ T9673] ? free_vm_area+0x50/0x50 [ 290.455590][ T9673] ? kvmalloc_node+0x70/0x180 [ 290.460252][ T9673] ? rcu_is_watching+0x15/0xb0 [ 290.464998][ T9673] ? kvmalloc_node+0x70/0x180 [ 290.469659][ T9673] ? trace_kmalloc+0x1f/0xa0 [ 290.474234][ T9673] kvmalloc_node+0x13f/0x180 [ 290.478810][ T9673] ? xp_alloc_tx_descs+0x68/0xc0 [ 290.483736][ T9673] xp_alloc_tx_descs+0x68/0xc0 [ 290.488491][ T9673] xsk_bind+0xa11/0xc70 [ 290.492647][ T9673] __sys_bind+0x31a/0x410 [ 290.496981][ T9673] ? __ia32_sys_socketpair+0xb0/0xb0 [ 290.502299][ T9673] __x64_sys_bind+0x7a/0x90 [ 290.506797][ T9673] do_syscall_64+0x55/0xb0 [ 290.511287][ T9673] ? clear_bhb_loop+0x40/0x90 [ 290.515948][ T9673] ? clear_bhb_loop+0x40/0x90 [ 290.520637][ T9673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.526517][ T9673] RIP: 0033:0x7fc39678f749 [ 290.530929][ T9673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.550547][ T9673] RSP: 002b:00007fc39769a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 290.558958][ T9673] RAX: ffffffffffffffda RBX: 00007fc3969e6090 RCX: 00007fc39678f749 [ 290.566923][ T9673] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 290.574879][ T9673] RBP: 00007fc396813f91 R08: 0000000000000000 R09: 0000000000000000 [ 290.582841][ T9673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.590806][ T9673] R13: 00007fc3969e6128 R14: 00007fc3969e6090 R15: 00007ffe673ece18 [ 290.598784][ T9673] [ 290.610201][ T9688] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 290.617967][ T9673] Mem-Info: [ 290.622373][ T9688] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 290.637524][ T9673] active_anon:10451 inactive_anon:0 isolated_anon:0 [ 290.637524][ T9673] active_file:16096 inactive_file:40001 isolated_file:0 [ 290.637524][ T9673] unevictable:768 dirty:156 writeback:0 [ 290.637524][ T9673] slab_reclaimable:11356 slab_unreclaimable:97142 [ 290.637524][ T9673] mapped:25492 shmem:5500 pagetables:600 [ 290.637524][ T9673] sec_pagetables:0 bounce:0 [ 290.637524][ T9673] kernel_misc_reclaimable:0 [ 290.637524][ T9673] free:1330915 free_pcp:12007 free_cma:0 [ 290.644791][ T9690] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 290.729506][ T9690] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 290.750195][ T9690] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 290.760198][ T9673] Node 0 active_anon:41804kB inactive_anon:0kB active_file:64384kB inactive_file:159800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101968kB dirty:620kB writeback:0kB shmem:20464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13532kB pagetables:2400kB sec_pagetables:0kB all_unreclaimable? no [ 290.794649][ T9673] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 290.843173][ T9673] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.872869][ T9673] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 290.880295][ T9673] Node 0 DMA32 free:1413184kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:41804kB inactive_anon:0kB active_file:64384kB inactive_file:158504kB unevictable:1536kB writepending:620kB present:3129332kB managed:2589640kB mlocked:0kB bounce:0kB free_pcp:29612kB local_pcp:10260kB free_cma:0kB [ 290.912420][ T9673] lowmem_reserve[]: 0 0 1 1 1 [ 290.922826][ T9673] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 290.952790][ T9673] lowmem_reserve[]: 0 0 0 0 0 [ 290.960104][ T9673] Node 1 Normal free:3894400kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19040kB local_pcp:12736kB free_cma:0kB [ 290.994916][ T9673] lowmem_reserve[]: 0 0 0 0 0 [ 291.001267][ T9673] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 291.016263][ T9673] Node 0 DMA32: 266*4kB (UME) 681*8kB (ME) 629*16kB (UM) 487*32kB (ME) 1277*64kB (UME) 571*128kB (UME) 173*256kB (UME) 92*512kB (UME) 34*1024kB (UM) 7*2048kB (UME) 265*4096kB (UM) = 1412960kB [ 291.037047][ T9673] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 291.064693][ T9673] Node 1 Normal: 258*4kB (UME) 65*8kB (UME) 37*16kB (UME) 135*32kB (UME) 25*64kB (UE) 6*128kB (UME) 2*256kB (UE) 2*512kB (ME) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3894400kB [ 291.083598][ T9673] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.098758][ T9673] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.109840][ T9673] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.119673][ T9673] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.129185][ T9673] 61596 total pagecache pages [ 291.134126][ T9673] 0 pages in swap cache [ 291.138432][ T9673] Free swap = 124704kB [ 291.142678][ T9673] Total swap = 124996kB [ 291.147245][ T9673] 2097051 pages RAM [ 291.151253][ T9673] 0 pages HighMem/MovableOnly [ 291.156400][ T9673] 416127 pages reserved [ 291.161046][ T9673] 0 pages cma reserved [ 291.179891][ T9685] tipc: Started in network mode [ 291.193254][ T9685] tipc: Node identity 4, cluster identity 4711 [ 291.219889][ T9685] tipc: Node number set to 4 [ 294.088363][ T9729] tipc: Enabling of bearer rejected, failed to enable media [ 294.708190][ T5773] Bluetooth: hci2: command 0x0406 tx timeout [ 294.839827][ T9734] loop6: detected capacity change from 0 to 256 [ 295.090445][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'. [ 295.888642][ T9734] FAT-fs (loop6): Directory bread(block 64) failed [ 295.895273][ T9734] FAT-fs (loop6): Directory bread(block 65) failed [ 295.952529][ T9734] FAT-fs (loop6): Directory bread(block 66) failed [ 295.960577][ T9734] FAT-fs (loop6): Directory bread(block 67) failed [ 295.976855][ T9734] FAT-fs (loop6): Directory bread(block 68) failed [ 295.993741][ T9734] FAT-fs (loop6): Directory bread(block 69) failed [ 296.006913][ T9734] FAT-fs (loop6): Directory bread(block 70) failed [ 296.035820][ T9734] FAT-fs (loop6): Directory bread(block 71) failed [ 296.042530][ T9734] FAT-fs (loop6): Directory bread(block 72) failed [ 296.070011][ T9734] FAT-fs (loop6): Directory bread(block 73) failed [ 297.789000][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 297.799692][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 297.809649][ T5773] Bluetooth: hci0: hardware error 0x00 [ 301.975910][ T5773] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 311.077899][ T6078] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 311.296678][ T6078] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 311.327225][ T6078] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 311.405434][ T6078] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 311.414474][ T6078] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 311.448963][ T6078] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 311.477487][ T6078] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 311.495671][ T6078] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 311.513915][ T6078] usb 9-1: Product: syz [ 311.525519][ T6078] usb 9-1: Manufacturer: syz [ 311.544721][ T6078] cdc_wdm 9-1:1.0: skipping garbage [ 311.561593][ T6078] cdc_wdm 9-1:1.0: skipping garbage [ 311.578731][ T6078] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 311.584690][ T6078] cdc_wdm 9-1:1.0: Unknown control protocol [ 311.835330][ T9827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.866578][ T9827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.891582][ T9827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.926140][ T9827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.280392][ C1] cdc_wdm 9-1:1.0: Unexpected error -71 [ 312.288414][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 312.295348][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 312.301690][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 312.308327][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 312.314655][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 312.321294][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 312.327636][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 312.334264][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 312.340570][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 312.347200][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 312.354825][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 312.361462][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 312.375752][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 312.382398][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 312.395440][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 312.402090][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 312.411290][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 312.417922][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 312.425441][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 312.432086][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 312.438855][ T6078] usb 9-1: USB disconnect, device number 2 [ 312.445453][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 312.506463][ T9842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1114'. [ 312.681919][ T9851] netlink: 'syz.0.1117': attribute type 1 has an invalid length. [ 312.731996][ T9851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.812929][ T9851] veth3: entered promiscuous mode [ 312.824453][ T9851] bond1: (slave veth3): Enslaving as an active interface with a down link [ 313.519092][ T9851] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 313.872477][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'. [ 313.954162][ T9864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.972773][ T9864] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.983812][ T9864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.397478][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.403839][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.473751][ T5773] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260 [ 317.566103][ T9904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.638259][ T9909] loop6: detected capacity change from 0 to 2048 [ 317.849622][ T9909] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.474197][ T9929] binder: 9927:9929 ioctl 400c620e 0 returned -14 [ 326.821002][ T9960] loop8: detected capacity change from 0 to 512 [ 326.956928][ T9960] ext2: Unknown parameter 'fscontext' [ 329.870217][ T9960] loop8: detected capacity change from 0 to 40427 [ 329.994076][ T9960] F2FS-fs (loop8): heap/no_heap options were deprecated [ 330.011551][ T9960] F2FS-fs (loop8): build fault injection attr: rate: 19, type: 0x7ffff [ 330.866623][T10007] loop8: detected capacity change from 0 to 1024 [ 330.885174][T10007] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 332.776580][T10003] Set syz1 is full, maxelem 65536 reached [ 333.936507][ T9999] bridge_slave_0: left promiscuous mode [ 334.070374][ T9999] bond0: (slave bond_slave_0): Releasing backup interface [ 334.121586][ T9999] bond0: (slave bond_slave_1): Releasing backup interface [ 334.157446][ T9999] team0: Port device team_slave_0 removed [ 334.232539][T10020] atomic_op ffff88801ef92998 conn xmit_atomic 0000000000000000 [ 334.392229][ T9999] team0: Port device team_slave_1 removed [ 334.455008][ T9999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.658399][ T9999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.764578][ T9999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.812604][ T9999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.112684][ T9999] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.132310][ T9999] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.146352][ T9999] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.155267][ T9999] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.876867][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 335.876917][ T27] audit: type=1326 audit(1765097085.382:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10024 comm="syz.0.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15f778f749 code=0x7fc00000 [ 336.929309][T10045] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 340.908617][T10097] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 342.686159][T10101] syzkaller0: entered promiscuous mode [ 342.691704][T10101] syzkaller0: entered allmulticast mode [ 344.796512][T10119] syzkaller0: entered promiscuous mode [ 344.827549][T10119] syzkaller0: entered allmulticast mode [ 344.852988][ T41] syzkaller0: tun_net_xmit 70 [ 344.871450][T10119] syzkaller0: tun_net_xmit 14 [ 347.040766][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1190'. [ 359.669795][T10201] tipc: Enabling of bearer rejected, failed to enable media [ 359.770587][T10203] syzkaller0: entered promiscuous mode [ 359.801051][T10203] syzkaller0: entered allmulticast mode [ 360.383683][T10213] vivid-003: disconnect [ 361.036617][T10209] vivid-003: reconnect [ 362.121625][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1211'. [ 362.186075][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1211'. [ 362.221721][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1211'. [ 362.277480][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1211'. [ 362.309184][T10223] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1218'. [ 367.437267][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1233'. [ 367.490974][T10269] syz_tun (unregistering): left promiscuous mode [ 367.556171][ T9186] smc: removing ib device syz0 [ 368.299239][T10278] loop8: detected capacity change from 0 to 512 [ 368.369534][T10278] EXT4-fs: Ignoring removed i_version option [ 368.399858][T10278] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.420217][T10278] EXT4-fs (loop8): Test dummy encryption mode enabled [ 368.501175][T10278] EXT4-fs error (device loop8): ext4_orphan_get:1399: comm syz.8.1234: inode #13: comm syz.8.1234: iget: illegal inode # [ 368.559709][T10278] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1234: couldn't read orphan inode 13 (err -117) [ 368.622264][T10278] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.125491][ T6078] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 369.205987][T10021] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 369.375492][ T6078] usb 7-1: Using ep0 maxpacket: 16 [ 369.474999][ T6078] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.985500][ T6078] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.003863][ T6078] usb 7-1: config 0 interface 0 has no altsetting 0 [ 370.014721][ T6078] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 370.030810][ T6078] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.065662][T10021] usb 9-1: Using ep0 maxpacket: 32 [ 370.077966][ T6078] usb 7-1: config 0 descriptor?? [ 370.096780][T10021] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.108372][T10021] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.119304][T10021] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 370.139333][T10021] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.162438][T10021] usb 9-1: config 0 descriptor?? [ 370.170713][T10021] hub 9-1:0.0: USB hub found [ 370.375579][T10021] hub 9-1:0.0: 1 port detected [ 370.559397][T10285] loop6: detected capacity change from 0 to 1024 [ 370.579415][T10021] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 370.618599][T10021] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 370.696889][T10285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.716452][T10021] usbhid 9-1:0.0: can't add hid device: -71 [ 370.722546][T10021] usbhid: probe of 9-1:0.0 failed with error -71 [ 370.761017][T10021] usb 9-1: USB disconnect, device number 3 [ 370.824559][T10309] bridge4: entered promiscuous mode [ 370.829997][T10309] bridge4: entered allmulticast mode [ 370.914867][ T27] audit: type=1800 audit(1765097120.442:174): pid=10285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1236" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 371.408807][ T6078] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 371.592323][ T6078] usb 7-1: USB disconnect, device number 3 [ 371.613394][T10314] fido_id[10314]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 371.930296][T10317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.982403][ T9309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.063225][ T8072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.410928][T10328] syz.8.1245 (10328): /proc/10322/oom_adj is deprecated, please use /proc/10322/oom_score_adj instead. [ 373.543725][T10339] tipc: Started in network mode [ 373.564338][T10339] tipc: Node identity 080211000001, cluster identity 4711 [ 373.627638][T10339] tipc: Enabled bearer , priority 0 [ 375.304433][ T6076] tipc: Node number set to 134418688 [ 376.625132][T10360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.199678][T10370] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1261'. [ 378.346762][T10373] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 378.420048][T10375] syzkaller0: entered promiscuous mode [ 378.428026][T10375] syzkaller0: entered allmulticast mode [ 378.480104][T10375] tipc: Started in network mode [ 378.485121][T10375] tipc: Node identity b238aa6a6f17, cluster identity 4711 [ 378.497583][T10375] tipc: Enabled bearer , priority 0 [ 378.534587][T10374] tipc: Resetting bearer [ 378.630582][T10374] tipc: Disabling bearer [ 378.668824][T10368] overlayfs: failed to resolve './file0': -2 [ 378.855872][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.865487][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.317800][T10390] loop8: detected capacity change from 0 to 128 [ 379.697549][T10390] FAT-fs (loop8): Directory bread(block 162) failed [ 379.704276][T10390] FAT-fs (loop8): Directory bread(block 163) failed [ 379.779220][T10390] FAT-fs (loop8): Directory bread(block 164) failed [ 379.786420][T10390] FAT-fs (loop8): Directory bread(block 165) failed [ 379.793063][T10390] FAT-fs (loop8): Directory bread(block 166) failed [ 379.799847][T10390] FAT-fs (loop8): Directory bread(block 167) failed [ 379.819915][T10390] FAT-fs (loop8): Directory bread(block 168) failed [ 379.845611][T10390] FAT-fs (loop8): Directory bread(block 169) failed [ 379.852405][T10390] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 380.288637][T10398] netlink: 'syz.0.1269': attribute type 1 has an invalid length. [ 380.669537][T10404] netlink: 'syz.8.1267': attribute type 3 has an invalid length. [ 380.918229][T10394] loop6: detected capacity change from 0 to 131072 [ 380.932849][T10398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.941964][T10394] F2FS-fs (loop6): invalid crc value [ 380.970611][T10394] F2FS-fs (loop6): Found nat_bits in checkpoint [ 381.009240][T10399] bond2: (slave dummy0): making interface the new active one [ 381.038490][T10394] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 381.073368][T10399] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 381.567630][T10418] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1272'. [ 383.132906][T10427] bond0: entered allmulticast mode [ 383.138226][T10427] bond_slave_0: entered allmulticast mode [ 383.144015][T10427] bond_slave_1: entered allmulticast mode [ 385.407320][T10445] loop8: detected capacity change from 0 to 512 [ 385.487845][T10445] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 385.884083][T10445] EXT4-fs (loop8): 1 orphan inode deleted [ 385.910983][T10445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.944557][T10445] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.681192][ T9186] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 386.720784][ T9186] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u4:50: Failed to release dquot type 1 [ 387.240366][ T9309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.919639][T10458] bridge3: entered promiscuous mode [ 387.925128][T10458] bridge3: entered allmulticast mode [ 389.281512][T10462] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 389.381219][T10460] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.600119][T10460] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.805228][T10460] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.850685][T10477] syzkaller0: entered promiscuous mode [ 389.868233][T10477] syzkaller0: entered allmulticast mode [ 389.929177][T10460] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.195048][T10460] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.771099][T10460] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.952775][T10460] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.978788][T10460] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.638181][T10515] input: syz1 as /devices/virtual/input/input6 [ 400.305833][T10575] bridge0: entered promiscuous mode [ 400.311094][T10575] bridge0: entered allmulticast mode [ 406.650844][T10615] xt_connbytes: Forcing CT accounting to be enabled [ 406.659792][T10615] Cannot find set identified by id 0 to match [ 411.112730][T10641] netlink: 'syz.8.1336': attribute type 1 has an invalid length. [ 411.256612][T10643] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 411.345619][T10643] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 411.380602][T10643] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 411.536750][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1336'. [ 412.354349][T10649] loop8: detected capacity change from 0 to 4096 [ 412.622104][T10649] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 413.202169][T10649] ntfs3: loop8: volume is dirty and "force" flag is not set! [ 417.682935][T10683] loop6: detected capacity change from 0 to 1024 [ 417.690608][T10683] EXT4-fs (loop6): unsupported inode size: 1792 [ 417.696964][T10683] EXT4-fs (loop6): blocksize: 1024 [ 418.959735][T10287] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 419.474016][T10691] xt_l2tp: invalid flags combination: 8 [ 422.651662][T10720] loop8: detected capacity change from 0 to 1024 [ 422.662108][T10720] EXT4-fs: Ignoring removed bh option [ 422.668385][T10720] EXT4-fs: Ignoring removed nobh option [ 422.674100][T10720] EXT4-fs: Ignoring removed bh option [ 422.697896][T10720] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 422.766336][T10720] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.844761][T10726] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 425.060119][ T27] audit: type=1800 audit(1765097174.482:175): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1356" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 425.118235][ T9309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.586097][T10771] netlink: 'syz.0.1368': attribute type 11 has an invalid length. [ 429.428334][T10770] nfs: Unknown parameter 'ntext' [ 429.804328][T10778] tipc: Enabling of bearer rejected, failed to enable media [ 437.832411][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1384'. [ 437.848594][T10842] bridge0: entered promiscuous mode [ 438.009155][T10842] macvtap1: entered promiscuous mode [ 438.502412][T10842] macvtap1: entered allmulticast mode [ 438.515541][T10842] bridge0: entered allmulticast mode [ 438.527792][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1384'. [ 438.570441][T10846] bridge0: left allmulticast mode [ 438.587989][T10846] bridge0: left promiscuous mode [ 440.378232][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.384690][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.325875][T10893] loop8: detected capacity change from 0 to 128 [ 443.396690][T10893] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 443.435992][T10893] hpfs: filesystem error: improperly stopped [ 443.449435][T10893] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 443.463358][T10893] hpfs: You really don't want any checks? You are crazy... [ 444.226738][T10893] hpfs: hpfs_map_sector(): read error [ 444.232168][T10893] hpfs: code page support is disabled [ 444.274654][T10893] hpfs: hpfs_map_4sectors(): unaligned read [ 444.299809][T10893] hpfs: hpfs_map_4sectors(): unaligned read [ 444.309673][T10893] hpfs: filesystem error: unable to find root dir [ 445.695064][T10910] syzkaller0: entered promiscuous mode [ 445.734476][T10910] syzkaller0: entered allmulticast mode [ 448.986853][T10942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 448.994864][T10942] IPv6: NLM_F_CREATE should be set when creating new route [ 449.486459][T10945] lo: entered allmulticast mode [ 449.956754][T10945] tunl0: entered allmulticast mode [ 450.006190][T10945] gre0: entered allmulticast mode [ 450.202091][T10945] gretap0: entered allmulticast mode [ 450.253046][T10945] erspan0: entered allmulticast mode [ 450.284474][T10945] ip_vti0: entered allmulticast mode [ 450.313775][T10945] ip6_vti0: entered allmulticast mode [ 450.342670][T10945] sit0: entered allmulticast mode [ 450.455989][T10945] ip6tnl0: entered allmulticast mode [ 451.317238][T10945] ip6gre0: entered allmulticast mode [ 451.385965][T10945] syz_tun: entered allmulticast mode [ 451.537823][T10945] ip6gretap0: entered allmulticast mode [ 451.592028][T10945] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.599790][T10945] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.633344][T10945] bridge0: entered allmulticast mode [ 451.959427][T10945] vcan0: entered allmulticast mode [ 451.993339][T10945] team0: entered allmulticast mode [ 451.999021][T10945] team_slave_0: entered allmulticast mode [ 452.008977][T10945] team_slave_1: entered allmulticast mode [ 452.036843][T10945] dummy0: entered allmulticast mode [ 452.079205][T10945] nlmon0: entered allmulticast mode [ 452.090396][T10945] caif0: entered allmulticast mode [ 452.111165][T10945] batadv0: entered allmulticast mode [ 452.172539][T10945] vxcan0: entered allmulticast mode [ 452.187678][T10945] vxcan1: entered allmulticast mode [ 452.201519][T10945] veth0: entered allmulticast mode [ 452.221198][T10945] veth1: entered allmulticast mode [ 452.248484][T10945] wg0: entered allmulticast mode [ 452.275941][T10945] wg1: entered allmulticast mode [ 452.344685][T10945] wg2: entered allmulticast mode [ 452.372328][T10945] veth0_to_bridge: entered allmulticast mode [ 452.408462][T10945] veth1_to_bridge: entered allmulticast mode [ 452.443937][T10945] veth0_to_bond: entered allmulticast mode [ 452.492581][T10945] veth1_to_bond: entered allmulticast mode [ 452.576576][T10945] veth0_to_team: entered allmulticast mode [ 453.145799][ T27] audit: type=1326 audit(1765097202.652:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.6.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0118f749 code=0x7ffc0000 [ 453.223083][T10945] veth1_to_team: entered allmulticast mode [ 453.247969][T10021] IPVS: starting estimator thread 0... [ 453.310759][ T27] audit: type=1326 audit(1765097202.662:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.6.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0118f749 code=0x7ffc0000 [ 453.350351][T10945] veth0_to_batadv: entered allmulticast mode [ 453.356468][ T27] audit: type=1326 audit(1765097202.842:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.6.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8d0118f749 code=0x7ffc0000 [ 453.356512][ T27] audit: type=1326 audit(1765097202.842:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.6.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0118f749 code=0x7ffc0000 [ 453.356545][ T27] audit: type=1326 audit(1765097202.842:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.6.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0118f749 code=0x7ffc0000 [ 453.435728][T10977] IPVS: using max 21 ests per chain, 50400 per kthread [ 453.478073][T10945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.504491][T10945] batadv_slave_0: entered allmulticast mode [ 454.519019][T10945] veth1_to_batadv: entered allmulticast mode [ 454.556120][T10945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.571872][T10991] loop6: detected capacity change from 0 to 512 [ 454.598431][T10945] batadv_slave_1: entered allmulticast mode [ 454.657607][T10991] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 454.692286][T10945] xfrm0: entered allmulticast mode [ 454.704972][T10991] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 454.735573][T10991] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1422: Corrupt directory, running e2fsck is recommended [ 454.750620][T10945] veth0_to_hsr: entered allmulticast mode [ 454.795845][T10991] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 455.574523][T10945] hsr_slave_0: entered allmulticast mode [ 455.586108][T10991] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2249: inode #15: comm syz.6.1422: corrupted in-inode xattr: e_name out of bounds [ 455.601216][T10991] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1422: couldn't read orphan inode 15 (err -117) [ 455.605015][T10945] veth1_to_hsr: entered allmulticast mode [ 455.693105][T10991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.706177][T10945] hsr_slave_1: entered allmulticast mode [ 455.737088][T10945] hsr0: entered allmulticast mode [ 455.866733][T10945] veth1_virt_wifi: entered allmulticast mode [ 455.952928][T10945] veth0_virt_wifi: entered allmulticast mode [ 455.980404][T10945] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 456.005057][T10945] veth1_vlan: entered allmulticast mode [ 456.172996][T10945] veth0_vlan: entered allmulticast mode [ 456.299612][T10945] vlan0: entered allmulticast mode [ 456.326593][T10945] vlan1: entered allmulticast mode [ 456.355417][T10945] macvlan0: entered allmulticast mode [ 456.366972][T10945] macvlan1: entered allmulticast mode [ 456.393438][T10945] ipvlan0: entered allmulticast mode [ 456.413173][T10945] ipvlan1: entered allmulticast mode [ 456.434767][T10945] veth1_macvtap: entered allmulticast mode [ 456.461064][T10945] veth0_macvtap: entered allmulticast mode [ 456.493785][T10945] macvtap0: entered allmulticast mode [ 456.520297][T10945] macsec0: entered allmulticast mode [ 456.547460][ T8072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.705738][T10945] geneve0: entered allmulticast mode [ 456.761673][T10945] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.774153][T10945] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.794414][T10945] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.803165][T10945] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.815140][T10945] geneve1: entered allmulticast mode [ 456.853783][T10945] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 456.881512][T10945] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 456.902419][T10945] netdevsim netdevsim8 eth0: entered allmulticast mode [ 456.919521][T10945] netdevsim netdevsim8 eth1: entered allmulticast mode [ 456.929047][T10945] netdevsim netdevsim8 eth2: entered allmulticast mode [ 456.940339][T10945] netdevsim netdevsim8 eth3: entered allmulticast mode [ 456.948763][T10945] bond1: entered allmulticast mode [ 456.954052][T10945] macvtap1: left promiscuous mode [ 456.959636][T10961] tipc: Enabling of bearer rejected, already enabled [ 457.930501][T11024] tipc: Enabling of bearer rejected, already enabled [ 458.173468][T11031] tipc: Enabling of bearer rejected, failed to enable media [ 458.231239][T11033] loop6: detected capacity change from 0 to 2048 [ 458.271204][T11033] EXT4-fs: Ignoring removed bh option [ 458.418446][T11033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.079005][T11042] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 459.247845][T11042] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 459.260920][T11042] EXT4-fs (loop6): This should not happen!! Data will be lost [ 459.260920][T11042] [ 459.273737][T11042] EXT4-fs (loop6): Total free blocks count 0 [ 459.280003][T11042] EXT4-fs (loop6): Free/Dirty block details [ 460.042588][T11042] EXT4-fs (loop6): free_blocks=2415919104 [ 460.056093][T11042] EXT4-fs (loop6): dirty_blocks=64 [ 460.061231][T11042] EXT4-fs (loop6): Block reservation details [ 460.092221][T11042] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 460.140754][T11054] tipc: Enabling of bearer rejected, failed to enable media [ 460.147178][ T9186] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 461.626896][T11073] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1439'. [ 463.476274][T11093] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 466.192856][T11118] tipc: Enabling of bearer rejected, already enabled [ 466.207169][T11120] tipc: Enabled bearer , priority 0 [ 466.266859][T11120] syzkaller0: entered promiscuous mode [ 466.272386][T11120] syzkaller0: entered allmulticast mode [ 466.505069][T11120] tipc: Resetting bearer [ 466.535755][T11119] tipc: Resetting bearer [ 467.441122][T11119] tipc: Disabling bearer [ 467.451830][ T6080] tipc: Node number set to 3710888554 [ 468.389517][T11140] loop8: detected capacity change from 0 to 1024 [ 469.750223][T11142] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 469.757915][T11142] hfsplus: xattr search failed [ 469.770006][T11142] syz.8.1457: attempt to access beyond end of device [ 469.770006][T11142] loop8: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 470.156861][T11142] Buffer I/O error on dev loop8, logical block 458752, async page read [ 470.397822][T11142] syz.8.1457: attempt to access beyond end of device [ 470.397822][T11142] loop8: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 470.419076][T11142] Buffer I/O error on dev loop8, logical block 458752, async page read [ 470.583443][T11153] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 470.620950][T11153] hfsplus: cannot replace xattr [ 470.627925][T11161] netlink: 'syz.6.1463': attribute type 10 has an invalid length. [ 470.651866][T11161] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1463'. [ 470.673822][T11161] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.695391][T11161] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.724496][T11161] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.751297][T11161] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.847568][T11161] team0: Port device geneve0 added [ 473.483197][T11184] 8021q: adding VLAN 0 to HW filter on device bond3 [ 473.682204][T11186] macvlan2: entered promiscuous mode [ 473.687783][T11186] macvlan2: entered allmulticast mode [ 473.693463][T11186] bond3: entered promiscuous mode [ 474.374463][T11186] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 474.446405][T11186] team0: Port device macvlan2 added [ 474.517333][T11184] ip6gretap1: entered promiscuous mode [ 474.523730][T11184] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 474.562398][T11193] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 474.711909][T11196] tipc: Enabled bearer , priority 0 [ 474.728920][T11196] syzkaller0: entered promiscuous mode [ 474.734696][T11196] syzkaller0: entered allmulticast mode [ 474.763177][T11197] tipc: Enabling of bearer rejected, already enabled [ 474.889439][T11196] tipc: Resetting bearer [ 474.912360][T11201] tipc: Enabling of bearer rejected, failed to enable media [ 474.931905][T11195] tipc: Resetting bearer [ 475.072449][T11195] tipc: Disabling bearer [ 475.291253][T11217] loop6: detected capacity change from 0 to 512 [ 476.594721][T11222] warning: `syz.0.1477' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 476.817292][T10873] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 478.525113][T11239] tipc: Enabling of bearer rejected, already enabled [ 479.061469][T11247] syzkaller0: entered promiscuous mode [ 479.074186][T11247] syzkaller0: entered allmulticast mode [ 479.184099][T11247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.193019][T11247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.237931][T11247] tipc: Enabled bearer , priority 0 [ 479.269014][T11246] tipc: Resetting bearer [ 479.301050][T11246] tipc: Disabling bearer [ 479.315827][T11250] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 481.027412][T11262] tipc: Enabled bearer , priority 0 [ 481.096407][T11262] syzkaller0: entered promiscuous mode [ 481.175493][T11262] syzkaller0: entered allmulticast mode [ 481.417155][T11262] tipc: Resetting bearer [ 482.240999][T11272] pimreg: entered allmulticast mode [ 482.251807][ T6080] tipc: Node number set to 1148106838 [ 482.424918][T11261] tipc: Resetting bearer [ 482.485669][T11261] tipc: Disabling bearer [ 482.501566][T11283] pimreg: left allmulticast mode [ 482.591990][T11280] netlink: 'syz.0.1497': attribute type 10 has an invalid length. [ 482.610527][T11280] bond0: (slave wlan1): Opening slave failed [ 484.832854][T11302] Cannot find set identified by id 0 to match [ 485.962896][T11306] loop8: detected capacity change from 0 to 40427 [ 486.554963][T11306] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x7ffff [ 486.564946][T11306] F2FS-fs (loop8): Image doesn't support compression [ 486.571786][T11306] F2FS-fs (loop8): Image doesn't support compression [ 486.626056][T11306] F2FS-fs (loop8): invalid crc value [ 486.656093][T11306] F2FS-fs (loop8): Found nat_bits in checkpoint [ 486.704188][T11306] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 486.973329][T11315] syz.8.1505: attempt to access beyond end of device [ 486.973329][T11315] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 486.992308][T11315] F2FS-fs (loop8): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fb/0x5b0 [ 487.365895][ T9309] syz-executor: attempt to access beyond end of device [ 487.365895][ T9309] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 487.781422][ T9309] F2FS-fs (loop8): Remounting filesystem read-only [ 491.640599][T11332] tipc: Enabling of bearer rejected, failed to enable media [ 491.962988][T11344] tipc: Enabling of bearer rejected, failed to enable media [ 493.928112][T11362] tipc: Enabled bearer , priority 0 [ 494.170965][T11373] syzkaller0: entered promiscuous mode [ 494.263790][T11373] syzkaller0: entered allmulticast mode [ 494.786285][T11362] tipc: Resetting bearer [ 494.818577][T11361] tipc: Resetting bearer [ 494.846098][T11361] tipc: Disabling bearer [ 494.864932][T11381] tipc: Enabling of bearer rejected, already enabled [ 495.264659][T11389] tipc: Enabled bearer , priority 0 [ 495.281823][T11389] syzkaller0: entered promiscuous mode [ 495.465787][T11389] syzkaller0: entered allmulticast mode [ 495.981079][T11389] tipc: Resetting bearer [ 496.005220][T11388] tipc: Resetting bearer [ 496.031439][T11388] tipc: Disabling bearer [ 499.008011][T11423] tipc: Enabling of bearer rejected, failed to enable media [ 499.717867][T11444] loop6: detected capacity change from 0 to 512 [ 499.748906][T11444] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 499.882670][T11444] EXT4-fs (loop6): orphan cleanup on readonly fs [ 499.892396][T11444] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 499.902922][T11444] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 499.912430][T11444] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1534: Failed to acquire dquot type 1 [ 499.915508][ T6083] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 499.937326][T11444] EXT4-fs (loop6): 1 truncate cleaned up [ 499.944369][T11444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 500.324999][ T6083] usb 9-1: config 0 has no interfaces? [ 500.389531][ T6083] usb 9-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 500.478360][ T8072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.606881][ T6083] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.797930][ T6083] usb 9-1: config 0 descriptor?? [ 500.915203][T11455] tipc: Enabling of bearer rejected, already enabled [ 501.437739][T11425] loop8: detected capacity change from 0 to 32768 [ 501.483915][T11425] XFS (loop8): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 501.529984][T11425] XFS (loop8): Ending clean mount [ 501.564808][ T6083] usb 9-1: USB disconnect, device number 4 [ 501.708867][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.715652][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.113285][ T9309] XFS (loop8): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 502.164369][T11467] netlink: 'syz.3.1540': attribute type 1 has an invalid length. [ 502.247342][T11467] 8021q: adding VLAN 0 to HW filter on device bond4 [ 502.364285][T11471] bond4: (slave dummy0): making interface the new active one [ 502.479443][T11471] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 505.617930][ T5773] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 505.662925][T11501] tipc: Enabled bearer , priority 0 [ 505.678457][T11501] tipc: Resetting bearer [ 505.702441][T11500] tipc: Disabling bearer [ 506.116610][T11507] xt_connbytes: Forcing CT accounting to be enabled [ 506.160834][T11507] set match dimension is over the limit! [ 506.325055][T11509] netlink: 'syz.3.1549': attribute type 3 has an invalid length. [ 506.925247][T11511] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1550'. [ 507.510690][T11519] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1552'. [ 508.463421][T11533] Device name cannot be null; rc = [-22] [ 508.494520][T11526] netlink: 'syz.8.1554': attribute type 1 has an invalid length. [ 508.744536][T11526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 508.760077][T11535] dummy0: left allmulticast mode [ 508.792870][T11535] bond2: (slave dummy0): making interface the new active one [ 508.926887][T11535] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 509.227793][T11543] Device name cannot be null; rc = [-22] [ 509.637630][ T5773] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 509.646959][ T5773] Bluetooth: hci1: Injecting HCI hardware error event [ 509.659761][ T5773] Bluetooth: hci1: hardware error 0x00 [ 509.721705][ T1058] null_blk: rq ffff888022730000 timed out [ 509.728076][ T1058] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 509.830836][ T1058] null_blk: rq ffff888022730180 timed out [ 509.836706][ T1058] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 509.944545][ T1058] null_blk: rq ffff888022730300 timed out [ 509.954790][ T1058] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 509.965812][ T1058] null_blk: rq ffff888022730480 timed out [ 509.971546][ T1058] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 509.982750][ T1058] null_blk: rq ffff888022730600 timed out [ 509.988885][ T1058] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 509.999791][ T1058] null_blk: rq ffff888022730780 timed out [ 510.005854][ T1058] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 510.016913][ T1058] null_blk: rq ffff888022730900 timed out [ 510.023420][ T1058] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 510.034018][ T1058] null_blk: rq ffff888022730a80 timed out [ 510.039848][ T1058] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 510.054172][ T1058] null_blk: rq ffff888022730c00 timed out [ 510.060005][ T1058] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 510.071002][ T1058] null_blk: rq ffff888022730d80 timed out [ 510.076812][ T1058] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 510.087359][ T1058] null_blk: rq ffff888022730f00 timed out [ 510.093109][ T1058] null_blk: rq ffff888022731080 timed out [ 510.098929][ T1058] null_blk: rq ffff888022731200 timed out [ 510.104684][ T1058] null_blk: rq ffff888022731380 timed out [ 510.110638][ T1058] null_blk: rq ffff888022731500 timed out [ 510.116457][ T1058] null_blk: rq ffff888022731680 timed out [ 510.122859][ T1058] null_blk: rq ffff888022731800 timed out [ 510.128739][ T1058] null_blk: rq ffff888022731980 timed out [ 510.134484][ T1058] null_blk: rq ffff888022731b00 timed out [ 510.140269][ T1058] null_blk: rq ffff888022731c80 timed out [ 510.146073][ T1058] null_blk: rq ffff888022731e00 timed out [ 510.151813][ T1058] null_blk: rq ffff888022731f80 timed out [ 510.157610][ T1058] null_blk: rq ffff888022732100 timed out [ 510.163352][ T1058] null_blk: rq ffff888022732280 timed out [ 510.169954][ T1058] null_blk: rq ffff888022732400 timed out [ 510.175891][ T1058] null_blk: rq ffff888022732580 timed out [ 510.181647][ T1058] null_blk: rq ffff888022732700 timed out [ 510.187503][ T1058] null_blk: rq ffff888022732880 timed out [ 510.193253][ T1058] null_blk: rq ffff888022732a00 timed out [ 510.200043][ T1058] null_blk: rq ffff888022732b80 timed out [ 510.233669][ T1058] null_blk: rq ffff888022732d00 timed out [ 510.239536][ T1058] null_blk: rq ffff888022732e80 timed out [ 510.246645][ T1058] null_blk: rq ffff888022733000 timed out [ 510.252430][ T1058] null_blk: rq ffff888022733180 timed out [ 510.258365][ T1058] null_blk: rq ffff888022733300 timed out [ 510.264109][ T1058] null_blk: rq ffff888022733480 timed out [ 510.270094][ T1058] null_blk: rq ffff888022733600 timed out [ 510.275923][ T1058] null_blk: rq ffff888022733780 timed out [ 510.281689][ T1058] null_blk: rq ffff888022733900 timed out [ 510.288913][ T1058] null_blk: rq ffff888022733a80 timed out [ 510.875383][ T1058] null_blk: rq ffff888022733c00 timed out [ 510.884386][ T1058] null_blk: rq ffff888022733d80 timed out [ 510.895604][ T1058] null_blk: rq ffff888022733f00 timed out [ 510.901390][ T1058] null_blk: rq ffff888022734080 timed out [ 510.907586][ T1058] null_blk: rq ffff888022734200 timed out [ 510.913338][ T1058] null_blk: rq ffff888022734380 timed out [ 510.919920][ T1058] null_blk: rq ffff888022734500 timed out [ 510.925758][ T1058] null_blk: rq ffff888022734680 timed out [ 510.931732][ T1058] null_blk: rq ffff888022734800 timed out [ 510.939568][ T1058] null_blk: rq ffff888022734980 timed out [ 510.945477][ T1058] null_blk: rq ffff888022734b00 timed out [ 510.951234][ T1058] null_blk: rq ffff888022734c80 timed out [ 510.957242][ T1058] null_blk: rq ffff888022734e00 timed out [ 510.963000][ T1058] null_blk: rq ffff888022734f80 timed out [ 510.971722][ T1058] null_blk: rq ffff888022735100 timed out [ 510.977609][ T1058] null_blk: rq ffff888022735280 timed out [ 510.983363][ T1058] null_blk: rq ffff888022735400 timed out [ 511.785906][ T5773] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 514.725500][ T5808] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 515.472183][T11590] pimreg: entered allmulticast mode [ 515.522148][T11590] pimreg: left allmulticast mode [ 516.245099][T11600] loop6: detected capacity change from 0 to 512 [ 516.503329][T11600] EXT4-fs (loop6): 1 orphan inode deleted [ 516.510331][T11600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.523566][ T9187] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 516.533684][T11600] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.548476][ T9187] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u4:51: Failed to release dquot type 1 [ 517.662720][ T8072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.734321][T11616] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1571'. [ 517.876738][T11621] tipc: Enabled bearer , priority 0 [ 517.904927][T11621] syzkaller0: entered promiscuous mode [ 517.929965][T11621] syzkaller0: entered allmulticast mode [ 518.042295][T11621] tipc: Resetting bearer [ 518.103486][T11617] tipc: Resetting bearer [ 518.151150][T11617] tipc: Disabling bearer [ 524.734262][T11683] syz_tun: left allmulticast mode [ 528.615519][ T6080] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 529.976417][ T6080] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 529.993543][ T6080] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 530.015559][ T6080] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.037255][ T6080] usb 7-1: config 0 descriptor?? [ 531.764399][ T5808] usb 7-1: USB disconnect, device number 4 [ 535.960485][T11740] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1602'. [ 536.037967][T11744] netlink: del zone limit has 8 unknown bytes [ 536.189101][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1602'. [ 536.605181][T11748] netlink: 'syz.0.1605': attribute type 10 has an invalid length. [ 536.634049][T11748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1605'. [ 536.670162][T11748] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.679939][T11748] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.688772][T11748] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.703906][T11748] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.721995][T11748] team0: Port device geneve0 added [ 539.363064][T11787] loop8: detected capacity change from 0 to 164 [ 539.383515][T11787] rock: directory entry would overflow storage [ 539.390323][T11787] rock: sig=0x66, size=4, remaining=3 [ 539.495771][T11788] rock: directory entry would overflow storage [ 539.502358][T11788] rock: sig=0x66, size=4, remaining=3 [ 542.882585][T11804] xt_l2tp: invalid flags combination: 8 [ 543.528374][T11790] vlan2: entered promiscuous mode [ 544.268866][T11790] vlan2: entered allmulticast mode [ 544.274039][T11790] hsr_slave_1: entered allmulticast mode [ 544.584160][T11809] netlink: 'syz.6.1620': attribute type 1 has an invalid length. [ 544.800965][T11810] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 545.757427][T11810] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 545.795725][T11810] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 546.008623][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1620'. [ 546.965948][T11827] xt_CT: You must specify a L4 protocol and not use inversions on it [ 549.213437][T11829] loop8: detected capacity change from 0 to 4096 [ 549.247836][T11829] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 549.281778][T11829] ntfs3: loop8: Failed to load $Extend (-22). [ 549.287995][T11829] ntfs3: loop8: Failed to initialize $Extend. [ 552.993056][T11840] loop6: detected capacity change from 0 to 32768 [ 553.389977][T11865] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 555.284348][T11875] loop8: detected capacity change from 0 to 4096 [ 559.181972][T11900] loop6: detected capacity change from 0 to 1024 [ 562.339397][T11920] netlink: 'syz.6.1653': attribute type 3 has an invalid length. [ 562.347592][T11920] netlink: 558 bytes leftover after parsing attributes in process `syz.6.1653'. [ 563.152596][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.158961][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.988958][T11930] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 566.343713][T11963] overlayfs: failed to clone lowerpath [ 566.383919][T11955] nfs: Unknown parameter 'ntext' [ 568.316447][T11977] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 568.325921][T11977] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 568.335554][T11977] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 568.499548][ T27] audit: type=1800 audit(1765097317.842:181): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1661" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 570.940432][T12019] nbd1: detected capacity change from 0 to 8589934655 [ 571.019483][ T5773] block nbd1: Receive control failed (result -104) [ 571.535738][T12030] macvlan3: entered promiscuous mode [ 574.685050][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 574.726613][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 574.735916][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 574.744942][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 574.753988][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 575.812348][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 578.709239][T12089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1690'. [ 578.722066][T12089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1690'. [ 580.730783][T12105] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 584.797738][T12129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1702'. [ 588.084285][T12176] loop6: detected capacity change from 0 to 16 [ 588.103058][T12176] erofs: (device loop6): mounted with root inode @ nid 36. [ 589.072641][T12180] syz.6.1713: attempt to access beyond end of device [ 589.072641][T12180] loop6: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 589.086972][T12180] syz.6.1713: attempt to access beyond end of device [ 589.086972][T12180] loop6: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 591.525711][T12206] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1718'. [ 591.614061][T12214] loop8: detected capacity change from 0 to 512 [ 591.641043][T12214] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 591.658691][T12214] EXT4-fs (loop8): invalid journal inode [ 591.664743][T12214] EXT4-fs (loop8): can't get journal size [ 591.708510][T12214] EXT4-fs (loop8): 1 truncate cleaned up [ 591.716439][T12214] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.922529][ T9309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.263124][T12227] syzkaller0: entered promiscuous mode [ 592.268961][T12227] syzkaller0: entered allmulticast mode [ 597.866729][T11011] IPVS: starting estimator thread 0... [ 598.017807][T12268] IPVS: using max 19 ests per chain, 45600 per kthread [ 599.808909][T12297] tipc: Enabled bearer , priority 0 [ 599.817310][T12297] syzkaller0: entered promiscuous mode [ 599.822813][T12297] syzkaller0: entered allmulticast mode [ 600.628881][T12297] tipc: Resetting bearer [ 600.774041][T12296] tipc: Resetting bearer [ 600.863097][T12296] tipc: Disabling bearer [ 602.727633][ T24] block nbd1: Possible stuck request ffff888021d70000: control (read@1024,1024B). Runtime 30 seconds [ 602.739643][ T24] block nbd1: Possible stuck request ffff888021d70200: control (read@2048,1024B). Runtime 30 seconds [ 602.752559][ T24] block nbd1: Possible stuck request ffff888021d70400: control (read@3072,1024B). Runtime 30 seconds [ 602.763647][ T24] block nbd1: Possible stuck request ffff888021d78000: control (read@0,1024B). Runtime 30 seconds [ 605.867077][T12344] overlayfs: failed to clone lowerpath [ 605.992977][T12346] overlayfs: failed to clone lowerpath [ 607.156179][T12352] loop6: detected capacity change from 0 to 40427 [ 607.226262][T12352] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 607.234075][T12352] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 607.256194][T12352] F2FS-fs (loop6): invalid crc value [ 607.304309][T12352] F2FS-fs (loop6): Found nat_bits in checkpoint [ 607.365003][T12352] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 607.372797][T12352] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 609.485928][ T27] audit: type=1800 audit(1765097357.232:182): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1755" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 609.687959][ T8072] syz-executor: attempt to access beyond end of device [ 609.687959][ T8072] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 609.709444][ T8072] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 611.953213][T12381] tipc: Enabled bearer , priority 0 [ 611.970476][T12381] syzkaller0: entered promiscuous mode [ 611.980738][T12381] syzkaller0: entered allmulticast mode [ 612.216245][T12385] tipc: Resetting bearer [ 612.274356][T12380] tipc: Resetting bearer [ 612.312890][T12380] tipc: Disabling bearer [ 613.950106][T12401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 613.957445][T12401] IPv6: NLM_F_CREATE should be set when creating new route [ 613.970385][T12401] lo: entered allmulticast mode [ 613.976348][T12401] tunl0: entered allmulticast mode [ 613.984015][T12401] gre0: entered allmulticast mode [ 614.751310][T12401] gretap0: entered allmulticast mode [ 614.775835][T12401] erspan0: entered allmulticast mode [ 614.788796][T12401] ip_vti0: entered allmulticast mode [ 614.795975][T12401] ip6_vti0: entered allmulticast mode [ 614.815890][T12401] sit0: entered allmulticast mode [ 614.829326][T12401] ip6tnl0: entered allmulticast mode [ 615.527125][T12401] ip6gre0: entered allmulticast mode [ 615.543759][T12401] syz_tun: entered allmulticast mode [ 615.560714][T12401] ip6gretap0: entered allmulticast mode [ 615.578093][T12401] bridge0: entered allmulticast mode [ 615.591915][T12401] bond0: entered allmulticast mode [ 615.597166][T12401] bond_slave_0: entered allmulticast mode [ 615.602916][T12401] bond_slave_1: entered allmulticast mode [ 615.609712][T12401] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 616.418598][T12401] team0: entered allmulticast mode [ 616.423766][T12401] team_slave_0: entered allmulticast mode [ 616.432659][T12401] team_slave_1: entered allmulticast mode [ 616.450927][T12401] dummy0: entered allmulticast mode [ 616.469661][T12401] nlmon0: entered allmulticast mode [ 616.482013][T12401] caif0: entered allmulticast mode [ 616.493877][T12401] batadv0: entered allmulticast mode [ 616.504009][T12401] vxcan0: entered allmulticast mode [ 616.516007][T12401] vxcan1: entered allmulticast mode [ 616.521436][T12401] veth0: entered allmulticast mode [ 616.532779][T12401] veth1: entered allmulticast mode [ 616.541622][T12401] wg0: entered allmulticast mode [ 616.547377][T12401] wg1: entered allmulticast mode [ 616.557171][T12401] wg2: entered allmulticast mode [ 616.562440][T12401] veth0_to_bridge: entered allmulticast mode [ 616.573405][T12401] veth1_to_bridge: entered allmulticast mode [ 616.582485][T12401] veth0_to_bond: entered allmulticast mode [ 616.593263][T12401] veth1_to_bond: entered allmulticast mode [ 616.603193][T12401] veth0_to_team: entered allmulticast mode [ 616.612895][T12401] veth1_to_team: entered allmulticast mode [ 616.622912][T12401] veth0_to_batadv: entered allmulticast mode [ 616.631871][T12401] batadv_slave_0: entered allmulticast mode [ 616.642641][T12401] veth1_to_batadv: entered allmulticast mode [ 616.653574][T12401] batadv_slave_1: entered allmulticast mode [ 616.664746][T12401] xfrm0: entered allmulticast mode [ 616.674117][T12401] veth0_to_hsr: entered allmulticast mode [ 616.683742][T12401] hsr_slave_0: entered allmulticast mode [ 616.692136][T12401] veth1_to_hsr: entered allmulticast mode [ 616.703089][T12401] hsr0: entered allmulticast mode [ 616.709999][T12401] veth1_virt_wifi: entered allmulticast mode [ 616.722114][T12401] veth0_virt_wifi: entered allmulticast mode [ 616.729962][T12401] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 616.742699][T12401] veth1_vlan: entered allmulticast mode [ 616.749116][T12401] veth0_vlan: entered allmulticast mode [ 616.757273][T12401] vlan0: entered allmulticast mode [ 616.762564][T12401] vlan1: entered allmulticast mode [ 616.772872][T12401] macvlan0: entered allmulticast mode [ 616.781013][T12401] macvlan1: entered allmulticast mode [ 616.786879][T12401] ipvlan0: entered allmulticast mode [ 616.792426][T12401] ipvlan1: entered allmulticast mode [ 616.798660][T12401] veth1_macvtap: entered allmulticast mode [ 616.804727][T12401] veth0_macvtap: entered allmulticast mode [ 616.811196][T12401] macvtap0: entered allmulticast mode [ 616.817122][T12401] macsec0: entered allmulticast mode [ 616.822710][T12401] geneve0: entered allmulticast mode [ 616.828682][T12401] geneve1: entered allmulticast mode [ 616.836146][T12401] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 616.854977][T12401] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 616.874752][T12401] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 616.886587][T12401] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 616.894166][T12401] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 616.910405][T12401] bridge1: entered allmulticast mode [ 616.919396][T12401] bond1: left promiscuous mode [ 616.924322][T12401] bond2: left promiscuous mode [ 616.934855][T12401] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.944024][T12401] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.953308][T12401] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.962349][T12401] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.979470][T12401] : entered allmulticast mode [ 617.003773][T12401] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 617.019240][T12401] bridge2: entered allmulticast mode [ 617.031894][T12401] xfrm1: entered allmulticast mode [ 617.050150][T12401] bridge3: left promiscuous mode [ 617.060574][T12401] bond3: entered allmulticast mode [ 617.093078][T12401] bond4: entered allmulticast mode [ 617.121616][T12401] sit1: entered allmulticast mode [ 617.143447][T12401] vlan2: left promiscuous mode [ 617.258496][T12409] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 618.432902][T12440] syzkaller0: entered promiscuous mode [ 618.462666][T12440] syzkaller0: entered allmulticast mode [ 622.177826][T12480] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 623.184115][T12492] loop6: detected capacity change from 0 to 1024 [ 623.787797][T12492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 623.800418][T12492] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.211486][T12503] EXT4-fs error (device loop6): ext4_map_blocks:718: inode #15: block 3: comm syz.6.1791: lblock 3 mapped to illegal pblock 3 (length 3) [ 624.404180][T12503] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 624.416998][T12503] EXT4-fs (loop6): This should not happen!! Data will be lost [ 624.416998][T12503] [ 624.513562][ T41] EXT4-fs error (device loop6): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 624.549425][ T41] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 624.568436][ T41] EXT4-fs (loop6): This should not happen!! Data will be lost [ 624.568436][ T41] [ 624.606406][ T8072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 624.633432][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.639978][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.322688][T12543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1801'. [ 635.306815][ T5138] udevd[5138]: worker [10873] /devices/virtual/block/nbd1 is taking a long time [ 635.907502][ T24] block nbd1: Possible stuck request ffff888021d70000: control (read@1024,1024B). Runtime 60 seconds [ 635.918532][ T24] block nbd1: Possible stuck request ffff888021d70200: control (read@2048,1024B). Runtime 60 seconds [ 635.929576][ T24] block nbd1: Possible stuck request ffff888021d70400: control (read@3072,1024B). Runtime 60 seconds [ 635.940562][ T24] block nbd1: Possible stuck request ffff888021d78000: control (read@0,1024B). Runtime 60 seconds [ 636.383396][T12587] syz.0.1812: attempt to access beyond end of device [ 636.383396][T12587] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 636.396645][T12587] F2FS-fs (loop1): Unable to read 1th superblock [ 636.403427][T12587] syz.0.1812: attempt to access beyond end of device [ 636.403427][T12587] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 636.416681][T12587] F2FS-fs (loop1): Unable to read 2th superblock [ 639.828674][T12602] xt_SECMARK: invalid mode: 2 [ 640.366978][T12614] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 642.169636][T12633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1824'. [ 643.709201][T12639] loop6: detected capacity change from 0 to 64 [ 648.384774][ T27] audit: type=1326 audit(1765097397.912:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="syz.8.1833" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f711a38f749 code=0x0 [ 648.662319][T12678] netlink: 'syz.8.1833': attribute type 10 has an invalid length. [ 648.706021][T12678] bond2: (slave dummy0): Releasing active interface [ 648.760397][T12678] dummy0: entered allmulticast mode [ 648.779262][T12678] team0: Port device dummy0 added [ 649.014236][T12675] loop6: detected capacity change from 0 to 32768 [ 649.045023][T12675] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.1834 (12675) [ 649.178619][T12675] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 649.192936][T12675] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 649.204079][T12675] BTRFS info (device loop6): force zlib compression, level 3 [ 649.218301][T12675] BTRFS info (device loop6): force clearing of disk cache [ 649.229525][T12675] BTRFS info (device loop6): setting nodatasum [ 649.239516][T12675] BTRFS info (device loop6): allowing degraded mounts [ 649.499964][T12686] /dev/nullb0: Can't lookup blockdev [ 649.524817][T12675] BTRFS info (device loop6): enabling disk space caching [ 649.620663][T12675] BTRFS info (device loop6): disk space caching is enabled [ 650.338376][T12675] BTRFS info (device loop6): auto enabling async discard [ 650.367969][T12675] BTRFS info (device loop6): rebuilding free space tree [ 650.406058][T12675] BTRFS info (device loop6): disabling free space tree [ 650.413032][T12675] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 650.428361][T12675] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 651.013640][T12715] BTRFS info (device loop6): balance: start -sconvert=raid0,soft,usage=255,usage=255..0,devid=0,vrange=18446744073709551614..18446744073709551612 [ 651.040333][T12715] BTRFS info (device loop6): balance: ended with status: 0 [ 651.489031][ T8072] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 654.904328][ T5773] Bluetooth: hci3: unexpected event for opcode 0x0c7d [ 655.748661][T12731] loop8: detected capacity change from 0 to 32768 [ 656.014273][T12100] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by udevd (12100) [ 656.871698][T12758] loop8: detected capacity change from 0 to 512 [ 657.014394][T12758] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.092763][T12758] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.137502][ T27] audit: type=1326 audit(1765097406.662:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.3.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39678f749 code=0x7ffc0000 [ 657.306455][ T27] audit: type=1326 audit(1765097406.662:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.3.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc39678f749 code=0x7ffc0000 [ 658.644775][ T27] audit: type=1326 audit(1765097406.662:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.3.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc39678f783 code=0x7ffc0000 [ 658.706481][ T9309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.758356][ T27] audit: type=1326 audit(1765097406.662:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.3.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc39678e1ff code=0x7ffc0000 [ 658.802043][ T27] audit: type=1326 audit(1765097406.672:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.3.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc39678f7d7 code=0x7ffc0000 [ 658.827384][ T27] audit: type=1326 audit(1765097406.672:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.3.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc39678df90 code=0x7ffc0000 [ 658.960946][ T27] audit: type=1326 audit(1765097406.672:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.3.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc39678f34b code=0x7ffc0000 [ 658.988308][ T27] audit: type=1326 audit(1765097406.672:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.3.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc39678e3aa code=0x7ffc0000 [ 659.030999][ T27] audit: type=1326 audit(1765097406.672:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.3.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc39678e3aa code=0x7ffc0000 [ 659.167667][ T27] audit: type=1326 audit(1765097406.672:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12764 comm="syz.3.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39678f749 code=0x7ffc0000 [ 660.292721][T12785] tipc: Enabled bearer , priority 0 [ 660.302661][T12785] syzkaller0: entered promiscuous mode [ 660.311722][T12785] syzkaller0: entered allmulticast mode [ 660.324652][T12785] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 661.803043][T12785] tipc: Resetting bearer [ 661.875587][T12785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.971476][T12783] tipc: Resetting bearer [ 662.044912][T12783] tipc: Disabling bearer [ 665.542548][T12816] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1868'. [ 666.065477][T12817] syz.0.1867 (12817) used greatest stack depth: 17776 bytes left [ 667.474171][ T24] block nbd1: Possible stuck request ffff888021d70000: control (read@1024,1024B). Runtime 90 seconds [ 667.514327][ T24] block nbd1: Possible stuck request ffff888021d70200: control (read@2048,1024B). Runtime 90 seconds [ 667.566479][ T24] block nbd1: Possible stuck request ffff888021d70400: control (read@3072,1024B). Runtime 90 seconds [ 667.578298][ T24] block nbd1: Possible stuck request ffff888021d78000: control (read@0,1024B). Runtime 90 seconds [ 669.078709][T12838] autofs4:pid:12838:autofs_fill_super: called with bogus options [ 672.387189][T12866] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1878'. [ 676.639762][T12900] __vm_enough_memory: pid: 12900, comm: syz.3.1888, not enough memory for the allocation [ 679.430031][T12908] tipc: Enabling of bearer rejected, failed to enable media [ 680.178537][T12917] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1890'. [ 680.303049][T12921] tipc: Enabling of bearer rejected, already enabled [ 683.405618][T12938] x_tables: duplicate underflow at hook 3 [ 686.107870][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.114255][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.634573][T12953] syzkaller0: entered promiscuous mode [ 686.652900][T12953] syzkaller0: entered allmulticast mode [ 686.714010][T12955] loop8: detected capacity change from 0 to 764 [ 686.725272][T12953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.734149][T12953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.775020][T12955] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 686.796823][T12953] tipc: Enabled bearer , priority 0 [ 686.855598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.906916][T12958] tipc: Resetting bearer [ 687.045307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.057123][T12952] tipc: Resetting bearer [ 687.097737][ T5773] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 687.143678][T12952] tipc: Disabling bearer [ 687.466524][T12964] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 692.425431][ T5773] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 692.434477][ T5773] Bluetooth: hci3: Injecting HCI hardware error event [ 692.444670][ T5773] Bluetooth: hci3: hardware error 0x00 [ 694.505771][ T5773] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 694.856920][T12992] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 697.646453][ T24] block nbd1: Possible stuck request ffff888021d70000: control (read@1024,1024B). Runtime 120 seconds [ 697.657511][ T24] block nbd1: Possible stuck request ffff888021d70200: control (read@2048,1024B). Runtime 120 seconds [ 697.668546][ T24] block nbd1: Possible stuck request ffff888021d70400: control (read@3072,1024B). Runtime 120 seconds [ 697.682824][ T24] block nbd1: Possible stuck request ffff888021d78000: control (read@0,1024B). Runtime 120 seconds [ 700.948974][T13035] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1922'. [ 700.986470][T13035] netlink: get zone limit has 8 unknown bytes [ 701.247154][T13040] overlayfs: failed to clone lowerpath [ 701.344196][T13041] overlayfs: failed to clone lowerpath [ 705.530490][T13063] autofs4:pid:13063:autofs_fill_super: called with bogus options [ 710.218503][T13098] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1940'. [ 710.457091][T13101] xt_l2tp: invalid flags combination: 8 [ 711.589402][T13098] workqueue: Failed to create a rescuer kthread for wq "nbd63-recv": -EINTR [ 711.593806][T13098] block (null): Could not allocate knbd recv work queue. [ 711.611321][T13098] nbd: failed to add new device [ 714.431918][T13124] netlink: del zone limit has 8 unknown bytes [ 716.292265][T13140] loop8: detected capacity change from 0 to 1024 [ 716.302394][T13140] EXT4-fs: Ignoring removed bh option [ 716.321969][T13140] EXT4-fs: Ignoring removed nobh option [ 716.387893][T13140] EXT4-fs: Ignoring removed bh option [ 716.444789][T13140] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 717.123054][T13140] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.588047][T13153] netlink: 'syz.6.1946': attribute type 11 has an invalid length. [ 719.259762][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 719.259777][ T27] audit: type=1800 audit(1765097468.792:224): pid=13154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1951" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 719.376737][ T9309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.547958][T13177] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 723.912765][T13189] loop8: detected capacity change from 0 to 512 [ 725.329155][T13198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 725.572008][T13198] macvlan2: entered promiscuous mode [ 725.585577][T13198] macvlan2: entered allmulticast mode [ 725.751109][T13198] bond3: entered promiscuous mode [ 726.145422][T13198] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 726.180627][T13198] team0: Port device macvlan2 added [ 726.259845][T13203] ip6gretap1: entered promiscuous mode [ 726.267083][T13203] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 728.032772][T13218] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 728.339868][ T24] block nbd1: Possible stuck request ffff888021d70000: control (read@1024,1024B). Runtime 150 seconds [ 728.351338][ T24] block nbd1: Possible stuck request ffff888021d70200: control (read@2048,1024B). Runtime 150 seconds [ 728.362764][ T24] block nbd1: Possible stuck request ffff888021d70400: control (read@3072,1024B). Runtime 150 seconds [ 728.374379][ T24] block nbd1: Possible stuck request ffff888021d78000: control (read@0,1024B). Runtime 150 seconds [ 731.148889][T13242] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1973'. [ 731.670412][T13250] 8021q: adding VLAN 0 to HW filter on device bond5 [ 731.738988][T13250] macvlan2: entered promiscuous mode [ 731.744546][T13250] macvlan2: entered allmulticast mode [ 731.750878][T13250] bond5: entered promiscuous mode [ 731.757425][T13250] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 731.773826][T13250] team0: Port device macvlan2 added [ 731.919610][T13250] ip6gretap1: entered promiscuous mode [ 731.942877][T13250] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 733.459431][T13273] macvlan3: entered promiscuous mode [ 733.464831][T13273] bridge0: entered promiscuous mode [ 733.547698][T13277] loop8: detected capacity change from 0 to 64 [ 737.198340][T13300] xt_ecn: cannot match TCP bits for non-tcp packets [ 737.762604][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1990'. [ 739.463003][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1990'. [ 739.553579][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1990'. [ 739.565317][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1990'. [ 739.946788][T13315] lo: entered allmulticast mode [ 739.951873][T13315] tunl0: entered allmulticast mode [ 739.991179][T13315] gre0: entered allmulticast mode [ 740.015566][T13315] gretap0: entered allmulticast mode [ 740.034501][T13315] erspan0: entered allmulticast mode [ 740.058899][T13315] ip_vti0: entered allmulticast mode [ 740.065058][T13315] ip6_vti0: entered allmulticast mode [ 740.071398][T13315] sit0: entered allmulticast mode [ 740.076746][T13315] ip6tnl0: entered allmulticast mode [ 740.082190][T13315] ip6gre0: entered allmulticast mode [ 740.087739][T13315] syz_tun: entered allmulticast mode [ 740.093211][T13315] ip6gretap0: entered allmulticast mode [ 740.098989][T13315] vcan0: entered allmulticast mode [ 740.104243][T13315] bond0: entered allmulticast mode [ 740.109681][T13315] team0: entered allmulticast mode [ 740.114823][T13315] geneve0: entered allmulticast mode [ 740.120511][T13315] dummy0: entered allmulticast mode [ 740.327983][T13315] nlmon0: entered allmulticast mode [ 740.736284][T13315] caif0: entered allmulticast mode [ 740.741618][T13315] batadv0: entered allmulticast mode [ 740.800145][T13315] vxcan0: entered allmulticast mode [ 740.805651][T13315] vxcan1: entered allmulticast mode [ 740.810992][T13315] veth0: entered allmulticast mode [ 740.823778][T13315] veth1: entered allmulticast mode [ 740.829598][T13315] wg0: entered allmulticast mode [ 740.834843][T13315] wg1: entered allmulticast mode [ 740.840451][T13315] wg2: entered allmulticast mode [ 740.847554][T13315] veth0_to_bridge: entered allmulticast mode [ 740.853739][T13315] bridge_slave_0: entered allmulticast mode [ 740.875472][T13315] veth1_to_bridge: entered allmulticast mode [ 740.881670][T13315] bridge_slave_1: entered allmulticast mode [ 740.905817][T13315] veth0_to_bond: entered allmulticast mode [ 740.911913][T13315] bond_slave_0: entered allmulticast mode [ 740.925451][T13315] veth1_to_bond: entered allmulticast mode [ 740.931549][T13315] bond_slave_1: entered allmulticast mode [ 740.945459][T13315] veth0_to_team: entered allmulticast mode [ 740.951705][T13315] team_slave_0: entered allmulticast mode [ 740.967722][T13315] veth1_to_team: entered allmulticast mode [ 740.973728][T13315] team_slave_1: entered allmulticast mode [ 740.995422][T13315] veth0_to_batadv: entered allmulticast mode [ 741.001605][T13315] batadv_slave_0: entered allmulticast mode [ 741.021819][T13315] veth1_to_batadv: entered allmulticast mode [ 741.036015][T13315] batadv_slave_1: entered allmulticast mode [ 741.065845][T13315] xfrm0: entered allmulticast mode [ 741.073451][T13315] veth0_to_hsr: entered allmulticast mode [ 741.087674][T13315] hsr_slave_0: entered allmulticast mode [ 741.103545][T13315] veth1_to_hsr: entered allmulticast mode [ 741.117341][T13315] hsr_slave_1: entered allmulticast mode [ 741.131164][T13315] hsr0: entered allmulticast mode [ 741.140551][T13315] veth1_virt_wifi: entered allmulticast mode [ 741.155451][T13315] veth0_virt_wifi: entered allmulticast mode [ 741.166213][T13315] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 741.183284][T13315] veth1_vlan: entered allmulticast mode [ 741.194346][T13315] veth0_vlan: entered allmulticast mode [ 741.201699][T13315] vlan0: entered allmulticast mode [ 741.207448][T13315] vlan1: entered allmulticast mode [ 741.212871][T13315] macvlan0: entered allmulticast mode [ 741.218956][T13315] macvlan1: entered allmulticast mode [ 741.225672][T13315] ipvlan0: entered allmulticast mode [ 741.231315][T13315] ipvlan1: entered allmulticast mode [ 741.237577][T13315] veth1_macvtap: entered allmulticast mode [ 741.243739][T13315] veth0_macvtap: entered allmulticast mode [ 741.250481][T13315] macvtap0: entered allmulticast mode [ 741.256461][T13315] macsec0: entered allmulticast mode [ 741.262539][T13315] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.272875][T13315] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.287733][T13315] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.539664][T13315] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.563304][T13315] geneve1: entered allmulticast mode [ 741.768244][T13315] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 741.775945][T13315] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 741.783605][T13315] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 741.869079][T13315] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 741.877259][T13315] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 741.884695][T13315] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 741.901863][T13315] bridge1: entered allmulticast mode [ 741.933794][T13315] batadv1: entered allmulticast mode [ 742.215340][T13315] macvlan2: entered allmulticast mode [ 742.260070][T13315] bond1: entered allmulticast mode [ 742.285739][T13315] bond2: entered allmulticast mode [ 742.345855][T13315] macvlan3: left promiscuous mode [ 742.350934][T13315] macvlan3: entered allmulticast mode [ 742.399129][T13315] vxlan0: entered allmulticast mode [ 743.069653][T13341] loop6: detected capacity change from 0 to 512 [ 743.522880][T13341] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.560613][T13341] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 744.518679][ T8072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.322589][T13365] loop6: detected capacity change from 0 to 512 [ 747.470457][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.477471][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.195786][T13408] 9pnet_fd: Insufficient options for proto=fd [ 753.185311][ T6071] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 753.322582][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2012'. [ 753.390126][ T6071] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 753.410085][ T6071] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.438965][ T6071] usb 7-1: Product: syz [ 753.449346][ T6071] usb 7-1: Manufacturer: syz [ 753.454020][ T6071] usb 7-1: SerialNumber: syz [ 753.488144][ T6071] usb 7-1: config 0 descriptor?? [ 754.070192][ T6071] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 754.095954][T13419] loop8: detected capacity change from 0 to 1024 [ 754.116257][T13419] hfsplus: invalid length 32517 has been corrected to 255 [ 754.193421][T13419] hfsplus: invalid length 32517 has been corrected to 255 [ 757.682733][ T6071] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 758.701538][ T6071] usb 7-1: USB disconnect, device number 5 [ 762.508981][ T24] block nbd1: Possible stuck request ffff888021d70000: control (read@1024,1024B). Runtime 180 seconds [ 762.536391][ T24] block nbd1: Possible stuck request ffff888021d70200: control (read@2048,1024B). Runtime 180 seconds [ 762.547862][ T24] block nbd1: Possible stuck request ffff888021d70400: control (read@3072,1024B). Runtime 180 seconds [ 762.561195][ T24] block nbd1: Possible stuck request ffff888021d78000: control (read@0,1024B). Runtime 180 seconds [ 763.514961][T13466] tipc: Enabled bearer , priority 0 [ 763.530557][T13466] syzkaller0: entered promiscuous mode [ 763.536463][T13466] syzkaller0: entered allmulticast mode [ 763.684744][T13466] tipc: Resetting bearer [ 763.701680][T13463] tipc: Resetting bearer [ 763.743590][T13463] tipc: Disabling bearer [ 763.773698][T13479] netlink: 'syz.3.2035': attribute type 10 has an invalid length. [ 764.276622][ T27] audit: type=1326 audit(1765097513.802:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13482 comm="syz.6.2036" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d0118f749 code=0x0 [ 764.720039][T13491] binder: 13490:13491 ioctl c0306201 200000000080 returned -14 [ 773.681174][T13585] loop6: detected capacity change from 0 to 4096 [ 773.693407][T13585] EXT4-fs (loop6): Test dummy encryption mode enabled [ 773.742340][T13585] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 773.750675][T13585] System zones: 0-5 [ 773.820151][T13585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.935041][T13585] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 774.532963][T13592] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 775.025662][ T8072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.307759][T13601] loop8: detected capacity change from 0 to 64 [ 775.354880][T13601] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 776.322359][T13612] team0: left allmulticast mode [ 776.534548][T13617] netlink: 320 bytes leftover after parsing attributes in process `syz.0.2062'. [ 777.230529][T13625] binder: 13613:13625 ioctl 40182103 0 returned -22 [ 778.068757][T13636] macvlan4: entered promiscuous mode [ 781.432424][T13660] xt_ecn: cannot match TCP bits for non-tcp packets [ 785.887198][ T5138] udevd[5138]: worker [10873] /devices/virtual/block/nbd1 timeout; kill it [ 785.912541][ T5138] udevd[5138]: seq 15719 '/devices/virtual/block/nbd1' killed [ 787.730890][T13703] team0: Device macvlan2 failed to change mtu [ 788.480081][T13709] xt_ecn: cannot match TCP bits for non-tcp packets [ 788.499780][T13706] loop8: detected capacity change from 0 to 512 [ 788.560670][T13706] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.2082: inode has both inline data and extents flags [ 788.592730][T13706] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2082: couldn't read orphan inode 15 (err -117) [ 788.728299][T13706] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.139314][T13718] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 789.853156][ T9309] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.484465][T13726] xt_CT: You must specify a L4 protocol and not use inversions on it [ 792.746184][T13738] loop8: detected capacity change from 0 to 512 [ 793.191200][ T24] block nbd1: Possible stuck request ffff888021d70000: control (read@1024,1024B). Runtime 210 seconds [ 793.202989][ T24] block nbd1: Possible stuck request ffff888021d70200: control (read@2048,1024B). Runtime 210 seconds [ 793.214220][ T24] block nbd1: Possible stuck request ffff888021d70400: control (read@3072,1024B). Runtime 210 seconds [ 793.225338][ T24] block nbd1: Possible stuck request ffff888021d78000: control (read@0,1024B). Runtime 210 seconds [ 795.613451][T13769] x_tables: duplicate underflow at hook 3 [ 795.786373][T13771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 803.061427][ T6071] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 803.792735][ T6071] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.826682][ T6071] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.837248][ T6071] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 803.846660][ T6071] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.865033][ T6071] usb 7-1: config 0 descriptor?? [ 804.295080][ T6071] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 804.307590][ T6071] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 804.385241][ T6071] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected [ 804.393641][ T6071] hid-steam 0003:28DE:1142.0003: No HID_FEATURE_REPORT submitted - nothing to read [ 804.418037][ T6071] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 804.436007][ T6071] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 805.737929][ T6066] usb 7-1: reset high-speed USB device number 6 using dummy_hcd [ 805.905417][ T6066] usb 7-1: device descriptor read/64, error -32 [ 806.215862][ T6066] usb 7-1: reset high-speed USB device number 6 using dummy_hcd [ 806.373913][T13849] 9pnet_fd: Insufficient options for proto=fd [ 808.127251][T13860] netlink: 'syz.0.2121': attribute type 3 has an invalid length. [ 808.135568][T13860] netlink: 558 bytes leftover after parsing attributes in process `syz.0.2121'. [ 808.149817][ T6071] usb 7-1: USB disconnect, device number 6 [ 811.544698][ T24] null_blk: rq ffff888022730000 timed out [ 811.550639][ T24] blk_print_req_error: 47 callbacks suppressed [ 811.550672][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 811.582294][ T24] null_blk: rq ffff888022730180 timed out [ 811.588211][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 811.599058][ T24] null_blk: rq ffff888022730300 timed out [ 811.604848][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 811.617464][ T24] null_blk: rq ffff888022730480 timed out [ 811.623261][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 811.633905][ T24] null_blk: rq ffff888022730600 timed out [ 811.639739][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 811.657693][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.664044][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.670579][ T24] null_blk: rq ffff888022730780 timed out [ 811.676457][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 811.687357][ T24] null_blk: rq ffff888022730900 timed out [ 811.693144][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 811.703959][ T24] null_blk: rq ffff888022730a80 timed out [ 811.710008][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 811.730762][ T24] null_blk: rq ffff888022730c00 timed out [ 811.736817][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 811.754086][ T24] null_blk: rq ffff888022730d80 timed out [ 811.760125][ T24] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 1 [ 811.770896][ T24] null_blk: rq ffff888022730f00 timed out [ 811.777065][ T24] null_blk: rq ffff888022731080 timed out [ 811.782968][ T24] null_blk: rq ffff888022731200 timed out [ 811.789263][ T24] null_blk: rq ffff888022731380 timed out [ 811.795106][ T24] null_blk: rq ffff888022731500 timed out [ 811.801144][ T24] null_blk: rq ffff888022731680 timed out [ 811.818301][ T24] null_blk: rq ffff888022731800 timed out [ 811.824651][ T24] null_blk: rq ffff888022731980 timed out [ 811.833424][ T24] null_blk: rq ffff888022731b00 timed out [ 811.839441][ T24] null_blk: rq ffff888022731c80 timed out [ 811.845471][ T24] null_blk: rq ffff888022731e00 timed out [ 811.851474][ T24] null_blk: rq ffff888022731f80 timed out [ 811.857681][ T24] null_blk: rq ffff888022732100 timed out [ 811.863602][ T24] null_blk: rq ffff888022732280 timed out [ 811.871994][ T24] null_blk: rq ffff888022732400 timed out [ 811.878084][ T24] null_blk: rq ffff888022732580 timed out [ 811.884015][ T24] null_blk: rq ffff888022732700 timed out [ 811.892084][ T24] null_blk: rq ffff888022732880 timed out [ 811.898161][ T24] null_blk: rq ffff888022732a00 timed out [ 811.901174][ T6071] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected [ 811.903945][ T24] null_blk: rq ffff888022732b80 timed out [ 811.918495][ T24] null_blk: rq ffff888022732d00 timed out [ 811.924258][ T24] null_blk: rq ffff888022732e80 timed out [ 811.931307][ T24] null_blk: rq ffff888022733000 timed out [ 811.938693][ T24] null_blk: rq ffff888022733180 timed out [ 811.944563][ T24] null_blk: rq ffff888022733300 timed out [ 811.950586][ T24] null_blk: rq ffff888022733480 timed out [ 811.956553][ T24] null_blk: rq ffff888022733600 timed out [ 811.962315][ T24] null_blk: rq ffff888022733780 timed out [ 811.968231][ T24] null_blk: rq ffff888022733900 timed out [ 811.975283][ T24] null_blk: rq ffff888022733a80 timed out [ 811.981435][ T24] null_blk: rq ffff888022733c00 timed out [ 811.987310][ T24] null_blk: rq ffff888022733d80 timed out [ 811.993160][ T24] null_blk: rq ffff888022733f00 timed out [ 812.000145][ T24] null_blk: rq ffff888022734080 timed out [ 812.006035][ T24] null_blk: rq ffff888022734200 timed out [ 824.042009][ T24] block nbd1: Possible stuck request ffff888021d70000: control (read@1024,1024B). Runtime 240 seconds [ 824.053114][ T24] block nbd1: Possible stuck request ffff888021d70200: control (read@2048,1024B). Runtime 240 seconds [ 824.064208][ T24] block nbd1: Possible stuck request ffff888021d70400: control (read@3072,1024B). Runtime 240 seconds [ 824.075399][ T24] block nbd1: Possible stuck request ffff888021d78000: control (read@0,1024B). Runtime 240 seconds [ 833.873533][T13996] netlink: 'syz.3.2155': attribute type 3 has an invalid length. [ 833.881408][T13996] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2155'. [ 835.771480][T14013] loop6: detected capacity change from 0 to 512 [ 837.808397][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2165'. [ 838.707488][T14046] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 839.237649][T14046] overlayfs: missing 'lowerdir' [ 841.192278][T14063] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 847.012105][T14117] 9pnet_virtio: no channels available for device syz [ 847.917761][T14121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 850.081365][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2191'. [ 853.077068][T14152] (null): rxe_set_mtu: Set mtu to 1024 [ 853.090180][T14152] ip6gretap0 speed is unknown, defaulting to 1000 [ 853.118974][T14152] ip6gretap0 speed is unknown, defaulting to 1000 [ 853.138380][T14152] ip6gretap0 speed is unknown, defaulting to 1000 [ 853.723550][T14152] infiniband syz2: set down [ 853.728198][T14152] infiniband syz2: added ip6gretap0 [ 853.738526][ T6075] ip6gretap0 speed is unknown, defaulting to 1000 [ 853.779915][T14152] RDS/IB: syz2: added [ 853.784077][T14152] smc: adding ib device syz2 with port count 1 [ 853.790360][T14152] smc: ib device syz2 port 1 has pnetid [ 853.797254][T14152] ip6gretap0 speed is unknown, defaulting to 1000 [ 853.890965][T14152] ip6gretap0 speed is unknown, defaulting to 1000 [ 853.974427][T14152] ip6gretap0 speed is unknown, defaulting to 1000 [ 854.059639][T14152] ip6gretap0 speed is unknown, defaulting to 1000 [ 854.145500][ T6075] ip6gretap0 speed is unknown, defaulting to 1000 [ 854.478507][ T24] block nbd1: Possible stuck request ffff888021d70000: control (read@1024,1024B). Runtime 270 seconds [ 854.523802][ T24] block nbd1: Possible stuck request ffff888021d70200: control (read@2048,1024B). Runtime 270 seconds [ 854.535378][ T24] block nbd1: Possible stuck request ffff888021d70400: control (read@3072,1024B). Runtime 270 seconds [ 854.546880][ T24] block nbd1: Possible stuck request ffff888021d78000: control (read@0,1024B). Runtime 270 seconds [ 866.371166][T14221] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 870.497350][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.505471][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.579320][T14244] ptrace attach of "./syz-executor exec"[5762] was attempted by "./syz-executor exec"[14244] [ 873.013314][T14274] loop6: detected capacity change from 0 to 64 [ 873.594208][T14270] loop8: detected capacity change from 0 to 64 [ 874.789664][T14273] syz.6.2224: attempt to access beyond end of device [ 874.789664][T14273] loop6: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 874.803516][T14273] Buffer I/O error on dev loop6, logical block 1295, async page read [ 874.819087][T14270] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop8 [ 874.854473][T14273] syz.6.2224: attempt to access beyond end of device [ 874.854473][T14273] loop6: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 874.867788][T14273] Buffer I/O error on dev loop6, logical block 1295, async page read [ 874.938864][ T27] audit: type=1800 audit(1765097624.412:226): pid=14273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2224" name="file2" dev="loop6" ino=6 res=0 errno=0 [ 877.060350][T14293] binder: Bad value for 'stats' [ 877.971513][T14305] netlink: 2384 bytes leftover after parsing attributes in process `syz.8.2231'. [ 881.505387][ T6075] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 882.198299][T14326] 9pnet_fd: Insufficient options for proto=fd [ 882.525697][ T6075] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 882.538145][ T6075] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 882.548156][ T6075] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 882.557481][ T6075] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.627254][T14316] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 882.658363][ T6075] usb 9-1: Quirk or no altest; falling back to MIDI 1.0 [ 886.190840][T11002] usb 9-1: USB disconnect, device number 6 [ 886.288100][ T24] block nbd1: Possible stuck request ffff888021d70000: control (read@1024,1024B). Runtime 300 seconds [ 886.299270][ T24] block nbd1: Possible stuck request ffff888021d70200: control (read@2048,1024B). Runtime 300 seconds [ 886.310747][ T24] block nbd1: Possible stuck request ffff888021d70400: control (read@3072,1024B). Runtime 300 seconds [ 886.322013][ T24] block nbd1: Possible stuck request ffff888021d78000: control (read@0,1024B). Runtime 300 seconds [ 891.352750][T14382] pimreg: entered allmulticast mode [ 894.057685][T14405] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 895.581977][T14416] overlayfs: failed to clone upperpath [ 896.431392][T14423] loop6: detected capacity change from 0 to 4096 [ 899.287446][T14449] hub 1-0:1.0: USB hub found [ 899.293967][T14449] hub 1-0:1.0: 1 port detected [ 902.014394][T14483] No source specified [ 904.538475][T14505] loop8: detected capacity change from 0 to 2048 [ 905.550795][T14505] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 905.568865][T14505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 906.261604][T14516] 9pnet_virtio: no channels available for device syz [ 906.419536][T14509] mkiss: ax0: crc mode is auto. [ 909.206591][T14534] ip6erspan0: entered promiscuous mode [ 910.773710][T14550] autofs4:pid:14550:autofs_fill_super: called with bogus options [ 912.402124][T14559] overlayfs: failed to clone lowerpath [ 914.654317][T14572] overlayfs: failed to clone lowerpath [ 916.430308][ T24] block nbd1: Possible stuck request ffff888021d70000: control (read@1024,1024B). Runtime 330 seconds [ 916.447121][ T24] block nbd1: Possible stuck request ffff888021d70200: control (read@2048,1024B). Runtime 330 seconds [ 916.468713][ T24] block nbd1: Possible stuck request ffff888021d70400: control (read@3072,1024B). Runtime 330 seconds [ 916.480048][ T24] block nbd1: Possible stuck request ffff888021d78000: control (read@0,1024B). Runtime 330 seconds [ 917.257601][T14588] (null): rxe_set_mtu: Set mtu to 1024 [ 917.265905][T14588] rdma_rxe: rxe_newlink: failed to add caif0 [ 918.577815][T14596] tty tty33: ldisc open failed (-12), clearing slot 32 [ 918.585992][T14597] tty tty33: ldisc open failed (-12), clearing slot 32 [ 928.210928][T14608] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 928.545827][T14613] loop8: detected capacity change from 0 to 4096 [ 931.615232][ T6075] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 931.791365][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.871373][T14638] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 932.038652][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.458332][ T6075] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 932.500847][ T6075] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 932.541247][ T6075] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 932.570347][ T6075] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.599315][T14639] 9pnet_virtio: no channels available for device syz [ 932.929133][ T6075] usb 9-1: USB disconnect, device number 7 [ 939.073061][T14679] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 939.752113][T14688] loop6: detected capacity change from 0 to 2048 [ 939.793852][T14688] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 939.820152][T14688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 946.621586][T14720] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 946.697689][ T24] block nbd1: Possible stuck request ffff888021d70000: control (read@1024,1024B). Runtime 360 seconds [ 946.708765][ T24] block nbd1: Possible stuck request ffff888021d70200: control (read@2048,1024B). Runtime 360 seconds [ 946.720043][ T24] block nbd1: Possible stuck request ffff888021d70400: control (read@3072,1024B). Runtime 360 seconds [ 946.731364][ T24] block nbd1: Possible stuck request ffff888021d78000: control (read@0,1024B). Runtime 360 seconds [ 946.850161][T14727] loop8: detected capacity change from 0 to 512 [ 946.929940][T14727] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 947.955768][ T9181] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 950.249504][ T28] INFO: task udevd:10873 blocked for more than 143 seconds. [ 950.273500][ T28] Not tainted syzkaller #0 [ 950.298916][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 950.330986][ T28] task:udevd state:D stack:23560 pid:10873 ppid:5138 flags:0x00004006 [ 950.371277][ T28] Call Trace: [ 950.385223][ T28] [ 950.402467][ T28] __schedule+0x14d2/0x44d0 [ 950.424021][ T28] ? asan.module_dtor+0x20/0x20 [ 950.452200][ T28] ? mark_lock+0x94/0x320 [ 950.456791][ T28] ? lock_chain_count+0x20/0x20 [ 950.461786][ T28] ? _raw_spin_lock_irq+0xaf/0xe0 [ 950.469193][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 950.476482][ T28] schedule+0xbd/0x170 [ 950.484924][ T28] io_schedule+0x80/0xd0 [ 950.489740][ T28] folio_wait_bit_common+0x6eb/0xf70 [ 950.495556][ T28] ? folio_wait_bit+0x30/0x30 [ 950.500746][ T28] ? _compound_head+0x120/0x120 [ 950.506450][ T28] ? filemap_add_folio+0x192/0x3c0 [ 950.512056][ T28] ? __filemap_get_folio+0x70a/0xbc0 [ 950.524301][ T28] ? blkdev_writepage+0x30/0x30 [ 950.789019][ T28] do_read_cache_folio+0x1c0/0x7e0 [ 950.812405][ T28] ? blkdev_writepage+0x30/0x30 [ 950.833240][ T28] read_part_sector+0xd2/0x350 [ 950.853434][ T28] adfspart_check_POWERTEC+0x8d/0xf00 [ 950.880012][ T28] ? adfspart_check_ADFS+0x660/0x660 [ 950.905054][ T28] ? put_partition+0x350/0x350 [ 950.928162][ T28] ? alloc_pages+0x4dc/0x740 [ 950.946586][ T28] bdev_disk_changed+0x73a/0x1410 [ 950.968727][ T28] ? bdev_resize_partition+0xf0/0xf0 [ 950.991440][ T28] ? iput+0x347/0x920 [ 951.003710][ T28] blkdev_get_whole+0x30d/0x390 [ 951.008724][ T28] blkdev_get_by_dev+0x279/0x600 [ 951.013711][ T28] blkdev_open+0x152/0x360 [ 951.018225][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 951.022834][ T28] do_dentry_open+0x8c6/0x1500 [ 951.027676][ T28] path_openat+0x274b/0x3190 [ 951.032307][ T28] ? __kasan_slab_alloc+0x6c/0x80 [ 951.037414][ T28] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 951.043633][ T28] ? verify_lock_unused+0x140/0x140 [ 951.048947][ T28] ? do_filp_open+0x3d0/0x3d0 [ 951.053661][ T28] ? __virt_addr_valid+0x18c/0x540 [ 951.058896][ T28] do_filp_open+0x1c5/0x3d0 [ 951.063434][ T28] ? vfs_tmpfile+0x490/0x490 [ 951.080786][ T28] ? _raw_spin_unlock+0x28/0x40 [ 951.095355][ T28] ? alloc_fd+0x58f/0x630 [ 951.099869][ T28] do_sys_openat2+0x12c/0x1c0 [ 951.104589][ T28] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 951.147725][ T28] ? do_sys_open+0xe0/0xe0 [ 951.155401][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 951.161555][ T28] ? lock_chain_count+0x20/0x20 [ 951.174043][ T28] __x64_sys_openat+0x139/0x160 [ 951.179436][ T28] do_syscall_64+0x55/0xb0 [ 951.184029][ T28] ? clear_bhb_loop+0x40/0x90 [ 951.189442][ T28] ? clear_bhb_loop+0x40/0x90 [ 951.194383][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 951.200825][ T28] RIP: 0033:0x7f26272a7407 [ 951.205902][ T28] RSP: 002b:00007fff14865f90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 951.225643][ T28] RAX: ffffffffffffffda RBX: 00007f2627a24880 RCX: 00007f26272a7407 [ 951.238261][ T28] RDX: 00000000000a0800 RSI: 0000557f84c3f2a0 RDI: ffffffffffffff9c [ 951.255873][ T28] RBP: 0000557f84c2b910 R08: 0000000000000000 R09: 0000000000000000 [ 951.275331][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557f84c3ee20 [ 951.289046][ T28] R13: 0000557f84c43410 R14: 0000000000000000 R15: 0000557f84c3ee20 [ 951.325277][ T28] [ 951.328431][ T28] [ 951.328431][ T28] Showing all locks held in the system: [ 951.343438][ T28] 1 lock held by khungtaskd/28: [ 951.348810][ T28] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 951.367059][ T28] 2 locks held by getty/5525: [ 951.371794][ T28] #0: ffff888030f1a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 951.391042][ T28] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 951.401674][ T28] 1 lock held by syz-executor/5763: [ 951.411886][ T28] 3 locks held by kworker/u4:50/9186: [ 951.419215][ T28] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 951.433782][ T28] #1: ffff8880b8f289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x20ee/0x44d0 [ 951.445053][ T28] #2: ffff8880b8f29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 951.461271][ T28] 1 lock held by udevd/10873: [ 951.479484][ T28] #0: ffff888021cf34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 951.500127][ T28] 1 lock held by syz.0.2336/14751: [ 951.516073][ T28] #0: ffff88807e4181a0 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x168/0x400 [ 951.541922][ T28] 5 locks held by syz.0.2336/14752: [ 951.559002][ T28] [ 951.564790][ T28] ============================================= [ 951.564790][ T28] [ 951.597002][ T28] NMI backtrace for cpu 1 [ 951.601381][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 951.608602][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 951.618675][ T28] Call Trace: [ 951.621965][ T28] [ 951.624902][ T28] dump_stack_lvl+0x16c/0x230 [ 951.629605][ T28] ? show_regs_print_info+0x20/0x20 [ 951.634816][ T28] ? load_image+0x3b0/0x3b0 [ 951.639339][ T28] nmi_cpu_backtrace+0x39b/0x3d0 [ 951.644287][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 951.650453][ T28] ? _printk+0xd0/0x110 [ 951.654621][ T28] ? load_image+0x3b0/0x3b0 [ 951.659143][ T28] ? load_image+0x3b0/0x3b0 [ 951.663667][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 951.669752][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 951.675747][ T28] watchdog+0xf41/0xf80 [ 951.679913][ T28] ? watchdog+0x1e1/0xf80 [ 951.684258][ T28] kthread+0x2fa/0x390 [ 951.688333][ T28] ? hungtask_pm_notify+0x90/0x90 [ 951.693370][ T28] ? kthread_blkcg+0xd0/0xd0 [ 951.697966][ T28] ret_from_fork+0x48/0x80 [ 951.702394][ T28] ? kthread_blkcg+0xd0/0xd0 [ 951.706992][ T28] ret_from_fork_asm+0x11/0x20 [ 951.711787][ T28] [ 951.715976][ T28] Sending NMI from CPU 1 to CPUs 0: [ 951.721227][ C0] NMI backtrace for cpu 0 [ 951.721238][ C0] CPU: 0 PID: 5763 Comm: syz-executor Not tainted syzkaller #0 [ 951.721254][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 951.721263][ C0] RIP: 0010:kasan_check_range+0x55/0x290 [ 951.721286][ C0] Code: e9 2f 41 81 f9 ff ff 01 00 0f 82 46 02 00 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 <49> c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d [ 951.721300][ C0] RSP: 0018:ffffc900043c70c8 EFLAGS: 00000082 [ 951.721313][ C0] RAX: 0000000000000001 RBX: 0000000000000005 RCX: ffffffff8167079c [ 951.721325][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90d94500 [ 951.721335][ C0] RBP: ffffc900043c7348 R08: ffffffff90d94507 R09: ffffffff90d94507 [ 951.721346][ C0] R10: dffffc0000000000 R11: fffffbfff21b28a0 R12: 0000000000000002 [ 951.721357][ C0] R13: ffff88802e1ee5c8 R14: 0000000000000021 R15: 1ffffffff21b28a0 [ 951.721369][ C0] FS: 000055555a766500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 951.721383][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.721394][ C0] CR2: 00007fc3975156c0 CR3: 0000000062179000 CR4: 00000000003506f0 [ 951.721408][ C0] Call Trace: [ 951.721413][ C0] [ 951.721421][ C0] __lock_acquire+0x94c/0x7c80 [ 951.721450][ C0] ? verify_lock_unused+0x140/0x140 [ 951.721468][ C0] ? cgroup_rstat_updated+0xd7/0x360 [ 951.721490][ C0] ? verify_lock_unused+0x140/0x140 [ 951.721511][ C0] lock_acquire+0x197/0x410 [ 951.721526][ C0] ? page_ext_get+0x22/0x2b0 [ 951.721548][ C0] ? read_lock_is_recursive+0x20/0x20 [ 951.721564][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 951.721582][ C0] ? pfn_valid+0xcd/0x420 [ 951.721598][ C0] ? page_ext_get+0x22/0x2b0 [ 951.721615][ C0] page_ext_get+0x3e/0x2b0 [ 951.721631][ C0] ? page_ext_get+0x22/0x2b0 [ 951.721648][ C0] page_table_check_set+0x51/0x6f0 [ 951.721668][ C0] copy_page_range+0x248d/0x3600 [ 951.721704][ C0] ? pfn_valid+0x450/0x450 [ 951.721723][ C0] ? mas_wr_store_entry+0x151/0x340 [ 951.721770][ C0] ? mas_store+0x34d/0x500 [ 951.721789][ C0] ? mas_empty_area_rev+0x1880/0x1880 [ 951.721814][ C0] ? up_write+0x1c3/0x410 [ 951.721833][ C0] ? anon_vma_interval_tree_verify+0x150/0x150 [ 951.721852][ C0] copy_mm+0x11a8/0x1ca0 [ 951.721890][ C0] ? copy_signal+0x680/0x680 [ 951.721904][ C0] ? lockdep_init_map_type+0xa1/0x880 [ 951.721927][ C0] ? __init_rwsem+0x122/0x160 [ 951.721949][ C0] ? copy_signal+0x556/0x680 [ 951.721965][ C0] copy_process+0x16d3/0x3d70 [ 951.721986][ C0] ? copy_process+0x945/0x3d70 [ 951.722005][ C0] ? __pidfd_prepare+0x140/0x140 [ 951.722020][ C0] ? vma_end_read+0x18/0x170 [ 951.722040][ C0] kernel_clone+0x21b/0x840 [ 951.722057][ C0] ? create_io_thread+0x140/0x140 [ 951.722080][ C0] __x64_sys_clone+0x18c/0x1e0 [ 951.722097][ C0] ? __ia32_sys_vfork+0x100/0x100 [ 951.722118][ C0] ? lock_chain_count+0x20/0x20 [ 951.722134][ C0] ? lock_chain_count+0x20/0x20 [ 951.722150][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 951.722226][ C0] do_syscall_64+0x55/0xb0 [ 951.722240][ C0] ? clear_bhb_loop+0x40/0x90 [ 951.722257][ C0] ? clear_bhb_loop+0x40/0x90 [ 951.722276][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 951.722293][ C0] RIP: 0033:0x7fc396785e93 [ 951.722306][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 951.722319][ C0] RSP: 002b:00007ffe673ed098 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 951.722335][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc396785e93 [ 951.722345][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 951.722355][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 951.722364][ C0] R10: 000055555a7667d0 R11: 0000000000000246 R12: 0000000000000000 [ 951.722374][ C0] R13: 00000000000927c0 R14: 00000000000e7c87 R15: 00007ffe673ed230 [ 951.722391][ C0] [ 952.135224][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 952.142136][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 952.149350][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 952.159421][ T28] Call Trace: [ 952.162711][ T28] [ 952.165653][ T28] dump_stack_lvl+0x16c/0x230 [ 952.170340][ T28] ? show_regs_print_info+0x20/0x20 [ 952.175542][ T28] ? load_image+0x3b0/0x3b0 [ 952.180052][ T28] panic+0x2c0/0x710 [ 952.183940][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 952.189568][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 952.194065][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 952.199606][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 952.205750][ T28] watchdog+0xf80/0xf80 [ 952.209896][ T28] ? watchdog+0x1e1/0xf80 [ 952.214304][ T28] kthread+0x2fa/0x390 [ 952.218360][ T28] ? hungtask_pm_notify+0x90/0x90 [ 952.223373][ T28] ? kthread_blkcg+0xd0/0xd0 [ 952.227948][ T28] ret_from_fork+0x48/0x80 [ 952.232351][ T28] ? kthread_blkcg+0xd0/0xd0 [ 952.236926][ T28] ret_from_fork_asm+0x11/0x20 [ 952.241692][ T28] [ 952.244984][ T28] Kernel Offset: disabled [ 952.249298][ T28] Rebooting in 86400 seconds..